last executing test programs: 2m49.724359396s ago: executing program 2 (id=445): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000066001fff0000000000000000", @ANYRES64], 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee6901020301f301120001000010000904b8070096d1ca00"], 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), r5) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="7df75cd6c2aa1a58b5432cbd7000ffdbdf254a0000000e0001006e657464657473696d0000000f0002006e657464"], 0x34}}, 0x40) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f0000000180)=0x9) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r10, @ANYBLOB="80140000ab1e2d6422cba592c34575bd616d5acabdd7eefb7ec3e9fbb9ca2033201d3ac5d44d1e68b62257b1061673e29fffffffffffffff7f530b855faa3165eb2f32740e816efb0a9de33224e8a9d2d6855a4d6eddf81ef5bc8976c5f29ec786c413e848c2ae32ee6276f8bfe9f4f27d4b3c3d8d401cd0ab55725a86e1512ac74ca6ddfbfc236926cbf768cfbe0200000000000000537678dff94058a663670f"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 2m45.837002533s ago: executing program 2 (id=454): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x4c004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002a40)={0x20, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@acquire={0x174, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8}, @tmpl={0x44, 0x1c, [{{@in6=@private2}, 0x0, @in=@multicast2}]}]}, 0x174}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=r5, @ANYRESDEC=r5, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 2m45.429273601s ago: executing program 2 (id=456): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) tkill(r1, 0x25) rt_sigtimedwait(&(0x7f0000000080)={[0xffd]}, 0x0, &(0x7f0000000140), 0x8) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x181a00) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x77, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x7, 0x50, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "a7"}, {0x5, 0x24, 0x0, 0xe827}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xaa1e, 0x5, 0x3}, {0x6, 0x24, 0x1a, 0x101, 0xc}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x8, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x6, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x5, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3c, 0x3, 0x3}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x7, 0xd0, 0xea, 0x40}, 0x19, &(0x7f00000002c0)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x80, 0x2, 0x4e02, 0xf000, 0x9, [0xc0, 0xc51d0eefbc2876ec]}]}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x480a}}, {0xae, &(0x7f0000000340)=@string={0xae, 0x3, "ee1aeac1645fa31f5b147bcf16f1bf2506d38a59642ddc2d7321e8490fb89d268b5132fd7ecdf9d63fd5b495085e3b2a7e4cb8aff497a8ba1633f0a6780490374be03e8985b7487a270bea9133bb422616ce807e58b09ea0516ebc11800e52edff8c17b399ea168558a5c9cc4cb66fb03624e7c45b1dbdfc41f60206900296d06f4982212737e1abe51be39e5a10f67425ed306ada73430d04bc66f1369e6efb70dabcd6799ab5097fef4251"}}, {0x6, &(0x7f0000000400)=@string={0x6, 0x3, "0e6b9726"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3401}}]}) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_disconnect(r2) r3 = fsopen(&(0x7f0000000280)='ocfs2_dlmfs\x00', 0x1) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x6, 0x48000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x0) close(0x3) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201010200000020"], 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 2m42.259496822s ago: executing program 2 (id=465): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r2, 0x1, 0x3b, 0x0, &(0x7f0000000400)) r3 = gettid() r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) chdir(&(0x7f0000000540)='./cgroup\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0x7ffffffc, 0x0) getdents64(r6, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$key(0xf, 0x3, 0x2) 2m40.247708649s ago: executing program 2 (id=471): symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) fchdir(r0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000) socket$tipc(0x1e, 0x2, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x40, 0x202000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000300)={0x9, [[0x9700000, 0x1, 0x5, 0xafe, 0x800002, 0x4, 0x800, 0x2], [0x2, 0x3, 0x1ff, 0x0, 0x2, 0x7, 0x3, 0x3], [0x2, 0x3, 0x2, 0x3, 0x6, 0x5, 0x1, 0x8]], '\x00', [{0x56, 0x800, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x9, 0x1, 0x0, 0x1}, {0x4, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x7, 0xb3, 0x1}, {0x2, 0xffff, 0x0, 0x1, 0x1, 0x1}, {0x2260, 0x2}, {0x73, 0x1, 0x1, 0x1, 0x1}, {0xffff2af8, 0x1, 0x1, 0x1, 0x1}, {0x8, 0x5, 0x1, 0x1, 0x1, 0x1}, {0xffff, 0x10000, 0x0, 0x1, 0x1}, {0x1c8, 0x80000001, 0x0, 0x1, 0x1, 0x1}, {0x7ff, 0x6, 0x0, 0x0, 0x0, 0x1}], '\x00', 0x9}) close(r0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 2m40.025999135s ago: executing program 2 (id=473): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379ddc3889063173a4dbbec33687a320000000014000000110001", @ANYRESOCT=0x0], 0x7c}}, 0x0) r3 = syz_io_uring_setup(0x749e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2e7}, &(0x7f00000001c0), &(0x7f0000000280)) syz_io_uring_setup(0x1005c1d, &(0x7f00000002c0)={0x0, 0x7789, 0x8, 0x2, 0x0, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000000)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x10000000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)=0x3) close(0x3) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002900)='ns/ipc\x00') ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000007480)='ns/ipc\x00') sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000010000100000000dd000000000000000a74000000060a0b04000000000000000002000000480004802c0001800b00010003000000657400001c000280080002400000000b080001400000000308000300000000891800018008000100647570000c00028008000140000001000000000000007a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x9c}}, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r7, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x10000, 0xfffc, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540048105e652a2aa77b0000000000000900000a0600024088a2000009760cc04a0001007346797a310000000005000300060000002400048008000740000000040800074000000d3b080008400000000a080002400000fe02d69a2d5f9ac5a4185b17d0ade649af76e4df971d97"], 0x54}, 0x1, 0x0, 0x0, 0x4050}, 0x26004090) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000240)={0xb0003000}) 2m24.176463484s ago: executing program 32 (id=473): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379ddc3889063173a4dbbec33687a320000000014000000110001", @ANYRESOCT=0x0], 0x7c}}, 0x0) r3 = syz_io_uring_setup(0x749e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2e7}, &(0x7f00000001c0), &(0x7f0000000280)) syz_io_uring_setup(0x1005c1d, &(0x7f00000002c0)={0x0, 0x7789, 0x8, 0x2, 0x0, 0x0, r3}, &(0x7f0000000100), &(0x7f0000000000)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x10000000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)=0x3) close(0x3) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002900)='ns/ipc\x00') ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000007480)='ns/ipc\x00') sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000010000100000000dd000000000000000a74000000060a0b04000000000000000002000000480004802c0001800b00010003000000657400001c000280080002400000000b080001400000000308000300000000891800018008000100647570000c00028008000140000001000000000000007a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x9c}}, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r7, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x10000, 0xfffc, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540048105e652a2aa77b0000000000000900000a0600024088a2000009760cc04a0001007346797a310000000005000300060000002400048008000740000000040800074000000d3b080008400000000a080002400000fe02d69a2d5f9ac5a4185b17d0ade649af76e4df971d97"], 0x54}, 0x1, 0x0, 0x0, 0x4050}, 0x26004090) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000240)={0xb0003000}) 10.436157796s ago: executing program 3 (id=884): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xfdbd, 0x10000}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000008980)={0xa, 0x4e21, 0x400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r9, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000000)) shutdown(r3, 0x1) read$dsp(r9, &(0x7f0000000300)=""/79, 0x4f) 9.347449084s ago: executing program 0 (id=885): syz_clone(0x100, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001080), 0x40, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x1052c0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0bfe6ecd77084f21c01e020000000900010073797a30000000000900020073797a320000000018000480140001800b0001006c6f6f6b757000000400028007000740effafa00140000001100010000000000000000000300000a"], 0x74}}, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x8, 0xa}) close_range(r2, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000009980)=[{&(0x7f0000008480)=""/10, 0xa}], 0x1, 0x1, 0x1ff) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) listen(r0, 0x4000) close(r0) 7.697561043s ago: executing program 3 (id=891): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a090001"], 0x118}, 0x1, 0x0, 0x0, 0x4040994}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0xb8, 0x53, 0x1, 0x0, @mcast2, @loopback, 0x20, 0x0, 0x6, 0xa6b}}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 6.429916033s ago: executing program 0 (id=893): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) open(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xcbb52ff732c3e64d, 0x66) unshare(0x22020600) unshare(0x26020480) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188e6b62aa7165768af3a5e5d6e480000005e140602000000000e000a0014000000028000001294", 0x2e}], 0x1}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) 6.209733559s ago: executing program 5 (id=894): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5, 0x300}}}, 0xb8}}, 0x4000) 6.07731529s ago: executing program 3 (id=895): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4a7c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20c00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@deltclass={0x38, 0x29, 0x300, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0xc}, {0xfff3, 0x10}, {0x2, 0x10}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7f, 0x16}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x880e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000280)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xa, 0x0, 0x0, {r4}}, 0x20) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) 5.832104736s ago: executing program 5 (id=896): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)={0x0, 0x0}) getpgrp(r4) ioctl$VHOST_VDPA_SET_GROUP_ASID(0xffffffffffffffff, 0x4008af7c, &(0x7f00000003c0)={0x1, 0x135d}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={'\x00', 0x83fd, 0x8, 0x1, 0x10000006, 0x5, 0x0}) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r7}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000002c0)) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES8=r6, @ANYRES32=r3, @ANYBLOB="101193578480"], 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x2c008095) r12 = syz_io_uring_setup(0xd86, &(0x7f0000000140)={0x0, 0x2c33, 0x400, 0xfffffffe, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000380)='./cgroup\x00', 0x2, 0x298f82}) io_uring_enter(r12, 0xe09, 0xaddf, 0x3, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.539786522s ago: executing program 0 (id=898): syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0xffff]}}}}}}, 0x0) 5.381978283s ago: executing program 0 (id=899): read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x1d93c0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/30, 0x1e}, {0x0}], 0x2, 0x2000000, 0x0) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x400e, 0x1, @tid=r0}, &(0x7f0000000140)=0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) timer_delete(r2) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x1, 0x2802, {0x5, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x4, 0x0, 0x2f, 0x0, @remote, @multicast2}, "240086ddffff0000"}}}}}, 0x0) pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) madvise(&(0x7f0000347000/0x2000)=nil, 0x2000, 0xf) 4.948747265s ago: executing program 0 (id=900): r0 = socket$packet(0x11, 0x3, 0x300) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)={0x1, r2}) (async) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)={0x1, r2}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000600)=0x5bb, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) syz_usb_connect(0x0, 0x4d, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000298964e08e2041414b9c50102030109023b00027f0130090904ab040002af27cf05240f"], 0x0) (async) syz_usb_connect(0x0, 0x4d, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000298964e08e2041414b9c50102030109023b00027f0130090904ab040002af27cf05240f"], 0x0) 4.875631511s ago: executing program 1 (id=901): r0 = syz_usb_connect(0xffffffffffffffff, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xff29, &(0x7f00000001c0)=ANY=[]) 4.102442747s ago: executing program 1 (id=902): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) listen(r0, 0x50) listen(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd49032800030020000000600000000204730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef) 3.883070461s ago: executing program 4 (id=903): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e23, 0x3, @mcast1, 0x7}, {0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1, {[0xc, 0x0, 0x6, 0x0, 0xfffffffc, 0x0, 0xd2, 0x5]}}, 0x5c) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x7) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000140)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, r5, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008040}, 0xc0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000340)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0xf6, "b6e96ed48b8921fc0f2c9dff5c74b8b87e545a33ba770033a2d6a0ac784cd752de7661f66834dbd13d4d8a9b36c07980b4842db4bf83d76c381b24fb6b6a46cd32b8d825b8c6a802e9aed323b4e232f1961f3914f8352ccda93537b79829d90b4f9c499aba7ad9d299a7f2556c22177e54d735d2926f4c9db02eb4b6759b4547709a8db3e3cffda40a22e14a79355d1752826025e5d8b1a05d45b1fd23ac574458a5c3d6a034dd8505056a79fc5d065b78f3c73c98445555addb248ea6db77344ac9b6fa7d47b390762fe2ff83cfd1a4321e05a76b3d8048968a91a4e78a9b35f30233c724227b901fc0533aa6461f3fa51d382740ae"}, &(0x7f0000000480)=0xfe) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f00000004c0)={r8, 0x5, 0x2, [0xfffc, 0x2]}, 0xc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCDARP(r9, 0x8953, &(0x7f0000000500)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, {0x2, 0x4e20, @loopback}, 'vcan0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@ipv4_getnetconf={0x4c, 0x52, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffffb}, @NETCONFA_FORWARDING={0x8, 0x2, 0x4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2}, @NETCONFA_FORWARDING={0x8, 0x2, 0xdc}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x16eb}, @NETCONFA_FORWARDING={0x8, 0x2, 0x400}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004011) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, r2}}, './file0\x00'}) getsockopt$CAN_RAW_LOOPBACK(r11, 0x65, 0x3, &(0x7f0000000700), &(0x7f0000000740)=0x4) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000780)=@req3={0x4, 0xffffffff, 0x8, 0x6, 0x9, 0x1ff, 0xfc}, 0x1c) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000007c0)=0x0) sendmsg$kcm(r11, &(0x7f0000001280)={&(0x7f0000000800)=@nfc={0x27, r12, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000880)="db196fa2a73d876fd15893746efb8410e4ad8d167fcb8e7a8f8d198c03d6e2e0", 0x20}, {&(0x7f00000008c0)="daf8ef08ce267bbec5889120e25d6692ebc3d7f6cf2f8ebd1ce916bcfa", 0x1d}, {&(0x7f0000000900)}, {&(0x7f0000000940)="ac967fe2edc1b7f34865481f14c0a586af4eee7e24fe65dda57b09ad11af95591474ceb27b8923cfa5d29c3cbad3c99a5526bacf079102189d09668a2f480e4c0432b27f51e3b0cc4fa2d6fb1715f98cbeb820f6a5a4e6d72ca55777b80ac5dc08b3f5372dac78611647a235e847c7553da9b83a82ab32c57caa88db1eec070c48c8e25b181e8246a9d349c34fe3fa71b1cffda49ace91fe30b4dc223cb8", 0x9e}, {&(0x7f0000000a00)="1e9d34386c832d48fa8f07aa38ee5b00a240aaed2502f11e0d9334263b820a8c9715a93bb16eb6f67e1855ccc98e78c5fcf214d689cbb2500ca4bc4c44949e6ee481585525ad39b5983674d1c0f8c2f061f532dc54f33b1d014ade8c1894cb36d11fd9d6edf4a8fb6c3548cb6482a6d4ce697bd034c0992236708731a633fb1ad1fd34b3c9286dbe08d23ba2170a905cdb51624a778acc18132e5b32e79561114bbafdaeceb0b3ffd8f2d579354db37779fd5bb8f054df42dc474a03ed9693c4c841d81413afd42df5e7096707fd585f40fa2143aacfe9d86c28c45f25563c11e904f2f842a3785566a5f36466eacf45ccbd", 0xf2}, {&(0x7f0000000b00)="7b5ddf0ca708672ec68e0202992a562731805b2a253458a291f56ca67c78076764c52812a5558768ec0670529a4fa6bf9e79b2d50804ac13c3f7b2416914ecdc3d0ad8791f6ac8cf88d29f940fb38065f0692d0c7e4c459d53104c9cd9a50013e7b7df68d915048373422af0", 0x6c}, {&(0x7f0000000b80)="f5697547dc9d295fe44113724223bc5a6ffc43c8d686a5ea73a20a16a627fcef3e3045a906e4fd9eb072c276aa5e16c0b7a00b4ec423f0169b06135f82571028d209abae767ac046f5be8c3041da771a97e46dad80ce561d3bd4fa4af65cea1d6fe39c448afb5b0ba87346e2b24666d779f1555037a3f8b9fc6111cd2ef275ab667974bb75a9e29729bfac63cbb90c83fb5b4081bcf0d53c73b2ef02f74c0fa46038cbffb508bf1d61ba844623f93ece3dff5d25b2a1dd3f1e7f99a862deaa2580c87a0ccb488e9d4fbd2aaf298d1cfbd9841a243ab126f0b41f0bc0959d82336f22e6de213d6e4dc3413aa19c39a9811264211d092ebb", 0xf7}, {&(0x7f0000000c80)="462fe9d11211844130b26e6f834df3df73e56a9b04", 0x15}], 0x8, &(0x7f0000000d40)=[{0x100, 0x103, 0x1000, "5f6ec926f2c1e12c526e79eb670609bafd85baf180514dc33042334ee1a6f802b33b6ef155a38538f4b10e5df77455b433651b0e26adf85406d9dac1f45d501ab0650f40e0dae3c89abaa0e1a9c8b3712c1fdd0806d3b4122c023fa48e18dfe6fa2fffe7af5d2273450fc48dbdec1e903cec36329288ead1dbca2c8ad1f81dc967da34ae5a1874926a0b8a262a68005304fff83f7aa746000cadb4f47f4d88fc0d517e112d530cbc08e53c76dedaa3832154f469a0e7348fa7b3f38bcf13b31c865f9e51da80c92e168ddb8365d87e554deeaecc02f3862aa59c1352433c3ac690d1b292c04b433e865e965e"}, {0x58, 0x3a, 0x9, "58c4f7eb3af950c67fba42c45572995e8be0bdd728d9a10f149dd93bacd4ff6ce04cf521f74b8bfc16bc3b6376241e8dcf9a09ce96449b7d809d03c72325d0bd7d9a"}, {0xf8, 0x0, 0x1, "ac29ce9155024a22b3eb1bee3437810d7420625209b76088b30d5caaf84ff0b0616b5022b20db8b2b1dd74011b3877f5a7b2cf0b3673801389e116d7ec3f432eb80ff6e1e10803ab18d188b8bb12d295e3ffbfa25cdbe7caafa5df847121c5eb7073e3958405a2a20cb521fad73194eed38643d36164f6057605464d430dcc182e88ce692516911727d073a0ef9bcdc09f81bbded397719f6b893fca865c248df9ad267accb8fc46470656989967367995cdd00fb873ec217ea5dd3007e4cb56875942f155358ae66146a965a979549cb51b496f96d30fb2d171f7339a37ad96d1485d92b320"}, {0xd0, 0x119, 0x5, "3d4ec8974228bb8b9f72e3dd73854e93af870853d73e2d00e831589936f283909da510561431130e8795daea99bc23e07c3e475514eae3b2f62cf9c3b1010aee361c5cd17400d1e8f5e42b55a8133b2b3115a325afbbac75c5983f0d4c41f47793d41d1c8ed95c0a85f2927d150c2c82fbf33f9f7c3fa381845087884d2492f10a4e7cea683817cfa44c59af12b6188f1ed26ef23184d83c143b92033a629d090565bb60f110e76ce2545b44980c64349ad43015f74729dbaaf5b0693386b028"}, {0x110, 0x111, 0x3, "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"}, {0x98, 0x110, 0x66, "71a6c4b5c5bd14f6d2077a1036ca0ee7406358caa6fb4c095fc9d7c3967478e5e8f96aa2ec030df5c114461d355cb63240bb61006daf7f777bb930a586a8abfae118827f92564246a30da4a1839362ff99fbcfa6e5e7c666d84a95756f804f1627a82116636a9587d322b45261e19d62af7dc451e241dde209b4a7442b4478bbc5666b44d09137"}, {0x10, 0x116, 0x2}, {0x38, 0xff, 0x4, "bc60c5fba913b20f2c3d1b468320b97967c646b1b87aa432e883a6d08b7b83d876"}, {0x10, 0x108, 0x3}], 0x520}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000002880)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002840)={&(0x7f0000001300)={0x1534, r5, 0xc9574fd54ddcf12e, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x317, 0x7a}}}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x82}]}]}, @NL80211_ATTR_TID_CONFIG={0x204, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1e4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xac}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1a4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x4, 0x30, 0x5, 0x1b, 0x42, 0x1b, 0x6, 0x6c, 0x16, 0x36, 0x5]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2b, 0x24, 0x1, 0x36, 0x1, 0x6, 0x30, 0x5, 0x4, 0x2, 0x24, 0x60, 0x6c, 0x9, 0x18, 0xb, 0x6, 0x60, 0x48, 0x1]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x5, 0x91, 0x4, 0x9, 0x9, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x84a, 0x3, 0x6, 0x10, 0xfffc, 0x28c6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x4, 0xa}, {0x2, 0x8}, {0x4, 0x6}, {0x4, 0x5}, {0x6, 0xa}, {0x3, 0x3}, {0x6, 0x1}, {0x1}, {0x7}, {0x2, 0x2}, {0x6, 0xa}, {0x1, 0x2}, {0x6, 0x7}, {0x2}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x8}, {0x0, 0x9}, {0x0, 0x1}, {0x2, 0x5}, {0x1, 0xa}, {0x2, 0x3}, {0x5, 0x2}, {0x1, 0x6}, {0x6, 0x7}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x2}, {}, {0x3, 0x5}, {0x0, 0x5}, {}, {0x6, 0x6}, {0x4, 0x4}, {0x4, 0x3}, {0x0, 0x9}, {0x5}, {0x3}, {0x4, 0x2}, {0x4, 0xa}, {0x4, 0x2}, {0x0, 0x4}, {}, {0x0, 0xa}, {0x0, 0x4}, {0x3, 0x9}, {0x0, 0x5}, {0x5, 0x6}, {0x5, 0x9}, {0x0, 0x8}, {0x0, 0x7}, {0x7, 0x9}, {0x7, 0x2}, {0x6, 0x2}, {0x3, 0x7}, {0x2, 0x4}, {0x1, 0x7}, {0x2, 0x5}, {0x5, 0x2}, {0x5, 0x9}, {0x4, 0x3}, {0x1, 0x8}, {0x5, 0x7}, {0x1, 0x5}, {0x4}, {0x0, 0x1}, {0x0, 0x8}, {0x5}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xffff, 0x3, 0x1, 0x4, 0x6, 0x400, 0xa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x7, 0x7}, {0x6, 0xa}, {0x6, 0xa}, {0x5, 0x8}, {0x6, 0x6}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x5}, {0x6, 0x8}, {0x6, 0x5}, {0x3, 0x8}, {0x1}, {0x1, 0x2}, {0x0, 0x8}, {0x2, 0x4}, {0x4, 0x7}, {0x0, 0x2}, {0x4, 0x5}, {0x7, 0x1}, {0x2, 0x8}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0x60, 0x4, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x7, 0x7ff, 0xfff8, 0xfac, 0x0, 0x5dd, 0xbd]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x200, 0x7ff, 0x0, 0x6, 0xd, 0x0, 0x7f41]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x4, 0x60, 0x60, 0xc, 0x60, 0x36, 0x5, 0x16, 0xb, 0x3, 0x12, 0x18, 0x18, 0x18, 0x8, 0x36, 0x7, 0x1b, 0x4, 0x0, 0x9, 0xb, 0xc, 0x34]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3b}]}]}, @NL80211_ATTR_TID_CONFIG={0xa0, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x11}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x6dfed34ef9dd16c8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x36}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x3cc, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1e8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x93}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x1, 0x355, 0x1, 0x4, 0x2, 0xc000]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x30, 0x36, 0x36, 0x2, 0x3, 0x3, 0x66, 0x16, 0xc, 0x6c, 0x24, 0x0, 0x30, 0x9, 0xb, 0x4, 0x9, 0x4, 0x12, 0x9, 0x2, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0x3, 0x0, 0x3fcc, 0x7, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x100, 0x7, 0x7, 0x4, 0xfff, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x128, 0xfffc, 0x7ff, 0x9, 0x8000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0x863, 0x200, 0x77f9, 0xd5d, 0x7, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1ff, 0x2cbc, 0xf, 0xf27, 0x7, 0x1, 0x6]}}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x3, 0x9}, {0x7, 0x1}, {0x2, 0x6}, {0x0, 0x7}, {0x5, 0xa}, {}, {0x1, 0x4}, {0x2}, {0x3, 0x5}, {0x2, 0x7}, {0x4, 0x6}, {0x0, 0x2}, {0x1, 0xa}, {0x3, 0x5}, {0x3, 0x1}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x3, 0x9}, {0x3, 0x8}, {0x4, 0x2}, {0x7, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x7, 0x3}, {0x0, 0x8}, {0x3, 0x6}, {0x6, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x9, 0x6, 0x80, 0x4, 0x7, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f94, 0x80, 0x3, 0x8, 0x9, 0x8, 0xfffa, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0xa}, {0x0, 0x4}, {0x6, 0x2}, {0x4, 0x3}, {0x4}, {0x1, 0x8}, {0x1, 0x5}, {0x6, 0x9}, {0x0, 0x1}, {0x7, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x6}, {0x1, 0x7}, {0x5, 0x6}, {0x7, 0x9}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x6}, {0x0, 0x3}, {0x4, 0x9}, {0x3, 0x9}, {0x5, 0x9}, {0x7, 0x2}, {0x0, 0x4}, {0x3, 0x3}, {0x4, 0x7}, {0x7, 0x4}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x16, 0x18, 0x4, 0x5c, 0xc, 0x6c, 0x30, 0x30, 0x60, 0x3, 0xb, 0x0, 0x30, 0x12, 0x60, 0x4, 0x30, 0x1, 0x6c, 0x36, 0x36, 0x60, 0x9, 0x6c, 0x36, 0x6c, 0x9, 0x6, 0x18, 0x9, 0x48]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1b7}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x6, 0x4, 0x5, 0x1b, 0x4, 0x9, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x65ce, 0x0, 0x3, 0x401, 0x0, 0x6, 0x7ff, 0x3]}}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x36, 0x36, 0x3, 0x2, 0x4, 0x12, 0x4, 0x1, 0x3, 0x0, 0x24, 0x16, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x4, 0x1}, {0x5}, {0x4, 0xa}, {0x3, 0x3}, {0x0, 0x6}, {0x4, 0x2}, {0x6, 0x9}, {0x7, 0x4}, {0x6, 0x3}, {0x7, 0x7}, {0x7, 0x9}, {0x1, 0x9}, {0x4, 0x7}, {0x1, 0x8}, {0x3, 0x6}, {0x0, 0x5}, {0x2, 0x8}, {0x3, 0x4}, {0x5, 0x2}, {0x4}, {0x7}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0x6}, {0x2, 0x5}, {0x4, 0x4}, {0x7, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x70d4, 0x8, 0x0, 0x7, 0xa2, 0x2, 0x10, 0x40]}}]}]}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x70}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x7, 0x8, 0x8, 0x3, 0x4, 0x7fff]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcf}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x44}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x48, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7e5, 0x9, 0xffff, 0xa614, 0x1, 0x0, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4d, 0x7, 0x5, 0x0, 0x3ff, 0x9, 0x40]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd41b}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c8, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7a}]}, {0x3a0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x37c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x4, 0x7}, {0x3, 0xa}, {0x3, 0x3}, {0x2, 0x1}, {0x5, 0x9}, {0x2, 0xa}, {0x3, 0xa}, {0x1, 0x5}, {0x2, 0x3}, {0x1, 0x9}, {0x0, 0x5}, {0x5}, {0x4, 0x1}, {0x0, 0x6}, {0x4, 0xa}, {0x4, 0x9}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x9}, {0x1, 0x4}, {0x7, 0x5}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x5}, {0x4, 0x8}, {0x3, 0x9}, {0x0, 0x1}, {0x0, 0x8}, {0x0, 0x4}, {0x4, 0x5}, {0x6}, {0x1, 0x4}, {0x0, 0x3}, {0x6, 0x4}, {0x2, 0x2}, {0x0, 0x9}, {0x2, 0x6}, {0x7, 0x7}, {0x1, 0x4}, {0x3, 0x1}, {0x0, 0x2}, {0x1}, {0x1, 0x1}, {0x6, 0x6}, {0x2, 0x4}, {0x4, 0x2}, {0x0, 0x6}, {0x0, 0x4}, {0x2, 0x1}, {0x4, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0x1}, {0x6, 0x4}, {0x4}, {0x1, 0x2}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x4}, {0x0, 0x1}, {0x2, 0x8}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0x5}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x9, 0x1b, 0x12, 0x2, 0xc, 0x2, 0x24, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4302, 0x0, 0x6, 0xd, 0x8000, 0x9fd6, 0x7d]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0xa}, {0x1, 0x5}, {0x3, 0x8}, {0x6, 0x9}, {0x0, 0xa}, {0x3, 0x9}, {0x5, 0x5}, {0x0, 0x7}, {0x2, 0x3}, {0x4, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x4, 0xa}, {0x2, 0x2}, {0x0, 0x6}, {0x6}, {0x1, 0x8}, {0x4, 0x4}, {0x4, 0xa}, {0x5, 0x3}, {0x3, 0xa}, {0x3, 0x1}, {0x3, 0x5}, {0x1, 0xa}, {0x5}, {0x0, 0x4}, {0x4, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x0, 0x8, 0x0, 0x5, 0x2c36, 0xcf69]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x1}, {0x7, 0x7}, {0x4, 0xa}, {0x5, 0x5}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0xa}, {0x7, 0x3}, {0x0, 0x2}, {0x7, 0x7}, {0x4, 0x5}, {0x3, 0x4}, {0x4, 0x7}, {0x4, 0x3}, {0x1, 0x8}, {0x2}, {0x0, 0x6}, {0x6, 0x3}, {0x3, 0x3}, {0x5, 0x7}, {0x0, 0x5}, {0x3, 0x5}, {0x1}, {0x4, 0x9}, {0x0, 0x9}, {0x4, 0x8}, {0x4, 0x8}, {0x4, 0x8}, {0x4, 0x8}, {0x5, 0x6}, {0x2, 0x7}, {0x1, 0x8}, {0x2, 0x8}, {0x5, 0x2}, {0x2, 0x1}, {0x1}, {0x2, 0x5}, {0x1, 0x4}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x4, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x2, 0x7, 0x2, 0x2, 0x7c78, 0x8]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0xb, 0x60, 0x3, 0x5, 0x2, 0xc, 0xc, 0x6, 0x3, 0x6c, 0x60, 0x6c, 0x2, 0x1, 0x36, 0x36, 0x6, 0x35, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x36, 0xc, 0x1b, 0x1, 0x3, 0xc, 0x6c, 0x44, 0x60, 0x18, 0x2, 0x6, 0x12, 0x9]}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x9, 0x18, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf2, 0x5, 0x400, 0x8fb4, 0x0, 0x8, 0x8, 0x8]}}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0x6c, 0x1b, 0x73c69ee0cd70e90e, 0x5, 0x30, 0x60, 0xc, 0x6c, 0x6, 0x3, 0x12, 0x6, 0x6, 0x48, 0x16, 0x1b, 0x6, 0x0, 0xc, 0x4, 0x1b]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x475d, 0x800, 0x5, 0xfff7, 0x2, 0x10, 0xffff, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0xe, 0x6, 0x1, 0xc025, 0x1, 0x3ece]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x1847, 0x0, 0x0, 0x5, 0x7, 0x9, 0x71]}}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x2}, {0x6, 0xa}, {0x5, 0x1}, {0x6, 0x8}, {0x4, 0x1}, {0x1, 0x2}, {0x2, 0x7}, {0x0, 0x5}, {0x6}, {0x6, 0x14}, {0x6}, {0x0, 0x8}, {0x1, 0x9}, {0x7, 0x9}, {}, {0x1, 0xa}, {0x2, 0x2}, {0x7, 0x7}, {0x4, 0x3}, {0x1, 0x9}, {0x1, 0x6}, {0x0, 0x7}, {0x6, 0x5}, {0x4, 0x6}, {0x0, 0x2}, {0x1, 0x5}, {0x6, 0x3}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x3}, {0x7, 0x5}, {0x6}, {0x4, 0x5}, {0x0, 0x8}, {0x4, 0x9}, {0x4, 0x9}, {0x1, 0xa}, {0x7, 0x1}, {0x6, 0x3}, {0x4, 0x2}, {0x1, 0x5}, {0x0, 0x7}, {0x7, 0x1}, {0x5, 0x5}, {0x0, 0xa}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x3}, {0x3, 0xa}, {0x7, 0x1}, {0x1, 0x3}, {0x3, 0x3}, {0x3, 0x1}, {0x2, 0x4}, {0x5, 0x1}, {0x3, 0x8}, {0x4}, {0x1, 0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x7, 0xa}, {0x0, 0x1}, {0x5, 0x7}, {0x4, 0x3}, {}, {0x7, 0x7}, {0x2, 0xa}, {0x3, 0x4}, {0x2, 0x6}, {0x3, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x1, 0x2}, {0x5, 0x2}, {0x5, 0x3}, {}, {0x2, 0x1}, {0x0, 0x7}, {0x6, 0x5}, {0x2, 0x2}, {0x1, 0x6}, {0x4}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x5, 0x4}, {0x1, 0x4}, {0x1, 0x3}, {0x2, 0xa}, {0x0, 0x2}, {0x2, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x2, 0x5}, {0x0, 0x3}, {0x6, 0x1}, {0x1, 0xa}, {0x6, 0x7}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x1, 0x8, 0x2, 0xe000, 0x5, 0x200]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x6, 0x5}, {0x2, 0x9}, {0x1, 0x6}, {0x4, 0x1}, {0x4, 0x8}, {0x0, 0x5}, {0x6}, {0x4, 0x9}, {0x3}, {0x3, 0x9}, {0x1, 0x8}, {0x2, 0x3}, {0x5, 0x2}, {0x0, 0x8}, {0x0, 0x1}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x5}, {0x3, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x6, 0xa}, {0x1, 0x7}, {0x6, 0x7}, {0x0, 0x5}, {0x2, 0x2}, {0x4, 0x4}, {0x3}, {0x4, 0x3}, {0x3, 0x2}, {0x3, 0x1}, {0x3, 0x5}, {0x6, 0x3}, {0x3, 0x3}, {0x3, 0x9}, {0x0, 0x2}, {0x1, 0x4}, {0x2, 0x4}, {0x1, 0x7}, {0x1, 0x8}, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0x8}, {}, {0x0, 0x3}, {0x2, 0x3}, {0x6, 0x6}, {0x1, 0x9}, {0x2, 0x2}, {0x7, 0x3}, {0x2}, {0x6, 0xa}, {0x0, 0x3}, {0x3, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x4, 0x5}, {0x1, 0x7}, {0x7, 0xa}, {0x0, 0x2}, {0x2, 0x7}, {0x5, 0x9}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x8}, {0x6, 0x8}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x2}, {0x7, 0x8}, {0x4, 0x3}, {0x5, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x5, 0xd4, 0x6, 0x1, 0x89c, 0x595]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x65, 0x3, 0x48, 0x4, 0x9, 0x6c, 0x48, 0x16, 0x5, 0x3, 0x1b, 0x1b, 0x1b, 0x13, 0x12, 0x1, 0x16]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x2, 0x60, 0xc, 0x1, 0x16, 0x48, 0x6, 0x60, 0x18, 0x3, 0x4, 0x16, 0xc, 0x9, 0x1, 0x6c, 0x60, 0x5, 0x16, 0x24, 0x4, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x54c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x298, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffb}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x170, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x3, 0x200, 0xb2e, 0x1, 0xd, 0xd]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x0, 0x8}, {0x7, 0x8}, {0x4, 0x4}, {0x6, 0x9}, {0x2, 0x3}, {0x6, 0x1}, {0x1, 0xa}, {0x0, 0x1}, {0x7, 0xa}, {0x2, 0x9}, {0x7, 0x6}, {0x6, 0x1}, {0x3, 0x2}, {0x6}, {0x1, 0x7}, {0x1, 0x8}, {0x6}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x4}, {0x0, 0x6}, {}, {0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x51, 0x7, 0x6, 0x6, 0x4, 0xf1, 0x9, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0xb31, 0x9, 0x6, 0x51, 0x4]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0xfff0, 0xfff9, 0x9, 0x2, 0x6, 0x1ff]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0xa}, {0x3, 0x7}, {0x0, 0x3}, {0x0, 0x5}, {0x4, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x5, 0x8}, {0x7, 0x4}, {0x1, 0x1}, {0x3, 0x7}, {0x1, 0x6}, {0x7, 0x3}, {0x6, 0x3}, {0x0, 0xa}, {0x5, 0x6}, {0x4, 0x7}, {0x6, 0x8}, {0x7, 0x4}, {0x3, 0x1}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x5}, {0x7, 0x4}, {0x5, 0x6}, {0x6, 0x5}, {0x5, 0x7}, {0x2, 0x6}, {0x2, 0x6}, {0x4, 0x2}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0x6}, {0x0, 0x5}, {0x1, 0x2}, {0x0, 0xa}, {}, {0x2, 0x4}, {0x6, 0x4}, {0x0, 0x7}, {0x7, 0x8}, {0x1, 0x3}, {0x6, 0x8}, {0x5, 0x8}, {0x0, 0x1}, {0x3, 0x3}, {0x5, 0x4}, {0x7, 0x3}, {0x1, 0x9}, {0x5, 0x9}, {0x1}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x1}, {0x3, 0x2}, {0x4, 0x8}, {0x1, 0x3}, {0x1, 0x9}, {0x4, 0x4}, {0x7}, {0x4, 0x6}, {0x6, 0xa}, {0x6, 0x6}, {0x6, 0x7}, {0x3, 0x2}, {0x7, 0xb}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x881, 0x4, 0x6, 0xf17, 0x1, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xb, 0x1, 0x10, 0x400, 0x100, 0x9, 0x3]}}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfffb, 0x50e, 0x8, 0xe2, 0x5, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x97df, 0x10, 0x2, 0x362, 0x0, 0x1e9a]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x7, 0x7, 0x7ff, 0x48, 0x7, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xa47d71323a3c87e1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xe8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x4}, {0x2, 0x7}, {0x4, 0x7}, {0x6, 0xa}, {0x3, 0xa}, {0x1, 0x3}, {0x2, 0x9}, {0x5, 0x7}, {0x2, 0x5}, {0x1, 0x5}, {0x7, 0x4}, {0x4, 0x3}, {0x7, 0xa}, {0x1, 0x9}, {0x3, 0x6}, {0x7, 0xa}, {0x2, 0x8}, {0x7, 0x8}, {0x6, 0x7}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x4, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0xc16, 0x9edc, 0x0, 0xfff, 0x3ff, 0xd00]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xf7, 0xe, 0x39, 0x5, 0x7f, 0x8, 0x101]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0x6}, {0x2, 0x5}, {0x4, 0x9}, {0x0, 0x1}, {0x1, 0x6}, {0x6}, {0x3, 0x4}, {0x5, 0x6}, {0x3, 0x9}, {0x4, 0xa}, {0x5, 0x1}, {0x6, 0x2}, {0x4, 0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x1, 0x3}, {0x7}, {0x6, 0x5}, {0x0, 0x9}, {0x4, 0xa}, {0x6}, {0x6, 0x5}, {0x1}, {0x3, 0x6}, {0x5, 0x4}, {0x6, 0x9}, {0x2, 0x6}, {0x5, 0x1}, {0x2}, {0x4, 0xa}, {0x3, 0x4}, {0x5, 0x1}, {0x3, 0xa}, {0x6, 0x1}, {0x2, 0x5}, {0x0, 0x7}, {0x5}, {0x7, 0x3}, {0x7}, {0x7, 0x5}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x0, 0x3}, {0x2, 0xa}, {0x4, 0x1}, {0x6, 0x3}, {0x6, 0x8}, {0x5, 0x5}, {0x4, 0x5}, {0x5, 0x2}, {0x5}, {0x3, 0x2}, {0x6, 0x7}, {0x6, 0x5}, {0x6, 0x2}, {0x2, 0x8}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x9}, {0x6, 0x3}, {0x0, 0xa}, {0x7, 0x2}, {0x7, 0x7}, {0x6, 0x9}, {0x2, 0x9}, {0x4, 0x1}, {0x1}, {0x0, 0x2}, {0x6, 0x1}, {0x7}, {0x5, 0xa}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x8}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x7}, {0x2, 0x7}, {0x5}, {0x0, 0x2}, {0x4, 0x3}, {0x5, 0x3}, {0x5, 0x2}, {0x5, 0x7}, {0x1, 0x7}, {0x6, 0x5}, {0x2, 0x3}, {0x4, 0x8}, {0x0, 0x3}, {0x6, 0x9}, {0x3, 0x6}, {0x5, 0x3}, {0x2, 0x7}, {0x1}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x9, 0x3, 0x5, 0x2, 0x18, 0x2b, 0xb, 0x18, 0x16, 0x1b, 0x6c, 0x24, 0xb, 0x60, 0x48, 0x16, 0x12, 0x24, 0x6, 0x4, 0x12, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x75}]}, {0x138, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x658a, 0x10, 0x3, 0xf, 0x4, 0x10, 0xf001]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x2, 0x9, 0x21, 0x7, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xabc, 0x7, 0x2, 0x8, 0x7353, 0x6, 0x3]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x645, 0x5, 0x1, 0x1, 0x7a5, 0x0, 0xe202, 0x1]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x24, 0x60, 0x5, 0x3, 0x3, 0x1b, 0x36, 0x6, 0xc, 0x12, 0x24, 0x9, 0x48, 0x3, 0x36, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x0, 0x36, 0x36, 0x36, 0xb, 0x4, 0x36, 0x5, 0x36, 0x36, 0x18, 0x4, 0x9, 0x24, 0x48, 0x5, 0xb, 0x6c, 0x60, 0x2, 0x6c, 0x12, 0xb, 0xb, 0x2, 0x1, 0xd, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0xe, 0x3, 0x4, 0x3, 0xa, 0x6]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x2, 0xa}, {0x1, 0x7}, {0x7}, {0x3}, {0x1, 0x1}, {0x5, 0x3}, {0x4, 0x5}, {0x3, 0x5}, {0x1, 0x1}, {0x3, 0x2}, {0x0, 0x6}, {0x7, 0x4}, {0x3, 0x1}, {0x3, 0x2}, {0x6, 0x6}, {0x3, 0x5}, {}, {0x4, 0x6}, {0x2, 0x2}, {0x3, 0x7}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x4}, {0x3, 0x7}, {0x4, 0x2}, {0x4, 0x9}, {0x5, 0x2}, {0x5, 0xa}, {0x2, 0xa}, {0x6}, {0x2, 0x8}, {0x4, 0x3}, {0x4}, {0x1, 0x5}, {0x0, 0x6}, {0x6, 0x2}, {0x7, 0x2}, {0x7, 0x4}, {0x1, 0x7}, {0x1}, {0x1, 0x4}, {0x4, 0x5}, {0x5, 0xa}, {0x1, 0x5}, {0x4, 0xa}, {0x2}, {0x7, 0xa}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x7, 0x6772, 0x1, 0xd, 0x6e10, 0x0, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x64}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x538, 0x11d, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x68, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x200, 0x400, 0x5a7, 0x8, 0x1004, 0xffff, 0x2]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5ee, 0x6, 0x9, 0xc690, 0x6, 0x0, 0x4, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x22cd, 0x9, 0x800, 0xe82, 0xb, 0x2]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0x4}, {0x2, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x66}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x14}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x20c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1cc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x6, 0x32c, 0xc1c, 0x8, 0x2, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x44, 0xd, 0x446, 0xa, 0x0, 0x4, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x9, 0x4, 0x1, 0x2, 0x51, 0x6, 0x7]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x3, 0x4, 0x200, 0xfff7, 0x2, 0xfe, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0x0, 0x6, 0x0, 0x2, 0x9, 0xd]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{}, {0x1, 0x7}, {0x1, 0x7}, {0x7, 0x3}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0xa}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x4}, {0x5, 0x5}, {0x6, 0x6}, {0x3, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3ff, 0xf, 0x0, 0x200, 0x1, 0xfff, 0x9]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x2, 0x1, 0x1, 0xffff, 0x0, 0x1ca0, 0x101]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x5}, {0x4, 0x2}, {0x3, 0xa}, {0x3, 0x1}, {0x0, 0x2}, {0x6, 0x8}, {0x2, 0x9}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x8}, {0x2, 0x1}, {0x2, 0x5}, {0x2, 0x6}, {0x2, 0x9}, {0x2, 0x6}, {0x1}, {0x0, 0x9}, {0x5, 0x3}, {0x6, 0x4}, {0x4}, {0x4, 0x6}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x1}, {0x6, 0x7}, {0x7, 0x9}, {0x5, 0x5}, {0x5, 0x1}, {0x4, 0x5}, {0x4, 0x3}, {0x3, 0x1}, {0x5, 0x9}, {0x7, 0x8}, {0x1, 0x6}, {0x0, 0x2}, {0x7, 0x2}, {0x3, 0x1}, {0x4, 0x4}, {0x4, 0x7}, {0x4, 0x9}, {}, {0x4, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x5, 0x8}, {0x3, 0x14}, {0x2, 0x3}, {0x1, 0x3}, {0x4, 0x6}, {0x7, 0x7}, {0x7, 0x7}, {0x7, 0xa}, {0x7, 0x3}, {0x6}, {0x2}, {0x4, 0x9}, {0x2}, {0x2, 0x8}, {0x5, 0x5}, {0x7, 0x7}, {0x2, 0x3}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x3}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x30, 0x36, 0x5, 0x1, 0x36, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x16, 0x36, 0xb, 0x16, 0x48, 0x4, 0x18, 0x6, 0x6, 0x4, 0x37, 0x2, 0x60, 0x24, 0x5, 0x16, 0x6, 0xc, 0x3b, 0x48, 0x2, 0x5, 0xb, 0x18, 0xb, 0xb, 0x6c]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x30, 0x6c, 0x2, 0xb, 0x2, 0x6c, 0x1b, 0x48, 0x16, 0x16, 0x2, 0x12, 0x12, 0x12, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0xfff0, 0xa, 0x49b4, 0x3, 0x400, 0x3b]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0x9, 0x6c, 0x2d, 0x52, 0x18, 0x12, 0x12, 0x12, 0x48, 0xb, 0x0, 0xb, 0x1, 0x16, 0x5, 0x1b, 0x3, 0x48, 0x24, 0x18]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x1d8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x37}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4a3db40}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1cb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xbe}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7, 0x9}, {0x1, 0x2}, {0x6, 0x9}, {0x2, 0x3}, {0x1, 0x8}, {0x7}, {0x3, 0x8}, {0x4, 0x4}, {0x4, 0x5}, {0x6, 0x4}, {0x5, 0x9}, {0x0, 0x8}, {0x1, 0x4}, {0x6, 0x6}, {0x7, 0x7}, {0x1, 0x4}, {0x2, 0x5}, {0x6, 0x4}, {0x2, 0x6}, {0x7, 0x8}, {0x2, 0x5}, {0x1, 0x4}, {0x0, 0x4}, {0x2}, {0x4, 0xa}, {0x1, 0x6}, {0x7, 0x5}, {0x4, 0x6}, {0x7, 0x9}, {0x0, 0x9}, {0x6, 0x2}, {0x0, 0x8}, {0x3, 0x5}, {0x3, 0x5}, {0x3, 0x5}, {0x0, 0x3}, {0x0, 0x2}, {0x4, 0x7}, {0x6, 0x9}, {0x4, 0x5}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x46, 0x6c, 0x9, 0xb8, 0x6, 0x18, 0x16, 0xb, 0xb, 0x1b, 0x16, 0x12, 0x2, 0x48, 0xc, 0x7b, 0x36, 0x1b, 0xb, 0x36, 0x24, 0x30, 0x9, 0x2, 0x9, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd62, 0x0, 0xa, 0xffff, 0x5f, 0xc, 0x3, 0x2]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0x9}, {0x5, 0x6}, {0x4, 0xa}, {0x4, 0xa}, {0x2, 0x8}, {0x5, 0xa}, {0x7, 0x3}, {0x4, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {0x1, 0x1}, {0x1, 0x5}, {0x5, 0x4}, {0x1, 0x5}, {0x2, 0x7}, {0x3, 0x4}, {0x2, 0x2}, {0x3, 0x9}, {0x2, 0xa}, {0x4, 0x3}, {0x7, 0x6}, {0x4, 0x2}, {0x7, 0x5}, {0x3, 0x1}, {0x1, 0x7}, {0x0, 0x5}, {0x5, 0x5}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0xa}, {0x1, 0x1}, {0x3, 0x18}, {0x7, 0x2}, {0x1, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x101, 0x8, 0x401, 0x401, 0x2, 0x0, 0x6]}}]}, @NL80211_BAND_5GHZ={0xc8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x860a, 0x3bf, 0x4, 0x1, 0xa, 0x9, 0x0, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x800, 0xf, 0x40, 0x2, 0x20]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x4, 0x1, 0x7, 0x401, 0x5, 0xa]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x60, 0x53, 0x9, 0x12, 0x24, 0x16, 0x12, 0xf, 0x9, 0x12, 0xc, 0xc, 0x16, 0xc, 0x5, 0x9, 0x9, 0x5, 0x18, 0x9, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x6}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x2}, {0x1, 0x6}, {0x2, 0xa}, {0x7, 0x2}, {0x0, 0x4}, {0x6, 0xa}, {0x0, 0x5}, {0x0, 0x7}, {0x1, 0xa}, {0x6}, {0x1, 0x2}, {0x7, 0x19}, {0x2}, {0x2, 0x8}, {0x7}, {0x3, 0xa}, {0x0, 0x5}, {0x1, 0xa}, {0x5}, {0x0, 0x8}, {0x3, 0x2}, {0x1, 0x8}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0xa}, {0x2, 0xa}, {0x5, 0x9}, {0x0, 0x7}, {0x1}, {0x2, 0x6}, {0x5, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x4, 0x8}, {0x0, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x0, 0xa}, {0x5}, {0x3, 0x5}, {0x1, 0x8}, {0x5, 0x9}, {0x3, 0x2}, {0x2, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8c16, 0xab7e, 0x2, 0x1, 0xfff8, 0x3, 0xa8a, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0xdeb0, 0xd2a, 0x8001, 0x2, 0x3, 0x1]}}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10001}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x70}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x1534}, 0x1, 0x0, 0x0, 0x804}, 0x20000080) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002900)={0x4, &(0x7f00000028c0)=[{0x10, 0x2, 0x7, 0x4}, {0xc000, 0x5, 0x9, 0x2}, {0xd, 0x6, 0x3, 0xffffffff}, {0x2, 0xd, 0x5, 0x8}]}, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002980), r4) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x5c, r13, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa1a}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040800) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b00), r4) sendmsg$NL80211_CMD_SET_POWER_SAVE(r11, &(0x7f0000002bc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x3c, r14, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080c4}, 0x44) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000002d00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x78, r14, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1e}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x81, 0x1ff}}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5d1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffff9}}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xb}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x50a}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) 3.691951835s ago: executing program 1 (id=904): ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) close(0x3) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x400036e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x1004}, {0xffffffffffffffff, 0x20a}, {r6, 0x80}, {0xffffffffffffffff, 0x9001}, {r0, 0x2020}], 0x5, &(0x7f0000000480)={0x77359400}, 0x0, 0x0) 3.67875618s ago: executing program 4 (id=905): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000000)={0x11, {{0x29, 0x0, 0x3000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000000}}}, 0x88) syz_usb_control_io(r0, 0x0, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r5 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000001e40)={0x824, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x72, 0x5, "6938962df9287bf1dc0f1a3ecb854d3eed583806bc82da06fdfc5ca8720c5368550b127365ec32667dec410a7b888ac35fa286bf60fdea70687216d57a3f9df85d530f66d25f6b68c62f3c2435fbd4bf6ed0816b9496768dbaff10cd818bbc3170dd9783321d0d105cbdf71a16d2"}, @ETHTOOL_A_BITSET_VALUE={0x98, 0x4, "e410c37cb4fe844217dcdfa3867ff51b164a7f6b5595fe45a139068cf230963b901d50fe24404ba13521da6aba6e12d030f3432f0e73931d71507409e2754d82f102b11c9ee7b27e6869e1e2c755f1ca9e00faf92855d6a9b70a97b10491d64d0e40d43644edb30417531aa8baa2cd8cc1714081a69b1831086a5dc37551b37cb3f6b644b909461209158fd80ffd771b43a14153"}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/fuse\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#! '}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/fuse\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xd0, 0x5, "8e9b48b3a1acf4096c4b59151e1e8690b498b7d49a51d608f8489d10d2c3630c58d19e43afa95acadbbdb293d8860d24a2acdd68d15c88512054e22fe323ec687f0bc0181e4ac0798c126242e3e3f3fd6423b0374c8057b46e7ab28168e184d3e8aa4ce9bf60a1686b24b3eece0984178d85415809f589b2abb6a411177ca25739425b545db3abe18c5e5437d221d417ec15f62a97b84084345bb3d388c90196881b640646b664b58cd0e1fdbf9f5c6e895998bc6db1559977ec83fffc61533c9b98aeece29096f91787a8d5"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x59, 0x5, "09e6948999623ac5f330fd87efc5d2441e75de2fffc7a6dbb74e8488c17b458e19499dfe2255155bc245ddcaa91151b8ae30a23845a2883e9befb008acbe676f587dbf920b5f910b3d237a343dd79569f5320e7944"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4a4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/fuse\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'bpf\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#! '}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9b7d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_VALUE={0x76, 0x4, "7e7c4fc79a784430a3998f3c2eb791e65c8a4f7e379ae7da5f219db7f77cb999aa8f495d3b563096002af87ad176219e084a80f213b5caafc25532bd699e7c054f8f06bf3e9125328fa7ca0b9ed5c08d3534369010f29a74be978908399ac909327a31497ba55188aa76962e5d29d38aac19"}, @ETHTOOL_A_BITSET_MASK={0xc4, 0x5, "46504c723a10cf46528f74c186673a4318153974d67f65c2753c28b875b2f643642b4bdcbca66f041353077b99e4aa2d038c68ecfa3f4ab232584cc9d936e7414e9aae43100a5266e9810fc09a4b4f5a237dc9807cf34b21f514fd2048f34f2a6890a7e1c9bf713af3b1f6e22068e960f283fe7d3fc0705d74308c89dc76b8ae7f4eef065fe90ea896700886509e91e4cdd09830458b06ddc88762e35133db7ff696c98cc41e7d632a7b002ead37618eb617702140b9f8ff27c3d9e75b5dab45"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x461}, @ETHTOOL_A_BITSET_MASK={0xb5, 0x5, "dd727654057d6913463de5e595500a47a4356de82866e5da03341fe02916b720ec0c3576f340c1ccfbeb8c98fae43fbbbfe905eb90d515e39b739741040312db0ba7723bbcb13d32be14e5d6bdad95bc7a8ef7037d65dc7939065a9db0eb60d4e3c1cd032b1d9c9899f5e2c82e9a5c2cc3887499df8e4c06df13d5c1b1f3ddd0976617b6a537890df2bbc825b5e1a947ee80581fb7fcfcbd97fc08631cbcf160901501569bb9a1fc6f7f4b0811c42c45d2"}, @ETHTOOL_A_BITSET_MASK={0xb9, 0x5, "3c4bfbfd2c83c9f626bffdec73e6ca18353633cb0ff5fb5fefff30fd2bcda9b77452dcd0ce7868249207e00042e36007c88d8afa0d962c21cd92b86fcf295a8eeeaf6567a08e807cd10835dfef878674483e3e4713052cf146cdc68b10026f0046ade44631631f37330293d4f9b823b6d33ce24dbf2715478c31e41250c2d219d39949855e7810dbc9bb9fa08cf377e87f3c03b63c08b1a3ed4bce4161870b3fc94ef4fa71d3085ffc7e453ba0738858c3ad0c89dc"}, @ETHTOOL_A_BITSET_VALUE={0x9b, 0x4, "7b954fcd09f9fdd2c209e046a99fdff12f2bf5980efd9d64d6fd1aefcbdea2d21968aedbc2c9aa269e0f12f055f74aae7bbd33de0f81dd773b42a3f8bcee78855ad1ef225bb7931ee9f28591858a498950d654b832eed715042fa6b51272cb118597e97df9765f09be78281bf449b623f1447b191bf2842122235dec2aabfa412418571cd4de48f24c6f4abfe5967f89fcd3fa75364b95"}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1703}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/fuse\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'$!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x25, 0x2, 'blkio.bfq.io_wait_time_recursive\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x45, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x824}, 0x1, 0x0, 0x0, 0x30}, 0x20048000) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.50938475s ago: executing program 1 (id=906): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5, 0x3000}}}, 0xb8}}, 0x4000) 3.227879406s ago: executing program 1 (id=907): connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000b00)={0x48}) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2024) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 3.047108602s ago: executing program 5 (id=908): setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000001c0)="17f7c6a0669fd8ae9bed2d54632a8ae1d3471ee884d2a753905166d3f65bfbd63976c11945be25cbf11d31c189eed14a6b97a2c328a24a7aac03ee04444d560eb715c465010db269c9f6ba57b6e90662203c4f10dd41416d968c7f523522b1817ce79e5e7a5fefc48dff24267bb6fa4581778291b3ae5b2034c1c31c51ccd79b46655c8b591148a805e3c70cb7d946853d4bf745d39943a8841722eff5", 0x9d) (async) r0 = socket(0x10, 0x3, 0x0) (async) r1 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) (async) io_uring_enter(r1, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) ftruncate(0xffffffffffffffff, 0x8800000) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000007a40)=@deltfilter={0x204, 0x2d, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xa, 0xffff}, {0x9, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c8, 0x2, [@TCA_MATCHALL_ACT={0x1c4, 0x2, [@m_tunnel_key={0x160, 0x20, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x10}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0xd3b9, 0x4, 0xffffffff, 0x81}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0xc9, 0x6, "22f391d5649b6fe926c9a8e12f21a5dbf0ec3ed84f737d4a1a48f5229a532e62ecb61ac71cd067fe5bf555a47d5b5b7f47536b7722180dfa16592b8ef9568cf58df75b2e226faed586229210911df5ba153f3ad6ee5c72e0f805859a1003871fd2fa5fcb85b60989b5f27334274cca85112b2ea6af417810736a42e71b3a609099fcba83a7f456518d5f74ee3eedbd8a22910fade481790d134550a9ee1bb11a3802dba98cf929a9994e060f54d2c21f4512df4c579f17d2a96519898912c6a2c20d3b9557"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x60, 0x7, 0x0, 0x0, {{0x9}, {0x4}, {0x31, 0x6, "9f6592fd76e0dfb3b074a903f8b4c7d81c49740bc23a67276d722f93853779926c00373ac916078007dabd21aa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x204}}, 0xc0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xf0b, 0x2000, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x16, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_RAW={0x0, 0xc, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) 1.679490066s ago: executing program 3 (id=909): syz_open_dev$vim2m(0x0, 0x0, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3}, 0x400000}}, 0xb8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0xffff]}}}}}}, 0x0) 1.547832733s ago: executing program 4 (id=910): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000700)=[{{&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000100)}, 0xa5c}, {{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/210, 0xd2}, {&(0x7f0000000500)=""/97, 0x61}], 0x2}, 0x8}], 0x2, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRESOCT=r3, @ANYRES64=r4, @ANYBLOB="00000000000000000100000000000000000000000000400000000000371af1fcf5fb25566dbbe0ddc8c6ca43e700468a03e5515413bda679e5e0e152e17ab64073ceddb4f699414376dbf5"], 0x50) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c0002800500020000000000080003400000000008000140000000130800044000000000080005"], 0x94}}, 0x0) (async, rerun: 32) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async, rerun: 32) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) getpid() (async) syz_open_procfs(0x0, &(0x7f00000005c0)='personality\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') (async) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r6, &(0x7f0000000800)=[{&(0x7f0000001280)="e428e812af440f1d36b4f78af73544ccfe00e4ec05283d1afa57f3199ae8cbf56d6f65d12f4c4ac8de17512a4ca6a46b5774b4729a5ba649d316b84bd56ddcbd327323e9156653bee1e497a48ea34ca836ae5f6371f1bbbba77bb8c2ee39e7c43fd4936ae92e6958643cc75a24d28208a6ffa6ae83c8633ea3b01a1f", 0x7c}, {&(0x7f0000001300)="696aeae7a7b7ec4a1510d2c908a403e2a11c2b16c192699f32b5576ae1e59fe249f6e6d6819927ae3ca348fc784e14ed256e706d3cda851ed15cf9c2d9f505c423fb0bbfe6beaa285972ff89f979ecac5651fdd169e4f0b11a9438210b1bf30de98ee0554d23e62d1ee34254807be33ad3b3b7a8b33628d5f54b4abea15b0594aa7ecd0a0e322bd627644f321ad76cc982b28d0b100b3ab80b59c082b66d5b9349f7280102e55f0f95531606b775ae5b", 0xb0}, {&(0x7f00000013c0)="11af6948d7cfc0ac34205ce273d64a02f996b2e47e98dc244e8279df28a601b679d1e98ba5230bcf04fc1fb5a6b768e700ab885e46b87390c864453024900a7beefe3265fabfc7a0012b162f2fde1535aa6184198eacd342b97d065edf95635997ccd2469ded33dfe2c9ef32f2c054410552e307045695e77c9747b659e4a1a76e55dae786cca3cb4d11219e63cc438b29d38c232ff93dac0ece79f700bbe81129196d921eaa9a7337e5bcac66f742711916dd2c4e1a206776e64e0a9b6f2daea321d6c85d17059dbc158ea6a1a18f978fd022", 0xd3}], 0x3) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000014c0)=ANY=[], 0x50) (async) write$binfmt_aout(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="08019c09ab010000bb000000060000005303000000070000000000000000000062c4e83f0fa8a048cb39c262f37c5a4e0a30d412f2295676023752c4cc6ba46ea49a6017c18c1feeeaac1d814c2899c540e1883555b399dd482a42a0710da6157e52f3127f794fd7bdffc32a152a552128c30781c0065cfc4895ca560a6780e168506088783571b8005e84098ab5802a29452ce8c4d2efc34a84ee00465ba532836602c50f57d1cbcd08cd6fddf9fd10edbf7a97e03f306e503e2d16ec574a215ed934a468fa84b7f192147a8d5455025fbe4100"/2515], 0x9d3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{}, 0x0, &(0x7f0000000640)='%+9llu \x00'}, 0x1c) (async) pipe2$watch_queue(&(0x7f00000006c0), 0x80) write$sysctl(r2, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) (async) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) 1.455047528s ago: executing program 1 (id=911): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0xffffffffffffff7f}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r2], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r3, 0x0, 0xf4, 0xfa, &(0x7f0000000040)="28d7160559e373988ba60e357b4b59deb22970e4e0c6136306680c6db02ce97721a6e96c179d62e7663ff0ffa2de94aed0057e348a21fd4d2966acc28bf1128a68f6f4b966973bbef1b93a464056ad67c2ef8d270ab636436f56891e051fd934e8a56f13770fa23bdf8a1994c9a119fe5638b986bfc52d45da76ecb8f206e00d031d263c770d39d415df518c480a018636dcef8e9af11b62dd2fb3dea99282cf219878ed5c2f9596fdda5b07c88f7451c017a142d6d8703eed5341140d0055f8fc4c9a5404172342c8463eac28b34a9bda94e0a266e98dd7fa751b2bd37df8c74ab449c1257bc4a2aabc050ede210d9aaeda84d1", &(0x7f0000000140)=""/250, 0x9, 0x0, 0x1000, 0xc9, &(0x7f0000000240)="d7106edc7a1a823935fee423e1e06fcb1beb93a4632c4c155f77e69ddf3722ec6caa968e9474841037377dc3c38356d6f0c7a282db507c07bda5e6edae82ceb81ee89d4dcebc59e25321eb2dddc04eb1239b23fa65239c2df2d1529604e862d9c0a82b2f07abf9e517347c165a327998537ad077106ea895dcefbe8465a3f65ccbb44393981645af14645da492a84cbd29d4cb22053cda5f10d5e0a64784e44bb08149fe3931c18bca12b5c1527049025c2d584e28c260424031c4a26598446a0be7bd5fc431fd745a3cab3ba7c55fa6b713433eb5823d82a51bb21b5863b9e16dd124a976545bc1cb514fbcbb26e3f6d3f7e079dfc1a3aa73867045e57836b9401bd3fd2e1381a1979177613987e43c45a0a33b17a8d49a7188f8517090544a5c8e8d5df984de621ef4dfc09e53f3f36683e9baaca5d45bb5234c3ddc49c225bac410d17af6f9704d95e7805f51dc57551c7c21971bf9a63e108c725d42b477893aa07cddd9bc28d40107cee15ec61503308d0bf61b0fff4e24a22c4244aa9b3f3de7e71573550ed4cdef6063fa51c76149e9cdb595646f16c027e996a533b4b31d8d32b940fbcc184b1b20fcf5eca73a3ea953b56f7531e25430bae12ba532a8cb41d05ecafe40cc5ac68e437f969aa3c56d7d24f177d7eb46f49d4188d263c3dd50ba4bef575262f6a8fb2659e9efbd5d5fbe9b91b738f07f2ff84e3df5048e4be53da87558a085ce8e38d559c9f6d0e25ea9d59f526ff4d9a684628e7fe188e0f4a8523beb9de0b0342004ba2b2ede3c31f446865bd9d73a20b33d961a3ea7b0450f3570477f17bb312b5eeae370ff3e955de37440678312faa6e74d9fb367c3f9f63b1a542fa522346e53cc0dd0631cde03a92aee1ba0ba9ee705044b32bf99bf217f7a2b4636cbe865af991b9a63e1bfc238917a12b4bbbb9de331b26fafff97b78a0e78b79001ee04a9e457564fd617f355566eee9e6be120095fcfac50656db0feae548c655e6a8bed5bc4f9ac7843523e0660da308bde2c313adc614fe65806936aa08b3c48eb87458e45fc378f0056f6264f6728429cf0800ba59a70065b98f05c1c824aa541816998405232e79a0d0009b798d24a71f4d019c3d5dd8e4122dbd213acaba0144e49c23436f5cb1eaa2b8fbe90b993cc8d83be9c98ff02e6a749a148272a26f6dbd9218cee36882a24d1d81bbb06870016a395a3248cd33bc3706416d8f9fb74332dcc89e5530bfe109e0fb4c6b79d73a4fea716695ef079d888888c0d0f7f7b3c3bf8f7b2b6a8536cc654d6e0698309c4ae72bfd55e74b339b93102c7a79b3c1aeebf89088c2c202ed384b5b6c81d744b465e5be091f053f5cc117f42efa639c27fcf74d2dddd7063cc0dada3b1078aadcf98f60436936058c5931534a71fec422682013eab38b30d9cf7d9b74c6332812c7842f919c5c1b996f2f267b2446399e66db2dfd8195a1008658dfed67a6022ad0ecae81d73b7f8d8fe4983f398d8b47367b4669a4b0b651353aafef39f3d55d61c25f81445856a9a82e22086618ff2e76dad5af65fc1813800da38a65a1f4519cf251a3a1bc5d3992979a18994c0d6706d8c7406ea7d1163c3d30bb1a07fd6c1adad12c548b3514b8aad9576ecbd785f2ad6f4a68fe4c05fe46163472f32b9d255369f63fcb888dd0ed4ed9c9bae67af91e3bf14f4d196aef99985d9a24123688e72f1cc86225b4827b35bd8fc8bc817532ebffd6ff4fd1fbb2d1ffd8e8d3ec6ca02336c9dfef0def753e46e996d3a47eb325ae6f55698ea3fa6c9f062bccf74d8f2b13d42f03e1c14af6ab83a67db6683cf92d031b8161005e090d394646cf8b51a024546ca58bf5cf2f35d41054e7d7107776161c5f6ff38d87a0fd2c409ef4fc9044df3529ecfb4dfe647de2683e31c185c87149c7c91e9ea0a62235210fd8c071e6151f7b2de558224dee7dc88de59215702d429c5dd51c24bebfa8890f034436a02470d59e4766f7eabc5eec998f6e3a2dee4f3dee0091a6629427a4136fcc3d6f78d372d62a70b8c893e0a0cda5f436d288d208961f8c9da759db152fd52b56f9250b842fac4d192804ed56ff0f274c6fccb96c16bfded6bf84ba08a6f2dbd8caf77487c85abc83c9e78cbc837be7db9dcbf09c545b4d8bd67775e1cad06c091ce992f10caec064e642d7dab8ffde17fdd5d71c3c2d1cb77882d85ae3ac2646082232685288f48d0360d57e43b6d88f7dfb6a996666cffa3fbe7efd5e674753d0bc1ba8a8a146d7f99fb14ea8cf18d743c0101ee96a96b2b49795f53fb2615322149ce326f83519d4ec5bd387daf6ce038bb62ff176c53589f3f0a8a96a9413fcab9cd01c427d5b5e4c4affbf7a49bdeb50dad21ac8e75621ee81bc5e6beeff8e8644f8d61c32aa1c8b83562aee456b935b90f6f2d3ce0b2e6a98323dcff7a7d88ee61bab3da9a536e357322c089c6bc5a10611b05cdcf82320024971c9d043a0eb01ce24b18936457b6c400b54622641c9437a761e70f106cd1319e1e6e5ee0b59448e6d319a2745816df0dad90c5d5869f2fdd096371e0f0a651e53902eead0500b8baeb762da37313f59c01688161d07721464055af455fc44b1eaf3ea1f494dea7888eba516e3d682236c119ce5b33625aa4c930dd5ee256cb88c37fa2cab72d3f1e0345142465b155c5d7cbb8e563da60df384f142431b332b6ee97b2b2260214215c095fb09aa58d88fb9e20a3a190afcc3a9ca1e488a8ce9f4bc0a9e8d107ac7dd58b74bc41446bffe1fe1a770c84e1e1764bcd8cc51ac932efb602b80b2d6bedc5b061bf9ac331627dfe567c52b1b33e0c7526854df7c6635703f3c90367694692754c7a4821cabd8e0040e31f028ffdeb667fbca7d2f8fbfc791c1af153c19a4e6c73994e77dd0bfd62db876ed61ea9df9df418110a69dc60630058253ee129a1dbf5f22ec61641d7adc8eb789cc124b7d9e126ef149e65cabff530d819f4a6f109924dbe2a8d83dc2cf77db49ea3ec3c6777b9e69b84cf3c81aa9df562722490d07f428b5f015a85a4ff802829f102efcebc9c52ea5f8f873b2c3b088a5f886f80204b3188976e23778f9269d0997a8d5cad5b98897b74fd71dc2c645b1a39e0a81c3adf9c935b90d835e6ead3f6422741b7be36a0986725f6313cc0dbb75064c8e81c52825346e25b963a736d2d8259190801fea44dc80bbf3e21351fb37765e12b0a4afdf3be08f3e1a9d6b18916d407d86a6363e6b07b7df829476e8ff0c015074875dc34a6df533252d300c3efd72e1e5a42d29bba0b77e06475cf91d18479f0634e852c296627205b68875ae7f7715e28f3535d32dfdce7d79b947e0d3d4b3d38dcb31554aced2412c410c0558d0019ff1ff0c9abf23b0dac12fd847606dfdbcfd0c6a932600256313c243f7c8802b06fe8dc443b5c74510581e1e3dc781d7130b0488761f8089dfdb229d0a0de1ec57f107da647acc46b247010582735dfcbeac3bbbf3c8dcccd0f8ebeffe46abe06fe90ab2457da33a3ec1329f1f9873b651c6f8b666f32dedb951720baef9f79ec19cf843941de950ebc3d878e8a8cb9caa3a68c2c49662c62dfb1e5eced1406c5b3b3189c3f7eb1dcb3b1832e5ea249c419aecf62c8ae96f404ad284f063c8da2cd633e0f235ce10c3d803eee889f38edb91d733418b861f33215280e9d47aaff3d5a14e9842d59f023c3d2cdec5c43eca64abd11eb331fbf06d92b916a74bc07e50ad5af12cdc807156586ab0ec100996776fcfbc70ecec27b8330a66414faf7edd939a30996605a7c6f1e4ee1577df5df35fe1d1ce8255fcaa142059bb6594361444fad5221ee397616a6d0c2a9716c84aa9d018374a44220c213fd958eac99b285488bfcbe3869c27201e38fb5e900925e9205aafbdab3cc16042be1c844d7b807cf1beeab5f19e41f76a9296fbfc51ea267f25cb96d27778dd6021ce73914622c22002abb4358c73acc1fcc963041a55046732c17b497c686a7c555a05907faba463688bee0d3b5e06578b4ce24a9f550b685f27ff31c7fabaec048a1a83aec5d6b3b3fd7f6822952c8a0747e72b4493b4ed2f1770f02c7d54ce9a1f434ad4f09316d8d692b480675681c51807b057dc13f7c8e65001bda162976823de05adc3911b7073fee32374b14022add045d457306630931b6bbc303c9054553b5a6e8329331fcf8d0fcfb5e1f5042e6f391201559a3593f4500fe87d6fb5dc3c3708b747449f3bf8151541d478a03756a7c69782f7aebfe1569a6e7b27d6b916559e86fa3cd621e4ddf34adf9e1a3fe397488008e3113f7485ccc0ef0168847353fd59c49ae9f2124919787e5fe38fbb223d81eec5e8ef68852e7853ab1898a9d2fd250749d4e5fbba1abf077a14d910575778520b669669a75ead59a54182eba3e797a89f863878db0590739384d016b4be0788ab4a26b39d6340f3eb6b57a43266761d78d51a353c2b34a04aa8beab84d5c1f6cf91c245d30f62fc56f58df224968bcd062d870713e9c1805b116bb2b99784f6e2a6f68332148605ab149d5dd42b85a5c8a906221da7e95d0b661883f5cf0a5447f651cb7d7d527f089c4ffeed99cf5c46c7022465b668432e5bd5e5d2be788703b57c182fdd485c4ab9efe6c5856a21b38114c5891d9c43593d5e987448fe78cc0b6877e178077b39597fd419ab9d7aee0520130be7372deb3c0f9b4b9ea729dcd2243634553aa857b8de59464a920a9e91cc65f4bc5e869c966738b2f8e64561f99281387b7af1b58699269be7d47a10f61c8807e95617fc4c4d8f3d9e1e06de5b1d0ae043d2f0a55208616ce780378b46fe6c40111002e0b4ce6bbe876aed503a5053b19495b10594ae5f2b207a355f4b7fcf712105ba77a3d7d8918991f41c2e1cc8cf1e94ad94d53bef517f7e48bad0166eb5c731101ce2fbc89267d062d4d029f65e9afcb7f72aa96368f652213d1e89065be4d3e43410a40046b9adb7153d2703e21718ffbb5229db93964f93f777a45f4ba49e888ee89a35bb2cb5d052469c8081b94a3ca7ae78a906f77231989b887847a76a0c8f67c8b8f61af137a072097012e46496e3c77846a3f2e5ebb918ca494b8629b3589f0f761fdddd89b95e7323005327766d45bcbcd749e3231b83ee7074835b190bf57a307f1be0b78b406a9254d8d8578070cf917c8762a8f0c06d662458c232e4251d2aaeeec646107abf839ab864bb1b896ea168d38eb4c236360a7e609c1fc5eeb505b6a382859be5b5271e2e8abafc0a8f8bc02922218a54a6f7ce6f92283264ebf0ad69082982e193b3d1f6bb2c7b74872e3f18854937ef155621834b3750b5c62e392aed21b2ff546c15bed12ad9b212d896d276b3e4ac344afda3a774111714e373289d323afe0ad663c1ba399d1c466e5130d27e896878ba287b165592c0326e68014bca27ea6705e59a1662a8df66a642b57747feb2a67f268b3782e2b9bd4af51c79e9912530ea1693e2646d3875d50b8a0f811ace140c30aca680b3bbde2105c5b2bf2e840bcff88c0e84627bc983ec1c86ceccab6366898c06c393901c0b3013b13f8b1506a1cb6f0119fbb27e637540e964e7ecd0a43fe94f015172c2119a4f28f0be64c76e85e96251a66f0540fd8b1d937bb87dcd00644676f73989cd19de30008ca75f873ba160378a3ad648d82da08370814dd3c4e209abe149d045b5aa05e5839842c6fab73440dc0f04f15eb3604c7d32bed59d1b6958cea19aa45238c692e1f165035982513c495cf67652f1614802416cb0ada4d", &(0x7f0000001240)="8d4e8d631a3a75ea35ec74525231d704c239b64ca2278d8b0f0b2fac98e4a834cefbd6ff07c8c7515c688864f7ae2e51c9550e144a0716145747c8ea51c615d076e3101b16a61d7b74ea5c58ad94e2f2c64d52887f75b5aa6fc437752888dfc2b24bfaeed443740d61b864aee22ea9b0bd6cffe160f7a58456e5227e51269a8fb389e4152daa2b35b0fe107675fac470e3f995b8d6244749cd53bf1d0f27e5710af846cde4298e3d64ad295d8cbc6f7c6db06547c8720d0ea0d83e00dd4446c97658537ae73b0fe200", 0x0, 0x0, 0x7}, 0x50) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0x4000005, "050000009582"}}) 1.437523677s ago: executing program 3 (id=912): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4604070007070000000000000002000300030000000903000038000000fcffffff0e00000000002000000006000000002a22000000"], 0x38) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000440)={{0x1, 0x3, 0xe, 0x7, 'syz0\x00', 0x10001}, 0x5, 0x202, 0x3, 0x0, 0x0, 0x4, 'syz1\x00', &(0x7f0000000140)}) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x4}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x4de4, &(0x7f0000000980)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0xa, 0x1, 0x106) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x7, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, 0x0, 0x0) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) setsockopt$sock_attach_bpf(r3, 0x29, 0x4e, 0x0, 0x4) 1.383608604s ago: executing program 0 (id=913): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) close(0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x11223}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x3}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ab02000018080000", @ANYRES32=r1, @ANYRES32=r0], &(0x7f00000003c0)='GPL\x00', 0x48, 0xff7, &(0x7f0000001840)=""/4087, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(r0, 0x2, &(0x7f0000000000)={0x7c1, 0xfffffffffdffffff}, &(0x7f0000000040)) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x6, 0x6, "4dec19120344"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x1c, &(0x7f00000004c0)=ANY=[], 0x0) 1.271643134s ago: executing program 4 (id=914): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = fanotify_init(0x200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r2, 0x101, 0x48001051, r3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%ps \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x40, 0x20, 0xffffffc0, 0x3, {{0x19, 0x4, 0x2, 0x33, 0x64, 0x66, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @remote, {[@timestamp_prespec={0x44, 0xc, 0xdf, 0x3, 0x3, [{@loopback}]}, @rr={0x7, 0x2b, 0x88, [@broadcast, @empty, @private=0xa010100, @local, @local, @empty, @empty, @multicast1, @broadcast, @remote]}, @end, @timestamp={0x44, 0x18, 0x86, 0x0, 0x3, [0x7, 0x2, 0x7fffffff, 0x5, 0x5]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r9], 0x4c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x7a, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x44d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x7, 0x22, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x9, 0x47, &(0x7f0000000a80)=""/71, 0x41000, 0x48, '\x00', r5, @fallback=0x17, r6, 0x8, &(0x7f0000000500)={0xa, 0x8}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x6, 0x108, 0x80000000}, 0x10, r10, 0xffffffffffffffff, 0x5, &(0x7f0000000900)=[r11], &(0x7f0000000940)=[{0x3, 0x2, 0xc, 0x8}, {0x0, 0x5, 0x1, 0xa}, {0x0, 0x3, 0xd, 0xb}, {0x4, 0x1, 0xf, 0x1}, {0x0, 0x3, 0x7, 0xc}], 0x10, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) 954.182119ms ago: executing program 5 (id=915): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x55, 0xfffffffc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x1a4, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x31a39, 0x5c60c}, [@IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_VF_PORTS={0x17c, 0x18, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xc40}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2a6e6f1cf9a4626f60bd2b70f385e6af"}, @IFLA_PORT_PROFILE={0x16, 0x2, '/proc/sysvipc/sem\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x59}, @IFLA_PORT_PROFILE={0xa, 0x2, '\\-\\$\\\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xa4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ecb4177efb1922dd2a711842a4344fa8"}, @IFLA_PORT_INSTANCE_UUID={0x14}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3a4ac20cff75e60ca76b2ebe1dd27bad"}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "0d334483cf926aafbd65f295c97392a3"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "59df1406fe19f67a92d28af9604a9c01"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "29741bb76a3a1500727c9bf880ee101f"}, @IFLA_PORT_REQUEST={0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_PROFILE={0x16, 0x2, '/proc/sysvipc/sem\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0x8, 0x2, 'gtp\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0xc}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xf}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x8, 0x2, 'gtp\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0xff}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "87842490622dab3611123ca199e8e17d"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2f873c0ec73cce0b806ba91fde3d6bcf"}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) 667.820192ms ago: executing program 4 (id=916): openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000001c0)) (async) utimensat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', &(0x7f0000000280)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) (async) syz_io_uring_setup(0x165b, &(0x7f00000002c0)={0x0, 0x1305cc6, 0x20001, 0x3, 0x2002d3}, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_buf(r1, 0x1, 0x27, &(0x7f0000000000)=""/94, &(0x7f0000000080)=0x5e) (async) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x2040, 0x0) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) (async) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8814}, 0x24040044) (async) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) close(0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008c02"]) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r9, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x7, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}]}) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x301) (async) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r12, 0x0, 0xc8, &(0x7f0000000140), 0x4) setsockopt$MRT_DEL_VIF(r12, 0x0, 0xcb, 0x0, 0x0) (async) ioctl$USBDEVFS_CONTROL(r11, 0xc0185500, &(0x7f00000000c0)={0xa3, 0xd, 0x4, 0xff, 0x0, 0xfefd, 0x0}) 632.81858ms ago: executing program 5 (id=917): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5, 0x80ff}}}, 0xb8}}, 0x4000) 494.471532ms ago: executing program 5 (id=918): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'team0\x00', &(0x7f0000000f40)=@ethtool_wolinfo={0x3, 0xfffffffc, 0x0, "000000002191"}}) syz_usb_connect(0x0, 0x34, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e010000082402010102000008"], 0x0) 288.538µs ago: executing program 3 (id=919): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c6817b899e39a72, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x8006, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0], 0x11e0}}], 0x1, 0x8800) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) (async, rerun: 32) r6 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) (rerun: 32) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/253, 0xfd}, 0xeb6e}, {{&(0x7f0000001c80)=@nl=@unspec, 0x80, 0x0}, 0x7ffffff7}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000003300)=""/183, 0xb7}, {&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f00000034c0)=""/244, 0xf4}, {0x0}, {&(0x7f00000036c0)=""/23, 0x17}, {&(0x7f0000003800)=""/106, 0x6a}, {&(0x7f0000003880)=""/167, 0xa7}, {0x0}], 0x8, &(0x7f0000003ac0)=""/67, 0x43}, 0x4}, {{0x0, 0x0, &(0x7f0000003c00)}, 0x9}, {{&(0x7f0000003c40)=@sco, 0x80, &(0x7f0000004000)=[{&(0x7f0000003cc0)=""/210, 0xd2}, {&(0x7f0000003dc0)=""/168, 0xa8}, {&(0x7f0000003e80)=""/169, 0xa9}], 0x3, &(0x7f0000000200)=""/87, 0x57}, 0x40}, {{&(0x7f0000000440)=@x25={0x9, @remote}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/219, 0xdb}, {&(0x7f0000000780)=""/77, 0x4d}, {&(0x7f0000000800)=""/216, 0xd8}, {&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f0000000900)=""/198, 0xc6}], 0x5, &(0x7f0000000a80)=""/169, 0xa9}, 0x100}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/192, 0xc0}, {&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f0000000c00)=""/41, 0x29}, {&(0x7f0000000c40)=""/197, 0xc5}], 0x4, &(0x7f0000001d00)=""/4096, 0x1000}, 0x5}], 0x7, 0x40000002, 0x0) (async, rerun: 64) pread64(r6, &(0x7f0000000700)=""/115, 0x73, 0x5) (async, rerun: 64) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xf292, 0x0, 0x104, 0xb5}, &(0x7f0000000280)=0x0, &(0x7f0000000100)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000380)=0x76a, 0x0, 0x4) (async) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r8, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r8, 0x0) (async, rerun: 32) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xfd9, 0x0) (rerun: 32) 0s ago: executing program 4 (id=920): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (rerun: 64) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$inet6_int(r2, 0x29, 0x17, 0x0, &(0x7f0000000080)) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (rerun: 32) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x1}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x2}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000ffff26bd7000fbdf250000000000", @ANYRES32=0x0, @ANYBLOB="791001002b0000000a000100aaaaaaaaaa2d00001c0012800b00010062726964676500000c000280040014000000110007000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40000) kernel console output (not intermixed with test programs): 946] team0: Port device team_slave_0 added [ 249.134599][ T7946] team0: Port device team_slave_1 added [ 249.229448][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.286657][ T1103] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.385365][ T7946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.416024][ T7946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.844227][ T7946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.984539][ T7946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.058801][ T7946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.352841][ T7946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.434780][ T5184] Bluetooth: hci5: command tx timeout [ 250.506770][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 250.738322][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 250.754032][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.773884][ T10] usb 5-1: Product: syz [ 250.788470][ T10] usb 5-1: Manufacturer: syz [ 250.793243][ T10] usb 5-1: SerialNumber: syz [ 251.002227][ T8039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.527'. [ 251.016904][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.526'. [ 251.081433][ T7946] hsr_slave_0: entered promiscuous mode [ 251.107967][ T7946] hsr_slave_1: entered promiscuous mode [ 251.813466][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 251.853993][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 251.944316][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 252.071789][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 252.145675][ T10] usb 5-1: USB disconnect, device number 27 [ 252.306355][ T5987] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 252.493147][ T5184] Bluetooth: hci5: command tx timeout [ 252.562465][ T7946] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 252.572134][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.605476][ T7946] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 252.632121][ T5987] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 252.662175][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.673714][ T7946] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 252.696392][ T8001] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 252.735442][ T7946] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.736334][ T5987] usb 2-1: config 0 descriptor?? [ 252.896561][ T8001] usb 4-1: Using ep0 maxpacket: 32 [ 252.923937][ T8001] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 253.026472][ T8001] usb 4-1: config 0 has no interface number 0 [ 253.049213][ T8001] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 253.074101][ T8001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.096375][ T8001] usb 4-1: Product: syz [ 253.116804][ T8001] usb 4-1: Manufacturer: syz [ 253.135698][ T8001] usb 4-1: SerialNumber: syz [ 253.176338][ T8066] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 10804, id = 0 [ 253.227509][ T8001] usb 4-1: config 0 descriptor?? [ 253.292774][ T5987] itetech 0003:258A:6A88.0008: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.1-1/input0 [ 253.392427][ T8001] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 253.448079][ T5987] usb 2-1: USB disconnect, device number 36 [ 253.459708][ T8001] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 253.643757][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 253.664994][ T8001] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 253.852529][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 253.867041][ T5987] usb 4-1: USB disconnect, device number 37 [ 253.923671][ T5987] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 253.928839][ T7946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.995523][ T5987] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 254.027856][ T8068] fido_id[8068]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 254.044940][ T5987] quatech2 4-1:0.51: device disconnected [ 254.135789][ T7946] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.239230][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.246459][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.325296][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.332494][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.965839][ T7946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.986378][ T5926] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 255.316240][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 255.329084][ T5926] usb 4-1: config 0 has an invalid interface number: 125 but max is 0 [ 255.364249][ T5926] usb 4-1: config 0 has no interface number 0 [ 255.366576][ T7946] veth0_vlan: entered promiscuous mode [ 255.399004][ T5926] usb 4-1: New USB device found, idVendor=04e8, idProduct=a100, bcdDevice=b2.9d [ 255.435428][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.512342][ T5926] usb 4-1: Product: syz [ 255.547550][ T5926] usb 4-1: Manufacturer: syz [ 255.564226][ T7946] veth1_vlan: entered promiscuous mode [ 255.567713][ T5926] usb 4-1: SerialNumber: syz [ 255.678608][ T5926] usb 4-1: config 0 descriptor?? [ 255.714465][ T5926] ax88179_178a 4-1:0.125: probe with driver ax88179_178a failed with error -22 [ 255.824047][ T7946] veth0_macvtap: entered promiscuous mode [ 255.886109][ T8074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.919989][ T8074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.921270][ T7946] veth1_macvtap: entered promiscuous mode [ 255.939365][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.945985][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.994832][ T5926] usb 4-1: USB disconnect, device number 38 [ 256.172279][ T7946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.274836][ T7946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.465930][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.504924][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.722184][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.801306][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.452051][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.468968][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.513673][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.529141][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.936947][ T8114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.967029][ T8114] batadv_slave_0: entered promiscuous mode [ 259.536552][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 259.728411][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 259.737525][ T24] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 259.758629][ T24] usb 6-1: string descriptor 0 read error: -22 [ 259.774040][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 259.814196][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.896364][ T5987] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 260.023194][ T24] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 260.038482][ T5987] usb 4-1: device descriptor read/64, error -71 [ 260.137546][ T8142] syzkaller1: entered allmulticast mode [ 260.281789][ T8133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.308979][ T5987] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 260.476313][ T5987] usb 4-1: device descriptor read/64, error -71 [ 260.626594][ T5987] usb usb4-port1: attempt power cycle [ 260.719928][ T24] usb 6-1: device descriptor read/64, error -71 [ 260.786350][ T5955] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 260.926102][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 260.926122][ T30] audit: type=1326 audit(1756415814.180:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.4.553" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff00078ebe9 code=0x0 [ 260.954026][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.958461][ T5955] usb 2-1: Using ep0 maxpacket: 16 [ 260.997898][ T5987] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 261.006005][ T24] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 261.026746][ T5955] usb 2-1: unable to get BOS descriptor or descriptor too short [ 261.061281][ T5955] usb 2-1: config 9 has an invalid interface number: 215 but max is 0 [ 261.069982][ T24] usb 6-1: device reset changed ep0 maxpacket size! [ 261.077752][ T5987] usb 4-1: device descriptor read/8, error -71 [ 261.114842][ T5955] usb 2-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 261.134966][ T24] usb 6-1: USB disconnect, device number 2 [ 261.151485][ T5955] usb 2-1: config 9 has an invalid descriptor of length 191, skipping remainder of the config [ 261.183526][ T5955] usb 2-1: config 9 has no interface number 0 [ 261.199394][ T5955] usb 2-1: config 9 interface 215 altsetting 250 has an invalid endpoint descriptor of length 5, skipping [ 261.224957][ T5955] usb 2-1: config 9 interface 215 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 261.299149][ T5955] usb 2-1: config 9 interface 215 has no altsetting 0 [ 261.306434][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 261.337694][ T5955] usb 2-1: New USB device found, idVendor=0572, idProduct=2002, bcdDevice=3d.e7 [ 261.347135][ T5987] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 261.360440][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.381933][ T5955] usb 2-1: Product: syz [ 261.395568][ T5955] usb 2-1: Manufacturer: syz [ 261.402922][ T5987] usb 4-1: device descriptor read/8, error -71 [ 261.415443][ T5955] usb 2-1: SerialNumber: syz [ 261.486311][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 261.500522][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.516629][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.527834][ T5987] usb usb4-port1: unable to enumerate USB device [ 261.539173][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.549205][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.585272][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 261.625394][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 261.657109][ T24] usb 6-1: can't read configurations, error -71 [ 261.675009][ T5955] usb 2-1: USB disconnect, device number 37 [ 262.851283][ T8180] loop3: detected capacity change from 0 to 1 [ 263.132145][ T6254] Dev loop3: unable to read RDB block 1 [ 263.246283][ T6254] loop3: unable to read partition table [ 263.286556][ T6254] loop3: partition table beyond EOD, truncated [ 263.716335][ T5926] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 263.916874][ T8199] netlink: 'syz.1.563': attribute type 2 has an invalid length. [ 264.007195][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 264.051598][ T5926] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 264.084762][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 264.148530][ T5926] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.208947][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 264.242932][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 264.270394][ T5926] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 264.289684][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 264.345980][ T5926] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.411053][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 264.613062][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 264.686081][ T5234] Dev loop3: unable to read RDB block 1 [ 264.713628][ T30] audit: type=1804 audit(1756415817.940:245): pid=8205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.565" name="/newroot/111/file1" dev="fuse" ino=1 res=1 errno=0 [ 264.812140][ T5234] loop3: unable to read partition table [ 264.875712][ T5926] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 264.891799][ T5234] loop3: partition table beyond EOD, truncated [ 264.912960][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 264.961526][ T5926] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.036467][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 265.088522][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 265.185443][ T5926] usb 5-1: string descriptor 0 read error: -22 [ 265.256338][ T5926] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 265.265524][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.306598][ T5234] Dev loop3: unable to read RDB block 1 [ 265.326362][ T5234] loop3: unable to read partition table [ 265.387434][ T5234] loop3: partition table beyond EOD, truncated [ 265.421745][ T8218] fuse: Bad value for 'user_id' [ 265.496715][ T5926] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 265.496969][ T8218] fuse: Bad value for 'user_id' [ 265.731075][ T8228] tipc: Enabling of bearer rejected, failed to enable media [ 266.142825][ T30] audit: type=1326 audit(1756415819.200:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.4.560" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff00078ebe9 code=0x0 [ 266.394684][ T8235] netlink: 32 bytes leftover after parsing attributes in process `syz.0.571'. [ 266.511217][ T5234] Dev loop3: unable to read RDB block 1 [ 266.558819][ T5234] loop3: unable to read partition table [ 266.569966][ T5234] loop3: partition table beyond EOD, truncated [ 266.784580][ T8244] ======================================================= [ 266.784580][ T8244] WARNING: The mand mount option has been deprecated and [ 266.784580][ T8244] and is ignored by this kernel. Remove the mand [ 266.784580][ T8244] option from the mount to silence this warning. [ 266.784580][ T8244] ======================================================= [ 266.819477][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.990096][ T8247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.572'. [ 267.195090][ T5234] Dev loop3: unable to read RDB block 1 [ 267.231087][ T5234] loop3: unable to read partition table [ 267.260146][ T5234] loop3: partition table beyond EOD, truncated [ 267.778693][ T24] usb 5-1: USB disconnect, device number 28 [ 268.081363][ T8258] input: syz1 as /devices/virtual/input/input20 [ 268.236271][ T5926] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 268.406889][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 268.415630][ T5926] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 268.427227][ T5926] usb 4-1: config 0 has an invalid descriptor of length 119, skipping remainder of the config [ 268.457905][ T5926] usb 4-1: config 0 has no interface number 0 [ 268.479380][ T5926] usb 4-1: too many endpoints for config 0 interface 67 altsetting 37: 52, using maximum allowed: 30 [ 268.510773][ T5926] usb 4-1: config 0 interface 67 altsetting 37 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 268.552552][ T5926] usb 4-1: config 0 interface 67 has no altsetting 0 [ 268.577740][ T5926] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 268.586985][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.609781][ T5926] usb 4-1: Product: syz [ 268.620534][ T5926] usb 4-1: Manufacturer: syz [ 268.632208][ T5926] usb 4-1: SerialNumber: syz [ 268.659475][ T5926] usb 4-1: config 0 descriptor?? [ 269.576920][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 269.756245][ T7999] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 269.800827][ T9] usb 6-1: config 8 has an invalid interface number: 218 but max is 3 [ 269.815253][ T9] usb 6-1: config 8 has an invalid interface number: 4 but max is 3 [ 269.841355][ T9] usb 6-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 269.880097][ T9] usb 6-1: config 8 has an invalid descriptor of length 1, skipping remainder of the config [ 269.912592][ T9] usb 6-1: config 8 has 2 interfaces, different from the descriptor's value: 4 [ 269.936281][ T7999] usb 5-1: Using ep0 maxpacket: 32 [ 269.946640][ T9] usb 6-1: config 8 has no interface number 0 [ 269.983923][ T9] usb 6-1: config 8 has no interface number 1 [ 269.987878][ T7999] usb 5-1: config 7 has an invalid interface number: 26 but max is 0 [ 269.999045][ T9] usb 6-1: config 8 interface 218 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 270.017585][ T9] usb 6-1: too many endpoints for config 8 interface 4 altsetting 9: 247, using maximum allowed: 30 [ 270.034332][ T9] usb 6-1: config 8 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 270.047497][ T9] usb 6-1: config 8 interface 218 has no altsetting 0 [ 270.054355][ T9] usb 6-1: config 8 interface 4 has no altsetting 0 [ 270.065036][ T9] usb 6-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=6d.fa [ 270.074794][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.082953][ T9] usb 6-1: Product: syz [ 270.088069][ T9] usb 6-1: Manufacturer: syz [ 270.090626][ T7999] usb 5-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 270.092709][ T9] usb 6-1: SerialNumber: syz [ 270.224229][ T7999] usb 5-1: config 7 has no interface number 0 [ 270.300013][ T7999] usb 5-1: config 7 interface 26 altsetting 2 endpoint 0x1 has invalid maxpacket 1072, setting to 1024 [ 270.311658][ T8268] netlink: 24 bytes leftover after parsing attributes in process `syz.5.579'. [ 270.338677][ T9] usb 6-1: Could not find all expected endpoints [ 270.344254][ T7999] usb 5-1: config 7 interface 26 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 1024 [ 270.388286][ T9] usb 6-1: Could not find all expected endpoints [ 270.402243][ T7999] usb 5-1: config 7 interface 26 has no altsetting 0 [ 270.442157][ T9] usb 6-1: USB disconnect, device number 5 [ 270.456758][ T7999] usb 5-1: New USB device found, idVendor=13d3, idProduct=3304, bcdDevice=c9.9b [ 270.541957][ T7999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.657822][ T5926] smsc95xx v2.0.0 [ 270.661492][ T5926] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 270.682059][ T7999] usb 5-1: Product: syz [ 270.710259][ T7999] usb 5-1: Manufacturer: ᠁ [ 270.733191][ T7999] usb 5-1: SerialNumber: syz [ 270.740270][ T5234] Dev loop3: unable to read RDB block 1 [ 270.748563][ T5234] loop3: unable to read partition table [ 270.751070][ T5926] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 270.764829][ T8270] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 270.802706][ T5234] loop3: partition table beyond EOD, truncated [ 271.044424][ T5926] usb 4-1: USB disconnect, device number 43 [ 271.046134][ T7999] usb 5-1: USB disconnect, device number 29 [ 271.885200][ T5234] Dev loop3: unable to read RDB block 1 [ 271.897048][ T7999] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 271.938490][ T5234] loop3: unable to read partition table [ 271.944460][ T5234] loop3: partition table beyond EOD, truncated [ 272.046747][ T5987] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 272.080749][ T7999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.115043][ T7999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.146403][ T7999] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 272.195934][ T7999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.216235][ T5987] usb 5-1: Using ep0 maxpacket: 16 [ 272.228722][ T5987] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 272.250632][ T7999] usb 2-1: config 0 descriptor?? [ 272.258122][ T5955] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 272.308380][ T5987] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.370225][ T5987] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.403201][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.428057][ T5987] usb 5-1: Product: syz [ 272.446469][ T5987] usb 5-1: Manufacturer: syz [ 272.451158][ T5987] usb 5-1: SerialNumber: syz [ 272.476353][ T5955] usb 4-1: device descriptor read/64, error -71 [ 272.716440][ T5955] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 272.745606][ T7999] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 272.868355][ T7999] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 272.894003][ T7999] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 272.906396][ T5955] usb 4-1: device descriptor read/64, error -71 [ 272.928738][ T5987] usb 5-1: 0:2 : does not exist [ 272.951346][ T7999] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -71 [ 272.999357][ T5987] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 273.047600][ T5955] usb usb4-port1: attempt power cycle [ 273.066610][ T7999] usb 2-1: USB disconnect, device number 39 [ 273.093189][ T5987] usb 5-1: USB disconnect, device number 30 [ 273.257039][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.427829][ T5955] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 273.477289][ T5955] usb 4-1: device descriptor read/8, error -71 [ 273.766647][ T5955] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 273.836399][ T5955] usb 4-1: device descriptor read/8, error -71 [ 273.906362][ T5987] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 273.966802][ T5955] usb usb4-port1: unable to enumerate USB device [ 274.035889][ T8302] fido_id[8302]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 274.086377][ T5987] usb 6-1: Using ep0 maxpacket: 16 [ 274.114573][ T5987] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 274.156285][ T5987] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.196352][ T8001] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 274.214422][ T5987] usb 6-1: config 0 has no interface number 0 [ 274.242431][ T5987] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 274.256373][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.265888][ T5987] usb 6-1: Product: syz [ 274.284979][ T5987] usb 6-1: Manufacturer: syz [ 274.295466][ T5987] usb 6-1: SerialNumber: syz [ 274.317097][ T5987] usb 6-1: config 0 descriptor?? [ 274.424138][ T8001] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.451959][ T8001] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 274.462038][ T8001] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 274.476662][ T8001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.495680][ T8001] usb 5-1: config 0 descriptor?? [ 274.523822][ T8001] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 274.556301][ T8001] dvb-usb: bulk message failed: -22 (3/0) [ 274.576732][ T8001] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 274.628401][ T7996] usb 6-1: USB disconnect, device number 6 [ 274.670746][ T8001] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 274.706314][ T8001] usb 5-1: media controller created [ 274.715165][ T8001] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.746446][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 274.776240][ T8001] dvb-usb: bulk message failed: -22 (6/0) [ 274.816576][ T8001] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 274.886552][ T8001] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 274.920494][ T8001] dvb-usb: schedule remote query interval to 150 msecs. [ 274.936499][ T8001] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 274.936690][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 275.022265][ T9] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 275.058078][ T5234] Dev loop3: unable to read RDB block 1 [ 275.066637][ T9] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 275.074774][ T9] usb 2-1: config 0 has no interface number 0 [ 275.076278][ T5234] loop3: unable to read partition table [ 275.102870][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 275.126481][ T9] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 275.131181][ T5234] loop3: partition table beyond EOD, [ 275.151719][ T5955] dvb-usb: error while querying for an remote control event. [ 275.186557][ T5234] truncated [ 275.190558][ T9] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 275.291151][ T9] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 275.324858][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 275.335821][ T9] usb 2-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 275.376304][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 275.381072][ T9] usb 2-1: Product: syz [ 275.382099][ T5955] dvb-usb: error while querying for an remote control event. [ 275.394291][ T5234] Dev loop3: unable to read RDB block 1 [ 275.396199][ T9] usb 2-1: Manufacturer: syz [ 275.429142][ T5234] loop3: unable to read partition table [ 275.435960][ T9] usb 2-1: config 0 descriptor?? [ 275.458095][ T5234] loop3: partition table beyond EOD, truncated [ 275.470030][ T8315] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 275.596264][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 275.670858][ T8325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.593'. [ 275.766351][ T5987] dvb-usb: error while querying for an remote control event. [ 275.798317][ T5234] Dev loop3: unable to read RDB block 1 [ 275.803947][ T5234] loop3: unable to read partition table [ 275.916294][ T5955] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 275.926920][ T5234] loop3: partition table beyond EOD, truncated [ 276.036608][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 276.054158][ T5987] dvb-usb: error while querying for an remote control event. [ 276.090794][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input22 [ 276.281840][ T5955] usb 6-1: config 0 has no interfaces? [ 276.298902][ T8315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.594'. [ 276.312005][ T5955] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 276.368847][ T9] usb 2-1: USB disconnect, device number 40 [ 276.374830][ C0] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 276.443532][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.463125][ T5234] Dev loop3: unable to read RDB block 1 [ 276.469040][ T5234] loop3: unable to read partition table [ 276.474785][ T5955] usb 6-1: Product: syz [ 276.479171][ T5955] usb 6-1: Manufacturer: syz [ 276.483970][ T5234] loop3: partition table beyond EOD, truncated [ 276.490357][ T5955] usb 6-1: SerialNumber: syz [ 276.506287][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 276.513451][ T5955] usb 6-1: config 0 descriptor?? [ 276.518619][ T5987] dvb-usb: error while querying for an remote control event. [ 276.681664][ T8338] loop2: detected capacity change from 0 to 7 [ 276.906429][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 276.923881][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.596'. [ 276.932905][ T8324] netlink: 16 bytes leftover after parsing attributes in process `syz.5.596'. [ 276.952970][ T8342] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 276.974743][ T8338] loop2: [ 276.977864][ T5987] dvb-usb: error while querying for an remote control event. [ 277.002531][ T8338] loop2: partition table partially beyond EOD, truncated [ 277.197336][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 277.212241][ T5955] dvb-usb: error while querying for an remote control event. [ 277.537159][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 277.537201][ T5955] dvb-usb: error while querying for an remote control event. [ 277.950418][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 277.950446][ T5955] dvb-usb: error while querying for an remote control event. [ 278.412703][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 278.412745][ T5955] dvb-usb: error while querying for an remote control event. [ 278.568398][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 278.568440][ T5987] dvb-usb: error while querying for an remote control event. [ 278.795179][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 278.856256][ T7996] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 278.959382][ T5987] dvb-usb: error while querying for an remote control event. [ 279.146366][ T7996] usb 2-1: Using ep0 maxpacket: 8 [ 279.210485][ T7996] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.226271][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 279.246347][ T7996] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 279.275879][ T5987] dvb-usb: error while querying for an remote control event. [ 279.382393][ T7996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.411477][ T9] usb 5-1: USB disconnect, device number 31 [ 279.455950][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 279.476673][ T7996] usb 2-1: config 0 descriptor?? [ 279.957537][ T9] usb 6-1: USB disconnect, device number 7 [ 280.018994][ T8357] netlink: 52 bytes leftover after parsing attributes in process `syz.0.603'. [ 280.068728][ T8357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 280.120831][ T8357] netlink: 52 bytes leftover after parsing attributes in process `syz.0.603'. [ 280.136281][ T8357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 280.290795][ T8349] could not allocate digest TFM handle poly1305-simd [ 280.366331][ T8357] netlink: 52 bytes leftover after parsing attributes in process `syz.0.603'. [ 280.704355][ T7996] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 281.009244][ T5234] Dev loop3: unable to read RDB block 1 [ 281.066262][ T7996] usb 5-1: Using ep0 maxpacket: 16 [ 281.073290][ T7996] usb 5-1: config 0 has an invalid interface number: 59 but max is 0 [ 281.082948][ T7996] usb 5-1: config 0 has no interface number 0 [ 281.346324][ T5234] loop3: unable to read partition table [ 281.448127][ T5234] loop3: partition table beyond EOD, truncated [ 281.506402][ T7996] usb 5-1: config 0 interface 59 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 281.676308][ T7996] usb 5-1: config 0 interface 59 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 281.865247][ T7996] usb 5-1: New USB device found, idVendor=03f0, idProduct=a31d, bcdDevice=2a.be [ 281.935881][ T7996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.964006][ T7996] usb 5-1: Product: syz [ 282.046326][ T7996] usb 5-1: Manufacturer: syz [ 282.203972][ T7996] usb 5-1: SerialNumber: syz [ 282.484774][ T7996] usb 5-1: config 0 descriptor?? [ 282.553661][ T8361] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 282.695320][ T8361] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 282.779494][ T7996] option 5-1:0.59: GSM modem (1-port) converter detected [ 282.967892][ T7996] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 283.042922][ T5987] usb 2-1: USB disconnect, device number 41 [ 283.401722][ T8383] openvswitch: netlink: Missing key (keys=40, expected=100) [ 283.702546][ T8388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.610'. [ 283.720163][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 284.106985][ T5926] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 284.290975][ T5926] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.522515][ T5926] usb 6-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 284.572808][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 284.636472][ T5926] usb 6-1: Product: syz [ 284.677408][ T5926] usb 6-1: config 0 descriptor?? [ 284.695468][ T5955] usb 5-1: USB disconnect, device number 32 [ 284.720919][ T5955] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 284.857129][ T5955] option 5-1:0.59: device disconnected [ 285.062638][ T8396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.613'. [ 285.107722][ T8393] loop2: detected capacity change from 0 to 7 [ 285.116857][ T8395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.613'. [ 285.143513][ T5234] Dev loop3: unable to read RDB block 1 [ 285.177632][ T5234] loop3: unable to read partition table [ 285.183569][ T5234] loop3: partition table beyond EOD, truncated [ 285.203868][ T5926] nintendo 0003:057E:2019.000A: ignoring exceeding usage max [ 285.221910][ T8393] loop2: [ 285.225479][ T8393] loop2: partition table partially beyond EOD, truncated [ 285.256886][ T5926] nintendo 0003:057E:2019.000A: hidraw0: USB HID v90.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 285.351076][ T5926] nintendo 0003:057E:2019.000A: Failed to get joycon info; ret=-38 [ 285.391032][ T5926] nintendo 0003:057E:2019.000A: Failed to retrieve controller info; ret=-38 [ 285.440629][ T5926] nintendo 0003:057E:2019.000A: Failed to initialize controller; ret=-38 [ 285.585528][ T5926] nintendo 0003:057E:2019.000A: probe - fail = -38 [ 285.615570][ T5926] nintendo 0003:057E:2019.000A: probe with driver nintendo failed with error -38 [ 285.724654][ T5926] usb 6-1: USB disconnect, device number 8 [ 285.840276][ T5234] Dev loop3: unable to read RDB block 1 [ 285.845963][ T5234] loop3: unable to read partition table [ 285.932882][ T5234] loop3: partition table beyond EOD, truncated [ 286.186026][ T8406] fido_id[8406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 286.231267][ T8408] tipc: Enabled bearer , priority 0 [ 286.302351][ T8408] syzkaller0: entered promiscuous mode [ 286.431085][ T8408] syzkaller0: entered allmulticast mode [ 286.606336][ T5926] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 286.704289][ T8411] tipc: Resetting bearer [ 286.762253][ T8423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.621'. [ 286.772923][ T8407] tipc: Resetting bearer [ 286.818136][ T8426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.621'. [ 286.836365][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 286.978785][ T8431] IPVS: set_ctl: invalid protocol: 2 172.30.0.1:20000 [ 287.029126][ T8432] IPVS: set_ctl: invalid protocol: 2 172.30.0.1:20000 [ 287.038783][ T8407] tipc: Disabling bearer [ 287.685646][ T5234] Dev loop3: unable to read RDB block 1 [ 287.708687][ T8441] loop2: detected capacity change from 0 to 7 [ 287.742908][ T5234] loop3: unable to read partition table [ 287.768363][ T8441] loop2: [ 287.774680][ T5234] loop3: partition table beyond EOD, truncated [ 287.812732][ T8441] loop2: partition table partially beyond EOD, truncated [ 287.996550][ T5955] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 288.128211][ T5234] Dev loop3: unable to read RDB block 1 [ 288.156273][ T5234] loop3: unable to read partition table [ 288.161988][ T5234] loop3: partition table beyond EOD, truncated [ 288.286527][ T5955] usb 2-1: device descriptor read/64, error -71 [ 288.531841][ T5955] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 288.574282][ T5234] Dev loop3: unable to read RDB block 1 [ 288.574328][ T5234] loop3: unable to read partition table [ 288.574515][ T5234] loop3: partition table beyond EOD, truncated [ 288.656339][ T5955] usb 2-1: device descriptor read/64, error -71 [ 288.769621][ T5955] usb usb2-port1: attempt power cycle [ 289.106304][ T5955] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 289.175845][ T5955] usb 2-1: device descriptor read/8, error -71 [ 289.456272][ T5955] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 289.606495][ T5955] usb 2-1: device descriptor read/8, error -71 [ 289.718500][ T5955] usb usb2-port1: unable to enumerate USB device [ 290.482224][ T8465] fuse: Bad value for 'group_id' [ 290.516260][ T8465] fuse: Bad value for 'group_id' [ 291.086617][ T5926] usb 6-1: unable to get BOS descriptor or descriptor too short [ 291.154966][ T5926] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 291.192112][ T5926] usb 6-1: can't read configurations, error -71 [ 291.235985][ T8473] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 291.242632][ T8473] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 291.273710][ T8478] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 291.280372][ T8478] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 291.441290][ T8473] vhci_hcd vhci_hcd.0: Device attached [ 291.637839][ T8478] vhci_hcd vhci_hcd.0: Device attached [ 291.716475][ T5955] vhci_hcd: vhci_device speed not set [ 291.938324][ T5955] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 292.448116][ T8482] vhci_hcd: connection reset by peer [ 292.453511][ T8484] vhci_hcd: connection closed [ 292.496996][ T1170] vhci_hcd: stop threads [ 292.506040][ T1170] vhci_hcd: release socket [ 292.547904][ T1170] vhci_hcd: disconnect device [ 292.552936][ T1170] vhci_hcd: stop threads [ 292.566608][ T1170] vhci_hcd: release socket [ 292.573809][ T1170] vhci_hcd: disconnect device [ 292.672220][ T5234] Dev loop3: unable to read RDB block 1 [ 292.706738][ T5234] loop3: unable to read partition table [ 292.739279][ T5234] loop3: partition table beyond EOD, truncated [ 292.956363][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 293.029560][ T5926] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 293.148997][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.200412][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 293.277578][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.312797][ T8498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.366765][ T8498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.389243][ T10] usb 4-1: config 0 descriptor?? [ 293.570634][ T5926] usb 2-1: unable to get BOS descriptor or descriptor too short [ 293.630608][ T5926] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 293.676237][ T5926] usb 2-1: can't read configurations, error -71 [ 293.723152][ T8510] netlink: 'syz.0.641': attribute type 1 has an invalid length. [ 293.924962][ T8510] netlink: 196 bytes leftover after parsing attributes in process `syz.0.641'. [ 294.042200][ T8514] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 294.086100][ T8514] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 294.137661][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.5.642'. [ 294.163418][ T8507] syzkaller0: entered promiscuous mode [ 294.195605][ T8507] syzkaller0: entered allmulticast mode [ 294.401975][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'. [ 294.598918][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'. [ 294.625540][ T8528] openvswitch: netlink: Message has 4 unknown bytes. [ 294.916609][ T8001] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 295.109981][ T8001] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 295.182691][ T8001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.244994][ T8001] usb 6-1: config 0 descriptor?? [ 295.362496][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.647'. [ 295.564994][ T8536] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 295.643109][ T8536] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 295.709816][ T8001] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 295.727594][ T8001] [drm:udl_init] *ERROR* Selecting channel failed [ 295.755402][ T8536] bond1: (slave vti0): Error -95 calling set_mac_address [ 295.795138][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 295.806373][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 295.813500][ T5234] Dev loop3: unable to read RDB block 1 [ 295.843016][ T5234] loop3: unable to read partition table [ 295.863922][ T10] usb 4-1: USB disconnect, device number 48 [ 295.893443][ T5234] loop3: partition table beyond EOD, truncated [ 295.918558][ T8001] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 295.980839][ T8001] [drm] Initialized udl on minor 2 [ 296.062898][ T8001] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 296.162461][ T8001] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 296.325108][ T5987] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 296.478009][ T5987] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 296.527367][ T8001] usb 6-1: USB disconnect, device number 11 [ 297.203964][ T5955] vhci_hcd: vhci_device speed not set [ 297.216369][ T8001] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 297.438759][ T8001] usb 6-1: Using ep0 maxpacket: 16 [ 297.462904][ T8001] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.500682][ T8001] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 297.595887][ T8001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 297.661947][ T8001] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.767114][ T8001] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 297.796209][ T8001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.804334][ T8001] usb 6-1: Product: syz [ 297.840638][ T8001] usb 6-1: Manufacturer: syz [ 297.866404][ T8001] usb 6-1: SerialNumber: syz [ 297.896987][ T8001] usb 6-1: config 0 descriptor?? [ 297.945499][ T5234] Dev loop3: unable to read RDB block 1 [ 298.000026][ T5234] loop3: unable to read partition table [ 298.025583][ T5234] loop3: partition table beyond EOD, truncated [ 298.366456][ T8001] rc_core: IR keymap rc-xbox-dvd not found [ 298.372340][ T8001] Registered IR keymap rc-empty [ 298.466238][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 298.497550][ T8001] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 298.576343][ T8001] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input24 [ 298.636306][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 298.655768][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 298.667670][ T8001] usb 6-1: USB disconnect, device number 12 [ 298.667748][ C1] xbox_remote 6-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 298.717710][ T9] usb 4-1: config 4 interface 0 has no altsetting 0 [ 298.730379][ T9] usb 4-1: string descriptor 0 read error: -22 [ 298.762870][ T9] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 298.806307][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.993511][ T9] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 299.042902][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 299.139597][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 299.164427][ T9] usb 4-1: media controller created [ 299.434835][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.798128][ T5955] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 299.932784][ T30] audit: type=1326 audit(1756415853.190:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.1.655" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4ff78ebe9 code=0x7dfc0000 [ 300.144101][ T5955] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 300.235113][ T5955] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 300.250068][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 300.310334][ T5955] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 300.366225][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.456617][ T8569] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 300.469795][ T5955] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 300.568808][ T9] usb 4-1: USB disconnect, device number 49 [ 300.857237][ T5987] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 300.984635][ T5234] Dev loop3: unable to read RDB block 1 [ 301.005205][ T5234] loop3: unable to read partition table [ 301.016949][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'. [ 301.130741][ T5987] usb 6-1: unable to get BOS descriptor or descriptor too short [ 301.185244][ T5987] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.206673][ T5234] loop3: partition table beyond EOD, truncated [ 301.455100][ T5987] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.483344][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.533318][ T5987] usb 6-1: Product: syz [ 301.609206][ T5987] usb 6-1: Manufacturer: syz [ 301.649482][ T5987] usb 6-1: SerialNumber: syz [ 302.219724][ T5987] usb 6-1: USB disconnect, device number 13 [ 302.265249][ T5234] Dev loop3: unable to read RDB block 1 [ 302.287091][ T5234] loop3: unable to read partition table [ 302.335130][ T5234] loop3: partition table beyond EOD, truncated [ 302.505461][ T5987] usb 5-1: USB disconnect, device number 33 [ 302.602491][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 302.676248][ T8001] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 302.941328][ T8001] usb 4-1: config 0 has an invalid interface number: 92 but max is 0 [ 302.980039][ T8001] usb 4-1: config 0 has no interface number 0 [ 303.018967][ T8001] usb 4-1: config 0 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 303.092348][ T8001] usb 4-1: config 0 interface 92 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 303.205917][ T8001] usb 4-1: config 0 interface 92 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 303.341161][ T8604] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.817303][ T8001] usb 4-1: config 0 interface 92 altsetting 0 endpoint 0x84 has invalid maxpacket 49879, setting to 1024 [ 304.076348][ T8001] usb 4-1: config 0 interface 92 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.175090][ T8001] usb 4-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice= 9.81 [ 304.356243][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 304.421101][ T8001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.460572][ T8001] usb 4-1: config 0 descriptor?? [ 304.471922][ T8595] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 304.518088][ T8001] em28xx 4-1:0.92: New device @ 480 Mbps (093b:a005, interface 92, class 92) [ 304.542980][ T8001] em28xx 4-1:0.92: DVB interface 92 found: isoc [ 304.666255][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 304.674598][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.685199][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 304.718285][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 304.737012][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.773942][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 304.826297][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.022665][ T8001] em28xx 4-1:0.92: unknown em28xx chip ID (0) [ 305.059241][ T9] usb 5-1: Product: syz [ 305.182223][ T8001] em28xx 4-1:0.92: reading from i2c device at 0xa0 failed (error=-5) [ 305.222725][ T8001] em28xx 4-1:0.92: board has no eeprom [ 305.228789][ T9] usb 5-1: Manufacturer: syz [ 305.233429][ T9] usb 5-1: SerialNumber: syz [ 305.497622][ T8001] em28xx 4-1:0.92: Identified as Plextor ConvertX PX-TV100U (card=40) [ 305.505857][ T8001] em28xx 4-1:0.92: dvb set to isoc mode. [ 305.553841][ T9] usb 5-1: config 0 descriptor?? [ 305.560380][ T24] em28xx 4-1:0.92: Remote control support is not available for this card. [ 305.590885][ T8001] usb 4-1: USB disconnect, device number 50 [ 305.643447][ T8001] em28xx 4-1:0.92: Disconnecting em28xx [ 305.671570][ T5234] Dev loop3: unable to read RDB block 1 [ 305.715873][ T8001] em28xx 4-1:0.92: Closing input extension [ 305.728664][ T5234] loop3: unable to read partition table [ 305.792238][ T5234] loop3: partition table beyond EOD, truncated [ 305.814328][ T8001] em28xx 4-1:0.92: Freeing device [ 305.996243][ T9] rc_core: IR keymap rc-xbox-dvd not found [ 306.618951][ T9] Registered IR keymap rc-empty [ 306.743680][ T9] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 306.851893][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 306.982217][ T9] usb 5-1: USB disconnect, device number 34 [ 306.988349][ C0] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 307.120279][ T5234] Dev loop3: unable to read RDB block 1 [ 307.154996][ T5234] loop3: unable to read partition table [ 307.196872][ T5234] loop3: partition table beyond EOD, truncated [ 307.657112][ T5234] Dev loop3: unable to read RDB block 1 [ 307.689840][ T5234] loop3: unable to read partition table [ 307.759176][ T5234] loop3: partition table beyond EOD, truncated [ 308.126987][ T8646] openvswitch: netlink: Key 6 has unexpected len 171 expected 2 [ 309.087045][ T7996] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 309.246574][ T7996] usb 2-1: Using ep0 maxpacket: 16 [ 309.259431][ T7996] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.272676][ T7996] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 309.496604][ T7996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 309.578847][ T7996] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.647243][ T7996] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 309.666350][ T7996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.706228][ T7996] usb 2-1: Product: syz [ 309.710453][ T7996] usb 2-1: Manufacturer: syz [ 309.765949][ T7996] usb 2-1: SerialNumber: syz [ 309.783366][ T7996] usb 2-1: config 0 descriptor?? [ 309.885938][ T5234] Dev loop3: unable to read RDB block 1 [ 309.946258][ T5234] loop3: unable to read partition table [ 309.952179][ T5234] loop3: partition table beyond EOD, truncated [ 310.027997][ T7996] rc_core: IR keymap rc-xbox-dvd not found [ 310.035290][ T7996] Registered IR keymap rc-empty [ 310.077227][ T7996] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 310.131795][ T5234] Dev loop3: unable to read RDB block 1 [ 310.152479][ T7996] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26 [ 310.161876][ T5234] loop3: unable to read partition table [ 310.202780][ T5234] loop3: partition table beyond EOD, truncated [ 310.217051][ T7996] usb 2-1: USB disconnect, device number 48 [ 310.223050][ C0] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 311.251000][ T8676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.684'. [ 311.285079][ T8674] vlan2: entered allmulticast mode [ 311.306615][ T8674] hsr0: entered allmulticast mode [ 311.452062][ T8674] hsr_slave_0: entered allmulticast mode [ 311.466483][ T8674] hsr_slave_1: entered allmulticast mode [ 311.696292][ T5234] Dev loop3: unable to read RDB block 1 [ 311.716578][ T5234] loop3: unable to read partition table [ 311.722522][ T5234] loop3: partition table beyond EOD, truncated [ 313.576796][ T8701] netlink: 36 bytes leftover after parsing attributes in process `syz.5.689'. [ 314.138856][ T8708] loop2: detected capacity change from 0 to 7 [ 314.143945][ T8708] loop2: [ 314.143985][ T8708] loop2: partition table partially beyond EOD, truncated [ 314.346642][ T8001] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 314.455646][ T8715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.694'. [ 314.536257][ T8001] usb 6-1: Using ep0 maxpacket: 32 [ 314.540118][ T8001] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 314.581403][ T8001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.581424][ T8001] usb 6-1: Product: syz [ 314.581433][ T8001] usb 6-1: Manufacturer: syz [ 314.581443][ T8001] usb 6-1: SerialNumber: syz [ 314.600316][ T8001] usb 6-1: config 0 descriptor?? [ 315.056472][ T8001] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: failure sending bit rate [ 315.095550][ T8001] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 315.136780][ T5987] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 315.157539][ T8001] usb 6-1: USB disconnect, device number 14 [ 315.287510][ T5987] usb 5-1: Using ep0 maxpacket: 8 [ 315.301511][ T5987] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 315.320808][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.371908][ T5987] usb 5-1: Product: syz [ 315.407666][ T5987] usb 5-1: Manufacturer: syz [ 315.413817][ T8720] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 315.424158][ T5987] usb 5-1: SerialNumber: syz [ 315.451883][ T5987] usb 5-1: config 0 descriptor?? [ 315.529849][ T5987] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 315.714173][ T5234] Dev loop3: unable to read RDB block 1 [ 315.753264][ T5234] loop3: unable to read partition table [ 315.773882][ T5234] loop3: partition table beyond EOD, truncated [ 315.915536][ T8718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.939576][ T8718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.951743][ T5987] gspca_vc032x: reg_w err -71 [ 315.957738][ T5987] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 315.985430][ T5987] usb 5-1: USB disconnect, device number 35 [ 316.087138][ T8732] binder: 8728:8732 ioctl 40046205 200000000000 returned -22 [ 316.098044][ T8729] binder: 8728:8729 ioctl c0306201 200000001a80 returned -14 [ 316.126696][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 316.146517][ T7996] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 316.336843][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 316.351087][ T7996] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 316.366773][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 316.396587][ T7996] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 316.406552][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 316.421933][ T7996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.431242][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 316.473233][ T7996] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.481737][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.539674][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 316.603088][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.655714][ T7996] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 316.909690][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 316.939788][ T10] usbtmc 6-1:16.0: can't read capabilities [ 316.986958][ T5926] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 317.121925][ T8726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.130775][ T8726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.140516][ T10] usb 6-1: USB disconnect, device number 15 [ 317.193387][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 317.216806][ T5926] usb 5-1: not running at top speed; connect to a high speed hub [ 317.228946][ T5926] usb 5-1: config 11 has an invalid interface number: 244 but max is 0 [ 317.246415][ T5926] usb 5-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 317.266221][ T5926] usb 5-1: config 11 has no interface number 0 [ 317.272643][ T5926] usb 5-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 317.306205][ T5926] usb 5-1: config 11 interface 244 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.360071][ T5926] usb 5-1: config 11 interface 244 has no altsetting 0 [ 317.382796][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.389200][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.417148][ T5926] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 317.441116][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.486246][ T5926] usb 5-1: Product: syz [ 317.490488][ T5926] usb 5-1: Manufacturer: syz [ 317.519007][ T5926] usb 5-1: SerialNumber: syz [ 317.851174][ T8751] loop2: detected capacity change from 0 to 7 [ 317.874566][ T5926] peak_usb 5-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 317.911675][ T8751] loop2: [ 317.918734][ T5926] peak_usb 5-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 317.918775][ T8751] loop2: partition table partially beyond EOD, truncated [ 318.538781][ T5926] peak_usb 5-1:11.244: probe with driver peak_usb failed with error -71 [ 318.649876][ T5926] usb 5-1: USB disconnect, device number 36 [ 319.091777][ T8001] usb 4-1: USB disconnect, device number 51 [ 319.098534][ T8727] delete_channel: no stack [ 319.243037][ T8769] netlink: 36 bytes leftover after parsing attributes in process `syz.5.710'. [ 319.255687][ T8769] netlink: 36 bytes leftover after parsing attributes in process `syz.5.710'. [ 319.492841][ T5234] Dev loop3: unable to read RDB block 1 [ 319.521753][ T5234] loop3: unable to read partition table [ 319.569492][ T5234] loop3: partition table beyond EOD, truncated [ 319.896327][ T8001] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 320.053680][ T8001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 320.090722][ T8001] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 320.140820][ T8001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.202047][ T8001] usb 6-1: config 0 descriptor?? [ 320.234400][ T8788] netlink: 'syz.4.715': attribute type 3 has an invalid length. [ 320.264041][ T8783] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 320.724331][ T8001] elan 0003:04F3:0755.000B: unknown main item tag 0x0 [ 320.779621][ T8001] elan 0003:04F3:0755.000B: item fetching failed at offset 3/5 [ 320.923457][ T8001] elan 0003:04F3:0755.000B: Hid Parse failed [ 320.974175][ T8001] elan 0003:04F3:0755.000B: probe with driver elan failed with error -22 [ 321.085658][ T8001] usb 6-1: USB disconnect, device number 16 [ 321.739235][ T5234] Dev loop3: unable to read RDB block 1 [ 321.772744][ T5234] loop3: unable to read partition table [ 321.779656][ T8001] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 321.806605][ T5234] loop3: partition table beyond EOD, truncated [ 321.836573][ T8808] sctp: [Deprecated]: syz.3.720 (pid 8808) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.836573][ T8808] Use struct sctp_sack_info instead [ 321.946274][ T8001] usb 2-1: Using ep0 maxpacket: 8 [ 321.962672][ T8001] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.002169][ T8001] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 322.156507][ T7996] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 322.160435][ T8001] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 322.217966][ T8001] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 322.229783][ T8001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.278671][ T8001] usb 2-1: Product: syz [ 322.286051][ T8001] usb 2-1: Manufacturer: syz [ 322.396257][ T8001] usb 2-1: SerialNumber: syz [ 322.442827][ T8001] usb 2-1: config 0 descriptor?? [ 322.507295][ T8801] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 322.520792][ T7996] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 322.657532][ T7996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.665620][ T7996] usb 4-1: Product: syz [ 322.725037][ T5987] usb 2-1: USB disconnect, device number 49 [ 322.727618][ T7996] usb 4-1: Manufacturer: syz [ 322.735729][ T7996] usb 4-1: SerialNumber: syz [ 322.773103][ T7996] usb 4-1: config 0 descriptor?? [ 323.128106][ T7996] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 323.138889][ T7996] peak_usb 4-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 323.505845][ T7996] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 323.551937][ T7996] usb 4-1: USB disconnect, device number 52 [ 323.626434][ T5926] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 323.700457][ T5234] Dev loop3: unable to read RDB block 1 [ 323.723362][ T5234] loop3: unable to read partition table [ 323.741012][ T5234] loop3: partition table beyond EOD, truncated [ 323.809213][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 323.859010][ T5926] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.941778][ T5926] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.989377][ T5926] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 324.010453][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.022309][ T5926] usb 5-1: Product: syz [ 324.029822][ T5926] usb 5-1: Manufacturer: syz [ 324.034693][ T5926] usb 5-1: SerialNumber: syz [ 324.463254][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.724'. [ 324.544843][ T5926] usb 5-1: 0:2 : does not exist [ 326.959742][ T5234] Dev loop3: unable to read RDB block 1 [ 327.020503][ T5234] loop3: unable to read partition table [ 327.028286][ T5234] loop3: partition table beyond EOD, truncated [ 327.444844][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 327.726306][ T24] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 327.912742][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 327.950492][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 328.006455][ T24] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 328.071390][ T24] usb 4-1: config 253 interface 0 altsetting 57 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 328.173789][ T24] usb 4-1: config 253 interface 0 has no altsetting 0 [ 328.189262][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.201824][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.283989][ T24] usb 4-1: Product: syz [ 328.314645][ T5926] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 328.349861][ T5926] usb 5-1: USB disconnect, device number 37 [ 328.376390][ T24] usb 4-1: Manufacturer: syz [ 328.448243][ T24] usb 4-1: SerialNumber: syz [ 328.559285][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.657638][ T8857] netlink: 96 bytes leftover after parsing attributes in process `syz.4.732'. [ 328.704723][ T24] cdc_ether 4-1:253.0: skipping garbage [ 328.738249][ T24] usb 4-1: bad CDC descriptors [ 328.784848][ T24] usb 4-1: USB disconnect, device number 53 [ 328.933355][ T8869] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 328.933355][ T8869] The task syz.5.733 (8869) triggered the difference, watch for misbehavior. [ 328.968313][ T5926] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 329.226799][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.271773][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 329.322264][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 329.347776][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 329.391511][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.492314][ T5926] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 329.518342][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.573115][ T5234] Dev loop3: unable to read RDB block 1 [ 329.601849][ T5234] loop3: unable to read partition table [ 329.613049][ T5926] usb 2-1: Product: syz [ 329.624397][ T5234] loop3: partition table beyond EOD, truncated [ 329.976192][ T5926] usb 2-1: Manufacturer: syz [ 329.980949][ T5926] usb 2-1: SerialNumber: syz [ 330.067262][ T5926] usb 2-1: config 0 descriptor?? [ 330.104326][ T8864] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 330.324951][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.349269][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.376218][ T5926] rc_core: IR keymap rc-xbox-dvd not found [ 330.382153][ T5926] Registered IR keymap rc-empty [ 330.407746][ T5926] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 330.427979][ T8893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.487198][ T5926] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27 [ 330.506834][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.605089][ T8893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.665849][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.718749][ T24] usb 2-1: USB disconnect, device number 50 [ 330.718908][ C0] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 330.763823][ T5234] Dev loop3: unable to read RDB block 1 [ 330.769566][ T5234] loop3: unable to read partition table [ 330.775480][ T5234] loop3: partition table beyond EOD, truncated [ 331.506394][ T8906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.744'. [ 331.549708][ T5234] Dev loop3: unable to read RDB block 1 [ 331.555347][ T5234] loop3: unable to read partition table [ 331.570164][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 331.626543][ T5234] loop3: partition table beyond EOD, truncated [ 331.837356][ T5234] Dev loop3: unable to read RDB block 1 [ 331.848066][ T5234] loop3: unable to read partition table [ 331.862849][ T5234] loop3: partition table beyond EOD, truncated [ 332.306272][ T5926] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 332.426248][ T24] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 332.487082][ T5926] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 332.516421][ T5926] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 332.566827][ T5926] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 332.616453][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 332.623219][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 95, changing to 10 [ 332.643975][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 332.677162][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49847, setting to 1024 [ 332.699578][ T24] usb 4-1: config 11 has an invalid interface number: 244 but max is 0 [ 332.741540][ T24] usb 4-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 332.757176][ T5926] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 332.796455][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 332.824365][ T24] usb 4-1: config 11 has no interface number 0 [ 332.830659][ T5926] usb 2-1: Product: syz [ 332.830683][ T5926] usb 2-1: Manufacturer: syz [ 332.867841][ T5926] cdc_wdm 2-1:1.0: skipping garbage [ 332.873109][ T5926] cdc_wdm 2-1:1.0: skipping garbage [ 332.925591][ T24] usb 4-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 332.967606][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'. [ 332.988988][ T24] usb 4-1: config 11 interface 244 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.004468][ T8933] netlink: 5 bytes leftover after parsing attributes in process `syz.5.753'. [ 333.027327][ T8931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.057229][ T5926] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 333.066261][ T24] usb 4-1: config 11 interface 244 has no altsetting 0 [ 333.082153][ T5926] cdc_wdm 2-1:1.0: Unknown control protocol [ 333.112626][ T24] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 333.166506][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.211658][ T24] usb 4-1: Product: syz [ 333.246778][ T24] usb 4-1: Manufacturer: syz [ 333.263437][ T24] usb 4-1: SerialNumber: syz [ 333.322787][ T5926] usb 2-1: USB disconnect, device number 51 [ 333.706922][ T24] peak_usb 4-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 333.795810][ T24] peak_usb 4-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 334.133908][ T24] peak_usb 4-1:11.244: probe with driver peak_usb failed with error -71 [ 334.232507][ T24] usb 4-1: USB disconnect, device number 54 [ 334.406508][ T5234] Dev loop3: unable to read RDB block 1 [ 334.416216][ T5234] loop3: unable to read partition table [ 334.433851][ T5234] loop3: partition table beyond EOD, truncated [ 335.027016][ T5234] Dev loop3: unable to read RDB block 1 [ 335.037972][ T5234] loop3: unable to read partition table [ 335.067973][ T5234] loop3: partition table beyond EOD, truncated [ 335.298898][ T8958] netlink: 'syz.1.761': attribute type 1 has an invalid length. [ 335.529180][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 335.622587][ T8961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.761'. [ 335.635157][ T5234] Dev loop3: unable to read RDB block 1 [ 335.716431][ T5234] loop3: unable to read partition table [ 335.748674][ T5234] loop3: partition table beyond EOD, truncated [ 336.093279][ T8978] fuse: Unknown parameter '000001400894023925760x0000000000000000' [ 336.776343][ T5987] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 336.916282][ T5234] Dev loop3: unable to read RDB block 1 [ 336.936281][ T7996] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 336.946325][ T5234] loop3: unable to read partition table [ 336.952237][ T5234] loop3: partition table beyond EOD, truncated [ 337.008763][ T5987] usb 2-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 337.048162][ T5987] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.073776][ T5987] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 337.097098][ T5987] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 337.126677][ T5987] usb 2-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 337.134785][ T5987] usb 2-1: Product: syz [ 337.158365][ T7996] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 337.181555][ T5987] usb 2-1: Manufacturer: syz [ 337.191198][ T7996] usb 5-1: config 0 has no interface number 0 [ 337.196173][ T5987] usb 2-1: SerialNumber: syz [ 337.214525][ T5987] usb 2-1: config 0 descriptor?? [ 337.251741][ T5987] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.256249][ T7996] usb 5-1: config 0 interface 244 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 337.409175][ T7996] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=92.c2 [ 337.425116][ T7996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.446389][ T7996] usb 5-1: Product: syz [ 337.471577][ T7996] usb 5-1: Manufacturer: syz [ 337.496804][ T7996] usb 5-1: SerialNumber: syz [ 337.538152][ T7996] usb 5-1: config 0 descriptor?? [ 337.559468][ T8985] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 337.627377][ T7996] usbserial_generic 5-1:0.244: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 337.709399][ T7996] usbserial_generic 5-1:0.244: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 337.742252][ T5987] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 337.755221][ T7996] usbserial_generic 5-1:0.244: generic converter detected [ 337.778928][ T8995] macvlan1: entered promiscuous mode [ 337.828955][ T7996] usb 5-1: generic converter now attached to ttyUSB0 [ 337.834455][ T5987] usb 2-1: USB disconnect, device number 52 [ 337.839761][ T8995] ipvlan0: entered promiscuous mode [ 337.887338][ T8995] ipvlan0: left promiscuous mode [ 338.111285][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.446255][ T5987] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 338.660946][ T8985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.669709][ T8985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.796349][ T8995] macvlan1: left promiscuous mode [ 338.796512][ T5926] usb 5-1: USB disconnect, device number 38 [ 338.827582][ T5926] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 338.844071][ T5926] usbserial_generic 5-1:0.244: device disconnected [ 338.966463][ T5987] usb 2-1: Using ep0 maxpacket: 32 [ 338.980410][ T5987] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 338.992922][ T5987] usb 2-1: config 0 has no interface number 0 [ 339.007010][ T5987] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 339.040245][ T5987] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 339.076214][ T5987] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 339.110878][ T5987] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 339.121580][ T5987] usb 2-1: config 0 interface 219 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 339.138473][ T5987] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 339.148050][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.156073][ T5987] usb 2-1: Product: syz [ 339.160993][ T5987] usb 2-1: Manufacturer: syz [ 339.165621][ T5987] usb 2-1: SerialNumber: syz [ 339.172665][ T5987] usb 2-1: config 0 descriptor?? [ 339.178788][ T8997] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 339.266377][ T5926] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 339.496390][ T5987] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 339.546854][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.556622][ T5987] usb 2-1: USB disconnect, device number 53 [ 339.586179][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.611250][ T5926] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 339.671254][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.722986][ T5926] usb 5-1: config 0 descriptor?? [ 339.791704][ T9008] loop2: detected capacity change from 0 to 7 [ 339.817107][ T9009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.867169][ T9009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.872530][ T9008] Dev loop2: unable to read RDB block 7 [ 339.901476][ T9008] loop2: AHDI p1 p2 p3 [ 339.905716][ T9008] loop2: partition table partially beyond EOD, truncated [ 339.925414][ T9008] loop2: p1 start 1601398130 is beyond EOD, truncated [ 340.098843][ T9008] loop2: p2 start 1702059890 is beyond EOD, truncated [ 340.180597][ T5926] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 340.247082][ T5926] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 340.295278][ T5926] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 340.356207][ T5926] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 340.407041][ T5926] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 340.478855][ T5926] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 340.502918][ T5926] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 340.592798][ T5926] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 340.828312][ T5926] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x00 [ 341.066782][ T7997] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 341.258437][ T5926] cp2112 0003:10C4:EA90.000C: error reading lock byte: -71 [ 341.296048][ T5926] usb 5-1: USB disconnect, device number 39 [ 341.704999][ T7997] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.981063][ T7997] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 342.012745][ T7782] syz.2.473: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 342.036464][ T7997] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 342.056638][ T7997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.082095][ T7782] CPU: 0 UID: 0 PID: 7782 Comm: syz.2.473 Not tainted syzkaller #0 PREEMPT(full) [ 342.082129][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.082140][ T7782] Call Trace: [ 342.082148][ T7782] [ 342.082156][ T7782] dump_stack_lvl+0x189/0x250 [ 342.082177][ T7782] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.082197][ T7782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.082221][ T7782] warn_alloc+0x214/0x310 [ 342.082243][ T7782] ? __pfx_warn_alloc+0x10/0x10 [ 342.082266][ T7782] ? __get_vm_area_node+0x28f/0x300 [ 342.082282][ T7782] ? relay_open_buf+0x210/0xe50 [ 342.082297][ T7782] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 342.082333][ T7782] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 342.082353][ T7782] ? rcu_is_watching+0x15/0xb0 [ 342.082366][ T7782] ? relay_open_buf+0x210/0xe50 [ 342.082378][ T7782] ? relay_open_buf+0x210/0xe50 [ 342.082388][ T7782] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 342.082404][ T7782] ? relay_open_buf+0x210/0xe50 [ 342.082415][ T7782] ? trace_kmalloc+0x1f/0xd0 [ 342.082428][ T7782] ? relay_open_buf+0x17f/0xe50 [ 342.082452][ T7782] relay_open_buf+0x210/0xe50 [ 342.082475][ T7782] relay_open+0x427/0x920 [ 342.082492][ T7782] do_blk_trace_setup+0x561/0x980 [ 342.082515][ T7782] blk_trace_setup+0x116/0x1f0 [ 342.082534][ T7782] ? __pfx_blk_trace_setup+0x10/0x10 [ 342.082557][ T7782] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 342.082578][ T7782] blk_trace_ioctl+0x181/0x430 [ 342.082593][ T7782] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 342.082608][ T7782] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 342.082630][ T7782] ? __lock_acquire+0xab9/0xd20 [ 342.082661][ T7782] blkdev_ioctl+0x416/0x6d0 [ 342.082681][ T7782] ? __pfx_blkdev_ioctl+0x10/0x10 [ 342.082696][ T7782] ? __fget_files+0x2a/0x420 [ 342.082715][ T7782] ? bpf_lsm_file_ioctl+0x9/0x20 [ 342.082729][ T7782] ? __pfx_blkdev_ioctl+0x10/0x10 [ 342.082746][ T7782] __se_sys_ioctl+0xf9/0x170 [ 342.082762][ T7782] do_syscall_64+0xfa/0x3b0 [ 342.082777][ T7782] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.082793][ T7782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.082804][ T7782] ? clear_bhb_loop+0x60/0xb0 [ 342.082818][ T7782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.082828][ T7782] RIP: 0033:0x7f06b598ebe9 [ 342.082845][ T7782] Code: Unable to access opcode bytes at 0x7f06b598ebbf. [ 342.082851][ T7782] RSP: 002b:00007f06b3bee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.082865][ T7782] RAX: ffffffffffffffda RBX: 00007f06b5bb5fa0 RCX: 00007f06b598ebe9 [ 342.082874][ T7782] RDX: 0000200000000140 RSI: 00000000c0481273 RDI: 000000000000000d [ 342.082881][ T7782] RBP: 00007f06b5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 342.082888][ T7782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.082895][ T7782] R13: 00007f06b5bb6038 R14: 00007f06b5bb5fa0 R15: 00007f06b5cdfa28 [ 342.082914][ T7782] [ 342.085642][ T7782] Mem-Info: [ 342.466265][ T7782] active_anon:2760 inactive_anon:379 isolated_anon:0 [ 342.466265][ T7782] active_file:18755 inactive_file:290 isolated_file:0 [ 342.466265][ T7782] unevictable:768 dirty:170 writeback:0 [ 342.466265][ T7782] slab_reclaimable:6841 slab_unreclaimable:106581 [ 342.466265][ T7782] mapped:34860 shmem:799 pagetables:3719 [ 342.466265][ T7782] sec_pagetables:0 bounce:0 [ 342.466265][ T7782] kernel_misc_reclaimable:0 [ 342.466265][ T7782] free:131362 free_pcp:31180 free_cma:0 [ 342.571543][ T9045] binder: 9044:9045 ioctl 40046205 0 returned -22 [ 342.657460][ T7782] Node 0 active_anon:16kB inactive_anon:44kB active_file:28kB inactive_file:168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138328kB dirty:24kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12816kB pagetables:4708kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 342.776509][ T9031] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 342.825201][ T9039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.781'. [ 342.853179][ T9058] loop4: detected capacity change from 0 to 7 [ 342.879000][ T7997] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 342.891982][ T5234] Dev loop3: unable to read RDB block 1 [ 342.910245][ T5234] loop3: unable to read partition table [ 342.934891][ T9058] Dev loop4: unable to read RDB block 7 [ 342.961227][ T5234] loop3: partition table beyond EOD, truncated [ 342.972658][ T7782] Node 1 active_anon:16924kB inactive_anon:1472kB active_file:74992kB inactive_file:992kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:15144kB dirty:656kB writeback:0kB shmem:5056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:732kB pagetables:10168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 343.008631][ T9058] loop4: AHDI p1 p2 [ 343.028499][ T5234] Dev loop3: unable to read RDB block 1 [ 343.034130][ T5234] loop3: unable to read partition table [ 343.058722][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.777'. [ 343.076969][ T7782] Node 0 DMA free:10112kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:4kB free_cma:0kB [ 343.124881][ T5234] loop3: partition table beyond EOD, truncated [ 343.131244][ T9058] loop4: partition table partially beyond EOD, truncated [ 343.131443][ T9058] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 343.277520][ T7782] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 343.328685][ T7782] Node 0 DMA32 free:41632kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:44kB active_file:28kB inactive_file:168kB unevictable:1536kB writepending:28kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:18280kB local_pcp:8216kB free_cma:0kB [ 343.431671][ T6009] udevd[6009]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 343.571303][ T7782] lowmem_reserve[]: 0 0 1 1 1 [ 343.586625][ T7782] Node 0 Normal free:8kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 343.597391][ T9031] bridge2: entered promiscuous mode [ 343.630808][ T9031] bridge2: entered allmulticast mode [ 343.804509][ T7782] lowmem_reserve[]: 0 0 0 0 0 [ 343.836670][ T7782] Node 1 Normal free:478976kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17284kB inactive_anon:1472kB active_file:74992kB inactive_file:996kB unevictable:1536kB writepending:680kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:90480kB local_pcp:17216kB free_cma:0kB [ 343.912643][ T9055] tipc: Enabled bearer , priority 0 [ 343.936883][ T7782] lowmem_reserve[]: 0 0 0 0 0 [ 343.943433][ T7782] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10112kB [ 343.961413][ T7782] Node 0 DMA32: 168*4kB (ME) 214*8kB (ME) 233*16kB (UME) 164*32kB (UME) 95*64kB (UME) 49*128kB (UME) 20*256kB (ME) 11*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 41632kB [ 343.985514][ T7782] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 344.012249][ T7782] Node 1 Normal: 590*4kB (ME) 267*8kB (UM) 189*16kB (UM) 105*32kB (UM) 42*64kB (M) 12*128kB (UM) 2*256kB (M) 3*512kB (UME) 1*1024kB (E) 1*2048kB (U) 112*4096kB (M) = 478976kB [ 344.050999][ T7782] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.243916][ T9049] tipc: Disabling bearer [ 344.262835][ T7782] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 344.272855][ T7782] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.338670][ T7782] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 344.354249][ T7782] 23229 total pagecache pages [ 344.373457][ T7782] 2072 pages in swap cache [ 344.400295][ T7782] Free swap = 100828kB [ 344.412456][ T7782] Total swap = 124996kB [ 344.462529][ T7782] 2097051 pages RAM [ 344.472649][ T7782] 0 pages HighMem/MovableOnly [ 344.485790][ T7782] 425662 pages reserved [ 344.507038][ T7782] 0 pages cma reserved [ 344.518561][ T5234] Dev loop3: unable to read RDB block 1 [ 344.524241][ T5234] loop3: unable to read partition table [ 344.534593][ T5234] loop3: partition table beyond EOD, truncated [ 345.049515][ T5234] Dev loop3: unable to read RDB block 1 [ 345.055202][ T5234] loop3: unable to read partition table [ 345.066858][ T5234] loop3: partition table beyond EOD, truncated [ 345.552695][ T7999] usb 6-1: USB disconnect, device number 17 [ 346.641126][ T9092] syzkaller1: entered promiscuous mode [ 346.683895][ T9097] tty tty3: ldisc open failed (-12), clearing slot 2 [ 346.747111][ T9092] syzkaller1: entered allmulticast mode [ 346.946239][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 347.231267][ T7996] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 347.376322][ T9] usb 5-1: config 0 has no interfaces? [ 347.391819][ T7996] usb 2-1: device descriptor read/64, error -71 [ 347.445919][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 347.493527][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.626317][ T9] usb 5-1: Product: syz [ 347.630547][ T9] usb 5-1: Manufacturer: syz [ 347.706981][ T7996] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 347.739924][ T9] usb 5-1: SerialNumber: syz [ 347.815507][ T9] usb 5-1: config 0 descriptor?? [ 347.964725][ T9118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.801'. [ 347.973942][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 347.985547][ T9118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.801'. [ 347.996279][ T7996] usb 2-1: device descriptor read/64, error -71 [ 348.033425][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 348.044733][ T9118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.801'. [ 348.126578][ T7996] usb usb2-port1: attempt power cycle [ 348.142901][ T5234] Dev loop3: unable to read RDB block 1 [ 348.149885][ T5234] loop3: unable to read partition table [ 348.157342][ T5234] loop3: partition table beyond EOD, truncated [ 348.302198][ T9101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.317335][ T9101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.717570][ T7996] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 348.821789][ T7996] usb 2-1: device descriptor read/8, error -71 [ 348.859525][ T30] audit: type=1326 audit(1756415902.080:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691a38ebe9 code=0x7ffc0000 [ 348.884512][ T5234] Dev loop3: unable to read RDB block 1 [ 348.892616][ T5234] loop3: unable to read partition table [ 348.914004][ T5234] loop3: partition table beyond EOD, truncated [ 348.987470][ T30] audit: type=1326 audit(1756415902.080:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691a38ebe9 code=0x7ffc0000 [ 349.048185][ T30] audit: type=1326 audit(1756415902.080:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f691a38ebe9 code=0x7ffc0000 [ 349.103303][ T30] audit: type=1326 audit(1756415902.080:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691a38ebe9 code=0x7ffc0000 [ 349.129721][ T7996] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 349.184237][ T30] audit: type=1326 audit(1756415902.080:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691a38ebe9 code=0x7ffc0000 [ 349.216269][ T7996] usb 2-1: device descriptor read/8, error -71 [ 349.268681][ T30] audit: type=1326 audit(1756415902.080:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f691a38ebe9 code=0x7ffc0000 [ 349.326766][ T7996] usb usb2-port1: unable to enumerate USB device [ 349.380705][ T30] audit: type=1326 audit(1756415902.080:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691a38ebe9 code=0x7ffc0000 [ 349.597680][ T9136] netlink: 44 bytes leftover after parsing attributes in process `syz.5.805'. [ 349.677878][ T30] audit: type=1326 audit(1756415902.080:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f691a38ebe9 code=0x7ffc0000 [ 349.744918][ T30] audit: type=1326 audit(1756415902.090:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691a38ebe9 code=0x7ffc0000 [ 349.986767][ T5234] Dev loop3: unable to read RDB block 1 [ 350.012977][ T30] audit: type=1326 audit(1756415902.090:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f691a38ebe9 code=0x7ffc0000 [ 350.016333][ T5234] loop3: unable to read partition table [ 350.116787][ T8001] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 350.135874][ T24] usb 5-1: USB disconnect, device number 40 [ 350.207776][ T5234] loop3: partition table beyond EOD, truncated [ 350.288417][ T8001] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.326348][ T8001] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.375317][ T7999] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 350.457666][ T8001] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 350.474254][ T8001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 350.501937][ T8001] usb 6-1: SerialNumber: syz [ 350.627011][ T7999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 350.827189][ T7999] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 351.036662][ T7999] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 351.084002][ T8001] usb 6-1: 0:2 : does not exist [ 351.096867][ T7999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.125895][ T8001] usb 6-1: unit 5: unexpected type 0x0b [ 351.140490][ T7999] usb 2-1: config 0 descriptor?? [ 351.167140][ T9140] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 351.242452][ T8001] usb 6-1: USB disconnect, device number 18 [ 351.349076][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.378310][ T9140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.411646][ T9140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.444773][ T7999] usbhid 2-1:0.0: can't add hid device: -71 [ 351.466421][ T7999] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 351.491998][ T7999] usb 2-1: USB disconnect, device number 58 [ 351.652862][ T9140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.706302][ T9140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.040293][ T7999] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 352.226261][ T7999] usb 2-1: Using ep0 maxpacket: 32 [ 352.233406][ T7999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 352.266005][ T7999] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 352.349912][ T7999] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 352.402238][ T7999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.483265][ T7999] usb 2-1: config 0 descriptor?? [ 352.523574][ T7999] hub 2-1:0.0: bad descriptor, ignoring hub [ 352.550529][ T7999] hub 2-1:0.0: probe with driver hub failed with error -5 [ 353.638374][ T8001] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 353.654457][ T7999] usbhid 2-1:0.0: can't add hid device: -71 [ 353.683372][ T5234] Dev loop3: unable to read RDB block 1 [ 353.707386][ T7999] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 353.737918][ T5234] loop3: unable to read partition table [ 353.767286][ T5234] loop3: partition table beyond EOD, truncated [ 353.798920][ T8001] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.825900][ T7999] usb 2-1: USB disconnect, device number 59 [ 353.854924][ T8001] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 353.922479][ T8001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.997365][ T8001] usb 6-1: config 0 descriptor?? [ 354.038630][ T8001] pwc: Askey VC010 type 2 USB webcam detected. [ 354.317612][ T7999] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 354.356268][ T5987] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 354.601136][ T5987] usb 4-1: Using ep0 maxpacket: 16 [ 354.632570][ T7999] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 354.663603][ T5987] usb 4-1: config 0 has no interfaces? [ 354.672045][ T7999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.680452][ T5987] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 354.690052][ T7999] usb 2-1: Product: syz [ 354.694438][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.702521][ T7999] usb 2-1: Manufacturer: syz [ 354.713356][ T7999] usb 2-1: SerialNumber: syz [ 354.745042][ T5987] usb 4-1: config 0 descriptor?? [ 354.756963][ T7999] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 354.850887][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 354.986242][ T8000] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 355.272760][ T9188] sctp: [Deprecated]: syz.0.817 (pid 9188) Use of int in max_burst socket option. [ 355.272760][ T9188] Use struct sctp_assoc_value instead [ 355.476792][ T7999] usb 2-1: USB disconnect, device number 60 [ 355.504298][ T8001] pwc: recv_control_msg error -71 req 02 val 2700 [ 355.520730][ T8001] pwc: recv_control_msg error -71 req 02 val 2c00 [ 355.530098][ T8001] pwc: recv_control_msg error -71 req 04 val 1000 [ 355.542563][ T8001] pwc: recv_control_msg error -71 req 04 val 1300 [ 355.563011][ T8001] pwc: recv_control_msg error -71 req 04 val 1400 [ 355.578764][ T8001] pwc: recv_control_msg error -71 req 02 val 2000 [ 355.588869][ T8001] pwc: recv_control_msg error -71 req 02 val 2100 [ 355.605894][ T8001] pwc: recv_control_msg error -71 req 04 val 1500 [ 355.620424][ T8001] pwc: recv_control_msg error -71 req 02 val 2500 [ 355.632586][ T8001] pwc: recv_control_msg error -71 req 02 val 2400 [ 355.641021][ T8001] pwc: recv_control_msg error -71 req 02 val 2600 [ 355.677319][ T8001] pwc: recv_control_msg error -71 req 02 val 2900 [ 355.721770][ T8001] pwc: recv_control_msg error -71 req 02 val 2800 [ 355.754537][ T8001] pwc: recv_control_msg error -71 req 04 val 1100 [ 355.818769][ T9193] binder: 9192:9193 ioctl 40044591 0 returned -22 [ 355.834999][ T8001] pwc: recv_control_msg error -71 req 04 val 1200 [ 355.857834][ T9193] binder: 9192:9193 ioctl 540a 1 returned -22 [ 355.945869][ T8001] pwc: Registered as video103. [ 355.992759][ T8001] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input28 [ 356.062755][ T8001] usb 6-1: USB disconnect, device number 19 [ 356.166416][ T8000] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 356.200450][ T8000] ath9k_htc: Failed to initialize the device [ 356.284973][ T7999] usb 2-1: ath9k_htc: USB layer deinitialized [ 356.339535][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 356.607286][ T9201] netlink: 616 bytes leftover after parsing attributes in process `syz.5.822'. [ 356.651398][ T9201] openvswitch: netlink: Flow key attr not present in new flow. [ 356.946244][ T7999] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 357.119300][ T7999] usb 6-1: unable to get BOS descriptor or descriptor too short [ 357.131351][ T7999] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 357.139795][ T7999] usb 6-1: can't read configurations, error -22 [ 357.326437][ T7999] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 357.578460][ T7999] usb 6-1: unable to get BOS descriptor or descriptor too short [ 357.599995][ T7999] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 357.619835][ T7999] usb 6-1: can't read configurations, error -22 [ 357.676881][ T7999] usb usb6-port1: attempt power cycle [ 358.056531][ T7999] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 358.143274][ T7999] usb 6-1: unable to get BOS descriptor or descriptor too short [ 358.172470][ T5926] usb 4-1: USB disconnect, device number 55 [ 358.173504][ T7999] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 358.229739][ T5234] Dev loop3: unable to read RDB block 1 [ 358.235392][ T5234] loop3: unable to read partition table [ 358.246908][ T7999] usb 6-1: can't read configurations, error -22 [ 358.288029][ T5234] loop3: partition table beyond EOD, truncated [ 358.406269][ T7999] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 358.471890][ T7999] usb 6-1: unable to get BOS descriptor or descriptor too short [ 358.510611][ T7999] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 358.540665][ T7999] usb 6-1: can't read configurations, error -22 [ 358.561847][ T5234] Dev loop3: unable to read RDB block 1 [ 358.581778][ T7999] usb usb6-port1: unable to enumerate USB device [ 358.596893][ T5234] loop3: unable to read partition table [ 358.626574][ T5234] loop3: partition table beyond EOD, truncated [ 360.352654][ T5234] Dev loop3: unable to read RDB block 1 [ 360.390764][ T5234] loop3: unable to read partition table [ 360.437612][ T5234] loop3: partition table beyond EOD, truncated [ 361.026177][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.5.832'. [ 361.326745][ T5234] Dev loop3: unable to read RDB block 1 [ 361.416500][ T5234] loop3: unable to read partition table [ 361.450937][ T5234] loop3: partition table beyond EOD, truncated [ 361.826461][ T7997] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 362.066205][ T7997] usb 4-1: Using ep0 maxpacket: 8 [ 362.298858][ T7997] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 362.359869][ T7997] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 362.395069][ T7997] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 362.418940][ T7997] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 362.449928][ T7997] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.484899][ T7997] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 362.505070][ T7997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.202206][ T9244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.239681][ T9244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.309868][ T9266] tipc: Started in network mode [ 363.344199][ T9266] tipc: Node identity fe32ce8a0fac, cluster identity 4711 [ 363.389571][ T9266] tipc: Enabled bearer , priority 0 [ 363.633760][ T9265] syzkaller0: entered promiscuous mode [ 363.695222][ T9265] syzkaller0: entered allmulticast mode [ 363.798084][ T7996] usb 4-1: USB disconnect, device number 56 [ 364.379108][ T9261] tipc: Resetting bearer [ 364.497538][ T5234] Dev loop3: unable to read RDB block 1 [ 364.516368][ T5955] tipc: Node number set to 4053716618 [ 364.546209][ T5234] loop3: unable to read partition table [ 364.606363][ T5234] loop3: partition table beyond EOD, truncated [ 364.727478][ T9261] tipc: Disabling bearer [ 364.939156][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.842'. [ 364.997629][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.842'. [ 365.316696][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.842'. [ 365.419726][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.842'. [ 365.656532][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.844'. [ 365.735829][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.844'. [ 365.940862][ T5234] Dev loop3: unable to read RDB block 1 [ 365.960645][ T5234] loop3: unable to read partition table [ 365.981042][ T5234] loop3: partition table beyond EOD, truncated [ 366.156789][ T5926] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 366.286307][ T5987] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 366.327335][ T5926] usb 5-1: device descriptor read/64, error -71 [ 366.446445][ T5987] usb 4-1: Using ep0 maxpacket: 8 [ 366.479808][ T5987] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 366.506211][ T5987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.536421][ T5987] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 366.566551][ T5926] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 366.584469][ T5987] usb 4-1: config 0 has no interface number 0 [ 366.603236][ T5987] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 366.652567][ T5987] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 366.696606][ T5987] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 366.722781][ T5987] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.736560][ T5926] usb 5-1: device descriptor read/64, error -71 [ 366.758927][ T5987] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 366.794010][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.818730][ T5987] usb 4-1: Product: syz [ 366.827627][ T5987] usb 4-1: Manufacturer: syz [ 366.837804][ T5987] usb 4-1: SerialNumber: syz [ 366.876834][ T5926] usb usb5-port1: attempt power cycle [ 366.878607][ T5987] usb 4-1: config 0 descriptor?? [ 366.904051][ T9304] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 366.921452][ T5987] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 367.226339][ T5926] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 367.718179][ T5926] usb 5-1: device descriptor read/8, error -71 [ 367.956020][ T9331] @: renamed from vlan0 (while UP) [ 368.186798][ T5926] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 368.254787][ T5926] usb 5-1: device descriptor read/8, error -71 [ 368.493943][ T5926] usb usb5-port1: unable to enumerate USB device [ 369.089305][ T9342] binder: 9341:9342 ioctl c0306201 200000000100 returned -11 [ 369.776920][ T5955] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 369.931607][ T9344] ptrace attach of "./syz-executor exec"[5874] was attempted by "./syz-executor exec"[9344] [ 369.963181][ T5955] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.028278][ T5955] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.156291][ T5955] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 370.171820][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.271949][ T7999] usb 4-1: USB disconnect, device number 57 [ 370.617587][ T5234] Dev loop3: unable to read RDB block 1 [ 370.632066][ T5234] loop3: unable to read partition table [ 370.644018][ T5955] usb 2-1: Product: syz [ 370.659200][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 370.676377][ T5234] loop3: partition table beyond EOD, truncated [ 370.682936][ T5955] usb 2-1: Manufacturer: syz [ 370.698031][ T5955] usb 2-1: SerialNumber: syz [ 370.857044][ T5234] Dev loop3: unable to read RDB block 1 [ 370.862696][ T5234] loop3: unable to read partition table [ 370.872004][ T5234] loop3: partition table beyond EOD, truncated [ 370.978406][ T9347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.001177][ T9347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.124809][ T5955] usb 2-1: 0:2 : does not exist [ 371.192153][ T5955] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 371.251897][ T5955] usb 2-1: USB disconnect, device number 61 [ 371.337524][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.398377][ T5926] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 371.448235][ T9376] netlink: 104 bytes leftover after parsing attributes in process `syz.0.864'. [ 371.656894][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 371.670758][ T5926] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 371.788123][ T5926] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 371.822968][ T5926] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 371.864970][ T9383] loop2: detected capacity change from 0 to 7 [ 371.893787][ T5926] usb 4-1: config 1 has no interface number 0 [ 371.919875][ T5926] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 371.949478][ T5926] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 371.988510][ T9383] loop2: [ 372.005863][ T9383] loop2: partition table partially beyond EOD, truncated [ 372.054335][ T5926] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 372.102013][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.120779][ T9387] netlink: 'syz.0.866': attribute type 10 has an invalid length. [ 372.239200][ T9387] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 372.264345][ T5926] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 372.326523][ T9392] vcan0: mtu less than device minimum [ 372.456613][ T5926] snd_usb_pod 4-1:1.1: invalid control EP [ 372.492716][ T5926] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 372.545693][ T5926] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 372.703036][ T5926] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 372.846411][ T7999] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 372.997253][ T7999] usb 5-1: Using ep0 maxpacket: 32 [ 373.004601][ T7999] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 373.015002][ T7999] usb 5-1: config 0 has no interface number 0 [ 373.035238][ T7999] usb 5-1: config 0 interface 12 has no altsetting 0 [ 373.053995][ T7999] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 373.064429][ T7999] usb 5-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 373.078205][ T7999] usb 5-1: Product: syz [ 373.083650][ T7999] usb 5-1: Manufacturer: syz [ 373.092555][ T7999] usb 5-1: SerialNumber: syz [ 373.110218][ T7999] usb 5-1: config 0 descriptor?? [ 373.999525][ T9418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.875'. [ 374.116718][ T7996] usb 4-1: USB disconnect, device number 58 [ 374.303021][ T5234] Dev loop3: unable to read RDB block 1 [ 374.324629][ T5234] loop3: unable to read partition table [ 374.532690][ T5234] loop3: partition table beyond EOD, truncated [ 374.606353][ T7999] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 374.614731][ T7999] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 374.656238][ T7999] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 374.686332][ T7999] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 374.857490][ T7999] usb 5-1: USB disconnect, device number 45 [ 375.026756][ T9435] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 375.052424][ T9435] syzkaller0: linktype set to 270 [ 375.206362][ T7996] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 375.357066][ T7996] usb 6-1: device descriptor read/64, error -71 [ 375.629927][ T7996] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 375.721936][ T9444] netlink: 596 bytes leftover after parsing attributes in process `syz.4.882'. [ 375.799218][ T7999] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 375.821989][ T7996] usb 6-1: device descriptor read/64, error -71 [ 375.865132][ T5234] Dev loop3: unable to read RDB block 1 [ 375.886318][ T5234] loop3: unable to read partition table [ 375.892530][ T5234] loop3: partition table beyond EOD, truncated [ 375.970173][ T7996] usb usb6-port1: attempt power cycle [ 376.049942][ T7999] usb 2-1: unable to get BOS descriptor or descriptor too short [ 376.060870][ T7999] usb 2-1: not running at top speed; connect to a high speed hub [ 376.092424][ T9449] netlink: 'syz.3.884': attribute type 2 has an invalid length. [ 376.173008][ T7999] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 376.202565][ T7999] usb 2-1: config 1 interface 0 has no altsetting 0 [ 376.232566][ T7999] usb 2-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 376.242245][ T7999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.255138][ T7999] usb 2-1: Product: ࠝ [ 376.259760][ T7999] usb 2-1: Manufacturer: ﰴꅑﲘꐶ梋뉦龔屻雧뼠掞캜盃鷱⠸㞐Ŷ휞鵥픋恫レ₀ﺆ熬ꡖ礛ࠆ䭥〴ζ臒ꑺ䃪抲彞躖卣ꕒ㸰鮼य़綠훇ꕄ뙄媘됆༑疫뗿䆓阉⶟⻃䣬钥㔴䎱巚랖쪂⴨놶ྺ侫䆧虱ރ瓔欩ﱙƳ殼㓢꦳⭷諕夛㊀㬯빦䅡阢၇盝粅㑉ᨸꉔ∉꥝꬛ꂢ愡靲챡⚷⠂싮⤬໲䓻ꑁ [ 376.294043][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.345931][ T7999] usb 2-1: SerialNumber: 顽︙ु̠⽹赿짇爧尷蓉聧ቂ婴꜑뙃㘇ﹾ蛸絓꿰淥̵ভ焁뫁㡥銙୴ꋛ탣뿵ｭ썅൳쿡᡾ಛ쏥枢딯൫᧞᥉㢆ᘟ镥먬辻䁢ﭰ设Ʉﳂ뢞䁥鹧鞤☉疐⊖䊔瀉옷㢏풾쉟塷륰Ửٛ쭲웑Ỳﶙᧄ雤탩瘑ᦥ韉㺓壘䀨昤ᚐ谰뾞᛼猡端㯺ߦ䈸㶼ړ加ꑶ륷 [ 376.436243][ T7996] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 376.516367][ T7996] usb 6-1: device descriptor read/8, error -71 [ 376.576463][ T9442] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 376.913145][ T9442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.955766][ T9442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.969802][ T7996] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 377.019325][ T7996] usb 6-1: device descriptor read/8, error -71 [ 377.081304][ T7999] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input29 [ 377.136861][ T7996] usb usb6-port1: unable to enumerate USB device [ 377.196396][ T5219] bcm5974 2-1:1.0: could not read from device [ 377.295250][ T9458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.885'. [ 377.343637][ T5219] bcm5974 2-1:1.0: could not read from device [ 377.353004][ T7999] usb 2-1: USB disconnect, device number 62 [ 377.875111][ T6254] udevd[6254]: Error opening device "/dev/input/event4": No such file or directory [ 377.915675][ T6254] udevd[6254]: Unable to EVIOCGABS device "/dev/input/event4" [ 377.935017][ T6254] udevd[6254]: Unable to EVIOCGABS device "/dev/input/event4" [ 377.966343][ T6254] udevd[6254]: Unable to EVIOCGABS device "/dev/input/event4" [ 377.994404][ T6254] udevd[6254]: Unable to EVIOCGABS device "/dev/input/event4" [ 378.098739][ T9464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.111640][ T9464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.154175][ T9464] netlink: 'syz.5.887': attribute type 5 has an invalid length. [ 378.213896][ T9464] ip6erspan0: entered promiscuous mode [ 378.335279][ T9469] netlink: 'syz.1.888': attribute type 1 has an invalid length. [ 378.346265][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 378.516386][ T9472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.888'. [ 378.518615][ T9469] 8021q: adding VLAN 0 to HW filter on device bond3 [ 378.671619][ T5234] Dev loop3: unable to read RDB block 1 [ 378.686250][ T5234] loop3: unable to read partition table [ 378.692205][ T5234] loop3: partition table beyond EOD, truncated [ 378.824865][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.831621][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.852754][ T9481] netlink: 176 bytes leftover after parsing attributes in process `syz.3.891'. [ 378.997526][ T9471] 8021q: adding VLAN 0 to HW filter on device bond3 [ 379.255381][ T9471] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 379.537546][ T9471] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 380.206429][ T9501] netlink: 'syz.0.893': attribute type 10 has an invalid length. [ 380.229665][ T5234] Dev loop3: unable to read RDB block 1 [ 380.235394][ T5234] loop3: unable to read partition table [ 380.286607][ T5234] loop3: partition table beyond EOD, truncated [ 380.397209][ T9501] batman_adv: batadv0: Adding interface: wlan1 [ 380.464442][ T9501] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.489955][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.583841][ T9501] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 380.936245][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 381.227323][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 381.278366][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 381.361330][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 381.602248][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 381.630071][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.646478][ T9] usb 4-1: Product: syz [ 381.650806][ T9] usb 4-1: Manufacturer: syz [ 381.655564][ T9] usb 4-1: SerialNumber: syz [ 381.670670][ T9] usb 4-1: config 0 descriptor?? [ 381.719838][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 381.796966][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 381.837860][ T9532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.877136][ T9532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.313424][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 382.334031][ T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 382.976491][ T7996] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 383.047433][ T9] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 383.065975][ T9545] netlink: 14 bytes leftover after parsing attributes in process `syz.1.907'. [ 383.093503][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 383.131400][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 383.146397][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 383.185303][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 383.278300][ T7996] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 383.303065][ T7996] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.320295][ T7996] usb 5-1: config 0 descriptor?? [ 383.414377][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 383.414396][ T30] audit: type=1326 audit(1756415936.670:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9546 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80acf8ebe9 code=0x7ffc0000 [ 383.449980][ T30] audit: type=1326 audit(1756415936.670:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9546 comm="syz.5.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80acf8ebe9 code=0x7ffc0000 [ 383.794289][ T7996] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 383.840790][ T9] usb 4-1: USB disconnect, device number 59 [ 383.970235][ T9545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.037315][ T9545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.048102][ T9545] bond0 (unregistering): Released all slaves [ 384.142058][ T7996] [drm:udl_init] *ERROR* Selecting channel failed [ 384.260576][ T7996] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 384.391910][ T7996] [drm] Initialized udl on minor 2 [ 384.453099][ T7996] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 384.463575][ T7996] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 384.490390][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 384.502831][ T7996] usb 5-1: USB disconnect, device number 46 [ 384.510567][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 384.629717][ T5234] Dev loop3: unable to read RDB block 1 [ 384.644898][ T5234] loop3: unable to read partition table [ 384.689994][ T5234] loop3: partition table beyond EOD, truncated [ 384.932682][ T5234] Dev loop3: unable to read RDB block 1 [ 384.958556][ T5234] loop3: unable to read partition table [ 384.996744][ T5234] loop3: partition table beyond EOD, truncated [ 385.287837][ T7996] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 385.494950][ T7996] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.535741][ T7996] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 385.609298][ T7996] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 385.631842][ T7996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 385.666193][ T7996] usb 2-1: SerialNumber: syz [ 385.938845][ T7996] usb 2-1: 0:2 : does not exist [ 386.051742][ T7996] usb 2-1: USB disconnect, device number 63 [ 386.198535][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.313288][ T5234] Dev loop3: unable to read RDB block 1 [ 386.349013][ T5234] loop3: unable to read partition table [ 386.349657][ T7997] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 386.381436][ T5234] loop3: partition table beyond EOD, truncated [ 386.496397][ T31] INFO: task syz.2.473:7783 blocked for more than 143 seconds. [ 386.517804][ T31] Not tainted syzkaller #0 [ 386.522835][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.556386][ T7997] usb 6-1: Using ep0 maxpacket: 16 [ 386.600553][ T7997] usb 6-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 386.610248][ T31] task:syz.2.473 state:D stack:25032 pid:7783 tgid:7781 ppid:5881 task_flags:0x400040 flags:0x00004004 [ 386.636706][ T7997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.668540][ T31] Call Trace: [ 386.675393][ T7997] usb 6-1: Product: syz [ 386.684856][ T31] [ 386.691471][ T7997] usb 6-1: Manufacturer: syz [ 386.697662][ T31] __schedule+0x1798/0x4cc0 [ 386.707771][ T7997] usb 6-1: SerialNumber: syz [ 386.718429][ T31] ? __pfx___schedule+0x10/0x10 [ 386.730004][ T31] ? schedule+0x91/0x360 [ 386.737818][ T7997] usb 6-1: config 0 descriptor?? [ 386.748457][ T31] schedule+0x165/0x360 [ 386.764049][ T31] schedule_preempt_disabled+0x13/0x30 [ 386.770945][ T7997] usb 6-1: Found UVC 0.00 device syz (046d:0721) [ 386.794525][ T31] __mutex_lock+0x7e6/0x1350 [ 386.803961][ T7997] usb 6-1: No valid video chain found. [ 386.818474][ T5234] Dev loop3: unable to read RDB block 1 [ 386.827690][ T31] ? __mutex_lock+0x5bb/0x1350 [ 386.841496][ T5234] loop3: unable to read partition table [ 386.842112][ T31] ? blk_trace_ioctl+0x1b9/0x430 [ 386.864802][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 386.877171][ T31] ? kasan_save_track+0x4f/0x80 [ 386.886641][ T5234] loop3: partition table beyond EOD, truncated [ 386.898438][ T31] ? kasan_save_track+0x3e/0x80 [ 386.955447][ T31] ? kasan_save_free_info+0x46/0x50 [ 386.970518][ T7999] usb 6-1: USB disconnect, device number 29 [ 386.992959][ T31] ? __kasan_slab_free+0x5b/0x80 [ 387.005034][ T31] ? kfree+0x18e/0x440 [ 387.036197][ T31] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 387.052280][ T31] ? security_file_ioctl+0xcb/0x2d0 [ 387.068031][ T31] blk_trace_ioctl+0x1b9/0x430 [ 387.082371][ T31] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 387.089072][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 387.095573][ T31] blkdev_common_ioctl+0xdf4/0x2550 [ 387.102698][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 387.110780][ T31] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 387.136356][ T31] ? do_vfs_ioctl+0xbe8/0x1430 [ 387.144597][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 387.160162][ T31] ? __lock_acquire+0xab9/0xd20 [ 387.170949][ T31] blkdev_ioctl+0x4ef/0x6d0 [ 387.188091][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 387.201326][ T31] ? __fget_files+0x2a/0x420 [ 387.218498][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 387.237652][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 387.253148][ T31] __se_sys_ioctl+0xf9/0x170 [ 387.265562][ T31] do_syscall_64+0xfa/0x3b0 [ 387.272582][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.284588][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.297062][ T31] ? clear_bhb_loop+0x60/0xb0 [ 387.308155][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.325463][ T31] RIP: 0033:0x7f06b598ebe9 [ 387.335770][ T31] RSP: 002b:00007f06b3bcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.361437][ T31] RAX: ffffffffffffffda RBX: 00007f06b5bb6090 RCX: 00007f06b598ebe9 [ 387.381785][ T31] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 000000000000000d [ 387.399541][ T31] RBP: 00007f06b5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 387.419866][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.445938][ T31] R13: 00007f06b5bb6128 R14: 00007f06b5bb6090 R15: 00007f06b5cdfa28 [ 387.484692][ T31] [ 387.495853][ T31] [ 387.495853][ T31] Showing all locks held in the system: [ 387.522503][ T31] 4 locks held by kworker/u8:1/13: [ 387.538088][ T31] 1 lock held by khungtaskd/31: [ 387.717570][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 387.747251][ T31] 2 locks held by getty/5625: [ 387.755370][ T31] #0: ffff8880337800a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 387.777115][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 387.794575][ T31] 2 locks held by syz.2.473/7782: [ 387.816193][ T31] 1 lock held by syz.2.473/7783: [ 387.836059][ T31] #0: ffff888024bc4408 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x1b9/0x430 [ 387.865349][ T31] 1 lock held by syz.4.920/9581: [ 387.885510][ T31] #0: ffff88802fb01760 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70 [ 387.924112][ T31] 1 lock held by syz.4.920/9582: [ 387.936071][ T31] #0: ffff88802fb01760 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x211/0x4d0 [ 387.961035][ T31] 1 lock held by syz.4.920/9583: [ 387.974095][ T31] [ 387.979565][ T31] ============================================= [ 387.979565][ T31] [ 388.000713][ T31] NMI backtrace for cpu 0 [ 388.000735][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 388.000756][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.000768][ T31] Call Trace: [ 388.000775][ T31] [ 388.000784][ T31] dump_stack_lvl+0x189/0x250 [ 388.000815][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.000839][ T31] ? __pfx__printk+0x10/0x10 [ 388.000880][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 388.000907][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 388.000941][ T31] ? __pfx__printk+0x10/0x10 [ 388.000972][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 388.001005][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 388.001031][ T31] watchdog+0xf93/0xfe0 [ 388.001063][ T31] ? watchdog+0x1de/0xfe0 [ 388.001094][ T31] kthread+0x70e/0x8a0 [ 388.001121][ T31] ? __pfx_watchdog+0x10/0x10 [ 388.001145][ T31] ? __pfx_kthread+0x10/0x10 [ 388.001170][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.001194][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.001218][ T31] ? __pfx_kthread+0x10/0x10 [ 388.001242][ T31] ret_from_fork+0x3f9/0x770 [ 388.001265][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 388.001291][ T31] ? __switch_to_asm+0x39/0x70 [ 388.001313][ T31] ? __switch_to_asm+0x33/0x70 [ 388.001335][ T31] ? __pfx_kthread+0x10/0x10 [ 388.001359][ T31] ret_from_fork_asm+0x1a/0x30 [ 388.001400][ T31] [ 388.001408][ T31] Sending NMI from CPU 0 to CPUs 1: [ 388.148844][ C1] NMI backtrace for cpu 1 [ 388.148861][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 388.148879][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.148889][ C1] Workqueue: iou_exit io_ring_exit_work [ 388.148913][ C1] RIP: 0010:__lock_acquire+0x4d5/0xd20 [ 388.148937][ C1] Code: 00 00 00 0f 84 d7 04 00 00 44 3b bf e8 0a 00 00 0f 8d 04 01 00 00 49 63 df 48 8d 04 9b 4c 8d 3c c7 49 81 c7 10 0b 00 00 eb 1d <44> 89 e0 48 ff c3 48 63 8f e8 0a 00 00 49 83 c7 28 41 89 c4 48 39 [ 388.148949][ C1] RSP: 0018:ffffc90000127188 EFLAGS: 00000046 [ 388.148962][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff934fe6b8 [ 388.148972][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff88801cae8000 [ 388.148982][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8172c195 [ 388.148991][ C1] R10: ffffc900001273d8 R11: ffffffff81ac3820 R12: ffffffffffffff05 [ 388.149002][ C1] R13: 0000000000000001 R14: ffff88801cae8b68 R15: ffff88801cae8b10 [ 388.149013][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 388.149025][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.149035][ C1] CR2: 0000555558c1a5c8 CR3: 00000000770be000 CR4: 00000000003526f0 [ 388.149051][ C1] Call Trace: [ 388.149058][ C1] [ 388.149067][ C1] ? unwind_next_frame+0xa5/0x2390 [ 388.149084][ C1] lock_acquire+0x120/0x360 [ 388.149103][ C1] ? unwind_next_frame+0xa5/0x2390 [ 388.149121][ C1] ? unwind_next_frame+0xa5/0x2390 [ 388.149135][ C1] ? kthread+0x70e/0x8a0 [ 388.149153][ C1] ? unwind_next_frame+0xa5/0x2390 [ 388.149168][ C1] unwind_next_frame+0xc2/0x2390 [ 388.149183][ C1] ? unwind_next_frame+0xa5/0x2390 [ 388.149200][ C1] ? unwind_next_frame+0xa5/0x2390 [ 388.149215][ C1] ? worker_thread+0x8a0/0xda0 [ 388.149231][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 388.149248][ C1] arch_stack_walk+0x11c/0x150 [ 388.149267][ C1] ? kthread+0x70e/0x8a0 [ 388.149285][ C1] stack_trace_save+0x9c/0xe0 [ 388.149301][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 388.149319][ C1] ? __lock_acquire+0xab9/0xd20 [ 388.149339][ C1] kasan_save_track+0x3e/0x80 [ 388.149356][ C1] ? kasan_save_track+0x3e/0x80 [ 388.149371][ C1] ? kasan_save_free_info+0x46/0x50 [ 388.149385][ C1] ? __kasan_slab_free+0x5b/0x80 [ 388.149402][ C1] ? kfree+0x18e/0x440 [ 388.149418][ C1] ? io_remove_buffers_legacy+0x232/0x310 [ 388.149434][ C1] ? io_destroy_buffers+0x16d/0x280 [ 388.149446][ C1] ? io_ring_ctx_free+0x9d/0x4e0 [ 388.149463][ C1] ? io_ring_exit_work+0x8c4/0x930 [ 388.149479][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 388.149492][ C1] ? worker_thread+0x8a0/0xda0 [ 388.149505][ C1] ? kthread+0x70e/0x8a0 [ 388.149536][ C1] kasan_save_free_info+0x46/0x50 [ 388.149551][ C1] __kasan_slab_free+0x5b/0x80 [ 388.149568][ C1] ? io_remove_buffers_legacy+0x232/0x310 [ 388.149581][ C1] kfree+0x18e/0x440 [ 388.149614][ C1] io_remove_buffers_legacy+0x232/0x310 [ 388.149632][ C1] io_destroy_buffers+0x16d/0x280 [ 388.149647][ C1] ? __pfx_io_destroy_buffers+0x10/0x10 [ 388.149671][ C1] ? io_alloc_cache_free+0x254/0x2a0 [ 388.149687][ C1] ? __pfx_kfree+0x10/0x10 [ 388.149702][ C1] ? __pfx_kfree+0x10/0x10 [ 388.149719][ C1] io_ring_ctx_free+0x9d/0x4e0 [ 388.149736][ C1] ? io_ring_exit_work+0x8ae/0x930 [ 388.149754][ C1] io_ring_exit_work+0x8c4/0x930 [ 388.149775][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 388.149792][ C1] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 388.149813][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.149831][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 388.149844][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 388.149858][ C1] process_scheduled_works+0xae1/0x17b0 [ 388.149880][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 388.149900][ C1] worker_thread+0x8a0/0xda0 [ 388.149923][ C1] kthread+0x70e/0x8a0 [ 388.149940][ C1] ? __pfx_worker_thread+0x10/0x10 [ 388.149954][ C1] ? __pfx_kthread+0x10/0x10 [ 388.149971][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.149988][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.150006][ C1] ? __pfx_kthread+0x10/0x10 [ 388.150023][ C1] ret_from_fork+0x3f9/0x770 [ 388.150038][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 388.150054][ C1] ? __switch_to_asm+0x39/0x70 [ 388.150071][ C1] ? __switch_to_asm+0x33/0x70 [ 388.150087][ C1] ? __pfx_kthread+0x10/0x10 [ 388.150104][ C1] ret_from_fork_asm+0x1a/0x30 [ 388.150127][ C1] [ 389.116305][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 389.123217][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 389.132441][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.142517][ T31] Call Trace: [ 389.145811][ T31] [ 389.148734][ T31] dump_stack_lvl+0x99/0x250 [ 389.153323][ T31] ? __asan_memcpy+0x40/0x70 [ 389.158081][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.163270][ T31] ? __pfx__printk+0x10/0x10 [ 389.167859][ T31] vpanic+0x281/0x750 [ 389.171838][ T31] ? __pfx_vpanic+0x10/0x10 [ 389.176333][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 389.181874][ T31] ? preempt_schedule+0xae/0xc0 [ 389.186750][ T31] ? preempt_schedule_common+0x83/0xd0 [ 389.192212][ T31] panic+0xb9/0xc0 [ 389.195923][ T31] ? __pfx_panic+0x10/0x10 [ 389.200334][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 389.205803][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 389.211951][ T31] watchdog+0xfd2/0xfe0 [ 389.216128][ T31] ? watchdog+0x1de/0xfe0 [ 389.220477][ T31] kthread+0x70e/0x8a0 [ 389.224544][ T31] ? __pfx_watchdog+0x10/0x10 [ 389.229215][ T31] ? __pfx_kthread+0x10/0x10 [ 389.233800][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.239009][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.244200][ T31] ? __pfx_kthread+0x10/0x10 [ 389.248869][ T31] ret_from_fork+0x3f9/0x770 [ 389.253469][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.258600][ T31] ? __switch_to_asm+0x39/0x70 [ 389.263363][ T31] ? __switch_to_asm+0x33/0x70 [ 389.268140][ T31] ? __pfx_kthread+0x10/0x10 [ 389.272722][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.277575][ T31] [ 389.280867][ T31] Kernel Offset: disabled [ 389.285265][ T31] Rebooting in 86400 seconds..