last executing test programs: 9m39.791049249s ago: executing program 4 (id=339): syz_usb_connect(0x5, 0x7f2, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x3f, 0x70, 0x1d, 0x10, 0x1410, 0xa005, 0xadc3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e0, 0x4, 0xf3, 0xc, 0x10, 0x0, "", [{{0x9, 0x4, 0x3, 0x2, 0x2, 0xa4, 0xb7, 0x24, 0x4, [@hid_hid={0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x25f}}], [{{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x7, 0x5, 0x7, [@generic={0xb, 0xb, "d2036a8cf475ae75e7"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x9, 0x3, 0x2, [@generic={0x5b, 0x6, "f51adf3a06af123e428fea5d27879b2844e980d9ed3e0186ba2959e63ef6289862b2962416d549a89db595b06df1ee9d5a30d72de5280e98c30f567d8e8044a9770b13f63b62b81d66c7ecb421b1d923167d743275b966dd82"}, @generic={0xf0, 0x2b, "ccc078969122ee71ee71b8d07e377e051410625f51a4ba734995cc2268025b37a70220527cd2054388e87233d09a6ed257163edfed1f62abffeec76da06589907d1a728ef97cc6389a8d7d08d1757267f3f3d4e45ba4518c035a0ca27f9dc1f494e5f8cdf398addf9a08e150cef812df5d3f4a06ec714c763ea45a703780529465c48b33d8f5249c40e9f46c9407356507edecf9f0521f9e13914753246a01c5185b3284770a78b4a07f92ed94de6ba0409362b49ed2e369b84048fe03937c6879436f49590e60405b8f7ce0e7502947aaab72d6829e046db852fd6e4e155a99a2ec9e68a1462dba637cf0354e97"}]}}]}}, {{0x9, 0x4, 0xf8, 0xf, 0x6, 0x8, 0x62, 0xf5, 0x4, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x6, 0x6, 0x8}, [@ncm={0x6, 0x24, 0x1a, 0x2, 0x12}, @acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0xf, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x7, 0xf}, @acm={0x4, 0x24, 0x2, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x80}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "ae316563"}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7ff, 0x1, 0xd9}, [@acm={0x4, 0x24, 0x2, 0x5}]}], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0xf, 0xff, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xb, 0x7}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0xb8, 0x3, 0xd, [@generic={0x9d, 0x22, "7d9e037d4fa6f7b00263088e8c82184c983b57a6deb64877b6b35470bde40672472e5657e751b7e3873f2880563c0d4cd4f1f4bb92b27843060e0191d239d362c825282544d965f24ec56619527d4771d13e7328b2c54821602564d28fdb6484febd69417c6fdb649c3ac9675e2123f4f3c97747b4597166db8789b8642d757c6ba2cb8440daed4a0bf6e09cde74896da24de09c51c70e639ef920"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0xfe, 0xc0, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x8, 0x6, 0x3, [@generic={0x33, 0x23, "8751b49fe43f3ba3010a994541e032ffd1da5a00455b6b8ed1b74c426bef08a89eea91e053a250330fb0f04b610b2208eb"}, @generic={0xa9, 0xc, "a30633933cc0e62bb01eb904d8f6ecbe6f3584ae7696b1d6b03973599501bf6ddbbff74350289274e27be84e4780cc97de7b0364aa30175b596f92dd3348921949dfadcb738f5984dd45a537c90ac29cebb6efacdd661233059131cda97b4ee87354751e61d3a98fd3b8dcc5f3100f12343df3d3a47d71c3845afb28205775a63c4f3478aff9b991dca8a2087d3fc285b66628fceb1df82e32c4ea9f4ac01e7b086578cdbfe910"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x1, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xd, 0x4}]}}, {{0x9, 0x5, 0x9, 0x6, 0x10, 0x3, 0x1, 0x6, [@generic={0x32, 0x22, "4f5cfd8ebb46bdf90b935d3a34feeb032b33c9f43a1d5167a6c2a11a6740f95e0aadde9b6ea1883cedf5bc5df24bac82"}]}}]}}, {{0x9, 0x4, 0x4c, 0x3, 0x6, 0x3a, 0x98, 0xf8, 0xd, [@generic={0x21, 0x24, "ed787c99418391f02c4963f495c639bbe99009cffc341e895896cccc0c9cfc"}], [{{0x9, 0x5, 0x3, 0x4, 0x400, 0x9, 0xfc, 0xcd, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf9, 0x9}]}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x67, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x2}]}}, {{0x9, 0x5, 0xb, 0x3, 0x18, 0x0, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x5}, @generic={0xf7, 0x3, "65955e71f251a739d31d74c705970536ae33c79099223388bd2840bad72f40fd5c5594e65c627d7faedd2c3df88f019ed37dab53330ba5b5783fff85d0d960c40b2b28ecbc20d1d421b6d1fd286de4a38fb4f818dcf3fc1b78effae03410039070df6f8347eb851174f20bd931dba8d95507b4f123987b501cee1fc9ce51e7c5a62f830f898740472982d664547e635d4d3d3c7d1e5228a0016b6dffe977b52e2897610f3c8435d0dbee478a06dd129d0df66e40467e53c9e4aca28da5d9ccae5004db7c3146e1d952d8316fe65b0733d339657cb9842b35a696a27fc7ed3a707c99fcabf30a477d57dd490967b20b7ea4b6523555"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x7a, 0x39, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x76, 0x7ff}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x4, 0x8, 0xf, [@generic={0x1b, 0x21, "1e31dab4d848754b501fcc7a84ea4adc17921bc2655a63a1e3"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x80, 0xff, 0xb5, [@generic={0x33, 0x30, "d007ade7286d0945f40113000b06a6e517fb53fe9602f54e7a87a071b419615cebfc77cfe6abd3b7802e2edb482031eff6"}]}}]}}, {{0x9, 0x4, 0xa2, 0x4, 0x7, 0x6d, 0x43, 0x36, 0x9, [], [{{0x9, 0x5, 0x3, 0x0, 0x10, 0x6, 0x0, 0x7, [@generic={0xd, 0xd, "20b13b58cad9da1734be70"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x200, 0x8f, 0x13, 0x9, [@generic={0xf8, 0x3, "446b43045cfeff4874c2ca52a2a0e51b2ffb5488c03a2c684aa9693c3e5406d164a5192df62fda3e6e47fb98bf52e04b06962230a7ae6e67fd4b8a04fad23452887fc1376a6e03cb14cffe8de1a97a17a7957fd6d27af03b830a264890ffb5b543058aba4edebafe5aa9b517648d26e47c7a4da833ca83fe5b7b0843989d4cd2990c45aef3cb0810ea72441f1d6e8762c6c82488727433c0863c71e5124e80ff1601eb9c4566587288f44603fb6570954c90eaebbbb0221c134ff136f6f297f26d33ca0637fb4175ba5867610e8339b4298cc6d935e3d1b49c7840b8f55c075c0f104a0709f27ddfa14deec9367e300ac29718fb1639"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x3ff, 0x1, 0xff, 0x2, [@generic={0x79, 0x31, "98854f018d29ca875ca8024cc3fcc649944cee62ad6aace86d3e56106c4e8053ec34facb3b8f386890d287dcec26fb3305bf979d7f77e3cc5c275f06b287ad20ffc4f3d784c267f9d133aac6f8f34741c7773f139c56e5b6181fc6635611daf35ad5efb25e9cf9b9ac7ea8c2b1c628df27030c29109e7b"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x4, 0x7f, 0x4, [@generic={0x5f, 0x5, "1fa0e2c546ba7a8cbb35db8afc9d36bec2167e2ced6b4ba10f460d7d3a836ba2a1acc36bce229d18107c85cf667246d2d2593cc950a146eccf0ce97c2f7f78c1384e7c2254d774c547bdabfed53a1c4ded32897dfd09e31b8da96a2123"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x0, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x4}]}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0x3, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x8}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0xd, 0x6, 0x2, [@generic={0x5, 0xb, "7180c8"}]}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x201, 0xc1, 0x8, 0x81, 0x40, 0x6}, 0x29, &(0x7f0000000d40)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0x3, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "4465a4ef47d6d9a5bf6e421647216880"}, @ptm_cap={0x3}]}, 0x1, [{0x36, &(0x7f0000000d80)=@string={0x36, 0x3, "215e16ae42f8a9605e5c83b5520aef8052c7d91d0a5aed0864f067f840bc6bcb5713dd79701cebb0aae87f477f8b5b4142eb1420"}}]}) 9m37.942332811s ago: executing program 4 (id=349): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x5, {0x0, 0x10, 0x401, 0x5}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe(&(0x7f0000000200)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0xffffff}, 0x10) write(r3, &(0x7f0000001dc0)="240000001a005f0214f9f407000904001f00000000040000000000000800040001000000", 0x24) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) readv(r5, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/221, 0xdd}], 0x1) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x2, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f0000000000)={{}, {0x0, 0x9}}, 0x0) socket(0x11, 0x2, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) r7 = eventfd2(0xff, 0x80801) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000000c0)={0x0, r7}) epoll_create1(0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 9m37.061526789s ago: executing program 4 (id=351): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000140)) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) syz_usb_connect(0x2, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504", @ANYBLOB="00ae0000"], 0x0) 9m33.862006831s ago: executing program 4 (id=368): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r1, &(0x7f0000003280)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x9, @loopback, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts_2292={{0x14}}, @dstopts_2292={{0x14, 0x29, 0x4, {0x32}}}], 0x28}}], 0x1, 0x811) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf250c00000008000300", @ANYRES32=r3, @ANYBLOB="0802508004000500"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c000) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000005c0)={0xffffff07, 0x6, "22590a37c8e2d3f458ee5ed83af35c32d4869cadf26264b04173abf0ba771192", 0x0, 0x3922, 0xf, 0x2, 0x8, 0x5, 0x7, 0x6, [0x6, 0xc5f7, 0xb]}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d"], 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r6, 0x0, 0x63) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) fcntl$setstatus(r9, 0x4, 0x2400) syz_fuse_handle_req(r9, &(0x7f00000080c0)="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", 0x2000, &(0x7f0000000a80)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x81, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r9, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0xfffffffd, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x64, 0x1, 0x0, 0x5e55b37311de6d89, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1, {[@ra={0x94, 0x4}]}}}}}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x75}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4c000) getsockopt$TIPC_NODE_RECVQ_DEPTH(r5, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) 9m30.422986935s ago: executing program 4 (id=376): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000"], 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) socket(0x2b, 0x80805, 0x9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000007c0)={0x0, 0x2, 0x0, 0x4}, &(0x7f0000000800)=0x10) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xa2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x7ff6, 0x54001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000200001002abdc60007dcdf2502101009070000"], 0x1c}, 0x1, 0x0, 0x0, 0x82d92b8cfa1cf2b5}, 0x4008081) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', 0x0, 0x0, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000400)=""/145) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 9m30.05361932s ago: executing program 4 (id=377): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400"], 0xb8}}, 0x0) 9m29.335814391s ago: executing program 32 (id=377): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400"], 0xb8}}, 0x0) 10.392882193s ago: executing program 1 (id=2636): landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x97, 0x8, 0x47314356, 0x33565348, 0x3, [{0x9, 0x9}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x89d, 0x2b5}, {0x7, 0x2}, {0x80000001, 0x200}, {0xffffff01, 0x8000}, {0x1, 0x4}], 0x8, 0x8, 0x8, 0x0, 0x7}}) sched_setattr(0x0, &(0x7f0000000280)={0xfffffffffffffdc0, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x20000485, 0x100) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x7, {0x5d3, 0x4, 0xb, 0x40008001}}) r4 = open(0x0, 0x345842, 0x389b0d52417bb201) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_setup(0x104, &(0x7f0000000180)=0x0) io_submit(r5, 0x2, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xe, 0xffffffffffffffff, &(0x7f0000000500)="6d45b8b2a5a239aaca9b71ecfb19222095595c98ff926b4717924f919a60c33477495b9bc2ebec8e811d8b08e3ad6c369abbffe5bfe9f11b3ac8e3eb97d0e35dd75d7390ab0b3e4167fde7c518a6a20246ec60b40e085d441bca99381d1ae95722cb622efbe2f1fa6e", 0x69, 0x80, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x1, r4}]) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x42}) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0xee) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x123180, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r7, 0x40045109, &(0x7f00000000c0)=0x7a9c7d23) ioctl$UI_DEV_CREATE(r6, 0x5501) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/123, 0x7b) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 8.377927101s ago: executing program 1 (id=2648): prlimit64(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x490, 0x204, 0x204, 0x204, 0x204, 0x170, 0x3fc, 0x3fc, 0x3fc, 0x3fc, 0x3fc, 0x6, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010102, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x1}, 0x0, 0x134, 0x170, 0x0, {}, [@common=@unspec=@conntrack3={{0xc4}, {{@ipv4=@loopback, [0xff000000, 0xff, 0xff000000, 0xff000000], @ipv6=@mcast1, [0xff000000, 0xffffff00, 0xffffffff], @ipv6=@local, [0x0, 0xff, 0xff000000, 0xffffff00], @ipv6=@loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffffff], 0x6, 0x1, 0x73, 0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x800}, 0x40, 0x480, 0x4e23, 0xe, 0x4e21, 0x4e23}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @ECN={0x24}}, {{@ip={@multicast1, @broadcast, 0xff, 0xff000000, 'bridge_slave_0\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x62, 0x2, 0x42}, 0x0, 0x70, 0x94}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x298}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6]}, {0x0, [0x1]}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4ec) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="200620"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "dfa200", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x16f, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0xac9, {[@window={0x3, 0x3, 0x7}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@bridge_setlink={0x12, 0x13, 0xa29, 0x0, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x0, 0x11041}}, 0x24}}, 0x0) 7.970096923s ago: executing program 3 (id=2655): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000, 0x2}, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x100001) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) pipe2(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$FUSE_INIT(r3, &(0x7f0000000100)={0x78}, 0xfeb1) set_mempolicy(0x6, &(0x7f00000000c0)=0x476, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000005c0)={{0xdddd2000, 0xf000, 0xd, 0xf7, 0x6, 0x5, 0x1, 0xb, 0x0, 0xf8, 0xb, 0x29}, {0x8000000, 0x1000, 0xd, 0x0, 0x3, 0x0, 0x3, 0x1, 0xa, 0x70, 0x9, 0x3}, {0x3000, 0xa002, 0x19, 0x8, 0x29, 0x6, 0xf5, 0x7, 0x3, 0x6, 0x4, 0x10}, {0x4, 0x0, 0xc, 0xc, 0x21, 0x0, 0x3, 0x9, 0x9, 0x1, 0x3, 0x6}, {0xeeee0000, 0xeeee0000, 0x0, 0x5b, 0x8, 0x4, 0xe, 0x2, 0x8, 0x6, 0x2, 0x14}, {0x4, 0xeffe, 0x10, 0x0, 0xfc, 0x3, 0xf8, 0x81, 0x5, 0x8, 0x0, 0x8}, {0x166672000, 0x8080000, 0x0, 0x5, 0x8, 0xfd, 0x1, 0xee, 0x9, 0xa, 0x80, 0x3}, {0xeeee8000, 0xb000, 0xc, 0x4, 0x5, 0x7, 0x2f, 0x0, 0x4, 0xd, 0x9, 0x3}, {0xffff1000}, {0xeeeeb000, 0x1}, 0x2, 0x0, 0xc000, 0x100, 0x9, 0x9801, 0x1000, [0x9, 0x8, 0x1002, 0xd378]}) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x4000002e, 0x0, @thr={0x0, 0x0}}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 7.147582532s ago: executing program 5 (id=2658): landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x97, 0x8, 0x47314356, 0x33565348, 0x3, [{0x9, 0x9}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x89d, 0x2b5}, {0x7, 0x2}, {0x80000001, 0x200}, {0xffffff01, 0x8000}, {0x1, 0x4}], 0x8, 0x8, 0x8, 0x0, 0x7}}) sched_setattr(0x0, &(0x7f0000000280)={0xfffffffffffffdc0, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x20000485, 0x100) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x7, {0x5d3, 0x4, 0xb, 0x40008001}}) r4 = open(0x0, 0x345842, 0x389b0d52417bb201) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_setup(0x104, &(0x7f0000000180)=0x0) io_submit(r5, 0x2, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xe, 0xffffffffffffffff, &(0x7f0000000500)="6d45b8b2a5a239aaca9b71ecfb19222095595c98ff926b4717924f919a60c33477495b9bc2ebec8e811d8b08e3ad6c369abbffe5bfe9f11b3ac8e3eb97d0e35dd75d7390ab0b3e4167fde7c518a6a20246ec60b40e085d441bca99381d1ae95722cb622efbe2f1fa6e", 0x69, 0x80, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x1, r4}]) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x42}) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0xee) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x123180, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r7, 0x40045109, &(0x7f00000000c0)=0x7a9c7d23) ioctl$UI_DEV_CREATE(r6, 0x5501) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/123, 0x7b) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 6.817253657s ago: executing program 3 (id=2660): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2e, 0x0, &(0x7f0000000180)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e2", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x4c) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) getpriority(0x2, r3) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="001b0002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.066523276s ago: executing program 3 (id=2661): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10008001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) fsetxattr(r1, &(0x7f0000000180)=@known='trusted.overlay.nlink\x00', &(0x7f0000000480)='@\\*]&^\x00', 0x7, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x328, 0x1, 0x32314247, 0x7, 0x7, [{0xd}, {0xfffffffe, 0x6}, {0x0, 0x6}, {0x8, 0x844}, {0x1, 0x2}, {0x6, 0x5}, {0x4, 0x40}, {0xffffffff, 0x2ba}], 0x9, 0x7, 0x1, 0x0, 0x1}}) r2 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r4, 0x7a5, &(0x7f0000000140)={{@my=0x1, 0x4}, 0x1, 0x87}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r2, 0x0) fcntl$getown(r3, 0x9) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x30, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000200)=0xc) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) 5.761699739s ago: executing program 5 (id=2662): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000480), 0x4) 5.260637296s ago: executing program 5 (id=2664): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c0022803400008008000300000000000800050000000000080002000000000008000300000000000800020000000000080004000000000044000080080004000000000008000700000000000800060000"], 0xc0}}, 0x20008001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x18, 0x6, 0x4) socket$unix(0x1, 0x2, 0x0) fsopen(&(0x7f00000000c0)='vfat\x00', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 5.236328562s ago: executing program 1 (id=2665): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r0, &(0x7f000000bd00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="0a1057d48a", 0x100a}], 0x1}}], 0x1, 0x48844) r2 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000040)={0x4, 0x42474752, 0x780, 0x99a, 0x3, @stepwise={{0x0, 0x9}, {0x0, 0x6}, {0x5}}}) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x102400, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}], [{@smackfshat={'smackfshat', 0x3d, '#'}}, {@flag='posixacl'}, {@dont_measure}, {@flag='rw'}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, '$'}}, {@audit}, {@smackfsroot}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}}, 0x0, 0x0, &(0x7f0000000240)="04be6fffc3b60e96beaab713033d7423bde4bf2c123e6ebd01e3cde86df5a52eaf313d920d50997e0005199d075736") mkdirat(r3, &(0x7f0000000280)='./file0\x00', 0x42) 4.976134543s ago: executing program 1 (id=2666): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="780000005500e5022cbd70"], 0x78}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000200)={0x4c, r2, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffb, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r6, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x800) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x34, r7, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x12f0, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x5e}}}}, [@NL80211_ATTR_TID_CONFIG={0x894, 0x11d, 0x0, 0x1, [{0x178, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x21}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x3ff, 0x1, 0xf405, 0x1ff, 0x4, 0x4, 0xf]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7ff, 0x401, 0x7, 0xa9, 0x1, 0x7, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2eca, 0xb91e, 0x6, 0x3, 0x9, 0x1, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7f, 0x602f, 0x7ff, 0x3ff, 0xc, 0x2, 0x62a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x48, 0xe, 0x3, 0x1ff, 0x800, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xba4, 0x6, 0xfff, 0xfff, 0x5, 0x6, 0x5, 0x98c4]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xc5a, 0xd8d, 0x3, 0x7, 0x0, 0xae4, 0xf]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x2}, {0x1, 0x8}, {0x5, 0x3}, {0x6, 0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x7}, {0x4, 0x1}, {0x4, 0x4}, {0x1, 0x6}, {0x3, 0xa}, {0x5, 0x1}, {0x5, 0x6}, {0x0, 0x1}, {0x1, 0x5}, {0x5, 0x5}, {0x2, 0x9}, {0x1, 0x2}, {0x6, 0x2}, {0x6, 0x7}, {0x0, 0x6}, {0x2, 0x9}, {0x1}, {0x2, 0x8}, {0x0, 0x3}, {0x2, 0x1}, {0x0, 0x5}, {0x4, 0x4}, {0x2}, {0x6, 0x3}, {0x0, 0x6}, {0x0, 0x6}, {0x4, 0x1}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x5, 0x8}, {0x2}, {0x5, 0x7}, {0x7, 0x8}, {0x1, 0x8}, {0x4, 0x6}, {0x5, 0x7}, {0x1, 0x7}, {0x4, 0x6}, {0x0, 0x6}, {0x7, 0x9}, {0x3}, {0x5, 0x9}, {0x4, 0x9}, {0x4, 0x6}, {0x5, 0x3}, {0x3, 0x3}, {0x4, 0x3}, {0x0, 0x6}, {0x5, 0x7}, {0x2, 0x8}, {0x6, 0x8}, {0x2, 0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x8}, {0x2, 0x8}, {0x2, 0x8}, {0x5, 0x6}, {0x7, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x5, 0x6}, {0x5, 0x3}, {0x6, 0x2}, {0x5, 0xa}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, {0x300, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2f4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x0, 0x7, 0xfffc, 0x37ce, 0x1, 0x17, 0xfffa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x0, 0x90, 0x79ca, 0x2, 0x0, 0x1, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1b, 0x48, 0x36, 0x1b, 0x3, 0x1c, 0x12, 0x5, 0x30, 0xc, 0x3, 0xc, 0x5, 0x16, 0x1, 0x12, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x28, 0x60, 0xb, 0x4, 0x24, 0x0, 0x5c, 0x1, 0x48, 0x12, 0x3, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xdbd, 0xb, 0x806, 0x7, 0x0, 0xb, 0x1691]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x18, 0x36, 0x60, 0xb, 0x1b, 0x48, 0x16, 0x2, 0xc, 0x48, 0x0, 0x24, 0x1b, 0x16, 0x12, 0x16, 0x6c, 0x48, 0x16, 0x5, 0x59, 0xc, 0x2, 0x53, 0x5, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x9d, 0x9, 0x5, 0xf6c7, 0xfff4, 0x1ff]}}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x30, 0x60, 0x1, 0x30, 0x1b, 0x30, 0x1b, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x474, 0x1, 0x7, 0x5, 0x2, 0x4, 0x1000, 0xff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0xb, 0x18, 0x6c, 0x48, 0x6c, 0x6c, 0x18, 0x4a, 0x16, 0x3, 0x24, 0x18, 0x36, 0x60, 0x24, 0x5, 0x60, 0x3, 0x5a, 0x30, 0x16, 0x6, 0x6c, 0x4, 0x6c, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x11, 0x0, 0x0, 0x7, 0x22b, 0x1, 0x9]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x8, 0x9, 0x101, 0x4, 0xfff, 0x4, 0xfffd]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x5, 0x5, 0x30, 0x2, 0x24, 0xb, 0x6c, 0x6, 0x4, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x5, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x5, 0x5}, {0x1, 0x5}, {0x3, 0x9}, {0x1}, {0x6, 0x5}, {0x4, 0x5}, {0x4, 0x2}, {0x0, 0x9}, {0x7, 0x5}, {0x6, 0x5}, {0x4, 0xa}, {0x1, 0x7}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0x7}, {0x3, 0x8}, {0x6, 0x7}, {0x5, 0x3}, {0x5}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x1}, {0x0, 0x2}, {0x2, 0x6}, {0x3, 0x3}, {0x2, 0x9}, {0x4}, {0x2, 0x7}, {0x2, 0x9}, {0x1, 0x5}, {0x5}, {0x5, 0x5}, {0x4}, {0x7, 0x1}, {0x5, 0x5}, {0x3, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x7, 0x1}, {0x1, 0x4}, {0x3, 0x2}, {0x1, 0xa}, {0x6, 0x7}, {0x7}, {0x0, 0x5}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x7}, {0x7, 0x6}, {0x4, 0x7}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xad, 0x5, 0xb4, 0x0, 0xf, 0x3, 0x3]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x4}, {0x7, 0x2}, {0x3, 0x6}, {0x1, 0x4}, {0x7, 0x3}, {0x3, 0x1}, {0x3, 0x7}, {0x4, 0x5}, {0x1, 0x4}, {0x0, 0x3}, {0x4}, {0x2, 0x7}, {0x1, 0x3}, {0x0, 0x3}, {0x0, 0x5}, {0x4, 0x8}, {0x7, 0xa}, {0x2, 0x2}, {0x0, 0x1}, {0x4, 0x2}]}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0x2}, {0x1, 0x2}, {0x5, 0x4}, {0x5, 0x9}, {0x2}, {0x0, 0x8}, {0x4, 0x6}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0xa}, {0x6, 0x6}, {0x2, 0x5}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x6, 0xa}, {0x1, 0xa}, {0x3, 0x6}, {0x4, 0x7}, {0x1, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x0, 0x2}, {0x2, 0xa}, {0x2, 0x1b}, {0x1, 0x2}, {0x1, 0x1}, {0x4, 0x2}, {0x1, 0x3}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x2}, {0x4, 0x4}, {0x2, 0x4}, {0x5, 0x1}, {0x1, 0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x2}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0xa}, {0x3, 0x1}, {0x1, 0x3}, {0x6, 0x8}, {0x2, 0xa}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x6}, {0x3, 0x6}, {0x4, 0x5}, {0x3, 0x5}, {0x5, 0x3}, {0x7, 0x2}, {0x4, 0x5}, {0x7}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x6}, {0x6, 0x2}, {0x5, 0x9}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x3}, {0x1, 0x9}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x6}, {0x4, 0x9}, {0x5, 0x6}, {0x2, 0xa}, {0x7, 0x7}, {0x4, 0x2}, {0x6, 0x7}, {0x5, 0x7}, {0x4, 0x3}, {0x2, 0x1}, {0x2, 0x6}, {0x5}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x8}, {0x3, 0x7}, {0x2, 0x8}, {0x5, 0x9}, {0x7, 0x5}, {0x0, 0x8}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xffff, 0x8, 0x200, 0x10, 0x8, 0x23b, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x9, 0xffc0, 0x1ff, 0x1, 0x5a8b, 0x0, 0x2]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5a7e7ad45f501910, 0x5, 0x16, 0x12, 0x6c, 0x12, 0x3d, 0x9, 0x1, 0xc, 0x12, 0x60, 0x36, 0x4, 0x18, 0x30, 0x48, 0x2, 0x2, 0x6c, 0x1d, 0x2, 0x60, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, {0x37c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x348, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x200, 0xf913, 0xf, 0xf000, 0x7fff, 0xffff, 0xfffa]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x1ff, 0x2, 0x70b, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0xc, 0x48, 0x10, 0x6, 0x36, 0x2, 0x16, 0x30, 0x60, 0x0, 0x30, 0x12, 0x30, 0x6c, 0x1b, 0x48, 0x9, 0x19, 0x12, 0x60, 0x2, 0x36, 0x4e, 0x1b, 0x12, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x4, 0x3, 0x4, 0x8, 0x8000, 0x7]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x3, 0x5, 0x0, 0x24, 0x12, 0x9, 0x2, 0x9, 0x12, 0x6c, 0x3c, 0x0]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa6, 0x4, 0x5, 0x2, 0x8, 0x7, 0x1, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x9, 0x4, 0x7, 0xf79, 0x4, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf800, 0xfffe, 0x1000, 0xb, 0x8, 0x67, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x1}, {0x5, 0x9}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x7}, {0x7, 0x7}, {0x4, 0x4}, {0x5, 0x8}, {0x7, 0x7}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x3, 0x5}, {0x3, 0x2}, {0x5, 0x4}, {0x0, 0xa}, {0x3, 0xa}, {0x1, 0x7}, {0x0, 0x7}, {0x3, 0x4}, {0x4, 0x6}, {0x6, 0x1}, {0x2, 0x4}, {0x0, 0x8}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x78, 0x468e, 0x4, 0x1000, 0x4, 0x200, 0x0, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9e9, 0x3, 0x7000, 0x6863, 0x36, 0x7f, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x1, 0xa, 0x200, 0x3, 0x628e, 0x7]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x7, 0x9}, {0x0, 0x9}, {0x2, 0x7}, {0x3, 0x2}, {0x3, 0x6}, {0x0, 0x3}, {0x3, 0x8}, {0x2, 0x8}, {0x5}, {0x4}, {0x2, 0xa}, {0x4, 0x4}, {0x7}, {0x4, 0x9}, {}, {0x5, 0x5}, {0x5, 0x1}, {0x0, 0x2}, {0x7, 0x7}, {0x6}, {0x1, 0x2}, {0x1, 0xa}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x4, 0x5}, {0x5, 0x3}, {0x0, 0x8}, {0x2}, {0x4, 0x2}, {0x3, 0x8}, {0x4, 0x4}, {0x5, 0x5}, {0x6, 0x9}, {0x6, 0x1}, {0x3, 0x8}, {0x4, 0x5}, {0x4}, {0x0, 0x3}, {0x3, 0x4}, {0x1, 0x3}, {0x3, 0x8}, {0x5}, {0x0, 0x6}, {0x1, 0x2}, {0x0, 0x7}, {0x1, 0x7}, {0x2, 0x3}, {0x3}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xf, 0x0, 0x9, 0x0, 0xa, 0x6, 0x8]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0x30, 0x24, 0xc]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x11, 0x18, 0x16, 0x6c, 0x1b, 0x2, 0x4, 0xc, 0x60, 0x48, 0x2, 0x60, 0x48, 0x0, 0x2, 0x6c, 0xc, 0x2, 0x16, 0x24, 0x1b, 0x9, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x8, 0x39b4, 0x200, 0x7, 0x7, 0x40, 0x9]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x4, 0x3, 0x2, 0x4, 0x6, 0x7]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0xa}, {0x4, 0x2}, {0x7, 0x8}, {0x4, 0x5}, {0x0, 0x5}, {0x2, 0x8}, {0x3, 0xa}, {0x4, 0x1}, {0x7, 0x4}, {0x2, 0x4}, {0x5, 0x7}, {0x3, 0x7}, {0x7, 0x7}, {0x0, 0x5}, {0x1, 0x4}, {0x4, 0x1}, {0x6}, {0x6, 0x5}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x9}, {0x2, 0xa}, {0x1, 0x4}, {0x1}, {0x2, 0x5}, {0x1, 0x9}, {0x7, 0x6}, {0x2}, {0x7, 0x5}, {0x1, 0x1}, {0x7}, {0x1, 0x3}, {0x4, 0x7}, {0x0, 0x2}, {0x3}, {0x4, 0x6}, {0x0, 0x3}, {0x6, 0x4}, {0x7, 0x5}, {0x3, 0x3}, {0x5, 0x7}, {0x6, 0x6}, {0x7, 0x9}, {0x3, 0x2}, {0x1, 0x6}, {0x4}, {0x1, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x8}, {0x1}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x5}, {0x4, 0x3}, {0x0, 0x2}, {0x2, 0x1}, {0x4, 0x3}, {0x3, 0x6}, {0x6, 0x3}, {}, {0x2, 0x2}, {0x3}, {0x6, 0x9}, {0x4, 0x6}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x7}, {0x2, 0x8}, {0x6, 0x3}, {0x3, 0x7}, {0x1, 0x8}, {0x2, 0x3}, {0x6, 0x2}, {0x7, 0x1}, {0x4, 0x2}, {0x3, 0x2}, {0x4, 0x3}, {0x7}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x5, 0x9}, {0x4, 0x7}, {0x2, 0x7}, {0x0, 0x9}, {0x4, 0x2}, {0x5, 0xa}, {0x3, 0x9}, {0x2, 0x2}, {0x5, 0xa}, {0x0, 0x6}, {0x1, 0x6}, {0x2, 0x3}, {0x4}, {0x7, 0xa}, {}, {0x2, 0x1}, {0x3, 0x4}, {0x5, 0x4}, {0x6, 0x6}, {0x1, 0x4}, {0x6, 0x5}, {0x5, 0xa}, {0x0, 0x3}, {0x7, 0x6}, {0x2}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x7}, {0x2, 0x6}, {0x6, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x4, 0x1}, {}, {0x3, 0x5}, {0x2, 0xa}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x6}, {0x7, 0x1}, {0x2, 0xa}, {0x4, 0x8}, {0x5, 0x4}, {0x5, 0x6}, {0x3}, {0x0, 0x9}, {0x4, 0x2}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x9}, {0x3, 0x8}, {0x5, 0x8}, {0x7, 0x6}, {0x1}, {0x1, 0x1}, {0x2, 0x7}, {0x3, 0x6}, {0x2, 0xa}, {0x2, 0x4}, {0x5, 0x8}, {0x0, 0x6}, {0x3, 0x7}, {0x7, 0xa}, {0x7, 0x8}, {0x2, 0x1}, {0x0, 0x5}, {0x4, 0x4}, {0x5, 0x9}, {0x6, 0xa}, {0x1, 0x7}, {0x3, 0x2}, {0x0, 0xa}, {0x2, 0x7}, {0x1, 0xa}, {0x0, 0x1}, {0x2}, {0x7, 0x3}, {0x1, 0x9}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x2}, {0x1, 0x9}, {0x5, 0x2}, {0x4, 0x2}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x3}, {0x2, 0x6}, {0x0, 0x4}, {}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x6}, {0x4, 0x6}, {0x0, 0xa}, {0x6, 0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x7, 0x5}, {0x0, 0x9}, {0x2, 0x9}, {0x3, 0x1}, {0x4, 0x2}, {0x2, 0x7}, {0x1}, {0x4, 0x9}, {0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x48, 0xc, 0x6, 0x3, 0xb, 0x2, 0xc, 0x48, 0xc, 0xb, 0x30, 0x60, 0x30, 0x6, 0x6]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x309b, 0x8, 0x5, 0x100, 0x10, 0x40, 0x9ac2]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x401}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x78}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x14}]}]}, @NL80211_ATTR_TID_CONFIG={0x5c0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf6}]}, {0x120, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x43}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x9, 0x6, 0x6, 0xa9, 0x5, 0xf, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x8f0, 0x6, 0x1, 0xe03, 0x8, 0x8001, 0x8]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x9}, {0x2, 0x6}, {0x6, 0x2}, {0x5}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x8}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0xa}, {0x6, 0x3}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0x6}, {0x2}, {0x4, 0x4}, {0x0, 0x5}, {}, {0x3, 0xa}, {0x7}, {0x6, 0x7}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x5}, {0x6, 0xa}, {0x1, 0xa}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x4}, {0x1, 0x7}, {0x7}, {0x5, 0x1}, {0x3, 0x1}, {0x6, 0x2}, {0x5, 0x5}, {0x3, 0x3}, {0x0, 0x5}, {0x7, 0x2}, {0x0, 0x1}, {0x6, 0x4}, {0x3, 0x6}, {0x3, 0x3}, {0x7, 0x9}, {0x0, 0x9}]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x6c, 0x18, 0x16, 0x5, 0x4, 0x2, 0x2, 0x8, 0x36, 0x67, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x0, 0x8000, 0x800, 0x0, 0x9, 0x8, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x12, 0xe806, 0x1, 0xd0, 0x9, 0x6, 0x6, 0x3]}}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x5, 0x8}, {0x4}, {0x1, 0x7}, {0x1, 0x6}, {0x3, 0xa}, {0x7, 0x2}, {0x2, 0x9}, {0x5, 0x5}, {0x5, 0x6}, {0x0, 0x8}, {}, {0x5, 0xa}, {0x7, 0x9}, {0x5, 0x6}, {0x2}, {0x6, 0x7}, {0x6, 0x5}, {0x6, 0x7}, {0x1, 0x3}, {0x5, 0x3}, {0x6}, {0x1, 0x3}, {0x4, 0x7}, {0x0, 0x6}, {0x3, 0x5}, {0x1, 0x6}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x6}, {0x0, 0xa}, {0x5, 0xa}, {0x2, 0x2}, {0x1}, {0x0, 0x3}, {0x2, 0xa}, {0x4}, {0x1}, {0x0, 0x6}, {0x2, 0x9}, {0x0, 0x1}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1e}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x364, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x350, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xebb, 0x1e00, 0x3, 0xfff8, 0x8, 0x8000, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x12, 0x5, 0x5, 0x60, 0x2a, 0x1b, 0x30, 0x6c, 0x6, 0x18, 0x6c, 0x12, 0x9, 0xc, 0x0, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x6, 0xa}, {0x4, 0x4}, {0x7, 0x2}, {0x6, 0x3}, {0x5, 0xa}, {0x5, 0x7}, {0x2}, {0x0, 0xa}, {0x0, 0x9}, {0x3, 0x3}, {0x5, 0x1}, {0x1, 0x5}, {0x2}, {0x3, 0x7}, {0x3, 0x4}, {0x7, 0x6}, {0x6, 0x3}, {0x3, 0x2}, {0x6, 0x5}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3, 0x48, 0x30, 0xb, 0x60, 0x10, 0x6c, 0x3, 0x4, 0x2, 0x5, 0x6, 0x60, 0x24, 0xbe5fa8610fdd7880, 0x9, 0x24, 0x9]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x2}, {0x6}, {0x7, 0x2}, {0x1, 0x7}, {0x2, 0x6}, {0x0, 0x2}, {0x2, 0x4}, {0x6, 0x9}, {0x6, 0xa}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x5, 0x6}, {0x1, 0x4}, {0x5, 0x4}, {0x7, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x5, 0x8}, {0x3, 0x7}, {0x7}, {0x4, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0x3}, {0x7, 0x5}, {0x3, 0x6}, {0x5, 0x3}, {}, {0x0, 0x3}, {0x7, 0x5}, {0x2, 0xa}, {0x7, 0x4}, {0x4, 0x8}, {0x2, 0x3}, {0x1, 0x6}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x8}, {0x2, 0x2}, {}, {0x4}, {}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x18, 0x2, 0x48, 0x36, 0x12, 0x8, 0x0, 0x12, 0x18, 0x48, 0x30, 0x4, 0x5, 0xb, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xfff, 0xb3, 0x7, 0x4, 0x58, 0x1, 0x2b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0xfbfb, 0x3, 0x0, 0x8001, 0xc, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xc, 0x8, 0x4, 0x8, 0x9, 0x7, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x7, 0x5, 0xff, 0x100, 0x92, 0xff56]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7, 0xe4a, 0x7, 0x9, 0x54, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0xd, 0x1, 0x12, 0x4, 0xc, 0x6, 0x6, 0x30, 0x12, 0x2, 0x18, 0x1b, 0x1, 0x60, 0x16, 0x9, 0x36, 0x4, 0x1, 0x5, 0x6c, 0x12, 0x60, 0x18, 0x6, 0x1, 0x3, 0x3c, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x9, 0x3, 0x48, 0xc, 0x1, 0x0, 0x12, 0x6c, 0xc, 0x48, 0x1b, 0x4, 0x2]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x5, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0x5}, {0x5, 0x8}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xca, 0x0, 0x8, 0x3ff, 0x7, 0x4, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x18, 0x1d, 0x6c, 0x5, 0x12, 0x6c, 0x6, 0xb, 0xa63d164ed69a8344, 0x12, 0x1, 0x6c, 0xc, 0x9, 0x24, 0x59, 0x5, 0x2, 0x3, 0x5, 0x5, 0x4, 0x6c, 0x5, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x7, 0x3, 0xff, 0x3, 0x6, 0x0, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x6, 0x101, 0x7fff, 0xfba, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x3, 0x3, 0x16, 0x12, 0x30, 0x24, 0x12, 0x6, 0x2, 0x24, 0x24, 0x1, 0x76]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x92, 0xfffd, 0x9, 0x6c2, 0x9, 0xf0, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x200, 0x4, 0x8000, 0xe5, 0x689, 0x1]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x60, 0x8000, 0x1000, 0x5, 0x7f, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x6, 0x3, 0x0, 0x0, 0x1, 0x6, 0x4]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x6, 0xa}, {0x7, 0x9}, {0x6, 0xa}, {0x2, 0xa}, {0x0, 0x3}, {0x6, 0xa}, {0x4}, {0x1, 0x5}, {0x2, 0x1}, {0x6, 0xa}, {0x1, 0x3}, {0x7, 0x3}, {0x0, 0xa}, {0x2, 0x5}, {0x2, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x1}, {0x3, 0x2}, {0x5, 0x9}, {0x3, 0x5}, {0x0, 0x5}, {0x6, 0x9}, {}, {0x3, 0x2}, {0x7, 0x7}, {0x5, 0x8}, {0x0, 0x5}, {0x6, 0x3}, {0x7, 0x8}, {0x4, 0x2}, {0x0, 0x4}, {0x5, 0x8}, {0x7, 0x2}, {0x3, 0x7}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0x6}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0x5}, {}, {0x3, 0x3}, {0x7, 0x6}, {0x5}, {0x3, 0x3}, {0x1, 0xa}, {0x5, 0xa}, {0x6, 0x7}, {0x4, 0x2}, {0x3, 0x7}, {0x2}, {0x2, 0x8}, {0x7, 0x4}, {0x1, 0xa}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0x1}, {0x5, 0x9}, {0x4, 0x4}, {0x0, 0xa}, {0x3, 0x8}, {0x7}, {0x2, 0x9}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x3, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x1, 0x48, 0x48, 0xc, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x44, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x4, 0x56b8, 0x2, 0x5, 0x1, 0x3, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2000, 0x8, 0x5, 0x8001, 0x1, 0x1, 0x1000, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x4, 0xa1c7, 0x2, 0x9, 0x4, 0x101]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x92}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}]}]}, @NL80211_ATTR_TID_CONFIG={0x474, 0x11d, 0x0, 0x1, [{0x36c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x34c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x4, 0x5, 0x400, 0xe730, 0x0, 0x5]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0xb, 0x2]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x0, 0x918, 0x59a, 0x5, 0x8, 0x90]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x6, 0x2}, {0x5, 0x3}, {0x5, 0x2}, {0x5, 0x3}, {0x3, 0x1}, {0x3, 0xa}, {0x4, 0x4}, {0x6, 0x6}, {0x0, 0x5}, {0x2, 0x6}, {0x1, 0x4}, {0x0, 0x4}, {0x3, 0x3}, {0x6, 0x9}, {0x1, 0x6}, {0x3, 0x7}, {0x1, 0x6}, {0x4, 0x5}, {0x0, 0x4}, {0x0, 0xa}, {0x4, 0x9}, {0x0, 0x2}, {0x2, 0x7}, {0x4, 0x6}, {0x5, 0x1}, {0x5, 0x6}, {0x6, 0x7}, {0x0, 0xa}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x2}, {0x4}, {0x1, 0x7}, {0x4, 0x7}, {0x1, 0xa}, {0x4, 0x8}, {0x7, 0x2}, {0x4, 0x9}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x2, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x1, 0x6}, {0x5}, {0x7, 0x5}, {0x6, 0x9}, {0x2, 0x8}, {0x2, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x6, 0x9}, {0x1, 0x5}, {0x6, 0x2}, {0x1, 0x7}, {0x3, 0x1}, {0x2, 0x4}, {0x0, 0x9}, {0x7, 0x5}, {0x5, 0x4}, {0x6, 0x7}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x0, 0x4, 0x8000, 0x0, 0x80, 0x7]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x2, 0x6, 0x1b, 0x1, 0x6c, 0x1, 0x2d23fa42abaae0ec, 0x60, 0x3d, 0x30, 0x30, 0xc, 0xc, 0x60, 0x4a3beea6575f9338, 0x1b, 0x3]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x6}, {0x3, 0x6}, {0x3, 0x9}, {0x7, 0x5}, {0x2, 0x8}, {0x7, 0x9}, {0x2, 0x9}, {0x6, 0x3}, {0x6, 0xa}, {0x5, 0x2}, {0x5, 0x7}, {0x0, 0x1}, {0x4, 0x9}, {0x5}, {0x6, 0x5}, {0x3, 0x3}, {0x6, 0x1}, {0x1, 0x7}, {0x6, 0x6}, {0x4, 0x6}, {0x7, 0x5}, {0x1, 0x1}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x5}, {0x1, 0x4}, {0x7, 0x7}, {0x5, 0x1}, {0x2, 0x9}, {0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x2, 0x4}, {0x0, 0x8}, {0x1, 0x4}, {0x7, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x0, 0xa}, {0x7, 0x7}, {0x5, 0x5}, {0x7, 0xa}, {0x5, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0xfff, 0x180, 0x1000, 0x8603, 0x315, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x2, 0x4, 0x7, 0xfffb, 0x5, 0x6]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x81}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x6, 0xc00, 0x8, 0x3, 0x9, 0x8]}}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xf, 0x9fd1, 0x3, 0xa000, 0xff, 0x3, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x3ff, 0x9, 0x50, 0x0, 0x9, 0x3, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0xfff, 0x40, 0xf, 0xe, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x3, 0x6, 0x2, 0x9, 0x9, 0x5, 0x30, 0x5, 0x2, 0xb, 0x24, 0x9, 0xb, 0x2, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xb0, 0x1000, 0x6, 0xb, 0x2, 0x5, 0x9]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0x9}, {0x1, 0x2}, {0x0, 0x4}, {0x6}, {0x4, 0x9}, {}, {0x6, 0x4}, {0x6, 0x5}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x7}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x3, 0x6}, {0x0, 0x5}, {0x5, 0x7}, {0x1, 0xa}, {}, {0x5, 0x8}, {0x6, 0x4}, {0x0, 0x3}, {0x4}, {0x5}, {0x1, 0xa}, {0x2, 0xa}, {0x1, 0x4}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x51, 0x4, 0x2, 0x3, 0xfff1, 0x4, 0x9]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x3, 0x3, 0x0, 0xd7b6, 0xc9a4, 0xff3f, 0x8000]}}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x3, 0x4, 0x5, 0xf, 0x5, 0xfe01]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0x1e, 0x36, 0x5, 0x2, 0x2, 0x5, 0x24, 0x60, 0x24, 0x24, 0x36, 0x5, 0xc, 0x12, 0x6, 0x1b, 0x3, 0x9, 0x6]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x6}, {0x1, 0x5}, {0x5, 0x1}, {0x2, 0x5}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x7, 0x4}, {0x3, 0x3}, {0x6, 0x3}, {0x6, 0xa}, {0x1, 0xa}, {0x3, 0x1}, {0x2, 0x6}, {}, {0x7, 0x3}, {0x0, 0x8}, {0x3, 0x5}, {0x4}, {0x1, 0x3}, {0x1, 0x7}, {0x3, 0x8}, {0x5, 0x4}, {0x5, 0x7}, {0x2}, {0x1, 0x9}, {0x6, 0x7}, {0x3}, {0x2, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x3, 0x9}, {0x1, 0x8}, {0x4, 0x6}, {0x3, 0x5}, {0x3, 0x9}, {0x0, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x1, 0x7}, {0x3, 0x4}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x7, 0x6}, {0x3}, {0x4, 0xa}, {0x5, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0x1}, {0x5, 0xa}, {0x1, 0x1}, {0x2, 0x4}, {0x2, 0x4}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x3}, {0x2, 0x8}, {0x5, 0x4}, {0x3, 0x5}, {0x7, 0x5}, {0x6, 0xa}, {0x7}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0x7}, {0x0, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0x2}, {0x7, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x1}, {0x4, 0x9}, {0x4, 0x6}, {0x2, 0x3}, {0x5, 0x3}, {0x1, 0x7}, {0x4, 0x5}, {0x5, 0x3}, {0x6, 0x6}, {0x0, 0x3}, {0x2, 0xa}, {0x2, 0x7}, {0x1, 0x5}, {0x7, 0x4}, {0x3, 0x8}, {0x5}, {0x7, 0x4}, {0x0, 0x9}, {0x4, 0x6}, {0x5, 0x2}, {0x1, 0x9}, {0x4, 0x9}, {0x3, 0x8}, {0x4, 0x2}, {0x7, 0x5}, {0x1, 0x7}, {0x7, 0x2}, {0x2, 0x9}, {0x2, 0x6}, {0x5, 0x4}, {0x0, 0x7}, {0x3, 0x2}, {0x5, 0x8}, {0x5, 0x6}, {0x7, 0x7}, {0x5, 0x2}, {0x2, 0x2}, {0x1, 0x3}, {0x3, 0x5}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x44c8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2b}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcd}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8d, 0xc1, 0x4, 0x4, 0x2, 0x8, 0x400]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x3a, 0x12, 0x5c, 0x6c, 0xb, 0x1, 0xb, 0x30, 0x36, 0xb, 0x18, 0xc, 0x48, 0x60, 0x16, 0x5, 0x16, 0x36, 0x6, 0x3, 0x4, 0x30, 0xc, 0x48, 0x1, 0x18, 0x9]}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9b}]}]}]}, 0x12f0}, 0x1, 0x0, 0x0, 0x24000894}, 0x40040) r8 = socket$inet6(0xa, 0x3, 0x3c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r10, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_open_dev$evdev(&(0x7f0000002f80), 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r10, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 4.802622261s ago: executing program 3 (id=2668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x480200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x1, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x6, 0xfffffffd) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRES64=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x6, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ptrace$poke(0x5, 0x0, &(0x7f00000002c0), 0x3380) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x8, 0x1, 0x0, 0xfffffffffffffffe}, 0x0) unshare(0x20060400) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'wlc\x00', 0x12, 0x85, 0x40002e}, 0x2c) 4.79906145s ago: executing program 5 (id=2669): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x9d}, @TCA_ROUTE4_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x80) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "2b356b2fdb0a4c76", "80f4f8e32bed7edc100e2185bb610633", "01a7ac52", "13b70133248dd8be"}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=@newtfilter={0x50, 0x2c, 0x300, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_POLICE={0x4}, @TCA_U32_SEL={0x14, 0x5, {0x3, 0xbf, 0x40, 0xfff, 0x8000, 0x3, 0x9, 0x9c19}}, @TCA_U32_FLAGS={0x8, 0xb, 0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x0, 0x500, 0x4, 0x540000, r7}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xd9}], 0x1}, 0x3b83}], 0x1, 0x20001000, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @private0, 0x0, 0x6, 0x0, 0x500, 0x6, 0x1a0107, r7}) 4.687756033s ago: executing program 1 (id=2670): landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x97, 0x8, 0x47314356, 0x33565348, 0x3, [{0x9, 0x9}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x89d, 0x2b5}, {0x7, 0x2}, {0x80000001, 0x200}, {0xffffff01, 0x8000}, {0x1, 0x4}], 0x8, 0x8, 0x8, 0x0, 0x7}}) sched_setattr(0x0, &(0x7f0000000280)={0xfffffffffffffdc0, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x20000485, 0x100) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x7, {0x5d3, 0x4, 0xb, 0x40008001}}) r4 = open(0x0, 0x345842, 0x389b0d52417bb201) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_setup(0x104, &(0x7f0000000180)=0x0) io_submit(r5, 0x2, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xe, 0xffffffffffffffff, &(0x7f0000000500)="6d45b8b2a5a239aaca9b71ecfb19222095595c98ff926b4717924f919a60c33477495b9bc2ebec8e811d8b08e3ad6c369abbffe5bfe9f11b3ac8e3eb97d0e35dd75d7390ab0b3e4167fde7c518a6a20246ec60b40e085d441bca99381d1ae95722cb622efbe2f1fa6e", 0x69, 0x80, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x1, r4}]) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x42}) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0xee) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x123180, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r7, 0x40045109, &(0x7f00000000c0)=0x7a9c7d23) ioctl$UI_DEV_CREATE(r6, 0x5501) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/123, 0x7b) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 4.617856082s ago: executing program 5 (id=2671): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000340)={0x10000000000000e6, 0x0, [{0x40000091, 0x0, 0x3}]}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2) syz_usb_control_io$hid(r7, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) ioctl$HIDIOCGFIELDINFO(r8, 0xc038480a, &(0x7f0000000000)={0x2, 0xffffffff, 0x3, 0x7, 0x5, 0x3, 0xe, 0x5, 0x268, 0x1, 0x2, 0x3, 0x8}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[], 0x18) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x2) 4.433200101s ago: executing program 3 (id=2672): landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x97, 0x8, 0x47314356, 0x33565348, 0x3, [{0x9, 0x9}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x89d, 0x2b5}, {0x7, 0x2}, {0x80000001, 0x200}, {0xffffff01, 0x8000}, {0x1, 0x4}], 0x8, 0x8, 0x8, 0x0, 0x7}}) sched_setattr(0x0, &(0x7f0000000280)={0xfffffffffffffdc0, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x20000485, 0x100) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x7, {0x5d3, 0x4, 0xb, 0x40008001}}) r4 = open(0x0, 0x345842, 0x389b0d52417bb201) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_setup(0x104, &(0x7f0000000180)=0x0) io_submit(r5, 0x3, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xe, 0xffffffffffffffff, &(0x7f0000000500)="6d45b8b2a5a239aaca9b71ecfb19222095595c98ff926b4717924f919a60c33477495b9bc2ebec8e811d8b08e3ad6c369abbffe5bfe9f11b3ac8e3eb97d0e35dd75d7390ab0b3e4167fde7c518a6a20246ec60b40e085d441bca99381d1ae95722cb622efbe2f1fa6e", 0x69, 0x80, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x1, r4}, 0x0]) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x42}) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0xee) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x123180, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r7, 0x40045109, &(0x7f00000000c0)=0x7a9c7d23) ioctl$UI_DEV_CREATE(r6, 0x5501) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/123, 0x7b) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 3.257441963s ago: executing program 2 (id=2674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000480), 0x4) 3.002994642s ago: executing program 1 (id=2675): prlimit64(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x490, 0x204, 0x204, 0x204, 0x204, 0x170, 0x3fc, 0x3fc, 0x3fc, 0x3fc, 0x3fc, 0x6, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010102, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x1}, 0x0, 0x134, 0x170, 0x0, {}, [@common=@unspec=@conntrack3={{0xc4}, {{@ipv4=@loopback, [0xff000000, 0xff, 0xff000000, 0xff000000], @ipv6=@mcast1, [0xff000000, 0xffffff00, 0xffffffff], @ipv6=@local, [0x0, 0xff, 0xff000000, 0xffffff00], @ipv6=@loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffffff], 0x6, 0x1, 0x73, 0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x800}, 0x40, 0x480, 0x4e23, 0xe, 0x4e21, 0x4e23}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x3, 0x8001, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @ECN={0x24}}, {{@ip={@multicast1, @broadcast, 0xff, 0xff000000, 'bridge_slave_0\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x62, 0x2, 0x42}, 0x0, 0x70, 0x94}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x298}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6]}, {0x0, [0x1]}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4ec) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="200620"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "dfa200", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x16f, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0xac9, {[@window={0x3, 0x3, 0x7}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@bridge_setlink={0x12, 0x13, 0xa29, 0x0, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x0, 0x11041}}, 0x24}}, 0x0) 2.935082034s ago: executing program 0 (id=2676): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xc0}}, 0x200000b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f0000000600)={r0, &(0x7f0000000400)='#\xaa:,,,-:&\x00', 0x200000, &(0x7f0000000540)={@align=0x4, {0x5, 0x7d11, 0x1000, 0x800}}, 0x9, &(0x7f0000000580), &(0x7f00000005c0)=0x400}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x2e1db837f4d5f9ec, 0x0, 0x6}, {0x64f, 0x0, 0x1c00000000000000}, {0x60d, 0x0, 0x10000}, {0x40000095, 0x0, 0x5}, {0x347, 0x0, 0x7e8000}, {0xbfe, 0x0, 0x8000}, {0x8a7, 0x0, 0x366b3f63}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000380)={'TPROXY\x00'}, &(0x7f00000003c0)=0x1e) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000280)=0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x400000, 0x0, 0x2000000, 0x0, 0xb, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x302000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc22e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7f7d, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x93, 0x2, 0x80, 0x2, "ea633d9f", "b83680f4"}}, 0x0}, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r5, &(0x7f00000000c0)='.\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.841304s ago: executing program 2 (id=2677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x40, r1, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0c, 0xfac0d, 0xfac05]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0a}]]}, 0x40}}, 0x0) (fail_nth: 4) 2.372194364s ago: executing program 2 (id=2678): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001780)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/117, 0x75}, {&(0x7f0000000180)=""/184, 0xb8}, {&(0x7f0000000240)=""/251, 0xfb}, {&(0x7f0000000340)=""/93, 0x5d}, {&(0x7f00000003c0)=""/50, 0x32}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000480)=""/10, 0xa}, {&(0x7f00000004c0)=""/48, 0x30}], 0x8}, 0x8}, {{&(0x7f0000000540)=@in, 0x80, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/16, 0x10}], 0x1, &(0x7f0000000640)=""/4096, 0x1000}, 0xff}, {{&(0x7f0000001640)=@qipcrtr, 0x80, &(0x7f0000001740)=[{&(0x7f00000016c0)=""/109, 0x6d}], 0x1}, 0x6}], 0x3, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000001940)=""/244, 0xf4}, 0x41a11efb}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001a40)=""/214, 0xd6}, {&(0x7f0000001800)=""/89, 0x59}, {&(0x7f0000001b40)=""/179, 0xb3}, {&(0x7f0000001c00)=""/178, 0xb2}], 0x4, &(0x7f0000001cc0)=""/34, 0x22}, 0xf7cc}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) pipe(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x5, 0x5, 0x1, 0x208, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0xc}, 0x50) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000004) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000021c0)={{}, {0x1, 0x2}, [], {0x4, 0x5}, [], {0x10, 0x1}}, 0x24, 0x2) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.273222378s ago: executing program 3 (id=2679): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10008001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) fsetxattr(r1, &(0x7f0000000180)=@known='trusted.overlay.nlink\x00', &(0x7f0000000480)='@\\*]&^\x00', 0x7, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x328, 0x1, 0x32314247, 0x7, 0x7, [{0xd}, {0xfffffffe, 0x6}, {0x0, 0x6}, {0x8, 0x844}, {0x1, 0x2}, {0x6, 0x5}, {0x4, 0x40}, {0xffffffff, 0x2ba}], 0x9, 0x7, 0x1, 0x0, 0x1}}) r2 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r4, 0x7a5, &(0x7f0000000140)={{@my=0x1, 0x4}, 0x1, 0x87}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r2, 0x0) fcntl$getown(r3, 0x9) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x30, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000200)=0xc) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.60836559s ago: executing program 0 (id=2680): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="780000005500e5022cbd70"], 0x78}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000200)={0x4c, r2, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffffb, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r6, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x800) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x34, r7, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x12f0, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x5e}}}}, [@NL80211_ATTR_TID_CONFIG={0x894, 0x11d, 0x0, 0x1, [{0x178, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x21}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x3ff, 0x1, 0xf405, 0x1ff, 0x4, 0x4, 0xf]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7ff, 0x401, 0x7, 0xa9, 0x1, 0x7, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2eca, 0xb91e, 0x6, 0x3, 0x9, 0x1, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7f, 0x602f, 0x7ff, 0x3ff, 0xc, 0x2, 0x62a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x48, 0xe, 0x3, 0x1ff, 0x800, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xba4, 0x6, 0xfff, 0xfff, 0x5, 0x6, 0x5, 0x98c4]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xc5a, 0xd8d, 0x3, 0x7, 0x0, 0xae4, 0xf]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x2}, {0x1, 0x8}, {0x5, 0x3}, {0x6, 0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x7}, {0x4, 0x1}, {0x4, 0x4}, {0x1, 0x6}, {0x3, 0xa}, {0x5, 0x1}, {0x5, 0x6}, {0x0, 0x1}, {0x1, 0x5}, {0x5, 0x5}, {0x2, 0x9}, {0x1, 0x2}, {0x6, 0x2}, {0x6, 0x7}, {0x0, 0x6}, {0x2, 0x9}, {0x1}, {0x2, 0x8}, {0x0, 0x3}, {0x2, 0x1}, {0x0, 0x5}, {0x4, 0x4}, {0x2}, {0x6, 0x3}, {0x0, 0x6}, {0x0, 0x6}, {0x4, 0x1}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x5, 0x8}, {0x2}, {0x5, 0x7}, {0x7, 0x8}, {0x1, 0x8}, {0x4, 0x6}, {0x5, 0x7}, {0x1, 0x7}, {0x4, 0x6}, {0x0, 0x6}, {0x7, 0x9}, {0x3}, {0x5, 0x9}, {0x4, 0x9}, {0x4, 0x6}, {0x5, 0x3}, {0x3, 0x3}, {0x4, 0x3}, {0x0, 0x6}, {0x5, 0x7}, {0x2, 0x8}, {0x6, 0x8}, {0x2, 0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x4, 0x3}, {0x2, 0x8}, {0x2, 0x8}, {0x2, 0x8}, {0x5, 0x6}, {0x7, 0x3}, {0x6, 0x8}, {0x0, 0x4}, {0x5, 0x6}, {0x5, 0x3}, {0x6, 0x2}, {0x5, 0xa}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, {0x300, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2f4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x0, 0x7, 0xfffc, 0x37ce, 0x1, 0x17, 0xfffa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x0, 0x90, 0x79ca, 0x2, 0x0, 0x1, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1b, 0x48, 0x36, 0x1b, 0x3, 0x1c, 0x12, 0x5, 0x30, 0xc, 0x3, 0xc, 0x5, 0x16, 0x1, 0x12, 0x0]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x28, 0x60, 0xb, 0x4, 0x24, 0x0, 0x5c, 0x1, 0x48, 0x12, 0x3, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xdbd, 0xb, 0x806, 0x7, 0x0, 0xb, 0x1691]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x18, 0x36, 0x60, 0xb, 0x1b, 0x48, 0x16, 0x2, 0xc, 0x48, 0x0, 0x24, 0x1b, 0x16, 0x12, 0x16, 0x6c, 0x48, 0x16, 0x5, 0x59, 0xc, 0x2, 0x53, 0x5, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x9d, 0x9, 0x5, 0xf6c7, 0xfff4, 0x1ff]}}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x30, 0x60, 0x1, 0x30, 0x1b, 0x30, 0x1b, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x474, 0x1, 0x7, 0x5, 0x2, 0x4, 0x1000, 0xff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0xb, 0x18, 0x6c, 0x48, 0x6c, 0x6c, 0x18, 0x4a, 0x16, 0x3, 0x24, 0x18, 0x36, 0x60, 0x24, 0x5, 0x60, 0x3, 0x5a, 0x30, 0x16, 0x6, 0x6c, 0x4, 0x6c, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x11, 0x0, 0x0, 0x7, 0x22b, 0x1, 0x9]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x8, 0x9, 0x101, 0x4, 0xfff, 0x4, 0xfffd]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x30, 0x5, 0x5, 0x30, 0x2, 0x24, 0xb, 0x6c, 0x6, 0x4, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x5, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x5, 0x5}, {0x1, 0x5}, {0x3, 0x9}, {0x1}, {0x6, 0x5}, {0x4, 0x5}, {0x4, 0x2}, {0x0, 0x9}, {0x7, 0x5}, {0x6, 0x5}, {0x4, 0xa}, {0x1, 0x7}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0x7}, {0x3, 0x8}, {0x6, 0x7}, {0x5, 0x3}, {0x5}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0x4}, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x1}, {0x0, 0x2}, {0x2, 0x6}, {0x3, 0x3}, {0x2, 0x9}, {0x4}, {0x2, 0x7}, {0x2, 0x9}, {0x1, 0x5}, {0x5}, {0x5, 0x5}, {0x4}, {0x7, 0x1}, {0x5, 0x5}, {0x3, 0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x7, 0x1}, {0x1, 0x4}, {0x3, 0x2}, {0x1, 0xa}, {0x6, 0x7}, {0x7}, {0x0, 0x5}, {0x6, 0x4}, {0x0, 0x5}, {0x2, 0x7}, {0x7, 0x6}, {0x4, 0x7}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xad, 0x5, 0xb4, 0x0, 0xf, 0x3, 0x3]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x4}, {0x7, 0x2}, {0x3, 0x6}, {0x1, 0x4}, {0x7, 0x3}, {0x3, 0x1}, {0x3, 0x7}, {0x4, 0x5}, {0x1, 0x4}, {0x0, 0x3}, {0x4}, {0x2, 0x7}, {0x1, 0x3}, {0x0, 0x3}, {0x0, 0x5}, {0x4, 0x8}, {0x7, 0xa}, {0x2, 0x2}, {0x0, 0x1}, {0x4, 0x2}]}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0x2}, {0x1, 0x2}, {0x5, 0x4}, {0x5, 0x9}, {0x2}, {0x0, 0x8}, {0x4, 0x6}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0xa}, {0x6, 0x6}, {0x2, 0x5}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x6, 0xa}, {0x1, 0xa}, {0x3, 0x6}, {0x4, 0x7}, {0x1, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x0, 0x2}, {0x2, 0xa}, {0x2, 0x1b}, {0x1, 0x2}, {0x1, 0x1}, {0x4, 0x2}, {0x1, 0x3}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x2}, {0x4, 0x4}, {0x2, 0x4}, {0x5, 0x1}, {0x1, 0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x2}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0xa}, {0x3, 0x1}, {0x1, 0x3}, {0x6, 0x8}, {0x2, 0xa}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x6}, {0x3, 0x6}, {0x4, 0x5}, {0x3, 0x5}, {0x5, 0x3}, {0x7, 0x2}, {0x4, 0x5}, {0x7}, {0x4, 0x6}, {0x2, 0x5}, {0x2, 0x6}, {0x6, 0x2}, {0x5, 0x9}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x3}, {0x1, 0x9}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x6}, {0x4, 0x9}, {0x5, 0x6}, {0x2, 0xa}, {0x7, 0x7}, {0x4, 0x2}, {0x6, 0x7}, {0x5, 0x7}, {0x4, 0x3}, {0x2, 0x1}, {0x2, 0x6}, {0x5}, {0x4, 0x7}, {0x6, 0x5}, {0x3, 0x8}, {0x3, 0x7}, {0x2, 0x8}, {0x5, 0x9}, {0x7, 0x5}, {0x0, 0x8}, {0x5, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xffff, 0x8, 0x200, 0x10, 0x8, 0x23b, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x9, 0xffc0, 0x1ff, 0x1, 0x5a8b, 0x0, 0x2]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5a7e7ad45f501910, 0x5, 0x16, 0x12, 0x6c, 0x12, 0x3d, 0x9, 0x1, 0xc, 0x12, 0x60, 0x36, 0x4, 0x18, 0x30, 0x48, 0x2, 0x2, 0x6c, 0x1d, 0x2, 0x60, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, {0x37c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x348, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x200, 0xf913, 0xf, 0xf000, 0x7fff, 0xffff, 0xfffa]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x1ff, 0x2, 0x70b, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0xc, 0x48, 0x10, 0x6, 0x36, 0x2, 0x16, 0x30, 0x60, 0x0, 0x30, 0x12, 0x30, 0x6c, 0x1b, 0x48, 0x9, 0x19, 0x12, 0x60, 0x2, 0x36, 0x4e, 0x1b, 0x12, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x4, 0x3, 0x4, 0x8, 0x8000, 0x7]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x3, 0x5, 0x0, 0x24, 0x12, 0x9, 0x2, 0x9, 0x12, 0x6c, 0x3c, 0x0]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa6, 0x4, 0x5, 0x2, 0x8, 0x7, 0x1, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x9, 0x4, 0x7, 0xf79, 0x4, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf800, 0xfffe, 0x1000, 0xb, 0x8, 0x67, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x1}, {0x5, 0x9}, {0x6, 0x7}, {0x7, 0x7}, {0x4, 0x7}, {0x7, 0x7}, {0x4, 0x4}, {0x5, 0x8}, {0x7, 0x7}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x3, 0x5}, {0x3, 0x2}, {0x5, 0x4}, {0x0, 0xa}, {0x3, 0xa}, {0x1, 0x7}, {0x0, 0x7}, {0x3, 0x4}, {0x4, 0x6}, {0x6, 0x1}, {0x2, 0x4}, {0x0, 0x8}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x78, 0x468e, 0x4, 0x1000, 0x4, 0x200, 0x0, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9e9, 0x3, 0x7000, 0x6863, 0x36, 0x7f, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x1, 0xa, 0x200, 0x3, 0x628e, 0x7]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x7, 0x9}, {0x0, 0x9}, {0x2, 0x7}, {0x3, 0x2}, {0x3, 0x6}, {0x0, 0x3}, {0x3, 0x8}, {0x2, 0x8}, {0x5}, {0x4}, {0x2, 0xa}, {0x4, 0x4}, {0x7}, {0x4, 0x9}, {}, {0x5, 0x5}, {0x5, 0x1}, {0x0, 0x2}, {0x7, 0x7}, {0x6}, {0x1, 0x2}, {0x1, 0xa}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x4, 0x5}, {0x5, 0x3}, {0x0, 0x8}, {0x2}, {0x4, 0x2}, {0x3, 0x8}, {0x4, 0x4}, {0x5, 0x5}, {0x6, 0x9}, {0x6, 0x1}, {0x3, 0x8}, {0x4, 0x5}, {0x4}, {0x0, 0x3}, {0x3, 0x4}, {0x1, 0x3}, {0x3, 0x8}, {0x5}, {0x0, 0x6}, {0x1, 0x2}, {0x0, 0x7}, {0x1, 0x7}, {0x2, 0x3}, {0x3}, {0x3, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0xf, 0x0, 0x9, 0x0, 0xa, 0x6, 0x8]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0x30, 0x24, 0xc]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x11, 0x18, 0x16, 0x6c, 0x1b, 0x2, 0x4, 0xc, 0x60, 0x48, 0x2, 0x60, 0x48, 0x0, 0x2, 0x6c, 0xc, 0x2, 0x16, 0x24, 0x1b, 0x9, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x8, 0x39b4, 0x200, 0x7, 0x7, 0x40, 0x9]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x4, 0x3, 0x2, 0x4, 0x6, 0x7]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0xa}, {0x4, 0x2}, {0x7, 0x8}, {0x4, 0x5}, {0x0, 0x5}, {0x2, 0x8}, {0x3, 0xa}, {0x4, 0x1}, {0x7, 0x4}, {0x2, 0x4}, {0x5, 0x7}, {0x3, 0x7}, {0x7, 0x7}, {0x0, 0x5}, {0x1, 0x4}, {0x4, 0x1}, {0x6}, {0x6, 0x5}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x9}, {0x2, 0xa}, {0x1, 0x4}, {0x1}, {0x2, 0x5}, {0x1, 0x9}, {0x7, 0x6}, {0x2}, {0x7, 0x5}, {0x1, 0x1}, {0x7}, {0x1, 0x3}, {0x4, 0x7}, {0x0, 0x2}, {0x3}, {0x4, 0x6}, {0x0, 0x3}, {0x6, 0x4}, {0x7, 0x5}, {0x3, 0x3}, {0x5, 0x7}, {0x6, 0x6}, {0x7, 0x9}, {0x3, 0x2}, {0x1, 0x6}, {0x4}, {0x1, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x8}, {0x1}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x5}, {0x4, 0x3}, {0x0, 0x2}, {0x2, 0x1}, {0x4, 0x3}, {0x3, 0x6}, {0x6, 0x3}, {}, {0x2, 0x2}, {0x3}, {0x6, 0x9}, {0x4, 0x6}, {0x6, 0x2}]}]}, @NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x7}, {0x2, 0x8}, {0x6, 0x3}, {0x3, 0x7}, {0x1, 0x8}, {0x2, 0x3}, {0x6, 0x2}, {0x7, 0x1}, {0x4, 0x2}, {0x3, 0x2}, {0x4, 0x3}, {0x7}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x5, 0x9}, {0x4, 0x7}, {0x2, 0x7}, {0x0, 0x9}, {0x4, 0x2}, {0x5, 0xa}, {0x3, 0x9}, {0x2, 0x2}, {0x5, 0xa}, {0x0, 0x6}, {0x1, 0x6}, {0x2, 0x3}, {0x4}, {0x7, 0xa}, {}, {0x2, 0x1}, {0x3, 0x4}, {0x5, 0x4}, {0x6, 0x6}, {0x1, 0x4}, {0x6, 0x5}, {0x5, 0xa}, {0x0, 0x3}, {0x7, 0x6}, {0x2}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x7}, {0x2, 0x6}, {0x6, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x4, 0x1}, {}, {0x3, 0x5}, {0x2, 0xa}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x6}, {0x7, 0x1}, {0x2, 0xa}, {0x4, 0x8}, {0x5, 0x4}, {0x5, 0x6}, {0x3}, {0x0, 0x9}, {0x4, 0x2}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x9}, {0x3, 0x8}, {0x5, 0x8}, {0x7, 0x6}, {0x1}, {0x1, 0x1}, {0x2, 0x7}, {0x3, 0x6}, {0x2, 0xa}, {0x2, 0x4}, {0x5, 0x8}, {0x0, 0x6}, {0x3, 0x7}, {0x7, 0xa}, {0x7, 0x8}, {0x2, 0x1}, {0x0, 0x5}, {0x4, 0x4}, {0x5, 0x9}, {0x6, 0xa}, {0x1, 0x7}, {0x3, 0x2}, {0x0, 0xa}, {0x2, 0x7}, {0x1, 0xa}, {0x0, 0x1}, {0x2}, {0x7, 0x3}, {0x1, 0x9}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x2}, {0x1, 0x9}, {0x5, 0x2}, {0x4, 0x2}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x3}, {0x2, 0x6}, {0x0, 0x4}, {}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x6}, {0x1, 0x2}, {0x6, 0x6}, {0x4, 0x6}, {0x0, 0xa}, {0x6, 0x7}, {0x4, 0x5}, {0x0, 0xa}, {0x2, 0x1}, {0x7, 0x5}, {0x0, 0x9}, {0x2, 0x9}, {0x3, 0x1}, {0x4, 0x2}, {0x2, 0x7}, {0x1}, {0x4, 0x9}, {0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x48, 0xc, 0x6, 0x3, 0xb, 0x2, 0xc, 0x48, 0xc, 0xb, 0x30, 0x60, 0x30, 0x6, 0x6]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x309b, 0x8, 0x5, 0x100, 0x10, 0x40, 0x9ac2]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x401}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb3}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x78}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x14}]}]}, @NL80211_ATTR_TID_CONFIG={0x5c0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf6}]}, {0x120, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x43}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x9, 0x6, 0x6, 0xa9, 0x5, 0xf, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x8f0, 0x6, 0x1, 0xe03, 0x8, 0x8001, 0x8]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x9}, {0x2, 0x6}, {0x6, 0x2}, {0x5}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x8}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0xa}, {0x6, 0x3}, {0x1, 0x3}, {0x2, 0x9}, {0x0, 0x6}, {0x2}, {0x4, 0x4}, {0x0, 0x5}, {}, {0x3, 0xa}, {0x7}, {0x6, 0x7}, {0x3, 0x5}, {0x0, 0x5}, {0x1, 0x5}, {0x6, 0xa}, {0x1, 0xa}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x4}, {0x1, 0x7}, {0x7}, {0x5, 0x1}, {0x3, 0x1}, {0x6, 0x2}, {0x5, 0x5}, {0x3, 0x3}, {0x0, 0x5}, {0x7, 0x2}, {0x0, 0x1}, {0x6, 0x4}, {0x3, 0x6}, {0x3, 0x3}, {0x7, 0x9}, {0x0, 0x9}]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x6c, 0x18, 0x16, 0x5, 0x4, 0x2, 0x2, 0x8, 0x36, 0x67, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x0, 0x8000, 0x800, 0x0, 0x9, 0x8, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x12, 0xe806, 0x1, 0xd0, 0x9, 0x6, 0x6, 0x3]}}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x5, 0x8}, {0x4}, {0x1, 0x7}, {0x1, 0x6}, {0x3, 0xa}, {0x7, 0x2}, {0x2, 0x9}, {0x5, 0x5}, {0x5, 0x6}, {0x0, 0x8}, {}, {0x5, 0xa}, {0x7, 0x9}, {0x5, 0x6}, {0x2}, {0x6, 0x7}, {0x6, 0x5}, {0x6, 0x7}, {0x1, 0x3}, {0x5, 0x3}, {0x6}, {0x1, 0x3}, {0x4, 0x7}, {0x0, 0x6}, {0x3, 0x5}, {0x1, 0x6}]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x0, 0x6}, {0x0, 0xa}, {0x5, 0xa}, {0x2, 0x2}, {0x1}, {0x0, 0x3}, {0x2, 0xa}, {0x4}, {0x1}, {0x0, 0x6}, {0x2, 0x9}, {0x0, 0x1}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7fffffffffffffff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1e}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x364, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x81}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x350, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xebb, 0x1e00, 0x3, 0xfff8, 0x8, 0x8000, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x12, 0x5, 0x5, 0x60, 0x2a, 0x1b, 0x30, 0x6c, 0x6, 0x18, 0x6c, 0x12, 0x9, 0xc, 0x0, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x6, 0xa}, {0x4, 0x4}, {0x7, 0x2}, {0x6, 0x3}, {0x5, 0xa}, {0x5, 0x7}, {0x2}, {0x0, 0xa}, {0x0, 0x9}, {0x3, 0x3}, {0x5, 0x1}, {0x1, 0x5}, {0x2}, {0x3, 0x7}, {0x3, 0x4}, {0x7, 0x6}, {0x6, 0x3}, {0x3, 0x2}, {0x6, 0x5}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3, 0x48, 0x30, 0xb, 0x60, 0x10, 0x6c, 0x3, 0x4, 0x2, 0x5, 0x6, 0x60, 0x24, 0xbe5fa8610fdd7880, 0x9, 0x24, 0x9]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x2}, {0x6}, {0x7, 0x2}, {0x1, 0x7}, {0x2, 0x6}, {0x0, 0x2}, {0x2, 0x4}, {0x6, 0x9}, {0x6, 0xa}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x5, 0x6}, {0x1, 0x4}, {0x5, 0x4}, {0x7, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x5, 0x8}, {0x3, 0x7}, {0x7}, {0x4, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0x3}, {0x7, 0x5}, {0x3, 0x6}, {0x5, 0x3}, {}, {0x0, 0x3}, {0x7, 0x5}, {0x2, 0xa}, {0x7, 0x4}, {0x4, 0x8}, {0x2, 0x3}, {0x1, 0x6}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x8}, {0x2, 0x2}, {}, {0x4}, {}]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x18, 0x2, 0x48, 0x36, 0x12, 0x8, 0x0, 0x12, 0x18, 0x48, 0x30, 0x4, 0x5, 0xb, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xfff, 0xb3, 0x7, 0x4, 0x58, 0x1, 0x2b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0xfbfb, 0x3, 0x0, 0x8001, 0xc, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xc, 0x8, 0x4, 0x8, 0x9, 0x7, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x7, 0x5, 0xff, 0x100, 0x92, 0xff56]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7, 0xe4a, 0x7, 0x9, 0x54, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0xd, 0x1, 0x12, 0x4, 0xc, 0x6, 0x6, 0x30, 0x12, 0x2, 0x18, 0x1b, 0x1, 0x60, 0x16, 0x9, 0x36, 0x4, 0x1, 0x5, 0x6c, 0x12, 0x60, 0x18, 0x6, 0x1, 0x3, 0x3c, 0x0]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x9, 0x3, 0x48, 0xc, 0x1, 0x0, 0x12, 0x6c, 0xc, 0x48, 0x1b, 0x4, 0x2]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x5, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0x5}, {0x5, 0x8}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xca, 0x0, 0x8, 0x3ff, 0x7, 0x4, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x18, 0x1d, 0x6c, 0x5, 0x12, 0x6c, 0x6, 0xb, 0xa63d164ed69a8344, 0x12, 0x1, 0x6c, 0xc, 0x9, 0x24, 0x59, 0x5, 0x2, 0x3, 0x5, 0x5, 0x4, 0x6c, 0x5, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x7, 0x3, 0xff, 0x3, 0x6, 0x0, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x6, 0x101, 0x7fff, 0xfba, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x3, 0x3, 0x3, 0x16, 0x12, 0x30, 0x24, 0x12, 0x6, 0x2, 0x24, 0x24, 0x1, 0x76]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x92, 0xfffd, 0x9, 0x6c2, 0x9, 0xf0, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x200, 0x4, 0x8000, 0xe5, 0x689, 0x1]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x60, 0x8000, 0x1000, 0x5, 0x7f, 0xffff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x6, 0x3, 0x0, 0x0, 0x1, 0x6, 0x4]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x6, 0xa}, {0x7, 0x9}, {0x6, 0xa}, {0x2, 0xa}, {0x0, 0x3}, {0x6, 0xa}, {0x4}, {0x1, 0x5}, {0x2, 0x1}, {0x6, 0xa}, {0x1, 0x3}, {0x7, 0x3}, {0x0, 0xa}, {0x2, 0x5}, {0x2, 0xa}, {0x7, 0x2}, {0x2, 0x8}, {0x1, 0x1}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x1}, {0x3, 0x2}, {0x5, 0x9}, {0x3, 0x5}, {0x0, 0x5}, {0x6, 0x9}, {}, {0x3, 0x2}, {0x7, 0x7}, {0x5, 0x8}, {0x0, 0x5}, {0x6, 0x3}, {0x7, 0x8}, {0x4, 0x2}, {0x0, 0x4}, {0x5, 0x8}, {0x7, 0x2}, {0x3, 0x7}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0x6}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0x5}, {}, {0x3, 0x3}, {0x7, 0x6}, {0x5}, {0x3, 0x3}, {0x1, 0xa}, {0x5, 0xa}, {0x6, 0x7}, {0x4, 0x2}, {0x3, 0x7}, {0x2}, {0x2, 0x8}, {0x7, 0x4}, {0x1, 0xa}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0x1}, {0x5, 0x9}, {0x4, 0x4}, {0x0, 0xa}, {0x3, 0x8}, {0x7}, {0x2, 0x9}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x3, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x1, 0x48, 0x48, 0xc, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x44, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x4, 0x56b8, 0x2, 0x5, 0x1, 0x3, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2000, 0x8, 0x5, 0x8001, 0x1, 0x1, 0x1000, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x4, 0xa1c7, 0x2, 0x9, 0x4, 0x101]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x92}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}]}]}, @NL80211_ATTR_TID_CONFIG={0x474, 0x11d, 0x0, 0x1, [{0x36c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x34c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x4, 0x5, 0x400, 0xe730, 0x0, 0x5]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x30, 0xb, 0x2]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x0, 0x918, 0x59a, 0x5, 0x8, 0x90]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x6, 0x2}, {0x5, 0x3}, {0x5, 0x2}, {0x5, 0x3}, {0x3, 0x1}, {0x3, 0xa}, {0x4, 0x4}, {0x6, 0x6}, {0x0, 0x5}, {0x2, 0x6}, {0x1, 0x4}, {0x0, 0x4}, {0x3, 0x3}, {0x6, 0x9}, {0x1, 0x6}, {0x3, 0x7}, {0x1, 0x6}, {0x4, 0x5}, {0x0, 0x4}, {0x0, 0xa}, {0x4, 0x9}, {0x0, 0x2}, {0x2, 0x7}, {0x4, 0x6}, {0x5, 0x1}, {0x5, 0x6}, {0x6, 0x7}, {0x0, 0xa}, {0x7, 0x4}, {0x3, 0xa}, {0x5, 0x2}, {0x4}, {0x1, 0x7}, {0x4, 0x7}, {0x1, 0xa}, {0x4, 0x8}, {0x7, 0x2}, {0x4, 0x9}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x2, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x1, 0x6}, {0x5}, {0x7, 0x5}, {0x6, 0x9}, {0x2, 0x8}, {0x2, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x6, 0x9}, {0x1, 0x5}, {0x6, 0x2}, {0x1, 0x7}, {0x3, 0x1}, {0x2, 0x4}, {0x0, 0x9}, {0x7, 0x5}, {0x5, 0x4}, {0x6, 0x7}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x0, 0x4, 0x8000, 0x0, 0x80, 0x7]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x2, 0x6, 0x1b, 0x1, 0x6c, 0x1, 0x2d23fa42abaae0ec, 0x60, 0x3d, 0x30, 0x30, 0xc, 0xc, 0x60, 0x4a3beea6575f9338, 0x1b, 0x3]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x6}, {0x3, 0x6}, {0x3, 0x9}, {0x7, 0x5}, {0x2, 0x8}, {0x7, 0x9}, {0x2, 0x9}, {0x6, 0x3}, {0x6, 0xa}, {0x5, 0x2}, {0x5, 0x7}, {0x0, 0x1}, {0x4, 0x9}, {0x5}, {0x6, 0x5}, {0x3, 0x3}, {0x6, 0x1}, {0x1, 0x7}, {0x6, 0x6}, {0x4, 0x6}, {0x7, 0x5}, {0x1, 0x1}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x5}, {0x1, 0x4}, {0x7, 0x7}, {0x5, 0x1}, {0x2, 0x9}, {0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x2, 0x4}, {0x0, 0x8}, {0x1, 0x4}, {0x7, 0x7}, {0x1, 0xa}, {0x0, 0x3}, {0x0, 0xa}, {0x7, 0x7}, {0x5, 0x5}, {0x7, 0xa}, {0x5, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0xfff, 0x180, 0x1000, 0x8603, 0x315, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x2, 0x4, 0x7, 0xfffb, 0x5, 0x6]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x81}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x6, 0xc00, 0x8, 0x3, 0x9, 0x8]}}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xf, 0x9fd1, 0x3, 0xa000, 0xff, 0x3, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x3ff, 0x9, 0x50, 0x0, 0x9, 0x3, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0xfff, 0x40, 0xf, 0xe, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x3, 0x6, 0x2, 0x9, 0x9, 0x5, 0x30, 0x5, 0x2, 0xb, 0x24, 0x9, 0xb, 0x2, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xb0, 0x1000, 0x6, 0xb, 0x2, 0x5, 0x9]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x5, 0x9}, {0x1, 0x2}, {0x0, 0x4}, {0x6}, {0x4, 0x9}, {}, {0x6, 0x4}, {0x6, 0x5}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x7}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x3, 0x6}, {0x0, 0x5}, {0x5, 0x7}, {0x1, 0xa}, {}, {0x5, 0x8}, {0x6, 0x4}, {0x0, 0x3}, {0x4}, {0x5}, {0x1, 0xa}, {0x2, 0xa}, {0x1, 0x4}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x51, 0x4, 0x2, 0x3, 0xfff1, 0x4, 0x9]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x3, 0x3, 0x0, 0xd7b6, 0xc9a4, 0xff3f, 0x8000]}}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x3, 0x4, 0x5, 0xf, 0x5, 0xfe01]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0x1e, 0x36, 0x5, 0x2, 0x2, 0x5, 0x24, 0x60, 0x24, 0x24, 0x36, 0x5, 0xc, 0x12, 0x6, 0x1b, 0x3, 0x9, 0x6]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x6}, {0x1, 0x5}, {0x5, 0x1}, {0x2, 0x5}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x7, 0x4}, {0x3, 0x3}, {0x6, 0x3}, {0x6, 0xa}, {0x1, 0xa}, {0x3, 0x1}, {0x2, 0x6}, {}, {0x7, 0x3}, {0x0, 0x8}, {0x3, 0x5}, {0x4}, {0x1, 0x3}, {0x1, 0x7}, {0x3, 0x8}, {0x5, 0x4}, {0x5, 0x7}, {0x2}, {0x1, 0x9}, {0x6, 0x7}, {0x3}, {0x2, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x3, 0x9}, {0x1, 0x8}, {0x4, 0x6}, {0x3, 0x5}, {0x3, 0x9}, {0x0, 0x8}, {0x4, 0xa}, {0x2, 0x1}, {0x1, 0x7}, {0x3, 0x4}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x6}, {0x0, 0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x7, 0x6}, {0x3}, {0x4, 0xa}, {0x5, 0x7}, {0x1, 0x8}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0x1}, {0x5, 0xa}, {0x1, 0x1}, {0x2, 0x4}, {0x2, 0x4}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0x3}, {0x2, 0x8}, {0x5, 0x4}, {0x3, 0x5}, {0x7, 0x5}, {0x6, 0xa}, {0x7}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0x7}, {0x0, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0x2}, {0x7, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x1}, {0x4, 0x9}, {0x4, 0x6}, {0x2, 0x3}, {0x5, 0x3}, {0x1, 0x7}, {0x4, 0x5}, {0x5, 0x3}, {0x6, 0x6}, {0x0, 0x3}, {0x2, 0xa}, {0x2, 0x7}, {0x1, 0x5}, {0x7, 0x4}, {0x3, 0x8}, {0x5}, {0x7, 0x4}, {0x0, 0x9}, {0x4, 0x6}, {0x5, 0x2}, {0x1, 0x9}, {0x4, 0x9}, {0x3, 0x8}, {0x4, 0x2}, {0x7, 0x5}, {0x1, 0x7}, {0x7, 0x2}, {0x2, 0x9}, {0x2, 0x6}, {0x5, 0x4}, {0x0, 0x7}, {0x3, 0x2}, {0x5, 0x8}, {0x5, 0x6}, {0x7, 0x7}, {0x5, 0x2}, {0x2, 0x2}, {0x1, 0x3}, {0x3, 0x5}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x44c8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2b}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcd}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8d, 0xc1, 0x4, 0x4, 0x2, 0x8, 0x400]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x3a, 0x12, 0x5c, 0x6c, 0xb, 0x1, 0xb, 0x30, 0x36, 0xb, 0x18, 0xc, 0x48, 0x60, 0x16, 0x5, 0x16, 0x36, 0x6, 0x3, 0x4, 0x30, 0xc, 0x48, 0x1, 0x18, 0x9]}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9b}]}]}]}, 0x12f0}, 0x1, 0x0, 0x0, 0x24000894}, 0x40040) r8 = socket$inet6(0xa, 0x3, 0x3c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r10, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_open_dev$evdev(&(0x7f0000002f80), 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r10, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 1.182192013s ago: executing program 0 (id=2681): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x9d}, @TCA_ROUTE4_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x80) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "2b356b2fdb0a4c76", "80f4f8e32bed7edc100e2185bb610633", "01a7ac52", "13b70133248dd8be"}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=@newtfilter={0x50, 0x2c, 0x300, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_POLICE={0x4}, @TCA_U32_SEL={0x14, 0x5, {0x3, 0xbf, 0x40, 0xfff, 0x8000, 0x3, 0x9, 0x9c19}}, @TCA_U32_FLAGS={0x8, 0xb, 0x6}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x0, 0x500, 0x4, 0x540000, r7}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xd9}], 0x1}, 0x3b83}], 0x1, 0x20001000, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @private0, 0x0, 0x6, 0x0, 0x500, 0x6, 0x1a0107, r7}) 1.077933729s ago: executing program 2 (id=2682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x480200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x1, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x6, 0xfffffffd) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRES64=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x6, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ptrace$poke(0x5, 0x0, &(0x7f00000002c0), 0x3380) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x8, 0x1, 0x0, 0xfffffffffffffffe}, 0x0) unshare(0x20060400) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'wlc\x00', 0x12, 0x85, 0x40002e}, 0x2c) 821.139798ms ago: executing program 0 (id=2683): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x5, {0x0, 0x10, 0x401, 0x5}}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe(&(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0xffffff}, 0x10) write(r2, &(0x7f0000001dc0)="240000001a005f0214f9f407000904001f00000000040000000000000800040001000000", 0x24) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) readv(r4, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/221, 0xdd}], 0x1) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x2, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f0000000000)={{}, {0x0, 0x9}}, 0x0) socket(0x11, 0x2, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = eventfd2(0xff, 0x80801) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000000c0)={0x0, r6}) epoll_create1(0x0) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[], 0x38}}, 0x10) 695.074043ms ago: executing program 2 (id=2684): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x104, 0x11, 0x148, 0x104, 0x0, 0x1d4, 0x2a8, 0x2a8, 0x1d4, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe4, 0x104, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x4e24, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x4e20, 0x4e23, 0x4e20, 0x4e20, 0x4e20, 0x4e24, 0x4e21, 0x4e21, 0x4e21, 0x4e22], [0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0xf, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1]}}, @inet=@rpfilter={{0x24}, {0x2}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast1, @broadcast, 0x0, 0xff, 'wlan1\x00', 'netdevsim0\x00', {}, {}, 0x2e, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x3, 0x6, 0x6, 0x1, 0x2], 0x1, 0x1}, {0x1, [0x1, 0x0, 0x0, 0x5, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2c4) syz_open_dev$video4linux(&(0x7f0000001380), 0x80040001, 0x141) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001680)=@nat={'nat\x00', 0x670, 0x5, 0x4a8, 0x294, 0x198, 0xffffffff, 0x34c, 0x294, 0x414, 0x414, 0xffffffff, 0x414, 0x414, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x164, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0xe9, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x34}, {0x3, 0x0, 0x4, 0x3, 0x81}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0xfc, 0x0, {}, [@common=@addrtype={{0x2c}, {0x40, 0x200, 0x0, 0x1}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0x10, 0x1, 0x2}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @local, @local, @icmp_id=0x66, @gre_key=0x7}}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x17, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @gre_key=0x4, @gre_key=0x5}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x504) 400.16052ms ago: executing program 5 (id=2685): syz_usb_connect(0x5, 0x57, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x3f, 0x70, 0x1d, 0x10, 0x1410, 0xa005, 0xadc3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x3, 0xf3, 0xc, 0x10, 0x0, "", [{{0x9, 0x4, 0x3, 0x2, 0x1, 0xa4, 0xb7, 0x24, 0x4, [], [{{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x7, 0x5, 0x7, [@generic={0x7, 0xb, "d2036a8cf4"}]}}]}}, {{0x9, 0x4, 0xf8, 0xf, 0x0, 0x8, 0x62, 0xf5, 0x4}}, {{0x9, 0x4, 0xa2, 0x4, 0x1, 0x6d, 0x43, 0x36, 0x9, [], [{{0x9, 0x5, 0x1, 0x0, 0x8, 0xd, 0x6, 0x2, [@generic={0x8, 0xb, "7180c87e4747"}]}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x201, 0xc1, 0x8, 0x81, 0x40, 0x6}, 0x29, &(0x7f0000000d40)={0x5, 0xf, 0x29, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0x3, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "4465a4ef47d6d9a5bf6e421647216880"}, @ptm_cap={0x3}]}, 0x1, [{0x36, &(0x7f0000000d80)=@string={0x36, 0x3, "215e16ae42f8a9605e5c83b5520aef8052c7d91d0a5aed0864f067f840bc6bcb5713dd79701cebb0aae87f477f8b5b4142eb1420"}}]}) 290.060759ms ago: executing program 2 (id=2686): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_setup(0x6, &(0x7f0000000d80)=0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x404, 0x0, 0x4}]}) io_submit(r3, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x80, 0xffffffffffffffff, &(0x7f0000000000)="31ce", 0x2fe, 0xfbe, 0x0, 0x1}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r2, 0x0) r7 = dup(r2) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x5c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x1}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x24008840) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd86) 240.342644ms ago: executing program 0 (id=2687): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000480), 0x4) 0s ago: executing program 0 (id=2688): syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x2, 0x18}, {0x200, 0x1, 0x2, 0x6, [0x1e, 0x0, 0x8, 0x7, 0x8001, 0x4, 0xc, 0x101]}}}}, 0x25) kernel console output (not intermixed with test programs): 654.433530][T12866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2062'. [ 654.553279][ T5915] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 654.572957][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 654.582401][ T5929] usb 1-1: config 243 has an invalid interface number: 3 but max is 2 [ 654.612132][ T5929] usb 1-1: config 243 has an invalid interface number: 248 but max is 2 [ 654.621117][ T5929] usb 1-1: config 243 has an invalid interface number: 162 but max is 2 [ 654.690938][ T5929] usb 1-1: config 243 has an invalid interface association descriptor of length 2, skipping [ 654.748399][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.764687][ T5915] usb 2-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 654.783138][ T5929] usb 1-1: config 243 has no interface number 0 [ 654.789760][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.806079][ T5929] usb 1-1: config 243 has no interface number 1 [ 654.836103][ T5915] usb 2-1: config 0 descriptor?? [ 654.841236][ T5929] usb 1-1: config 243 has no interface number 2 [ 654.860661][ T5915] option 2-1:0.0: GSM modem (1-port) converter detected [ 654.868170][ T5929] usb 1-1: config 243 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 654.885649][ T5929] usb 1-1: config 243 interface 248 altsetting 15 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 654.907343][ T5929] usb 1-1: config 243 interface 248 altsetting 15 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 654.931319][ T5929] usb 1-1: config 243 interface 248 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 654.951607][ T5929] usb 1-1: config 243 interface 248 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 654.963639][ T5929] usb 1-1: config 243 interface 248 altsetting 15 bulk endpoint 0x9 has invalid maxpacket 16 [ 654.975628][ T5929] usb 1-1: config 243 interface 162 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 654.987289][ T5929] usb 1-1: config 243 interface 3 has no altsetting 0 [ 654.994794][ T5929] usb 1-1: config 243 interface 248 has no altsetting 0 [ 655.002371][ T5929] usb 1-1: config 243 interface 162 has no altsetting 0 [ 655.078835][T12863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.101504][T12863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.155573][ T5929] usb 1-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 655.166765][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.176710][ T5915] usb 2-1: USB disconnect, device number 90 [ 655.184925][ T5915] option 2-1:0.0: device disconnected [ 655.295419][ T5929] usb 1-1: Product: syz [ 655.312377][ T5929] usb 1-1: Manufacturer: syz [ 655.532984][ T5929] usb 1-1: SerialNumber: syz [ 655.889920][ T5929] usb 1-1: USB disconnect, device number 90 [ 656.464813][T12891] fuse: Bad value for 'fd' [ 657.183259][T12897] netlink: 'syz.2.2074': attribute type 1 has an invalid length. [ 657.883307][ T5915] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 658.046015][ T5915] usb 1-1: config index 0 descriptor too short (expected 64995, got 227) [ 658.055930][ T5915] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 658.084330][ T5915] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 2 [ 658.108556][ T5915] usb 1-1: config 220 interface 0 has no altsetting 0 [ 658.131871][ T5915] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 658.184423][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.216712][ T5915] usb 1-1: Product: syz [ 658.220952][ T5915] usb 1-1: Manufacturer: syz [ 658.254038][ T5915] usb 1-1: SerialNumber: syz [ 658.669135][T12914] kvm: MWAIT instruction emulated as NOP! [ 658.976153][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2082'. [ 659.000609][T12922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2082'. [ 659.111422][T12924] fuse: Bad value for 'fd' [ 659.212934][T11798] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 659.378560][T11798] usb 4-1: Using ep0 maxpacket: 16 [ 659.427502][T11798] usb 4-1: config 243 has an invalid interface number: 3 but max is 2 [ 659.460565][T11798] usb 4-1: config 243 has an invalid interface number: 248 but max is 2 [ 659.499560][T11798] usb 4-1: config 243 has an invalid interface number: 162 but max is 2 [ 659.512819][T11798] usb 4-1: config 243 has an invalid interface association descriptor of length 2, skipping [ 659.566217][T11798] usb 4-1: config 243 has no interface number 0 [ 659.572564][T11798] usb 4-1: config 243 has no interface number 1 [ 659.607480][T11798] usb 4-1: config 243 has no interface number 2 [ 659.655161][T11798] usb 4-1: config 243 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 659.666674][ T5901] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 659.713309][T11798] usb 4-1: config 243 interface 248 altsetting 15 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 659.833582][T11798] usb 4-1: config 243 interface 248 altsetting 15 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 659.867880][T11798] usb 4-1: config 243 interface 248 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 659.904501][ T5901] usb 3-1: config 0 has no interfaces? [ 660.003235][ T5901] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 660.043901][T11798] usb 4-1: config 243 interface 248 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 660.065950][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.089290][T11798] usb 4-1: config 243 interface 248 altsetting 15 bulk endpoint 0x9 has invalid maxpacket 16 [ 660.100231][ T5901] usb 3-1: Product: syz [ 660.105045][ T5901] usb 3-1: Manufacturer: syz [ 660.109693][ T5901] usb 3-1: SerialNumber: syz [ 660.123034][T11798] usb 4-1: config 243 interface 162 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 660.138139][ T5901] usb 3-1: config 0 descriptor?? [ 660.143445][T11798] usb 4-1: config 243 interface 3 has no altsetting 0 [ 660.162166][T11798] usb 4-1: config 243 interface 248 has no altsetting 0 [ 660.177831][T11798] usb 4-1: config 243 interface 162 has no altsetting 0 [ 660.187859][T11798] usb 4-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 660.197539][T11798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.243177][T11798] usb 4-1: Product: syz [ 660.257173][T11798] usb 4-1: Manufacturer: syz [ 660.261793][T11798] usb 4-1: SerialNumber: syz [ 660.362581][T12931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.387807][T12931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.434837][T12941] netlink: 'syz.5.2091': attribute type 1 has an invalid length. [ 660.507431][ T9] usb 3-1: USB disconnect, device number 104 [ 660.516077][T11798] usb 4-1: USB disconnect, device number 90 [ 660.720485][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2092'. [ 661.011831][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2089'. [ 661.022274][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2089'. [ 662.203030][ T9] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 662.363301][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 662.378726][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.598172][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.696903][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 662.863331][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.895095][ T9] usb 4-1: config 0 descriptor?? [ 663.058396][ T30] audit: type=1326 audit(1773823125.768:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12984 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 663.135389][ T30] audit: type=1326 audit(1773823125.808:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12984 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 663.168586][ T5833] Bluetooth: hci3: unknown advertising packet type: 0x05 [ 663.168668][ T5833] Bluetooth: hci3: unknown advertising packet type: 0x05 [ 663.177865][ T5833] Bluetooth: hci3: unknown advertising packet type: 0x05 [ 663.185630][ T5833] Bluetooth: hci3: unknown advertising packet type: 0x05 [ 663.192823][ T5833] Bluetooth: hci3: Malformed LE Event: 0x02 [ 663.208317][ T30] audit: type=1326 audit(1773823125.808:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12984 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 663.237518][ T30] audit: type=1326 audit(1773823125.808:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12984 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 663.260205][ T30] audit: type=1326 audit(1773823125.808:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12984 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 663.282738][ T30] audit: type=1326 audit(1773823125.818:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12984 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=307 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 663.312249][ T30] audit: type=1326 audit(1773823125.818:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12984 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 663.446959][ T5915] uvcvideo 1-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 663.498720][ T5915] uvcvideo 1-1:220.0: No valid video chain found. [ 663.651422][T12994] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 663.688904][ T30] audit: type=1326 audit(1773823125.818:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12984 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 663.783065][T12994] netlink: 'syz.5.2105': attribute type 4 has an invalid length. [ 663.896582][T12998] netlink: 'syz.1.2107': attribute type 3 has an invalid length. [ 663.904773][ T30] audit: type=1326 audit(1773823125.938:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12984 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 664.075281][T12998] netlink: 766 bytes leftover after parsing attributes in process `syz.1.2107'. [ 664.109075][ T30] audit: type=1326 audit(1773823125.938:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12984 comm="syz.0.2104" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 664.843559][T13013] netlink: 'syz.5.2108': attribute type 1 has an invalid length. [ 665.221732][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 665.240078][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 665.272656][ T9] usb 4-1: USB disconnect, device number 91 [ 665.696765][ T9] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 665.932975][ T9] usb 4-1: device descriptor read/64, error -71 [ 666.053092][T11798] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 666.203557][ T9] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 666.324890][T11798] usb 2-1: config 0 interface 0 has no altsetting 0 [ 666.333165][T11798] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 666.343167][ T9] usb 4-1: device descriptor read/64, error -71 [ 666.353011][T11798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.376208][T11798] usb 2-1: config 0 descriptor?? [ 666.433500][ T5929] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 666.465584][ T9] usb usb4-port1: attempt power cycle [ 666.581671][T13031] netlink: 'syz.0.2116': attribute type 4 has an invalid length. [ 666.589996][ T5929] usb 6-1: Using ep0 maxpacket: 32 [ 666.595622][T13031] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2116'. [ 666.606856][ T5929] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.622250][ T5929] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 666.675356][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 666.706345][ T5929] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 666.735868][ T5929] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 666.753645][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.771030][ T5929] usb 6-1: Product: syz [ 666.785019][ T5929] usb 6-1: Manufacturer: syz [ 666.794395][ T5929] usb 6-1: SerialNumber: syz [ 666.810966][ T5929] usb 6-1: config 0 descriptor?? [ 666.816472][ T9] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 666.839705][ T5929] usb 6-1: no audio or video endpoints found [ 666.853886][ T9] usb 4-1: device descriptor read/8, error -71 [ 667.043974][T13028] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2115'. [ 667.060101][ T24] usb 6-1: USB disconnect, device number 57 [ 667.114007][ T9] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 667.133707][ T9] usb 4-1: device descriptor read/8, error -71 [ 667.245060][ T9] usb usb4-port1: unable to enumerate USB device [ 667.500829][T11798] video4linux radio48: keene_cmd_set failed (-71) [ 667.514084][T11798] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 667.699631][T13037] input: syz0 as /devices/virtual/input/input112 [ 667.756592][T11798] usb 2-1: USB disconnect, device number 91 [ 668.396376][T13041] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 668.440027][T13041] netlink: 'syz.2.2119': attribute type 4 has an invalid length. [ 668.863045][ T5929] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 669.073157][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 669.085667][ T5929] usb 2-1: config 243 has an invalid interface number: 3 but max is 2 [ 669.143326][ T5929] usb 2-1: config 243 has an invalid interface number: 248 but max is 2 [ 669.161394][ T5929] usb 2-1: config 243 has an invalid interface number: 162 but max is 2 [ 669.176093][ T5929] usb 2-1: config 243 has an invalid interface association descriptor of length 5, skipping [ 669.177505][T13059] netlink: 'syz.0.2125': attribute type 1 has an invalid length. [ 669.186720][ T5929] usb 2-1: config 243 has no interface number 0 [ 669.186748][ T5929] usb 2-1: config 243 has no interface number 1 [ 669.186768][ T5929] usb 2-1: config 243 has no interface number 2 [ 669.186837][ T5929] usb 2-1: config 243 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 669.186876][ T5929] usb 2-1: config 243 interface 248 altsetting 15 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 669.186904][ T5929] usb 2-1: config 243 interface 248 altsetting 15 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 669.349218][T13066] fuse: Bad value for 'fd' [ 669.390636][ T5929] usb 2-1: config 243 interface 248 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 669.422940][ T5929] usb 2-1: config 243 interface 248 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 669.443413][ T5929] usb 2-1: config 243 interface 248 altsetting 15 bulk endpoint 0x9 has invalid maxpacket 16 [ 669.453972][ T5929] usb 2-1: config 243 interface 162 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 669.540362][ T5929] usb 2-1: config 243 interface 3 has no altsetting 0 [ 669.551922][ T5929] usb 2-1: config 243 interface 248 has no altsetting 0 [ 669.559679][ T5929] usb 2-1: config 243 interface 162 has no altsetting 0 [ 669.635000][ T5929] usb 2-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 669.644980][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.773001][ T5929] usb 2-1: Product: syz [ 669.783762][ T5929] usb 2-1: Manufacturer: syz [ 669.804030][ T5929] usb 2-1: SerialNumber: syz [ 670.097258][ T5929] usb 2-1: USB disconnect, device number 92 [ 670.192386][T13070] syzkaller0: entered promiscuous mode [ 670.213031][T13070] syzkaller0: entered allmulticast mode [ 670.372471][ T30] audit: type=1326 audit(1773823133.078:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 670.396349][ T5833] Bluetooth: hci1: unknown advertising packet type: 0x05 [ 670.396380][ T5833] Bluetooth: hci1: unknown advertising packet type: 0x05 [ 670.404267][ T5833] Bluetooth: hci1: unknown advertising packet type: 0x05 [ 670.411440][ T5833] Bluetooth: hci1: unknown advertising packet type: 0x05 [ 670.413588][ T5915] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 670.430022][ T5833] Bluetooth: hci1: Malformed LE Event: 0x02 [ 670.504023][ T30] audit: type=1326 audit(1773823133.078:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 670.563039][ T30] audit: type=1326 audit(1773823133.078:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 670.586364][ T30] audit: type=1326 audit(1773823133.078:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 670.643627][ T30] audit: type=1326 audit(1773823133.078:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 670.666944][ T30] audit: type=1326 audit(1773823133.078:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=307 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 670.689674][ T30] audit: type=1326 audit(1773823133.108:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 670.693749][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 670.742250][ T30] audit: type=1326 audit(1773823133.108:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 670.754499][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 670.808297][ T30] audit: type=1326 audit(1773823133.108:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 670.820486][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 670.846758][ T30] audit: type=1326 audit(1773823133.108:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.2.2132" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2f6c code=0x7ffc0000 [ 670.871992][ T5915] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 670.885124][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.893561][ T5915] usb 4-1: Product: syz [ 670.897981][ T5915] usb 4-1: Manufacturer: syz [ 670.902648][ T5915] usb 4-1: SerialNumber: syz [ 670.926291][ T5915] usb 4-1: config 0 descriptor?? [ 670.943893][T13090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.956227][ T5915] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 670.969557][T13090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.977477][ T5915] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 671.056841][T13093] input: syz0 as /devices/virtual/input/input113 [ 671.173004][ T5929] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 671.236897][T13098] fuse: Bad value for 'fd' [ 671.351454][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.362671][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.373088][ T5929] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 671.386683][ T5929] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 671.398285][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.414760][ T5929] usb 6-1: config 0 descriptor?? [ 671.480613][T13103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.511970][T13103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.548796][ T5915] em28xx 4-1:0.0: chip ID is em2882/3 [ 671.809141][ T5915] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 671.817883][ T5915] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 671.832213][ T5929] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 671.841036][ T5915] em28xx 4-1:0.0: No AC97 audio processor [ 671.849491][ T5929] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 671.861554][ T5929] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 671.871954][ T5929] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 671.885232][ T5915] usb 4-1: USB disconnect, device number 96 [ 671.898709][ T5929] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 671.909264][ T5915] em28xx 4-1:0.0: Disconnecting em28xx [ 671.916791][ T5929] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 671.925105][ T5915] em28xx 4-1:0.0: Freeing device [ 671.939607][ T5929] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 671.951434][ T5929] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 671.959590][ T5929] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 671.968855][ T5929] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 671.991233][ T5929] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 672.030957][T13090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.043320][T13090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.127301][T11798] usb 6-1: USB disconnect, device number 58 [ 672.319653][T13111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.329261][T13111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.353162][T13111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.382355][T13111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.428197][T13109] netlink: 'syz.2.2143': attribute type 1 has an invalid length. [ 672.486975][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2144'. [ 672.702993][ T5915] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 672.853018][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 672.861489][ T5915] usb 2-1: config 243 has an invalid interface number: 3 but max is 2 [ 672.870005][ T5915] usb 2-1: config 243 has an invalid interface number: 248 but max is 2 [ 672.878447][ T5915] usb 2-1: config 243 has an invalid interface number: 162 but max is 2 [ 672.887033][ T5915] usb 2-1: config 243 has an invalid interface association descriptor of length 5, skipping [ 672.897291][ T5915] usb 2-1: config 243 has no interface number 0 [ 672.904653][ T5915] usb 2-1: config 243 has no interface number 1 [ 672.911053][ T5915] usb 2-1: config 243 has no interface number 2 [ 672.917745][ T5915] usb 2-1: config 243 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 672.930133][ T5915] usb 2-1: config 243 interface 248 altsetting 15 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 672.941894][ T5915] usb 2-1: config 243 interface 248 altsetting 15 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 672.953533][ T5915] usb 2-1: config 243 interface 248 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 672.964984][ T5915] usb 2-1: config 243 interface 248 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 672.976247][ T5915] usb 2-1: config 243 interface 248 altsetting 15 bulk endpoint 0x9 has invalid maxpacket 16 [ 672.987073][ T5915] usb 2-1: config 243 interface 162 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 672.998242][ T5915] usb 2-1: config 243 interface 3 has no altsetting 0 [ 673.005253][ T5915] usb 2-1: config 243 interface 248 has no altsetting 0 [ 673.012235][ T5915] usb 2-1: config 243 interface 162 has no altsetting 0 [ 673.021670][ T5915] usb 2-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 673.032812][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.040999][ T5915] usb 2-1: Product: syz [ 673.045310][ T5915] usb 2-1: Manufacturer: syz [ 673.050031][ T5915] usb 2-1: SerialNumber: syz [ 673.330023][ T5915] usb 2-1: USB disconnect, device number 93 [ 673.521145][T13132] fuse: Bad value for 'fd' [ 673.737096][T13137] input: syz0 as /devices/virtual/input/input114 [ 673.752956][ T5901] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 673.782973][T11798] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 673.933089][T11798] usb 6-1: Using ep0 maxpacket: 32 [ 673.944596][T11798] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 673.957220][ T5901] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 673.966497][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.976576][T11798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.992191][T11798] usb 6-1: Product: syz [ 673.998811][ T5901] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 674.012726][T11798] usb 6-1: Manufacturer: syz [ 674.019790][ T5901] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 674.028384][T11798] usb 6-1: SerialNumber: syz [ 674.036246][ T5901] usb 3-1: Manufacturer: syz [ 674.041873][T11798] usb 6-1: config 0 descriptor?? [ 674.055005][ T5901] usb 3-1: config 0 descriptor?? [ 674.153055][ T5901] rc_core: IR keymap rc-hauppauge not found [ 674.159167][ T5901] Registered IR keymap rc-empty [ 674.165899][ T5901] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 674.196268][ T5901] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input115 [ 674.317007][ T5901] usb 3-1: USB disconnect, device number 105 [ 675.355895][T13157] netlink: 'syz.3.2158': attribute type 1 has an invalid length. [ 675.775142][T13164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.808800][T13164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.865224][T13171] fuse: Bad value for 'fd' [ 676.133589][T11798] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: failure sending bit rate [ 676.142536][T11798] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -110 [ 676.172942][ T24] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 676.243010][ T5901] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 676.333034][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 676.342223][ T24] usb 2-1: config 243 has an invalid interface number: 3 but max is 2 [ 676.351030][ T24] usb 2-1: config 243 has an invalid interface number: 248 but max is 2 [ 676.366904][ T24] usb 2-1: config 243 has an invalid interface number: 162 but max is 2 [ 676.376902][ T24] usb 2-1: config 243 has an invalid interface association descriptor of length 5, skipping [ 676.387135][ T24] usb 2-1: config 243 has no interface number 0 [ 676.396013][ T24] usb 2-1: config 243 has no interface number 1 [ 676.402439][ T24] usb 2-1: config 243 has no interface number 2 [ 676.409981][ T24] usb 2-1: config 243 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 676.429566][ T5901] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 676.438059][ T24] usb 2-1: config 243 interface 248 altsetting 15 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 676.453013][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.467988][ T24] usb 2-1: config 243 interface 248 altsetting 15 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 676.482576][ T5880] usb 6-1: USB disconnect, device number 59 [ 676.491614][ T5901] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 676.512175][ T24] usb 2-1: config 243 interface 248 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 676.524977][ T5901] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 676.533660][ T5901] usb 3-1: Manufacturer: syz [ 676.538465][ T24] usb 2-1: config 243 interface 248 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 676.551774][ T24] usb 2-1: config 243 interface 248 altsetting 15 bulk endpoint 0x9 has invalid maxpacket 16 [ 676.570436][ T5901] usb 3-1: config 0 descriptor?? [ 676.597093][ T24] usb 2-1: config 243 interface 162 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 676.624009][ T24] usb 2-1: config 243 interface 3 has no altsetting 0 [ 676.646438][ T24] usb 2-1: config 243 interface 248 has no altsetting 0 [ 676.655686][ T24] usb 2-1: config 243 interface 162 has no altsetting 0 [ 676.684312][ T24] usb 2-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 676.694393][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.712922][ T24] usb 2-1: Product: syz [ 676.717523][ T24] usb 2-1: Manufacturer: syz [ 676.722253][ T24] usb 2-1: SerialNumber: syz [ 676.778163][T13183] input: syz0 as /devices/virtual/input/input117 [ 676.785831][ T5901] rc_core: IR keymap rc-hauppauge not found [ 676.791924][ T5901] Registered IR keymap rc-empty [ 676.801799][ T5901] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 676.833482][ T5901] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input116 [ 677.076815][ T24] usb 2-1: USB disconnect, device number 94 [ 677.871460][T13198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.936157][T13198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.031604][T13198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.044028][T13198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.245323][T13205] fuse: Bad value for 'fd' [ 678.577437][T13211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2176'. [ 678.719521][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 678.719539][ T30] audit: type=1326 audit(1773823141.428:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 678.810708][ T30] audit: type=1326 audit(1773823141.428:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 678.882230][ T30] audit: type=1326 audit(1773823141.428:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 678.924165][ T30] audit: type=1326 audit(1773823141.428:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 678.945025][T13214] netlink: 'syz.0.2177': attribute type 1 has an invalid length. [ 678.990563][ T30] audit: type=1326 audit(1773823141.428:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7195cab code=0x7ffc0000 [ 679.028006][ T30] audit: type=1326 audit(1773823141.438:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7195cab code=0x7ffc0000 [ 679.051212][ T30] audit: type=1326 audit(1773823141.438:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 679.075592][ T30] audit: type=1326 audit(1773823141.438:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 679.098710][ T30] audit: type=1326 audit(1773823141.438:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=383 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 679.121716][ T30] audit: type=1326 audit(1773823141.438:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 679.224741][ T24] usb 3-1: USB disconnect, device number 106 [ 679.767835][ T24] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 679.942975][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 679.951287][ T24] usb 3-1: config 243 has an invalid interface number: 3 but max is 2 [ 679.961985][ T24] usb 3-1: config 243 has an invalid interface number: 248 but max is 2 [ 679.978038][ T24] usb 3-1: config 243 has an invalid interface number: 162 but max is 2 [ 679.999392][ T24] usb 3-1: config 243 has an invalid interface association descriptor of length 7, skipping [ 680.028103][ T24] usb 3-1: config 243 has no interface number 0 [ 680.058895][ T24] usb 3-1: config 243 has no interface number 1 [ 680.077773][ T24] usb 3-1: config 243 has no interface number 2 [ 680.129715][ T24] usb 3-1: config 243 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 680.158886][ T24] usb 3-1: config 243 interface 248 altsetting 15 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 680.196923][ T24] usb 3-1: config 243 interface 248 altsetting 15 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 680.238993][ T24] usb 3-1: config 243 interface 248 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 680.642973][ T24] usb 3-1: config 243 interface 248 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 680.672943][ T24] usb 3-1: config 243 interface 248 altsetting 15 bulk endpoint 0x9 has invalid maxpacket 16 [ 680.707209][ T24] usb 3-1: config 243 interface 162 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 680.734761][ T24] usb 3-1: config 243 interface 3 has no altsetting 0 [ 680.753387][ T24] usb 3-1: config 243 interface 248 has no altsetting 0 [ 680.813056][T11798] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 680.831951][ T24] usb 3-1: config 243 interface 162 has no altsetting 0 [ 680.857027][ T24] usb 3-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 680.885904][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.904676][ T24] usb 3-1: Product: syz [ 680.908982][ T24] usb 3-1: Manufacturer: syz [ 680.934334][ T24] usb 3-1: SerialNumber: syz [ 681.015340][T11798] usb 6-1: Using ep0 maxpacket: 32 [ 681.069471][T11798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.089873][T11798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.110577][T11798] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 681.152143][T11798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.214258][T13246] fuse: Bad value for 'fd' [ 681.279402][T13248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2187'. [ 681.288990][T11798] usb 6-1: config 0 descriptor?? [ 681.384409][T13248] mac80211_hwsim hwsim11 wlan1: Device is already in use. [ 681.398710][ T24] usb 3-1: USB disconnect, device number 107 [ 681.495981][ T48] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 681.507719][T13248] bond0: (slave wlan1): Releasing backup interface [ 681.574892][T13241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2182'. [ 681.586318][T13241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2182'. [ 681.644850][T13248] mac80211_hwsim hwsim11 wlan1 (unregistering): left promiscuous mode [ 681.988079][T13254] input: syz0 as /devices/virtual/input/input119 [ 682.450551][T11798] savu 0003:1E7D:2D5A.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 682.463046][ T5915] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 682.636678][ T5915] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 682.687935][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.781748][ T5915] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 682.807328][ T5915] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 682.822999][ T5915] usb 3-1: Manufacturer: syz [ 682.880542][ T5915] usb 3-1: config 0 descriptor?? [ 683.416624][ T5915] rc_core: IR keymap rc-hauppauge not found [ 683.436088][ T5915] Registered IR keymap rc-empty [ 683.479923][ T5915] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 683.543588][ T5915] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input120 [ 683.603287][T11798] usb 6-1: reset high-speed USB device number 60 using dummy_hcd [ 684.192720][T13271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.223295][T13271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.409584][T13278] netlink: 'syz.1.2194': attribute type 1 has an invalid length. [ 684.714465][ T24] usb 6-1: USB disconnect, device number 60 [ 685.127795][ T5915] usb 3-1: USB disconnect, device number 108 [ 685.282643][T13289] fuse: Bad value for 'fd' [ 685.897374][T13305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2201'. [ 685.978420][ T5915] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 685.980636][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.011141][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.035747][T13308] input: syz0 as /devices/virtual/input/input121 [ 686.115461][T13309] snd_virmidi snd_virmidi.0: control 1:9:195:ÿÿ :53367 is already present [ 686.156066][ T24] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 686.253078][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 686.283430][ T5915] usb 2-1: config 243 has an invalid interface number: 3 but max is 2 [ 686.292702][ T5915] usb 2-1: config 243 has an invalid interface number: 248 but max is 2 [ 686.325422][ T5915] usb 2-1: config 243 has an invalid interface number: 162 but max is 2 [ 686.334381][ T24] usb 4-1: device descriptor read/64, error -71 [ 686.334501][ T5915] usb 2-1: config 243 has an invalid interface association descriptor of length 7, skipping [ 686.353823][ T5915] usb 2-1: config 243 has no interface number 0 [ 686.360395][ T5915] usb 2-1: config 243 has no interface number 1 [ 686.703026][ T5915] usb 2-1: config 243 has no interface number 2 [ 686.709546][ T5915] usb 2-1: config 243 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 686.739907][ T5915] usb 2-1: config 243 interface 248 altsetting 15 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 686.773619][ T5915] usb 2-1: config 243 interface 248 altsetting 15 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 686.853298][ T24] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 686.881434][ T5915] usb 2-1: config 243 interface 248 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 686.912088][ T5915] usb 2-1: config 243 interface 248 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 686.933365][ T5915] usb 2-1: config 243 interface 248 altsetting 15 bulk endpoint 0x9 has invalid maxpacket 16 [ 686.945505][ T5915] usb 2-1: config 243 interface 162 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 686.963937][ T5915] usb 2-1: config 243 interface 3 has no altsetting 0 [ 686.981931][ T5915] usb 2-1: config 243 interface 248 has no altsetting 0 [ 686.992436][ T5915] usb 2-1: config 243 interface 162 has no altsetting 0 [ 687.013502][ T5915] usb 2-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 687.022643][ T24] usb 4-1: device descriptor read/64, error -71 [ 687.046368][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.130479][ T5915] usb 2-1: Product: syz [ 687.184542][ T24] usb usb4-port1: attempt power cycle [ 687.263925][ T5915] usb 2-1: Manufacturer: syz [ 687.373019][ T5915] usb 2-1: SerialNumber: syz [ 687.622979][ T24] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 687.794125][ T24] usb 4-1: device descriptor read/8, error -71 [ 687.896050][ T5915] usb 2-1: USB disconnect, device number 95 [ 688.109940][ T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 688.183059][ T24] usb 4-1: device descriptor read/8, error -71 [ 688.196572][T13349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.207233][T13349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.307563][ T24] usb usb4-port1: unable to enumerate USB device [ 688.392990][T11798] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 688.581349][T11798] usb 6-1: Using ep0 maxpacket: 32 [ 688.645693][T11798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.672977][ T5915] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 688.680466][T11798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.758081][T11798] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 688.792038][T11798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.814276][T11798] usb 6-1: config 0 descriptor?? [ 688.837868][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 688.857482][ T5915] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 688.886741][ T5915] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 688.896013][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.911040][ T5915] usb 2-1: Product: syz [ 688.923500][ T5915] usb 2-1: Manufacturer: syz [ 688.932084][ T5915] usb 2-1: SerialNumber: syz [ 688.955245][ T5915] r8152-cfgselector 2-1: Unknown version 0x0000 [ 688.970268][ T5915] r8152-cfgselector 2-1: config 0 descriptor?? [ 689.296403][T11798] savu 0003:1E7D:2D5A.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 689.455535][ T5915] r8152-cfgselector 2-1: Unknown version 0x0000 [ 689.473787][ T5915] r8152-cfgselector 2-1: bad CDC descriptors [ 689.511496][ T5915] r8152-cfgselector 2-1: USB disconnect, device number 96 [ 689.519546][ T9] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 689.720979][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 689.732596][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.746204][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 689.756142][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 689.766213][ T9] usb 3-1: Manufacturer: syz [ 689.789858][ T9] usb 3-1: config 0 descriptor?? [ 689.912937][ T9] rc_core: IR keymap rc-hauppauge not found [ 689.925778][ T9] Registered IR keymap rc-empty [ 689.941373][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 689.984451][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input122 [ 690.063964][T13370] netlink: 'syz.3.2210': attribute type 1 has an invalid length. [ 690.473666][T13376] fuse: Bad value for 'fd' [ 690.603907][ T24] usb 6-1: reset high-speed USB device number 61 using dummy_hcd [ 690.809579][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 692.382659][ T5880] usb 3-1: USB disconnect, device number 109 [ 692.713480][T13429] input: syz0 as /devices/virtual/input/input123 [ 692.803049][ T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 692.971741][ T9] usb 2-1: device descriptor read/64, error -71 [ 692.985383][T11798] usb 6-1: USB disconnect, device number 61 [ 693.233415][ T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 693.403181][ T9] usb 2-1: device descriptor read/64, error -71 [ 693.523624][ T9] usb usb2-port1: attempt power cycle [ 693.883015][ T9] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 693.898550][T13443] fuse: Bad value for 'fd' [ 693.928466][ T9] usb 2-1: device descriptor read/8, error -71 [ 694.185508][T13448] syzkaller0: entered promiscuous mode [ 694.191292][T13448] syzkaller0: entered allmulticast mode [ 694.197239][ T9] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 694.283413][ T9] usb 2-1: device descriptor read/8, error -71 [ 694.451806][T13448] tipc: Started in network mode [ 694.456970][T13448] tipc: Node identity 9e7c277e8137, cluster identity 4711 [ 694.466692][T13448] tipc: Enabled bearer , priority 0 [ 694.497865][ T9] usb usb2-port1: unable to enumerate USB device [ 695.025093][T13444] tipc: Resetting bearer [ 695.382731][T13444] tipc: Disabling bearer [ 695.498161][T13463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.547487][T13463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.181495][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 696.343278][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 696.375784][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.389371][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.426003][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 696.437689][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.473879][ T9] usb 4-1: config 0 descriptor?? [ 696.703092][T11798] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 696.939460][ T9] savu 0003:1E7D:2D5A.001D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 697.014757][T11798] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 697.046020][T11798] usb 3-1: config 0 has no interface number 0 [ 697.073858][T11798] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 697.099232][T11798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.117147][T11798] usb 3-1: Product: syz [ 697.131907][T11798] usb 3-1: Manufacturer: syz [ 697.140457][T11798] usb 3-1: SerialNumber: syz [ 697.175309][T11798] usb 3-1: config 0 descriptor?? [ 697.268198][T11798] peak_usb 3-1:0.246: probe with driver peak_usb failed with error 246 [ 698.056995][T13493] fuse: Bad value for 'fd' [ 698.373078][ T5915] usb 4-1: reset high-speed USB device number 101 using dummy_hcd [ 698.765821][T13500] netlink: 'syz.5.2237': attribute type 1 has an invalid length. [ 699.360928][T13507] input: syz0 as /devices/virtual/input/input124 [ 699.959211][ T9273] usb 3-1: USB disconnect, device number 110 [ 700.269994][ T9] usb 4-1: USB disconnect, device number 101 [ 700.875080][T13528] fuse: Bad value for 'fd' [ 702.630541][T13547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.639998][T13547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.062969][ T9] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 703.346833][ T9] usb 6-1: config 0 has an invalid interface number: 246 but max is 0 [ 703.455502][ T9] usb 6-1: config 0 has no interface number 0 [ 703.517577][ T9] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 703.527662][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.535772][ T9] usb 6-1: Product: syz [ 703.540306][ T9] usb 6-1: Manufacturer: syz [ 703.546177][ T9] usb 6-1: SerialNumber: syz [ 703.560052][ T9] usb 6-1: config 0 descriptor?? [ 703.568037][ T9] peak_usb 6-1:0.246: probe with driver peak_usb failed with error 246 [ 704.441210][T13565] fuse: Bad value for 'fd' [ 704.999159][T13569] input: syz0 as /devices/virtual/input/input126 [ 705.512989][T11798] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 705.862956][T11798] usb 3-1: Using ep0 maxpacket: 32 [ 705.869960][T11798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.922486][T11798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.016985][T11798] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 706.149962][T11798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.198473][T11798] usb 3-1: config 0 descriptor?? [ 706.219285][T11798] hub 3-1:0.0: USB hub found [ 706.291261][ T5901] usb 6-1: USB disconnect, device number 62 [ 706.417347][T13571] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2260'. [ 706.435781][T11798] hub 3-1:0.0: 1 port detected [ 706.883786][ T9] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 707.235371][T11798] hub 3-1:0.0: activate --> -90 [ 707.363036][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 707.383973][ T9] usb 6-1: config 243 has an invalid interface number: 3 but max is 1 [ 707.406849][ T9] usb 6-1: config 243 has an invalid interface number: 162 but max is 1 [ 707.436256][ T9] usb 6-1: config 243 has no interface number 0 [ 707.467819][ T9] usb 6-1: config 243 has no interface number 1 [ 707.488774][ T9] usb 6-1: config 243 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 707.532940][ T9] usb 6-1: config 243 interface 3 has no altsetting 0 [ 707.551346][ T9] usb 6-1: config 243 interface 162 has no altsetting 0 [ 707.575835][ T9] usb 6-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 707.591227][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.606609][T11798] usb 3-1-port1: cannot disable (err = -71) [ 707.615391][ T5901] usb 3-1: USB disconnect, device number 111 [ 707.671699][ T9] usb 6-1: Product: syz [ 707.677914][ T9] usb 6-1: Manufacturer: syz [ 707.682585][ T9] usb 6-1: SerialNumber: syz [ 708.049716][ T9] usb 6-1: USB disconnect, device number 63 [ 708.560581][T13602] fuse: Bad value for 'fd' [ 710.042814][T13629] syzkaller0: entered promiscuous mode [ 710.062037][T13629] syzkaller0: entered allmulticast mode [ 710.276584][T13629] tipc: Enabled bearer , priority 0 [ 710.707640][T13624] tipc: Resetting bearer [ 710.854077][T13624] tipc: Disabling bearer [ 711.653114][ T5901] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 711.850243][ T5901] usb 2-1: config 171 has an invalid interface number: 109 but max is 0 [ 711.860583][ T5901] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 711.878579][ T5901] usb 2-1: config 171 has no interface number 0 [ 711.898116][ T5901] usb 2-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 712.081183][ T5901] usb 2-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 712.127360][ T5901] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 712.142267][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.334145][ T5901] usb 2-1: Product: syz [ 712.338409][ T5901] usb 2-1: Manufacturer: syz [ 712.354488][ T5901] usb 2-1: SerialNumber: syz [ 712.364896][T13643] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 712.453056][ T24] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 712.643142][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 712.660373][ T24] usb 4-1: config 243 has an invalid interface number: 3 but max is 2 [ 712.693083][ T24] usb 4-1: config 243 has an invalid interface number: 248 but max is 2 [ 712.709993][ T24] usb 4-1: config 243 has an invalid interface number: 162 but max is 2 [ 712.730324][ T24] usb 4-1: config 243 has no interface number 0 [ 712.749356][ T24] usb 4-1: config 243 has no interface number 1 [ 712.782588][ T24] usb 4-1: config 243 has no interface number 2 [ 712.806305][ T24] usb 4-1: config 243 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 712.837586][ T24] usb 4-1: config 243 interface 248 altsetting 15 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 712.883145][ T24] usb 4-1: config 243 interface 248 altsetting 15 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 712.936517][ T24] usb 4-1: config 243 interface 248 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 712.969005][ T24] usb 4-1: config 243 interface 248 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 713.003649][T13659] netlink: 'syz.5.2287': attribute type 1 has an invalid length. [ 713.024010][ T24] usb 4-1: config 243 interface 248 altsetting 15 bulk endpoint 0x9 has invalid maxpacket 16 [ 713.044738][ T24] usb 4-1: config 243 interface 162 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 713.069441][ T24] usb 4-1: config 243 interface 3 has no altsetting 0 [ 713.084683][ T24] usb 4-1: config 243 interface 248 has no altsetting 0 [ 713.093622][ T24] usb 4-1: config 243 interface 162 has no altsetting 0 [ 713.103817][ T24] usb 4-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 713.116369][T13659] bond2: entered promiscuous mode [ 713.122540][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.130988][ T24] usb 4-1: Product: syz [ 713.136028][ T24] usb 4-1: Manufacturer: syz [ 713.140816][ T24] usb 4-1: SerialNumber: syz [ 713.146910][T13659] 8021q: adding VLAN 0 to HW filter on device bond2 [ 713.175093][ T5901] ath6kl: Failed to submit usb control message: -71 [ 713.182215][ T5901] ath6kl: unable to send the bmi data to the device: -71 [ 713.192717][ T5901] ath6kl: Unable to send get target info: -71 [ 713.211158][ T5901] ath6kl: Failed to init ath6kl core: -71 [ 713.218741][ T5901] ath6kl_usb 2-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 713.245449][ T5901] usb 2-1: USB disconnect, device number 101 [ 713.326978][T13666] 8021q: adding VLAN 0 to HW filter on device bond2 [ 713.343504][T13666] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 713.354284][T13666] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 713.451647][T13666] bond2: (slave vcan1): making interface the new active one [ 713.476102][ T24] usb 4-1: USB disconnect, device number 102 [ 713.493685][ T1004] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 713.502537][T13666] vcan1: entered promiscuous mode [ 713.524435][T13666] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 716.582947][ T5901] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 716.882942][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 716.895477][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.914325][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.937347][ T5901] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 717.024682][T13716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2300'. [ 717.033261][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.054862][ T5901] usb 2-1: config 0 descriptor?? [ 717.368041][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 717.368068][ T30] audit: type=1326 audit(1773823180.018:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13718 comm="syz.3.2301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 717.404120][ T30] audit: type=1326 audit(1773823180.018:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13718 comm="syz.3.2301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 717.436654][ T30] audit: type=1326 audit(1773823180.028:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13718 comm="syz.3.2301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 717.475307][ T30] audit: type=1326 audit(1773823180.028:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13718 comm="syz.3.2301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 717.505415][ T5901] ntrig 0003:1B96:0008.001E: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.1-1/input0 [ 717.664884][ T30] audit: type=1326 audit(1773823180.028:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13718 comm="syz.3.2301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 717.714083][ T5901] ntrig 0003:1B96:0008.001E: Firmware version: 2.7.31.21.7 (dfb5 afea) [ 717.822604][ T30] audit: type=1326 audit(1773823180.028:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13718 comm="syz.3.2301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 717.892937][ T30] audit: type=1326 audit(1773823180.028:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13718 comm="syz.3.2301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 717.931707][ T5901] usb 2-1: USB disconnect, device number 102 [ 717.983607][ T30] audit: type=1326 audit(1773823180.028:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13718 comm="syz.3.2301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 718.019821][T13722] pim6reg: entered allmulticast mode [ 718.092398][ T30] audit: type=1326 audit(1773823180.028:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13718 comm="syz.3.2301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 718.433702][ T30] audit: type=1326 audit(1773823180.028:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13718 comm="syz.3.2301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 718.786509][T13736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.132278][T13736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.752944][ T24] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 719.928232][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 719.952239][ T24] usb 3-1: config 243 has an invalid interface number: 3 but max is 2 [ 719.969584][ T24] usb 3-1: config 243 has an invalid interface number: 248 but max is 2 [ 719.978499][ T24] usb 3-1: config 243 has an invalid interface number: 162 but max is 2 [ 719.987165][ T24] usb 3-1: config 243 has no interface number 0 [ 719.994429][ T24] usb 3-1: config 243 has no interface number 1 [ 720.004352][ T24] usb 3-1: config 243 has no interface number 2 [ 720.010848][ T24] usb 3-1: config 243 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 720.022242][ T24] usb 3-1: config 243 interface 248 altsetting 15 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 720.034979][ T24] usb 3-1: config 243 interface 248 altsetting 15 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 720.046527][ T24] usb 3-1: config 243 interface 248 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 720.062357][ T24] usb 3-1: config 243 interface 248 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 720.095310][ T24] usb 3-1: config 243 interface 248 altsetting 15 bulk endpoint 0x9 has invalid maxpacket 16 [ 720.123055][ T24] usb 3-1: config 243 interface 162 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 720.152960][ T24] usb 3-1: config 243 interface 3 has no altsetting 0 [ 720.165896][ T24] usb 3-1: config 243 interface 248 has no altsetting 0 [ 720.173188][ T24] usb 3-1: config 243 interface 162 has no altsetting 0 [ 720.186445][ T24] usb 3-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 720.273414][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.336180][ T24] usb 3-1: Product: syz [ 720.347448][ T24] usb 3-1: Manufacturer: syz [ 720.359451][ T24] usb 3-1: SerialNumber: syz [ 720.435205][T13759] sit1: entered allmulticast mode [ 720.666564][ T24] usb 3-1: USB disconnect, device number 112 [ 720.984207][T13771] fuse: Bad value for 'fd' [ 721.153105][ T9273] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 721.312918][ T9273] usb 6-1: Using ep0 maxpacket: 32 [ 721.346894][ T9273] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.392390][ T9273] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.403441][ T9273] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 721.415498][ T9273] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.437683][ T9273] usb 6-1: config 0 descriptor?? [ 722.732176][T13791] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 722.743985][T13791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2325'. [ 722.859918][T13773] trusted_key: encrypted_key: insufficient parameters specified [ 724.026773][T13805] netlink: 'syz.0.2329': attribute type 1 has an invalid length. [ 724.054475][ T9273] usbhid 6-1:0.0: can't add hid device: -71 [ 724.060535][ T9273] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 724.136121][T13807] fuse: Bad value for 'fd' [ 724.141030][ T9273] usb 6-1: USB disconnect, device number 64 [ 724.563083][ T9273] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 724.752916][ T9273] usb 6-1: Using ep0 maxpacket: 16 [ 724.765240][ T9273] usb 6-1: config 243 has an invalid interface number: 3 but max is 2 [ 724.780954][ T9273] usb 6-1: config 243 has an invalid interface number: 248 but max is 2 [ 724.804274][ T9273] usb 6-1: config 243 has an invalid interface number: 162 but max is 2 [ 724.813547][ T9273] usb 6-1: config 243 has no interface number 0 [ 724.820026][ T9273] usb 6-1: config 243 has no interface number 1 [ 724.826660][ T9273] usb 6-1: config 243 has no interface number 2 [ 724.833194][ T9273] usb 6-1: config 243 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 724.863513][ T9273] usb 6-1: config 243 interface 3 has no altsetting 0 [ 724.870538][ T9273] usb 6-1: config 243 interface 248 has no altsetting 0 [ 724.877752][ T9273] usb 6-1: config 243 interface 162 has no altsetting 0 [ 724.888858][ T9273] usb 6-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 724.899827][ T9273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.912785][ T9273] usb 6-1: Product: syz [ 724.917306][ T9273] usb 6-1: Manufacturer: syz [ 724.922296][ T9273] usb 6-1: SerialNumber: syz [ 725.171732][ T9273] usb 6-1: USB disconnect, device number 65 [ 725.563639][T13833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.608205][T13833] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2337'. [ 725.904883][T13831] netlink: 'syz.3.2338': attribute type 1 has an invalid length. [ 725.912166][T13836] loop2: detected capacity change from 0 to 7 [ 725.947340][T13836] Dev loop2: unable to read RDB block 7 [ 725.953286][T13836] loop2: AHDI p1 p2 p3 [ 725.960470][T13836] loop2: partition table partially beyond EOD, truncated [ 725.970858][T13836] loop2: p1 start 1601398130 is beyond EOD, truncated [ 725.978419][T13836] loop2: p2 start 1702059890 is beyond EOD, truncated [ 726.682230][T13848] fuse: Bad value for 'fd' [ 727.112261][T13861] netlink: 'syz.2.2348': attribute type 1 has an invalid length. [ 727.189656][T13865] FAULT_INJECTION: forcing a failure. [ 727.189656][T13865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.243179][T13865] CPU: 0 UID: 0 PID: 13865 Comm: syz.0.2350 Tainted: G L syzkaller #0 PREEMPT(full) [ 727.243222][T13865] Tainted: [L]=SOFTLOCKUP [ 727.243231][T13865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 727.243244][T13865] Call Trace: [ 727.243254][T13865] [ 727.243265][T13865] dump_stack_lvl+0xe8/0x150 [ 727.243305][T13865] should_fail_ex+0x412/0x560 [ 727.243342][T13865] _copy_from_user+0x2d/0xb0 [ 727.243366][T13865] get_compat_msghdr+0xb3/0x4c0 [ 727.243390][T13865] ? __lock_acquire+0x6b5/0x2cf0 [ 727.243421][T13865] ? __pfx_get_compat_msghdr+0x10/0x10 [ 727.243444][T13865] ? kstrtoull+0x12f/0x1d0 [ 727.243479][T13865] ___sys_sendmsg+0x201/0x360 [ 727.243510][T13865] ? __pfx____sys_sendmsg+0x10/0x10 [ 727.243537][T13865] ? get_pid_task+0x20/0x1f0 [ 727.243556][T13865] ? get_pid_task+0x20/0x1f0 [ 727.243574][T13865] ? get_pid_task+0x20/0x1f0 [ 727.243621][T13865] ? __fget_files+0x2a/0x420 [ 727.243653][T13865] ? __fget_files+0x3a0/0x420 [ 727.243693][T13865] __sys_sendmsg+0x183/0x260 [ 727.243720][T13865] ? __pfx___sys_sendmsg+0x10/0x10 [ 727.243765][T13865] __do_fast_syscall_32+0x20d/0x640 [ 727.243794][T13865] ? do_fast_syscall_32+0x33/0x70 [ 727.243817][T13865] ? asm_int80_emulation+0x1a/0x20 [ 727.243837][T13865] ? do_int80_emulation+0x274/0x4d0 [ 727.243860][T13865] ? trace_irq_disable+0x3b/0x150 [ 727.243896][T13865] do_fast_syscall_32+0x33/0x70 [ 727.243921][T13865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 727.243947][T13865] RIP: 0023:0xf702ef6c [ 727.243966][T13865] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 727.243985][T13865] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 727.244007][T13865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 727.244022][T13865] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 727.244035][T13865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 727.244047][T13865] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 727.244060][T13865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 727.244090][T13865] [ 727.555295][T13869] loop2: detected capacity change from 0 to 7 [ 727.582463][T13869] loop2: [ 727.586102][T13869] loop2: partition table partially beyond EOD, truncated [ 728.213227][T13878] loop2: detected capacity change from 0 to 7 [ 728.249425][T13878] Dev loop2: unable to read RDB block 7 [ 728.272185][T13878] loop2: unable to read partition table [ 728.287154][T13878] loop2: partition table beyond EOD, truncated [ 728.313394][T13878] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 728.645294][T13888] fuse: Bad value for 'fd' [ 728.989570][T13904] FAULT_INJECTION: forcing a failure. [ 728.989570][T13904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.003147][T13904] CPU: 1 UID: 0 PID: 13904 Comm: syz.3.2365 Tainted: G L syzkaller #0 PREEMPT(full) [ 729.003180][T13904] Tainted: [L]=SOFTLOCKUP [ 729.003188][T13904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 729.003201][T13904] Call Trace: [ 729.003212][T13904] [ 729.003221][T13904] dump_stack_lvl+0xe8/0x150 [ 729.003257][T13904] should_fail_ex+0x412/0x560 [ 729.003283][T13904] _copy_from_user+0x2d/0xb0 [ 729.003301][T13904] kstrtouint_from_user+0xd6/0x180 [ 729.003325][T13904] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 729.003358][T13904] proc_fail_nth_write+0x8e/0x210 [ 729.003380][T13904] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 729.003405][T13904] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 729.003428][T13904] vfs_write+0x29a/0xb90 [ 729.003450][T13904] ? __pfx_vfs_write+0x10/0x10 [ 729.003468][T13904] ? __fget_files+0x2a/0x420 [ 729.003493][T13904] ? __fget_files+0x3a0/0x420 [ 729.003513][T13904] ? __fget_files+0x2a/0x420 [ 729.003540][T13904] ksys_write+0x150/0x270 [ 729.003558][T13904] ? __pfx_ksys_write+0x10/0x10 [ 729.003577][T13904] ? asm_int80_emulation+0x1a/0x20 [ 729.003596][T13904] do_int80_emulation+0x173/0x4d0 [ 729.003613][T13904] ? trace_irq_disable+0x3b/0x150 [ 729.003635][T13904] ? asm_int80_emulation+0x1a/0x20 [ 729.003649][T13904] ? clear_bhb_loop+0x40/0x90 [ 729.003664][T13904] ? clear_bhb_loop+0x40/0x90 [ 729.003682][T13904] asm_int80_emulation+0x1a/0x20 [ 729.003697][T13904] RIP: 0023:0xf7195cab [ 729.003710][T13904] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 729.003723][T13904] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 729.003739][T13904] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f544d5d0 [ 729.003749][T13904] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 729.003758][T13904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 729.003767][T13904] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 729.003775][T13904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 729.003796][T13904] [ 729.606952][T13917] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 729.666326][T13913] netlink: 'syz.0.2368': attribute type 1 has an invalid length. [ 730.295839][T13927] fuse: Bad value for 'fd' [ 730.633005][ T9273] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 730.771274][T13933] tipc: Started in network mode [ 730.776626][T13933] tipc: Node identity c2135ccca745, cluster identity 4711 [ 730.784946][T13933] tipc: Enabled bearer , priority 0 [ 730.796755][T13933] syzkaller0: entered promiscuous mode [ 730.802275][T13933] syzkaller0: entered allmulticast mode [ 730.836783][T13933] tipc: Resetting bearer [ 730.853255][ T9273] usb 6-1: Using ep0 maxpacket: 16 [ 730.861654][ T9273] usb 6-1: config 243 has an invalid interface number: 248 but max is 1 [ 730.870417][ T9273] usb 6-1: config 243 has an invalid interface number: 162 but max is 1 [ 730.878951][ T9273] usb 6-1: config 243 has no interface number 0 [ 730.886388][ T9273] usb 6-1: config 243 has no interface number 1 [ 730.892870][ T9273] usb 6-1: config 243 interface 248 has no altsetting 0 [ 730.899890][ T9273] usb 6-1: config 243 interface 162 has no altsetting 0 [ 730.915187][ T9273] usb 6-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 730.926623][ T9273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.934926][ T9273] usb 6-1: Product: syz [ 730.939304][ T9273] usb 6-1: Manufacturer: syz [ 730.944077][ T9273] usb 6-1: SerialNumber: syz [ 730.990676][T13933] tipc: Disabling bearer [ 731.196746][ T9273] usb 6-1: USB disconnect, device number 66 [ 731.312659][T13946] input: syz0 as /devices/virtual/input/input127 [ 732.143315][ T9273] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 732.301854][T13960] fuse: Bad value for 'fd' [ 732.309993][ T9273] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 732.321151][ T9273] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 732.350004][ T9273] usb 6-1: config 220 has no interface number 2 [ 732.361742][ T9273] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 732.376089][ T9273] usb 6-1: config 220 interface 0 has no altsetting 0 [ 732.384213][ T9273] usb 6-1: config 220 interface 76 has no altsetting 0 [ 732.391509][ T9273] usb 6-1: config 220 interface 1 has no altsetting 0 [ 732.404816][ T9273] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 732.419442][ T9273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.441421][ T9273] usb 6-1: Product: syz [ 732.454163][ T9273] usb 6-1: Manufacturer: syz [ 732.469258][ T9273] usb 6-1: SerialNumber: syz [ 732.609611][T13964] netlink: 'syz.0.2385': attribute type 1 has an invalid length. [ 732.706362][T13956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.724251][T13956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.769448][ T9273] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 732.777509][ T9273] uvcvideo 6-1:220.0: No valid video chain found. [ 732.789499][ T9273] usb 6-1: selecting invalid altsetting 0 [ 732.829463][ T9273] usb 6-1: selecting invalid altsetting 0 [ 732.844399][ T9273] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 732.869960][ T9273] usb 6-1: USB disconnect, device number 67 [ 733.232967][ T9] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 733.402784][T13981] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_0, syncid = 4, id = 0 [ 733.414671][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 733.434573][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.526469][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.546385][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 733.559771][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.804737][ T9] usb 3-1: config 0 descriptor?? [ 734.473069][ T9273] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 734.757247][ T9273] usb 2-1: Using ep0 maxpacket: 16 [ 734.778271][ T9273] usb 2-1: config 243 has an invalid interface number: 248 but max is 1 [ 734.793122][ T9273] usb 2-1: config 243 has an invalid interface number: 162 but max is 1 [ 734.829200][ T9273] usb 2-1: config 243 has no interface number 0 [ 734.849287][ T9273] usb 2-1: config 243 has no interface number 1 [ 734.877854][ T9273] usb 2-1: config 243 interface 248 has no altsetting 0 [ 734.899682][ T9273] usb 2-1: config 243 interface 162 has no altsetting 0 [ 734.921950][ T9273] usb 2-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 734.942466][ T9273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.976742][ T9273] usb 2-1: Product: syz [ 734.991895][ T9273] usb 2-1: Manufacturer: syz [ 735.008656][ T9273] usb 2-1: SerialNumber: syz [ 735.286915][ T9273] usb 2-1: USB disconnect, device number 103 [ 735.961942][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 735.968258][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 736.073854][T14006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.109684][ T9] usb 3-1: USB disconnect, device number 113 [ 736.163356][T14006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.167435][T14008] input: syz0 as /devices/virtual/input/input128 [ 736.584210][T14019] netlink: 'syz.3.2403': attribute type 32 has an invalid length. [ 736.602250][T14019] netlink: 'syz.3.2403': attribute type 32 has an invalid length. [ 736.680227][T14016] netlink: 'syz.2.2402': attribute type 1 has an invalid length. [ 737.274236][ T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 737.446954][ T9] usb 6-1: config 0 has an invalid interface number: 216 but max is 0 [ 737.455584][ T9] usb 6-1: config 0 has no interface number 0 [ 737.465312][ T9] usb 6-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 737.486235][ T9] usb 6-1: config 0 interface 216 altsetting 4 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 737.510322][ T9] usb 6-1: config 0 interface 216 altsetting 4 endpoint 0x8B has invalid maxpacket 14554, setting to 1024 [ 737.533413][ T9] usb 6-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8B has invalid maxpacket 1024 [ 737.555099][ T9] usb 6-1: config 0 interface 216 has no altsetting 0 [ 737.568619][ T9] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 737.586382][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.613993][ T24] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 737.615659][ T9] usb 6-1: config 0 descriptor?? [ 737.644047][T14027] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 737.652465][T14027] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 737.674610][ T9] usb 6-1: NFC: intf ffff888020f10000 id ffffffff8f1d0b20 [ 737.803035][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 737.816188][ T24] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 737.852927][ T24] usb 4-1: config 0 has no interface number 0 [ 737.872928][ T24] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 737.941132][ T24] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 737.963628][ T24] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 737.998837][ T24] usb 4-1: config 0 interface 196 has no altsetting 0 [ 738.016680][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 738.026512][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.043014][ T24] usb 4-1: Product: syz [ 738.060004][ T24] usb 4-1: Manufacturer: syz [ 738.069814][ T24] usb 4-1: SerialNumber: syz [ 738.094255][ T24] usb 4-1: config 0 descriptor?? [ 738.114211][T14035] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 738.293501][T11798] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 738.453354][T11798] usb 3-1: Using ep0 maxpacket: 16 [ 738.470866][T11798] usb 3-1: config 243 has an invalid interface number: 3 but max is 2 [ 738.485148][T11798] usb 3-1: config 243 has an invalid interface number: 248 but max is 2 [ 738.512995][T11798] usb 3-1: config 243 has an invalid interface number: 162 but max is 2 [ 738.537273][T11798] usb 3-1: config 243 has no interface number 0 [ 738.557947][T11798] usb 3-1: config 243 has no interface number 1 [ 738.615127][T11798] usb 3-1: config 243 has no interface number 2 [ 738.642210][T11798] usb 3-1: config 243 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 738.661977][T11798] usb 3-1: config 243 interface 3 has no altsetting 0 [ 738.690321][T11798] usb 3-1: config 243 interface 248 has no altsetting 0 [ 738.710727][T11798] usb 3-1: config 243 interface 162 has no altsetting 0 [ 738.726196][T11798] usb 3-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 738.744173][T11798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.752486][T11798] usb 3-1: Product: syz [ 738.760638][T11798] usb 3-1: Manufacturer: syz [ 738.765653][T11798] usb 3-1: SerialNumber: syz [ 738.892756][ T24] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 738.916987][ T24] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 739.008522][T14052] fuse: Unknown parameter 'euid' [ 739.128750][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 739.128772][ T30] audit: type=1326 audit(1773823201.708:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.5.2404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 739.234609][T11798] usb 3-1: USB disconnect, device number 114 [ 739.292671][ T30] audit: type=1326 audit(1773823201.708:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.5.2404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 739.485277][ T30] audit: type=1326 audit(1773823201.708:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.5.2404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 739.537575][ T30] audit: type=1326 audit(1773823201.708:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.5.2404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 739.615094][ T9] usb 4-1: USB disconnect, device number 103 [ 739.788445][ T30] audit: type=1326 audit(1773823201.708:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.5.2404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 739.828789][ T30] audit: type=1326 audit(1773823201.708:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.5.2404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 739.852474][ T9] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 739.890616][ T30] audit: type=1326 audit(1773823201.708:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.5.2404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 739.932953][ T30] audit: type=1326 audit(1773823201.708:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.5.2404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 740.112950][T14058] input: syz1 as /devices/virtual/input/input129 [ 740.126969][ T30] audit: type=1326 audit(1773823201.708:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.5.2404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 740.332325][ T30] audit: type=1326 audit(1773823201.708:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.5.2404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f6c code=0x7ffc0000 [ 740.733012][ T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 740.849496][T14072] input: syz0 as /devices/virtual/input/input130 [ 740.920150][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 740.934126][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.946616][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 740.957738][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 740.991200][ T9] usb 4-1: Manufacturer: syz [ 741.046853][ T9] usb 4-1: config 0 descriptor?? [ 741.263526][ T9] rc_core: IR keymap rc-hauppauge not found [ 741.276214][ T9] Registered IR keymap rc-empty [ 741.322072][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 741.366342][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input131 [ 741.790687][ T9] usb 6-1: USB disconnect, device number 68 [ 742.623117][T11798] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 742.786593][T11798] usb 6-1: Using ep0 maxpacket: 32 [ 742.795595][T11798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.819764][T11798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.851294][T11798] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 742.907213][T11798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.949964][T11798] usb 6-1: config 0 descriptor?? [ 743.556385][ T5929] usb 4-1: USB disconnect, device number 104 [ 743.837637][T14108] tls_set_device_offload_rx: netdev not found [ 743.871761][T14112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.932589][T14112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.177419][T14118] fuse: Bad value for 'fd' [ 744.822992][ T5901] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 744.997526][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 745.043314][ T5901] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 745.077306][ T5901] usb 2-1: config 0 has no interface number 0 [ 745.116429][ T5901] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 745.151092][ T5901] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 745.166822][ T5901] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 745.181109][ T5901] usb 2-1: config 0 interface 196 has no altsetting 0 [ 745.397850][T11798] usbhid 6-1:0.0: can't add hid device: -71 [ 745.413181][ T5901] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 745.426493][T11798] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 745.451634][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.480605][T11798] usb 6-1: USB disconnect, device number 69 [ 745.494912][ T9005] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 745.509346][ T5901] usb 2-1: Product: syz [ 745.564600][ T5901] usb 2-1: Manufacturer: syz [ 745.633912][ T5901] usb 2-1: SerialNumber: syz [ 745.834628][ T5901] usb 2-1: config 0 descriptor?? [ 745.860795][T14122] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 746.203253][T11798] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 746.277791][T14144] input: syz0 as /devices/virtual/input/input132 [ 746.497074][T11798] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.511011][T11798] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 746.527112][T11798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.566471][T11798] usb 6-1: config 0 descriptor?? [ 746.641238][T11798] pwc: Askey VC010 type 2 USB webcam detected. [ 746.767265][ T5901] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 746.961998][ T5901] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 747.029329][T11798] pwc: recv_control_msg error -32 req 02 val 2b00 [ 747.068248][T11798] pwc: recv_control_msg error -32 req 02 val 2700 [ 747.103380][T11798] pwc: recv_control_msg error -32 req 02 val 2c00 [ 747.125935][T11798] pwc: recv_control_msg error -32 req 04 val 1000 [ 747.148390][T11798] pwc: recv_control_msg error -32 req 04 val 1300 [ 747.180083][T11798] pwc: recv_control_msg error -32 req 04 val 1400 [ 747.201964][T11798] pwc: recv_control_msg error -32 req 02 val 2000 [ 747.228988][T11798] pwc: recv_control_msg error -32 req 02 val 2100 [ 747.279789][T11798] pwc: recv_control_msg error -32 req 04 val 1500 [ 747.422021][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.428818][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.500331][ T24] usb 2-1: USB disconnect, device number 104 [ 748.619266][ T24] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 748.887301][T14171] netlink: 'syz.1.2434': attribute type 1 has an invalid length. [ 749.016329][T11798] pwc: recv_control_msg error -71 req 02 val 2400 [ 749.030535][T11798] pwc: recv_control_msg error -71 req 02 val 2600 [ 749.043463][T11798] pwc: recv_control_msg error -71 req 02 val 2900 [ 749.077998][T11798] pwc: recv_control_msg error -71 req 02 val 2800 [ 749.105478][T11798] pwc: recv_control_msg error -71 req 04 val 1100 [ 749.143395][T11798] pwc: recv_control_msg error -71 req 04 val 1200 [ 749.165855][T11798] pwc: Registered as video103. [ 749.219632][T11798] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input133 [ 749.258888][T11798] usb 6-1: USB disconnect, device number 70 [ 749.355285][T14181] fuse: Bad value for 'fd' [ 749.692954][ T24] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 749.852900][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 749.863240][ T24] usb 3-1: config 243 has an invalid interface number: 3 but max is 2 [ 749.872111][ T24] usb 3-1: config 243 has an invalid interface number: 248 but max is 2 [ 749.883268][ T24] usb 3-1: config 243 has an invalid interface number: 162 but max is 2 [ 749.893428][ T24] usb 3-1: config 243 has no interface number 0 [ 749.899948][ T24] usb 3-1: config 243 has no interface number 1 [ 749.908860][ T24] usb 3-1: config 243 has no interface number 2 [ 749.919510][ T24] usb 3-1: config 243 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 749.931974][ T24] usb 3-1: config 243 interface 3 has no altsetting 0 [ 749.939358][ T24] usb 3-1: config 243 interface 248 has no altsetting 0 [ 749.990620][ T24] usb 3-1: config 243 interface 162 has no altsetting 0 [ 750.020573][ T24] usb 3-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 750.035110][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.094599][ T24] usb 3-1: Product: syz [ 750.114764][ T24] usb 3-1: Manufacturer: syz [ 750.128566][ T24] usb 3-1: SerialNumber: syz [ 750.414969][ T24] usb 3-1: USB disconnect, device number 115 [ 750.744404][T14221] tls_set_device_offload_rx: netdev not found [ 750.769239][T14226] input: syz0 as /devices/virtual/input/input134 [ 750.877984][T14227] tls_set_device_offload_rx: netdev not found [ 751.203279][T14234] fuse: Bad value for 'fd' [ 751.254386][T11798] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 751.445122][T11798] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 751.457313][T11798] usb 4-1: config 0 has no interface number 0 [ 751.553264][T11798] usb 4-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 751.593274][T11798] usb 4-1: config 0 interface 216 altsetting 4 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 751.628119][T11798] usb 4-1: config 0 interface 216 altsetting 4 endpoint 0x8B has invalid maxpacket 14554, setting to 1024 [ 751.721468][T11798] usb 4-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8B has invalid maxpacket 1024 [ 751.753018][T11798] usb 4-1: config 0 interface 216 has no altsetting 0 [ 751.762378][T11798] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 751.840136][T11798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.861729][T11798] usb 4-1: config 0 descriptor?? [ 751.900913][T14230] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 751.908590][T14230] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 751.942566][T11798] usb 4-1: NFC: intf ffff88807e808000 id ffffffff8f1d0b20 [ 752.681436][T14244] netlink: 'syz.5.2453': attribute type 1 has an invalid length. [ 753.259859][T14257] fuse: Unknown parameter 'euid' [ 753.270583][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 753.270602][ T30] audit: type=1326 audit(1773823215.958:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14229 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 753.301882][ T30] audit: type=1326 audit(1773823215.958:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14229 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 753.443276][ T30] audit: type=1326 audit(1773823215.958:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14229 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 753.492317][ T30] audit: type=1326 audit(1773823215.958:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14229 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 753.701319][ T30] audit: type=1326 audit(1773823215.958:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14229 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 753.747571][ T30] audit: type=1326 audit(1773823215.958:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14229 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 753.865715][ T30] audit: type=1326 audit(1773823215.958:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14229 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 753.934492][ T30] audit: type=1326 audit(1773823215.958:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14229 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 754.051794][ T30] audit: type=1326 audit(1773823215.958:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14229 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 754.137765][ T30] audit: type=1326 audit(1773823215.958:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14229 comm="syz.3.2448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 754.343243][T14261] netlink: 'syz.1.2458': attribute type 1 has an invalid length. [ 754.387541][T14269] tls_set_device_offload_rx: netdev not found [ 754.453039][ T9273] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 754.505210][ T5929] usb 4-1: USB disconnect, device number 105 [ 754.602907][ T9273] usb 3-1: Using ep0 maxpacket: 16 [ 754.611457][ T9273] usb 3-1: config 243 has an invalid interface number: 3 but max is 2 [ 754.620612][ T9273] usb 3-1: config 243 has an invalid interface number: 248 but max is 2 [ 754.651308][ T9273] usb 3-1: config 243 has an invalid interface number: 162 but max is 2 [ 754.719794][ T9273] usb 3-1: config 243 has no interface number 0 [ 754.737213][ T9273] usb 3-1: config 243 has no interface number 1 [ 754.759748][ T9273] usb 3-1: config 243 has no interface number 2 [ 754.793819][ T9273] usb 3-1: config 243 interface 3 has no altsetting 0 [ 754.800757][ T9273] usb 3-1: config 243 interface 248 has no altsetting 0 [ 754.817465][ T9273] usb 3-1: config 243 interface 162 has no altsetting 0 [ 754.828774][ T9273] usb 3-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 754.838496][ T9273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.849057][ T9273] usb 3-1: Product: syz [ 754.872924][ T9273] usb 3-1: Manufacturer: syz [ 754.877662][ T9273] usb 3-1: SerialNumber: syz [ 755.152330][ T9273] usb 3-1: USB disconnect, device number 116 [ 755.897134][T14291] input: syz0 as /devices/virtual/input/input135 [ 755.905513][ T5901] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 756.113042][ T5901] usb 6-1: Using ep0 maxpacket: 32 [ 756.120702][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.178379][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.253038][ T5901] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 756.311023][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.345438][ T5901] usb 6-1: config 0 descriptor?? [ 756.452969][ T9273] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 756.664529][ T9273] usb 2-1: Using ep0 maxpacket: 32 [ 756.760895][ T9273] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 756.769559][ T9273] usb 2-1: config 0 has no interface number 0 [ 756.815284][ T9273] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 756.828081][ T9273] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 756.842770][ T9273] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 756.900211][ T9273] usb 2-1: config 0 interface 196 has no altsetting 0 [ 756.933081][ T9273] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 756.951365][ T9273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.978716][ T9273] usb 2-1: Product: syz [ 756.988615][ T9273] usb 2-1: Manufacturer: syz [ 757.001784][ T9273] usb 2-1: SerialNumber: syz [ 757.028283][ T9273] usb 2-1: config 0 descriptor?? [ 757.038371][T14293] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 757.568312][ T9273] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 757.598103][ T9273] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 757.671015][ T9273] usb 2-1: USB disconnect, device number 105 [ 757.680157][T14309] netlink: 'syz.3.2472': attribute type 1 has an invalid length. [ 758.186118][ T5901] usbhid 6-1:0.0: can't add hid device: -71 [ 758.213570][ T5901] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 758.243250][ T5901] usb 6-1: USB disconnect, device number 71 [ 759.111259][T14322] netlink: 'syz.1.2478': attribute type 1 has an invalid length. [ 759.882449][T14351] input: syz0 as /devices/virtual/input/input136 [ 760.934842][T14366] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2490'. [ 761.832646][T14381] tls_set_device_offload_rx: netdev not found [ 761.989132][T14392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.000227][T14392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.749995][T14416] input: syz0 as /devices/virtual/input/input137 [ 763.695426][T14424] netlink: 'syz.3.2509': attribute type 1 has an invalid length. [ 764.605679][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2517'. [ 764.617612][T14444] netlink: 'syz.0.2517': attribute type 5 has an invalid length. [ 764.628864][T14444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2517'. [ 764.653223][T14444] geneve3: entered promiscuous mode [ 764.678049][T14444] geneve3: entered allmulticast mode [ 765.223258][ T5929] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 765.383216][ T5929] usb 6-1: Using ep0 maxpacket: 32 [ 765.415115][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.429893][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.450767][ T5929] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 765.468855][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.490324][ T5929] usb 6-1: config 0 descriptor?? [ 765.928117][T14456] netlink: 'syz.2.2532': attribute type 1 has an invalid length. [ 767.515778][T14478] input: syz0 as /devices/virtual/input/input138 [ 767.918947][ T5929] usbhid 6-1:0.0: can't add hid device: -71 [ 767.933478][ T5929] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 767.981668][ T5929] usb 6-1: USB disconnect, device number 72 [ 768.722472][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 768.722490][ T30] audit: type=1400 audit(1773823231.428:376): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=14490 comm="syz.1.2534" [ 769.549661][ T30] audit: type=1326 audit(1773823232.258:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.0.2538" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x0 [ 769.972903][ T24] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 770.281252][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 770.326710][T11798] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 770.403125][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.465779][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.493426][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 770.573035][T11798] usb 2-1: Using ep0 maxpacket: 16 [ 770.581318][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.598477][T11798] usb 2-1: config 243 has an invalid interface number: 3 but max is 2 [ 770.607401][T11798] usb 2-1: config 243 has an invalid interface number: 248 but max is 2 [ 770.629168][ T24] usb 4-1: config 0 descriptor?? [ 770.635856][T11798] usb 2-1: config 243 has an invalid interface number: 162 but max is 2 [ 770.721786][T11798] usb 2-1: config 243 has no interface number 0 [ 770.754480][T11798] usb 2-1: config 243 has no interface number 1 [ 770.761023][T11798] usb 2-1: config 243 has no interface number 2 [ 770.783015][T11798] usb 2-1: config 243 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 770.804885][T11798] usb 2-1: config 243 interface 3 has no altsetting 0 [ 770.832602][T11798] usb 2-1: config 243 interface 248 has no altsetting 0 [ 770.854005][T11798] usb 2-1: config 243 interface 162 has no altsetting 0 [ 770.894541][T11798] usb 2-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 770.903808][T11798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.911949][T11798] usb 2-1: Product: syz [ 770.926569][T11798] usb 2-1: Manufacturer: syz [ 770.934065][T14519] netlink: 'syz.0.2542': attribute type 1 has an invalid length. [ 770.941846][T11798] usb 2-1: SerialNumber: syz [ 771.208390][T14527] input: syz0 as /devices/virtual/input/input139 [ 771.257073][T11798] usb 2-1: USB disconnect, device number 106 [ 772.405728][T14530] tls_set_device_offload_rx: netdev not found [ 772.423090][ T9] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 772.575254][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 772.590246][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.610256][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 772.621307][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 772.644419][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 772.657676][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 772.675246][ T24] usb 4-1: USB disconnect, device number 106 [ 772.686956][ T9] usb 3-1: Manufacturer: syz [ 772.722978][ T9] usb 3-1: config 0 descriptor?? [ 772.832892][ T9] rc_core: IR keymap rc-hauppauge not found [ 772.842187][ T9] Registered IR keymap rc-empty [ 772.853615][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 772.869354][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input140 [ 772.985006][T14547] input: syz0 as /devices/virtual/input/input141 [ 773.525379][ T30] audit: type=1326 audit(1773823236.238:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14551 comm="syz.1.2553" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x0 [ 773.689686][T14558] input: syz0 as /devices/virtual/input/input142 [ 775.009932][T11798] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 775.053342][T14574] input: syz0 as /devices/virtual/input/input143 [ 775.157256][ T24] usb 3-1: USB disconnect, device number 117 [ 775.173022][T11798] usb 4-1: Using ep0 maxpacket: 16 [ 775.189087][T11798] usb 4-1: config 243 has an invalid interface number: 3 but max is 2 [ 775.198971][T11798] usb 4-1: config 243 has an invalid interface number: 248 but max is 2 [ 775.222404][T11798] usb 4-1: config 243 has an invalid interface number: 162 but max is 2 [ 775.269682][T11798] usb 4-1: config 243 has no interface number 0 [ 775.330821][T11798] usb 4-1: config 243 has no interface number 1 [ 775.428595][T11798] usb 4-1: config 243 has no interface number 2 [ 775.437580][T11798] usb 4-1: config 243 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 775.452473][T11798] usb 4-1: config 243 interface 3 has no altsetting 0 [ 775.467834][T11798] usb 4-1: config 243 interface 248 has no altsetting 0 [ 775.521451][T11798] usb 4-1: config 243 interface 162 has no altsetting 0 [ 775.614323][T11798] usb 4-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 775.623904][T11798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.668086][T11798] usb 4-1: Product: syz [ 775.672497][T11798] usb 4-1: Manufacturer: syz [ 775.677520][T11798] usb 4-1: SerialNumber: syz [ 775.960186][T11798] usb 4-1: USB disconnect, device number 107 [ 775.974186][ T9] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 776.133617][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 776.149373][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.164152][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.226920][T14591] input: syz0 as /devices/virtual/input/input144 [ 776.430447][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 776.457320][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.492512][ T9] usb 3-1: config 0 descriptor?? [ 777.243297][T14601] input: syz0 as /devices/virtual/input/input145 [ 777.493469][ T9005] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 777.973021][ T5929] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 778.214305][ T5929] usb 6-1: Using ep0 maxpacket: 32 [ 778.223930][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.359046][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.392004][ T5929] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 778.412664][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.449453][ T5929] usb 6-1: config 0 descriptor?? [ 778.483702][ T5929] hub 6-1:0.0: USB hub found [ 779.127643][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 779.153031][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 779.212010][ T9] usb 3-1: USB disconnect, device number 118 [ 780.395216][T14621] tls_set_device_offload_rx: netdev not found [ 780.578428][ T5929] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 780.624380][ T5929] usbhid 6-1:0.0: can't add hid device: -71 [ 780.650216][ T5929] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 780.662895][T11798] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 780.713901][ T5929] usb 6-1: USB disconnect, device number 73 [ 780.836105][T11798] usb 2-1: Using ep0 maxpacket: 16 [ 780.870289][T11798] usb 2-1: config 243 has an invalid interface number: 3 but max is 2 [ 780.891070][T11798] usb 2-1: config 243 has an invalid interface number: 248 but max is 2 [ 780.913238][T11798] usb 2-1: config 243 has an invalid interface number: 162 but max is 2 [ 780.926205][T11798] usb 2-1: config 243 has no interface number 0 [ 780.932743][T11798] usb 2-1: config 243 has no interface number 1 [ 780.940738][T11798] usb 2-1: config 243 has no interface number 2 [ 780.950386][T11798] usb 2-1: config 243 interface 3 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 780.964870][T11798] usb 2-1: config 243 interface 3 has no altsetting 0 [ 780.971736][T11798] usb 2-1: config 243 interface 248 has no altsetting 0 [ 780.979352][T11798] usb 2-1: config 243 interface 162 has no altsetting 0 [ 780.990179][T11798] usb 2-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=ad.c3 [ 781.008494][T11798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.017306][T11798] usb 2-1: Product: syz [ 781.021879][T11798] usb 2-1: Manufacturer: syz [ 781.026783][T11798] usb 2-1: SerialNumber: syz [ 781.253068][ T24] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 781.290829][T11798] usb 2-1: USB disconnect, device number 107 [ 781.395250][ T5880] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 781.487099][ T24] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 781.496238][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.543840][ T24] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 781.563545][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 781.571973][ T24] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 781.594027][ T24] usb 3-1: Manufacturer: syz [ 781.603478][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.641475][ T24] usb 3-1: config 0 descriptor?? [ 781.647649][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.692247][ T5880] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 781.725463][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.759490][ T5880] usb 6-1: config 0 descriptor?? [ 781.855251][ T24] rc_core: IR keymap rc-hauppauge not found [ 781.866916][ T24] Registered IR keymap rc-empty [ 781.887713][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 781.921842][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input146 [ 782.043244][T14662] input: syz1 as /devices/virtual/input/input147 [ 782.281033][T14662] netlink: 'syz.3.2588': attribute type 1 has an invalid length. [ 782.532357][T14663] gretap1: entered allmulticast mode [ 782.541878][T14663] bond1: (slave gretap1): making interface the new active one [ 782.550595][T14663] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 783.986181][ T24] usb 3-1: USB disconnect, device number 119 [ 784.383893][T14690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2598'. [ 784.452654][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2598'. [ 784.715597][ T5880] usbhid 6-1:0.0: can't add hid device: -71 [ 784.723250][ T5929] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 784.732060][ T5880] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 784.780508][ T5880] usb 6-1: USB disconnect, device number 74 [ 784.887069][ T5929] usb 4-1: config index 0 descriptor too short (expected 64995, got 227) [ 784.922977][ T5929] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 784.963038][ T5929] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 2 [ 785.005137][ T5929] usb 4-1: config 220 interface 0 has no altsetting 0 [ 785.025906][ T5929] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 785.050997][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.088728][ T5929] usb 4-1: Product: syz [ 785.119452][ T5929] usb 4-1: Manufacturer: syz [ 785.132890][ T5929] usb 4-1: SerialNumber: syz [ 785.529137][T14718] netlink: 'syz.1.2608': attribute type 1 has an invalid length. [ 785.707964][ T24] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 785.865614][ T24] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 785.875043][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.886458][ T24] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 785.896370][ T24] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 785.904608][ T24] usb 3-1: Manufacturer: syz [ 785.913114][ T24] usb 3-1: config 0 descriptor?? [ 785.987053][ T24] rc_core: IR keymap rc-hauppauge not found [ 785.993190][ T24] Registered IR keymap rc-empty [ 786.013113][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 786.032259][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input148 [ 786.291261][T14733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.307486][T14733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.883719][T14742] input: syz0 as /devices/virtual/input/input149 [ 788.505811][ T9273] usb 3-1: USB disconnect, device number 120 [ 788.659436][T14754] fuse: Bad value for 'fd' [ 789.453019][ T24] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 789.625076][ T24] usb 3-1: config index 0 descriptor too short (expected 64995, got 227) [ 789.642988][ T24] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 789.658566][ T24] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 2 [ 789.743444][ T24] usb 3-1: config 220 interface 0 has no altsetting 0 [ 789.790307][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 789.801584][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.826843][ T24] usb 3-1: Product: syz [ 789.837264][ T24] usb 3-1: Manufacturer: syz [ 789.846696][ T24] usb 3-1: SerialNumber: syz [ 790.217437][T14777] netlink: 'syz.1.2628': attribute type 1 has an invalid length. [ 790.228136][ T5929] uvcvideo 4-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 790.247450][ T5929] uvcvideo 4-1:220.0: No valid video chain found. [ 790.360478][ T24] uvcvideo 3-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 790.368481][ T24] uvcvideo 3-1:220.0: No valid video chain found. [ 790.394524][ T24] usb 3-1: USB disconnect, device number 121 [ 790.665500][T14787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.687533][T14787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.989735][T14793] fuse: Bad value for 'fd' [ 791.286782][T14805] input: syz0 as /devices/virtual/input/input150 [ 792.562763][T14831] fuse: Bad value for 'fd' [ 792.839299][T14834] syzkaller0: entered promiscuous mode [ 792.882972][T14834] syzkaller0: entered allmulticast mode [ 792.950435][T14829] netlink: 'syz.5.2646': attribute type 1 has an invalid length. [ 793.493001][ T24] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 793.578155][T14851] FAULT_INJECTION: forcing a failure. [ 793.578155][T14851] name failslab, interval 1, probability 0, space 0, times 0 [ 793.610978][T14851] CPU: 0 UID: 0 PID: 14851 Comm: syz.0.2653 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.611015][T14851] Tainted: [L]=SOFTLOCKUP [ 793.611023][T14851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 793.611037][T14851] Call Trace: [ 793.611046][T14851] [ 793.611057][T14851] dump_stack_lvl+0xe8/0x150 [ 793.611094][T14851] should_fail_ex+0x412/0x560 [ 793.611130][T14851] should_failslab+0xa8/0x100 [ 793.611160][T14851] __kmalloc_cache_noprof+0x88/0x660 [ 793.611193][T14851] ? bdi_split_work_to_wbs+0x543/0x960 [ 793.611225][T14851] bdi_split_work_to_wbs+0x543/0x960 [ 793.611253][T14851] ? bdi_split_work_to_wbs+0x110/0x960 [ 793.611288][T14851] ? __pfx_bdi_split_work_to_wbs+0x10/0x10 [ 793.611329][T14851] ? list_lru_walk_node+0x9ad/0xa20 [ 793.611364][T14851] __writeback_inodes_sb_nr+0x23e/0x2c0 [ 793.611400][T14851] ? __pfx___writeback_inodes_sb_nr+0x10/0x10 [ 793.611424][T14851] ? list_lru_count_node+0x52/0x80 [ 793.611455][T14851] ? get_nr_dirty_inodes+0x1c4/0x210 [ 793.611487][T14851] sync_filesystem+0xa3/0x230 [ 793.611508][T14851] fuse_reconfigure+0x61/0xc0 [ 793.611538][T14851] reconfigure_super+0x227/0x8a0 [ 793.611568][T14851] path_mount+0xdc5/0x10e0 [ 793.611604][T14851] ? user_path_at+0xd4/0x160 [ 793.611630][T14851] __se_sys_mount+0x31d/0x420 [ 793.611667][T14851] ? __pfx___se_sys_mount+0x10/0x10 [ 793.611703][T14851] ? __ia32_sys_mount+0x20/0xc0 [ 793.611767][T14851] __do_fast_syscall_32+0x20d/0x640 [ 793.611796][T14851] ? do_fast_syscall_32+0x33/0x70 [ 793.611819][T14851] ? asm_int80_emulation+0x1a/0x20 [ 793.611839][T14851] ? do_int80_emulation+0x274/0x4d0 [ 793.611960][T14851] ? trace_irq_disable+0x3b/0x150 [ 793.611998][T14851] do_fast_syscall_32+0x33/0x70 [ 793.612025][T14851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 793.612053][T14851] RIP: 0023:0xf702ef6c [ 793.612073][T14851] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 793.612092][T14851] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 793.612115][T14851] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000400 [ 793.612130][T14851] RDX: 0000000000000000 RSI: 000000000200a0a0 RDI: 0000000000000000 [ 793.612143][T14851] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 793.612156][T14851] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 793.612168][T14851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 793.612199][T14851] [ 793.928707][ T24] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 793.937432][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.949590][ T24] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 793.959476][ T24] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 794.155378][ T24] usb 2-1: Manufacturer: syz [ 794.235049][ T24] usb 2-1: config 0 descriptor?? [ 794.242434][T14865] fuse: Bad value for 'fd' [ 794.545120][T14872] input: syz0 as /devices/virtual/input/input152 [ 794.555227][ T24] rc_core: IR keymap rc-hauppauge not found [ 794.561962][ T24] Registered IR keymap rc-empty [ 794.571754][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 794.609536][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input151 [ 794.786469][ T9] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 794.801754][T14875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.814998][T14875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.829252][T14875] program syz.3.2660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 794.964730][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 794.975449][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 794.988554][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 795.073030][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.139569][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 795.189973][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 795.233091][ T9] usb 3-1: Product: syz [ 795.240929][ T9] usb 3-1: Manufacturer: syz [ 795.264520][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 795.336367][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 795.341794][ T9] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 795.468420][ T9] usb 3-1: USB disconnect, device number 122 [ 796.226664][ T9] usb 2-1: USB disconnect, device number 108 [ 796.784571][T14900] fuse: Bad value for 'fd' [ 796.888399][T14896] netlink: 'syz.0.2667': attribute type 1 has an invalid length. [ 797.108551][T14906] input: syz0 as /devices/virtual/input/input153 [ 797.421053][T14915] input: syz0 as /devices/virtual/input/input154 [ 797.514096][ T24] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 798.112911][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 798.208596][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.220580][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.251138][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 798.286813][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.302727][ T24] usb 6-1: config 0 descriptor?? [ 798.696161][T14924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.713724][T14924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.726791][T14927] FAULT_INJECTION: forcing a failure. [ 798.726791][T14927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.780852][T14927] CPU: 0 UID: 0 PID: 14927 Comm: syz.2.2677 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.780888][T14927] Tainted: [L]=SOFTLOCKUP [ 798.780896][T14927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 798.780909][T14927] Call Trace: [ 798.780919][T14927] [ 798.780928][T14927] dump_stack_lvl+0xe8/0x150 [ 798.780964][T14927] should_fail_ex+0x412/0x560 [ 798.781000][T14927] _copy_from_iter+0x1d3/0x1670 [ 798.781036][T14927] ? rcu_is_watching+0x15/0xb0 [ 798.781073][T14927] ? __pfx__copy_from_iter+0x10/0x10 [ 798.781126][T14927] ? netlink_sendmsg+0x650/0xb40 [ 798.781156][T14927] ? skb_put+0x11b/0x210 [ 798.781195][T14927] netlink_sendmsg+0x6c0/0xb40 [ 798.781234][T14927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.781269][T14927] ? aa_sock_msg_perm+0xf1/0x1b0 [ 798.781301][T14927] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 798.781328][T14927] ____sys_sendmsg+0x972/0x9f0 [ 798.781362][T14927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 798.781389][T14927] ? kstrtoull+0x12f/0x1d0 [ 798.781422][T14927] ___sys_sendmsg+0x2a5/0x360 [ 798.781451][T14927] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.781478][T14927] ? get_pid_task+0x20/0x1f0 [ 798.781498][T14927] ? get_pid_task+0x20/0x1f0 [ 798.781516][T14927] ? get_pid_task+0x20/0x1f0 [ 798.781559][T14927] ? __fget_files+0x2a/0x420 [ 798.781589][T14927] ? __fget_files+0x3a0/0x420 [ 798.781630][T14927] __sys_sendmsg+0x183/0x260 [ 798.781657][T14927] ? __pfx___sys_sendmsg+0x10/0x10 [ 798.781703][T14927] __do_fast_syscall_32+0x20d/0x640 [ 798.781732][T14927] ? do_fast_syscall_32+0x33/0x70 [ 798.781754][T14927] ? asm_int80_emulation+0x1a/0x20 [ 798.781775][T14927] ? do_int80_emulation+0x274/0x4d0 [ 798.781798][T14927] ? trace_irq_disable+0x3b/0x150 [ 798.781832][T14927] do_fast_syscall_32+0x33/0x70 [ 798.781857][T14927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 798.781883][T14927] RIP: 0023:0xf7fe2f6c [ 798.781902][T14927] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 798.781920][T14927] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 798.781950][T14927] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 798.781969][T14927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 798.781982][T14927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 798.781994][T14927] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 798.782007][T14927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 798.782037][T14927] [ 799.219755][ T9] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 799.384810][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 799.431171][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.515335][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 799.528189][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 799.545301][ T9] usb 2-1: Manufacturer: syz [ 799.570635][ T9] usb 2-1: config 0 descriptor?? [ 799.744106][ T9] rc_core: IR keymap rc-hauppauge not found [ 799.750426][ T9] Registered IR keymap rc-empty [ 799.758387][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 799.796672][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input155 [ 800.568302][T14946] fuse: Bad value for 'fd' [ 800.933276][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 800.947566][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 801.002697][ T24] usb 6-1: USB disconnect, device number 75 [ 801.405430][T14962] netlink: 'syz.2.2686': attribute type 1 has an invalid length. [ 801.482898][ T24] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 801.591005][ T5833] ================================================================== [ 801.599205][ T5833] BUG: KASAN: stack-out-of-bounds in l2cap_send_cmd+0x2a3/0xb90 [ 801.606865][ T5833] Read of size 24 at addr ffffc900044274e0 by task kworker/u9:6/5833 [ 801.615125][ T5833] [ 801.617463][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.617486][ T5833] Tainted: [L]=SOFTLOCKUP [ 801.617492][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 801.617503][ T5833] Workqueue: hci3 hci_rx_work [ 801.617524][ T5833] Call Trace: [ 801.617532][ T5833] [ 801.617539][ T5833] dump_stack_lvl+0xe8/0x150 [ 801.617563][ T5833] print_report+0xba/0x230 [ 801.617580][ T5833] ? l2cap_send_cmd+0x2a3/0xb90 [ 801.617596][ T5833] kasan_report+0x117/0x150 [ 801.617615][ T5833] ? trace_kmem_cache_alloc+0x29/0xf0 [ 801.617631][ T5833] ? l2cap_send_cmd+0x2a3/0xb90 [ 801.617650][ T5833] kasan_check_range+0x264/0x2c0 [ 801.617669][ T5833] ? l2cap_send_cmd+0x2a3/0xb90 [ 801.617685][ T5833] __asan_memcpy+0x29/0x70 [ 801.617700][ T5833] l2cap_send_cmd+0x2a3/0xb90 [ 801.617720][ T5833] l2cap_recv_frame+0xc032/0x10240 [ 801.617743][ T5833] ? unwind_next_frame+0xa5/0x23c0 [ 801.617767][ T5833] ? unwind_next_frame+0xa5/0x23c0 [ 801.617791][ T5833] ? unwind_next_frame+0xa5/0x23c0 [ 801.617812][ T5833] ? unwind_next_frame+0x1aaf/0x23c0 [ 801.617836][ T5833] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 801.617855][ T5833] ? ret_from_fork_asm+0x1a/0x30 [ 801.617877][ T5833] ? ret_from_fork_asm+0x1a/0x30 [ 801.617899][ T5833] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 801.617918][ T5833] ? ret_from_fork_asm+0x1a/0x30 [ 801.617942][ T5833] ? stack_trace_save+0xa9/0x100 [ 801.617956][ T5833] ? __bfs+0x153/0x290 [ 801.617975][ T5833] ? __pfx_hlock_conflict+0x10/0x10 [ 801.618004][ T5833] ? check_path+0x21/0x40 [ 801.618025][ T5833] ? check_noncircular+0xda/0x150 [ 801.618054][ T5833] ? lockdep_unlock+0x5d/0xd0 [ 801.618070][ T5833] ? __lock_acquire+0x146e/0x2cf0 [ 801.618096][ T5833] ? __mutex_trylock_common+0x158/0x260 [ 801.618120][ T5833] ? __pfx___mutex_trylock_common+0x10/0x10 [ 801.618149][ T5833] ? rcu_is_watching+0x15/0xb0 [ 801.618169][ T5833] ? trace_contention_end+0x3d/0x150 [ 801.618193][ T5833] ? __mutex_lock+0x319/0x1300 [ 801.618212][ T5833] ? l2cap_recv_acldata+0x2e3/0x13e0 [ 801.618232][ T5833] ? l2cap_recv_acldata+0x30b/0x13e0 [ 801.618253][ T5833] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 801.618273][ T5833] ? __pfx___mutex_lock+0x10/0x10 [ 801.618290][ T5833] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 801.618306][ T5833] ? l2cap_conn_hold_unless_zero+0x179/0x2b0 [ 801.618327][ T5833] ? __pfx_l2cap_conn_hold_unless_zero+0x10/0x10 [ 801.618348][ T5833] ? l2cap_recv_acldata+0x41/0x13e0 [ 801.618368][ T5833] l2cap_recv_acldata+0x7e9/0x13e0 [ 801.618390][ T5833] hci_rx_work+0x4f9/0x1030 [ 801.618409][ T5833] ? process_scheduled_works+0xa8d/0x18c0 [ 801.618430][ T5833] process_scheduled_works+0xb6e/0x18c0 [ 801.618460][ T5833] ? __pfx_process_scheduled_works+0x10/0x10 [ 801.618482][ T5833] ? assign_work+0x3d5/0x5e0 [ 801.618502][ T5833] worker_thread+0xa53/0xfc0 [ 801.618531][ T5833] kthread+0x388/0x470 [ 801.618545][ T5833] ? __pfx_worker_thread+0x10/0x10 [ 801.618564][ T5833] ? __pfx_kthread+0x10/0x10 [ 801.618579][ T5833] ret_from_fork+0x51e/0xb90 [ 801.618600][ T5833] ? __pfx_ret_from_fork+0x10/0x10 [ 801.618618][ T5833] ? __switch_to+0xc7d/0x1450 [ 801.618635][ T5833] ? __pfx_kthread+0x10/0x10 [ 801.618649][ T5833] ret_from_fork_asm+0x1a/0x30 [ 801.618677][ T5833] [ 801.618684][ T5833] [ 801.693954][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 801.694445][ T5833] The buggy address belongs to stack of task kworker/u9:6/5833 [ 801.954661][ T5833] and is located at offset 128 in frame: [ 801.960528][ T5833] l2cap_recv_frame+0x0/0x10240 [ 801.965476][ T5833] [ 801.967839][ T5833] This frame has 26 objects: [ 801.972498][ T5833] [32, 34) 'rsp.i241.i.i' [ 801.972520][ T5833] [48, 88) 'chan.i.i.i' [ 801.976958][ T5833] [128, 146) 'pdu_u.i.i.i' [ 801.981418][ T5833] [192, 202) 'rsp.i94.i.i' [ 801.986059][ T5833] [224, 226) 'rsp.i.i.i111' [ 801.990957][ T5833] [240, 242) 'rej.i' [ 801.995633][ T5833] [256, 258) 'rej.i145.i' [ 801.999699][ T5833] [272, 274) 'rej.i143.i' [ 802.004161][ T5833] [288, 290) 'req.i229.i.i' [ 802.008706][ T5833] [304, 312) 'buf.i222.i.i' [ 802.013587][ T5833] [336, 348) 'buf29.i.i.i' [ 802.018365][ T5833] [368, 372) 'rsp49.i.i.i' [ 802.022947][ T5833] [384, 393) 'rfc.i.i118.i.i' [ 802.027515][ T5833] [416, 480) 'buf.i119.i.i' [ 802.032359][ T5833] [512, 576) 'req.i120.i.i' [ 802.037014][ T5833] [608, 617) 'rfc.i.i.i.i' [ 802.041804][ T5833] [640, 656) 'efs.i.i.i.i' [ 802.046826][ T5833] [672, 678) 'rej.i371.i.i.i' [ 802.051400][ T5833] [704, 710) 'rej.i.i.i.i' [ 802.056329][ T5833] [736, 800) 'rsp.i.i.i' [ 802.060964][ T5833] [832, 896) 'buf.i.i.i' [ 802.065561][ T5833] [928, 1056) 'req.i.i.i' [ 802.069992][ T5833] [1088, 1096) 'rsp.i.i.i.i' [ 802.074535][ T5833] [1120, 1122) 'info.i.i.i.i' [ 802.079284][ T5833] [1136, 1264) 'buf.i.i.i.i' [ 802.084200][ T5833] [1296, 1298) 'rej.i.i' [ 802.089070][ T5833] [ 802.095794][ T5833] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90004420000 allocated at copy_process+0x508/0x3cd0 [ 802.108914][ T5833] The buggy address belongs to the physical page: [ 802.115550][ T5833] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cc7f [ 802.124604][ T5833] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 802.131878][ T5833] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 802.140754][ T5833] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 802.149586][ T5833] page dumped because: kasan: bad access detected [ 802.156251][ T5833] page_owner tracks the page as allocated [ 802.162028][ T5833] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 2, tgid 2 (kthreadd), ts 85297663195, free_ts 85216376642 [ 802.181203][ T5833] post_alloc_hook+0x231/0x280 [ 802.186239][ T5833] get_page_from_freelist+0x24dc/0x2580 [ 802.191902][ T5833] __alloc_frozen_pages_noprof+0x18d/0x380 [ 802.197923][ T5833] __alloc_pages_noprof+0xa/0x30 [ 802.202998][ T5833] __vmalloc_node_range_noprof+0x7be/0x1730 [ 802.209025][ T5833] __vmalloc_node_noprof+0xc2/0x100 [ 802.214464][ T5833] dup_task_struct+0x275/0x9a0 [ 802.219329][ T5833] copy_process+0x508/0x3cd0 [ 802.224021][ T5833] kernel_clone+0x248/0x8e0 [ 802.228612][ T5833] kernel_thread+0x13f/0x1b0 [ 802.233319][ T5833] kthreadd+0x4ec/0x6e0 [ 802.237598][ T5833] ret_from_fork+0x51e/0xb90 [ 802.242546][ T5833] ret_from_fork_asm+0x1a/0x30 [ 802.247659][ T5833] page last free pid 5818 tgid 5818 stack trace: [ 802.254144][ T5833] __free_frozen_pages+0xc2b/0xdb0 [ 802.259453][ T5833] __slab_free+0x263/0x2b0 [ 802.264044][ T5833] qlist_free_all+0x97/0x100 [ 802.268786][ T5833] kasan_quarantine_reduce+0x148/0x160 [ 802.274307][ T5833] __kasan_slab_alloc+0x22/0x80 [ 802.279255][ T5833] __kmalloc_node_track_caller_noprof+0x493/0x7b0 [ 802.285791][ T5833] devm_kmalloc+0x7f/0x300 [ 802.290346][ T5833] hci_leds_init+0x39/0x180 [ 802.295012][ T5833] hci_register_dev+0x389/0x8b0 [ 802.300212][ T5833] vhci_create_device+0x39c/0x650 [ 802.305364][ T5833] vhci_write+0x3ce/0x4a0 [ 802.309834][ T5833] vfs_write+0x61d/0xb90 [ 802.314179][ T5833] ksys_write+0x150/0x270 [ 802.318599][ T5833] __do_fast_syscall_32+0x20d/0x640 [ 802.324042][ T5833] do_fast_syscall_32+0x33/0x70 [ 802.329152][ T5833] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 802.335588][ T5833] [ 802.338203][ T5833] Memory state around the buggy address: [ 802.343938][ T5833] ffffc90004427380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 802.352153][ T5833] ffffc90004427400: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 [ 802.360296][ T5833] >ffffc90004427480: f8 f2 f8 f8 f8 f8 f8 f2 f2 f2 f2 f2 00 00 02 f2 [ 802.368442][ T5833] ^ [ 802.376253][ T5833] ffffc90004427500: f2 f2 f2 f2 f8 f8 f2 f2 f8 f2 f8 f2 f8 f2 f8 f2 [ 802.384508][ T5833] ffffc90004427580: f8 f2 f8 f2 f2 f2 f8 f8 f2 f2 f8 f2 f8 f8 f2 f2 [ 802.392597][ T5833] ================================================================== [ 802.414624][ T5833] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 802.422006][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 802.433372][ T5833] Tainted: [L]=SOFTLOCKUP [ 802.437759][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 802.448065][ T5833] Workqueue: hci3 hci_rx_work [ 802.452889][ T5833] Call Trace: [ 802.456236][ T5833] [ 802.459231][ T5833] vpanic+0x56c/0xa60 [ 802.463331][ T5833] ? __pfx_vpanic+0x10/0x10 [ 802.467919][ T5833] ? irqentry_exit+0x59e/0x620 [ 802.472759][ T5833] panic+0xc5/0xd0 [ 802.476743][ T5833] ? __pfx_panic+0x10/0x10 [ 802.481293][ T5833] ? __pfx_panic+0x10/0x10 [ 802.485772][ T5833] ? l2cap_send_cmd+0x2a3/0xb90 [ 802.490711][ T5833] check_panic_on_warn+0x89/0xb0 [ 802.495790][ T5833] ? l2cap_send_cmd+0x2a3/0xb90 [ 802.500781][ T5833] end_report+0x73/0x180 [ 802.505279][ T5833] ? l2cap_send_cmd+0x2a3/0xb90 [ 802.510492][ T5833] kasan_report+0x128/0x150 [ 802.515077][ T5833] ? trace_kmem_cache_alloc+0x29/0xf0 [ 802.520510][ T5833] ? l2cap_send_cmd+0x2a3/0xb90 [ 802.525533][ T5833] kasan_check_range+0x264/0x2c0 [ 802.530738][ T5833] ? l2cap_send_cmd+0x2a3/0xb90 [ 802.535652][ T5833] __asan_memcpy+0x29/0x70 [ 802.540158][ T5833] l2cap_send_cmd+0x2a3/0xb90 [ 802.545013][ T5833] l2cap_recv_frame+0xc032/0x10240 [ 802.550275][ T5833] ? unwind_next_frame+0xa5/0x23c0 [ 802.555720][ T5833] ? unwind_next_frame+0xa5/0x23c0 [ 802.560987][ T5833] ? unwind_next_frame+0xa5/0x23c0 [ 802.566209][ T5833] ? unwind_next_frame+0x1aaf/0x23c0 [ 802.571609][ T5833] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 802.577162][ T5833] ? ret_from_fork_asm+0x1a/0x30 [ 802.582216][ T5833] ? ret_from_fork_asm+0x1a/0x30 [ 802.587231][ T5833] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 802.593502][ T5833] ? ret_from_fork_asm+0x1a/0x30 [ 802.598610][ T5833] ? stack_trace_save+0xa9/0x100 [ 802.603638][ T5833] ? __bfs+0x153/0x290 [ 802.607803][ T5833] ? __pfx_hlock_conflict+0x10/0x10 [ 802.613206][ T5833] ? check_path+0x21/0x40 [ 802.617643][ T5833] ? check_noncircular+0xda/0x150 [ 802.623033][ T5833] ? lockdep_unlock+0x5d/0xd0 [ 802.627912][ T5833] ? __lock_acquire+0x146e/0x2cf0 [ 802.633234][ T5833] ? __mutex_trylock_common+0x158/0x260 [ 802.638893][ T5833] ? __pfx___mutex_trylock_common+0x10/0x10 [ 802.644896][ T5833] ? rcu_is_watching+0x15/0xb0 [ 802.649825][ T5833] ? trace_contention_end+0x3d/0x150 [ 802.655724][ T5833] ? __mutex_lock+0x319/0x1300 [ 802.660580][ T5833] ? l2cap_recv_acldata+0x2e3/0x13e0 [ 802.666202][ T5833] ? l2cap_recv_acldata+0x30b/0x13e0 [ 802.671704][ T5833] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 802.677522][ T5833] ? __pfx___mutex_lock+0x10/0x10 [ 802.682693][ T5833] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 802.688804][ T5833] ? l2cap_conn_hold_unless_zero+0x179/0x2b0 [ 802.694949][ T5833] ? __pfx_l2cap_conn_hold_unless_zero+0x10/0x10 [ 802.701310][ T5833] ? l2cap_recv_acldata+0x41/0x13e0 [ 802.706542][ T5833] l2cap_recv_acldata+0x7e9/0x13e0 [ 802.711683][ T5833] hci_rx_work+0x4f9/0x1030 [ 802.716208][ T5833] ? process_scheduled_works+0xa8d/0x18c0 [ 802.721963][ T5833] process_scheduled_works+0xb6e/0x18c0 [ 802.727547][ T5833] ? __pfx_process_scheduled_works+0x10/0x10 [ 802.734082][ T5833] ? assign_work+0x3d5/0x5e0 [ 802.738706][ T5833] worker_thread+0xa53/0xfc0 [ 802.743351][ T5833] kthread+0x388/0x470 [ 802.747723][ T5833] ? __pfx_worker_thread+0x10/0x10 [ 802.753301][ T5833] ? __pfx_kthread+0x10/0x10 [ 802.758047][ T5833] ret_from_fork+0x51e/0xb90 [ 802.762779][ T5833] ? __pfx_ret_from_fork+0x10/0x10 [ 802.768026][ T5833] ? __switch_to+0xc7d/0x1450 [ 802.772756][ T5833] ? __pfx_kthread+0x10/0x10 [ 802.777380][ T5833] ret_from_fork_asm+0x1a/0x30 [ 802.782277][ T5833] [ 802.785966][ T5833] Kernel Offset: disabled [ 802.790395][ T5833] Rebooting in 86400 seconds..