last executing test programs: 7m43.485447703s ago: executing program 2 (id=877): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c800000000000100040600000006000004000202070700f6fff7ff040400000100fcff05000102000100020006000600c1000104010400000400e10004000000060081020001070000000100000005000000010200003f0d0c050000400008000402d70000050001000d09000006000500030089ff"], 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fanotify_init(0x1, 0x40000) fanotify_mark(r1, 0x4, 0x40001000, 0xffffffffffffff9c, &(0x7f00000000c0)='\x00') sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011"], 0x1c}], 0x1, 0x0, 0x0, 0x4000045}, 0x300) 7m43.352424804s ago: executing program 2 (id=878): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000600b500ca060000b400be"], 0xe4}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f00000009c0)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m41.656261213s ago: executing program 2 (id=881): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in=@dev={0xac, 0x14, 0x14, 0xa}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, {0x5, 0x200003, 0x0, 0x5}, {0x4, 0x2}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 7m41.591789016s ago: executing program 2 (id=882): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') (async) chdir(&(0x7f0000000080)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x4c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"]}]}, 0x4c}], 0x1}, 0x300) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004041}, 0x4000040) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004041}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x1104, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6d}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x401, 0x34}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_DATA={0xb2, 0xc5, "4efb0ea20bd269de54d827222c477063c8df7ce066322dc4e5b3cef23b4c34a9c51599b9c682544f558a68040f561c0ab03f804952779630e301440753fa258aa1a3a510724c085ed59b9fd1d3cd7e9dd83d00d5ed84a23238680d1e4e866c1f837de7358286afb3717fbba7bd1105ec3f00fb63837649277e5fb6690726a73e9756dda6565b7265edf4ee5d4057da459edc3d08c4a0adf251adc629b3ffa3ac72f2f19c2e7402b534d4a6869f20"}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "0ffb56bd563ade0995490a3490ed76f3cb82b96d4a3661d53d066a8ea1b07c8caf55dbba72ac4daf1703f3839ee7b9a852fb5c9ea6651223c84d0b125f1eab9341ccc4b19421586296fe07ae2239265d045cff8ef0f3f0d78529c5d0d37071a95e1eb6236cd626810aaf7db4d1dbb70a7f807e43fc43db5baeb19e103fb24d3e5afb394830e3b9c8fb20286d4780468d5008f5bbec77e38aaba53cb80b352336491f42b8b700421139cefeadfd1736cacfc761c46a3fd684e0a869f68f925092cbab40be1a9e5e01f6122dc16e493474c1fad5e03f0dc6a6c8dbcdfefc660d1fcc290b5deeeca2d637e76c616bb174aa97334afda2e52e2e19a3b6aa0942ea870e173082997d06dfd356e33786dd763473761177af8b56c129879b8d77b91184e9e006016dd2f816732a05a40b0f7353cca2820ac0025e2a327c8af25f459064cc43e2d04d73dd27a0e906cd00071148286d0bd0b152dbbce5c7da0c29a4edff97603c79a18ac6ff864a1ea0cc6b0663f1911ce939cf597ebeb1433276db2e44a8b26ff09e36bc91055a901ba58e347b295449b892d4ab8d82198d6b1984a0ff867fa94daee00cd0cc1f538ab419d82f09b3fe9791df236e58a932c68d7af89dfcfd8b4678383112d115512f0b284c16141ffb954982a26e57131cdd01ee9386ec582bb9e1841519a1ed656ea2a1767f6bd487e1f88ebe76a3b585459e6b86622e3a658365b0047db586c23a27f1786c0dbdcaa1015425c4f1d84323378140f9aabd9e90d765f55de8d0c533e4555f67df5b46f4f55c2f396d4e70a381481738f47994d3b8872b1129d628fce551e1bed9cff916a4f3f97c48950204f02d7021447f2a610b8f5c7006f0fb6bfa9f98b98151ce87af02600306f1d9bf5148f8b6b9cc4b8f95867f7182b234e11a2f83813f05511555b15a84df106cef3950217547ed05ddd9eb36428b89c8b0a440e2a45b860e9a409eb792fa92f027fb26c3364dc0d66a6eb8602d1ed55e03a24484771d7a4088895493e0c4702591e25967a6124e682b79024a9e8e7f80645e487ce38fe1141731c50ec1bfdea670a4c6d7c09fae8d3ee13a9ff845a163825dd53556298ffecfc23c35e5251e7c52cc788343184d7ce44060561bd61e9ab16c6cf602f4809ddd9d9d0cbe38b5cfc299f1752b91ebb835e198326721daafdc54f5f2af6b3f7636b9e7b545b4e080323fcfd8efd509519293abd3cdd32bcd89e16762e39755f6d9ed615085f8a17d73240b24819a87523c5aa818d42e0b96e4cfc59cc5583bd70c92f3b0b2ed0ca49427aa9450c521d59e8932d9fb6de5de6df64a994ae352beb630b5a71c096696f154923f790598ffaf25069e3edd1832bc93018ab4c76aa9103ac8361fde6108d5dfd1882c2a8c6adfbe45e5993a548bcb1f16d491fa5b06fbff248fcdb81cea9ae8fe470262392ec2f83e95dbe012695a8a7cf5e1739d461f1d04a9f7a27768f1fd55733253b5d67708f44e06fa774e887b198e986314e3c567e3cfad2ff3fc9ca0fff3e25b20397f62b3b7adab9d2472631071e10018ccb1c39f0fd51ca61f4e47da5821e9d1c2dce6bd646acb771aa824b83ce6ada0ab53e7b970c4a6164e050b22610da135e5ce3ee3be3956bed461c9837304dde07c489889e185229faf172de6fd903fec0f8f93be05da88160989e608696d1fbe377a9282af219170e9cf9b666bddc90db4c9458c25ad0c04d19191ed4bc0cbd320afb18509a530b6d884058bb7438113fa3e96b939b8d1134322046352c8317ba2c09019cac4aaa743c41b418c1c7fff39e0e736661b5780cc8fdacaa3a38870d46e61b0d0906dd13a64804db343a14a08b4d77e32c7cd007b0a3581cc91ad943d5fcb9cd51277200830e1e2bfa0e6cc3f5cc7b2825e2caf575ae51ce282c46f376b447174768c520ec9383bd010908e57aeeb6398547680297c247d3181b1e7a185181ca28a8948cae720a7fc55342a85ecb43dd547e341c7bb710125568d3e13836b4aa1f7ef26806e533eaf04ef95165de0caf0025fd27b030d209569cfb623c8764904baba08484959bff83f777150cb256550824d5ef9cb36fd4a0333c0e6a12b96121e4f8978f69cb66fe5481e0f7a57c95938b1c69ba749a1510f7e581f8c32476b26c576a86acd99b317e9071a2bf36a1438a988153a0fb48b6f6f3db669958e526f81ee7221211944a83b8820f97500eeaea8a08dcd660a017bae4b5a427c0d9d1128d5d55adcbeaef71e1873fca5b035106602eb2746b673b9fcecc73f81577f3a7b174940592c1e45bcf3322fa9da4c5589f5ac98452e1c44aed6ad75b3955b3accde7126d197b08537875ea97a67239d01d7d14500ae405f6917efecd083ea043adfdd67ba65e48076c7be753623f84d951399e37ec420b01cbb46dafdef9f0da87f21c3de66427f3a92920a86dbb4cf32d5b16d0196a5a6e023c53885962af6999c6304ee980aeb38198e2584ead069dc24eb417a10ba4cc6c466a704394f7cd760dec98e473190fc8ee8b34b3721f33cceff8e733607d3d62181acaea28ca5a99357b0a17b92557c2307fcf6bb3c5e74537f040f6dda107c5b37d17f7fa51f65812493581d4e838ea889f1fbb5c66f246cf7dabd2e86e072c0d804157075e0b7aac60769d2d2f2b935ccae75e772d6bb47a7230bfcd0a7b6906293df796aba26c3592de6f972be8fb68b84f3e55c283b47e9a7a79e295d1974e72a464f7a9abd0a07b327bf4f262ba973b69e52e117b3923ac2839de7a9efae3202e6ab99849fa4dcd21e4fd5b03e7469323d9544168dd2fb45410fe8f367db17ab2628663d18fcbcd115fdebd9d0651079755add0d386057d50613ee972a4b9cfa7025e1bf905c923e802914aae2dc224772f53baf4e5364ece924b001461f565efd4ff1dcfc8517594e6b767e4426eda712ff25d904a35f8eadeb7ec61563c4329308d98ce7ec491cbb7e52222e8bd58e9bd9b757e600286e34aa2dcddbae35bc3967dc8be5cdd6c573714670e78deccb6e2aa91e68cce5d6bbf4424130709e623dc757f3c52e69c93d50a40b2fd68ad794ce28135bb490c037e8742009eaf9079291f685fd10a2c565569547758d718dda7b5fe19ca8324e6a9a794b13f3e9f40d1e8d5c2ffdd393efa2e2a49c22dddbdd3300237a4c3d22003b938386ece91dc798cf10f5fff8cdddf1951f7ac685921349c56715ea41bd80555d55f1c051e0fd605e18ed15c8123aeb94655fe8c1d31d697377d3293f1003a0da316628b61f361102e42e6f1643522ba3ea93d929dc3ab11f23b1aef219eff31256a20a5f723d3cf6be7668a84e27b7d7b6dfa489491d6372b5b0d32ec32c76ca18e79433d9c7ea558fb8c4c9b6b5663a295bc36280f35b5b185ae55c49fb7a441c92683a9b6efbcf53b2c07d86514e4abf65376c951d7a26cb46443378361761206766a8095639ed8d947f47e9dd856b03c893dbf4bd58001bf1f5eb60f4ec3608084e9186fd4f5c178b63af9b213d8d3380e0a25fdc7ff448a4d721df90bf499934feb5bd5548ee27e6d479231c73f9223a1170dc0224c00a58dea6a06b064fae9361f0cbe18de383721d9d697dcf7b89ff6476f032df7811ab27d84caf2294841392eba77fb7ee121bb0fb5e5fd85019a5d05bf4b47b2890b62ab558533a1f0ac6ab854f05a0ef38206e7f0716dbcde3bbb284d5cc1a492e1fcd3eaf61164f01027c9efa6fff2302124312aeed4120acf509dca6ce039aa4e21cb1b3da65678149b1225fd0e537579e723eaab572f989437f0f4c9a94d4d4f6124f2a72cf1460222a6a009df7060eb88f60eef7893a8fac3df543e20e91d48dbded7c930b5247b2fe4f155c9ae4e5e8c7ba5fd13b5c1d95f51a00b1a76ec5e471396b90637fbda31f42e0273373ba770ea05f3034cb796fbed54a8c7e5b49dc7794b10b9193030c3319026df9a9be1bfba40cf6014dc53b05eeca47416e7f2ca46b0804f61b8e7ce959840ebf3ca80f7ebbc8ee92c731a6f16ec8db7fda685e58d3fc9af35cd7058eed228d848c1d8faff79249e85a99d04b3d9899cb080422612c005d7330bea30d9281362b333744e8e0799af67bafeac350bc63e276f62c5254154fc77286d5ac2913b8d1e7c814f95f04df7e50fb5b728d5d11ef09e906918b2e9dc8c89c93a2f24d8991534b3c9e6076e24a86f404ac73886410adb7e1e6538d64c1a22224e016bd2e379d49985773a3e2ce34ae0a147f4370b7b33ecb4511b6d91658ee86d09088fb80fa218561f88abada22e4f510b45f5a4dffbafeaa87d776915532e018c82c837a0bf0c92460713777945c96e828d75b6d149bb4065b99f82c095513cd8bec1aa358fae2db3f8c4591299b6e1f4836040308e080305e4b88382bfb2f5cafc410c9a7c13cd87bef6f941696e9766bef474e8ee4fc364f63999996eefbc0161f257c4e7a21c0caa9d0d8fc30231afec560ae3cde5e1c348f9b2f7a8f41d56bcf7351f592a727b1b4eea0e1185630a0de8ee0629ef3c951b23ffe8816a6e0c293fd002829588598a1096aab844e1778bf68d2bf72197a4ec28c324b8871a3a6e3878813bffaf39540ce856e972b0086e5c0c8dc80654a0b4e0849507e5f2d744f29a80e51b00aefc628d39f9c6e961c2b1dd055f033d48b6b5acf3b450e5f105257615bb84a5f997e60b121026fd65baa3b154e99adb7a0f47d8abe475be6fe84713f53fd636f652dd4554a9f4a2ece3c9388683c6b1c47d0f0c44fcdbbb1ff6f6a78bd7fef208f8e8053b29bba05a63b426c128338d0898780039723ca0279d9e8f00caadfa1424664e65fd2f3e98b5e6093fc7a1f8dc8cea0eb6779197c9e0c859c574c5d1ae5232163602080af9d474f4eba54ea7a244ba74b77e6a743532d621afdf24dea5c9b9b99985961e3785c5e06054a8b8486f5153a294f91e199aeea9b09035bf9f3e8b808e1364cc15f0ac5fd7f3f114f09e408410b434354133eb7a891f079c54eebcc5844abf0ed8a863f329215e23b388d8ef16f323f61e3a5bc701b918f934b6eb5e0c43ff282e7746204193d9f9dedfd3f02d345e286938ae2d95ee7f1215a82c3b238c95bda296e3b247e1f4274253f432d44d16fdbb6c9bd8ea9ee9d63a702aa13a844dd6f115abd6932bc2a76f8061fd58592b382322ab64e5ddca79942c0fe15602e0cf3dad447fd8cc1b13b3a3a726d3c73a07fd6a501b98ddf565f1a0d60ca87d69961b2a2108d7dd77cbb666d5b4c5e907c3074ae10f60ff62c666a94dfbee2605c12339a7bf1fffa289d4df5343287931978039dd9ac81270a552e57ce126a4c6990a7f95d277968208f888f183297230bb890d35cba902667c303f885e9596274e433a21f194784baca788dea556eeb8cb3808886675cea9b7bdd41f73a75be4ab7204c787ce3340cdd55d7a0016935e399656ffc75c3143034ddbb83ad9aff46696c5452be59c331fd6f62cc133097f6d02953174a762e29313b4e13e2c9b2688b07d49a137fddc329cf01d2e559b6a4edc168bc18227d1bc3f559b741d7f5680f2d6d3f04e70a93488ebf4abd5cbb140a774c149bfaef3017680f8fbd0d87a16ebb692d6af6f9fb9e2f0ad1af97428899d11c1acd0d6df80c4ae6c00de71995226cb61b237a48c7b5eeea9776e2ac63d5eb1b8b889bdf9b6ae3b2dc94047a7da4d66331d527a0b4d324ce42368c83c8079c2c96b473d78305b2a9f2795218d2a9ffdf21160e7aa08b0eaa43fccf00a5c71295bc1c0c956f1765132682aed0"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x81}, @NL80211_ATTR_VENDOR_DATA={0xb, 0xc5, "a0e3650be7827f"}]}, 0x1104}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) 7m41.375888128s ago: executing program 2 (id=884): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f00000025c0)={0x1e0, 0x0, r2, [{0x1400000000000007, 0x0, 0x8, 0x0, '@-/\\&\r\x80-'}, {0x0, 0x0, 0x197, 0x0, '->\x04\x01\x00\xf8/\xa6\xf5K/J\xa5\xaf\xabO MzP\x05\x8f\xb4\r\xc3{\x15U\xc0\a\xde\xd2\x97\xfdE\xdes\xaa\xb9\x02Z$cw#\xa4/\x85f\x83}\xd9\x94\xd0\x06b,Q\xab[\x14{\xe6\x1a\x95\xc6\xae$\n\xc74&I:#\x195o6\x9f3\x94\xd1\x8e.l%\xa4\x9ewC\n\x8e?\x10\x15=\n\x8d.\t\xfe\x86\x95*:M\nD\xbb\x82\xadoX\xbfm\x04L\x9bZ=\xa8\x8f\xe47\xdf@\xe8%~\x83L\x14\xd6\x01A\xbfR\x02#\x0f#!\xfe\x93\x8f\xb0.j\xc6\xe5\x8d \xc8@\xac\\\x85\xa4[\x9b\x1f\xc8X\xce;M\xe6\x1d\x8c\x9d\x9aUt\x1c\x88\xb3gN\xf4\x91\x9c\xb1\xe9\x9f\xa4X\"Q$\xe4\bI\x022\x02(\xde\xc9\xc3\xb7\x8fG\xba\xa4\x81\xfc\x9c\x12\xfc\xb2\x8e\xe0\fhA\xda\xd4\xd2{\x1c\x04\xf9\x82R\x1c\xcd- \x8d\xbaw\x19\x12q\xeaIza4\xdaSQv\xda\xea\x01PO?\x00v\x852\x89.7\x12\x92\xf5\xb8\xcb\x82\xfe\xa0\xae\xd1\x12*5\xae\xb8\xd3\xec\x95SEAy\xa0\xfb\x85\x13\t\xbf`?e`\x14\xfe\x15\x1a\x8al6\xdd\xa1\xd0\x12\xd9\xe9Q0V84\xdc\x8e\x17{c\"\xe1K\xfc\xfc^\xf7vaO\xd6\x90M \x1a\x8c\xd7\xd7\xca8\xe6f1\x0f\xa8\\\x11.\xc7\x866\x8f\a\xe1\x1e(3\xb4i\xcb\x1c\xbf\xad\x9b\x83f\xcf\x8911,\x1bkb\xad\x0f\xb0\xeez\x9b\xd6\x05\x89\"\x9dNXj\xaa}\x98\t\xdf~\x01\xefwu/\xbeK\xc89\xca.\xb2\xd0r\xf9\xaf\xd7\xa4\x06\xa9\x02'}]}, 0x1e0) (async) write$FUSE_DIRENT(r1, &(0x7f00000025c0)={0x1e0, 0x0, r2, [{0x1400000000000007, 0x0, 0x8, 0x0, '@-/\\&\r\x80-'}, {0x0, 0x0, 0x197, 0x0, '->\x04\x01\x00\xf8/\xa6\xf5K/J\xa5\xaf\xabO MzP\x05\x8f\xb4\r\xc3{\x15U\xc0\a\xde\xd2\x97\xfdE\xdes\xaa\xb9\x02Z$cw#\xa4/\x85f\x83}\xd9\x94\xd0\x06b,Q\xab[\x14{\xe6\x1a\x95\xc6\xae$\n\xc74&I:#\x195o6\x9f3\x94\xd1\x8e.l%\xa4\x9ewC\n\x8e?\x10\x15=\n\x8d.\t\xfe\x86\x95*:M\nD\xbb\x82\xadoX\xbfm\x04L\x9bZ=\xa8\x8f\xe47\xdf@\xe8%~\x83L\x14\xd6\x01A\xbfR\x02#\x0f#!\xfe\x93\x8f\xb0.j\xc6\xe5\x8d \xc8@\xac\\\x85\xa4[\x9b\x1f\xc8X\xce;M\xe6\x1d\x8c\x9d\x9aUt\x1c\x88\xb3gN\xf4\x91\x9c\xb1\xe9\x9f\xa4X\"Q$\xe4\bI\x022\x02(\xde\xc9\xc3\xb7\x8fG\xba\xa4\x81\xfc\x9c\x12\xfc\xb2\x8e\xe0\fhA\xda\xd4\xd2{\x1c\x04\xf9\x82R\x1c\xcd- \x8d\xbaw\x19\x12q\xeaIza4\xdaSQv\xda\xea\x01PO?\x00v\x852\x89.7\x12\x92\xf5\xb8\xcb\x82\xfe\xa0\xae\xd1\x12*5\xae\xb8\xd3\xec\x95SEAy\xa0\xfb\x85\x13\t\xbf`?e`\x14\xfe\x15\x1a\x8al6\xdd\xa1\xd0\x12\xd9\xe9Q0V84\xdc\x8e\x17{c\"\xe1K\xfc\xfc^\xf7vaO\xd6\x90M \x1a\x8c\xd7\xd7\xca8\xe6f1\x0f\xa8\\\x11.\xc7\x866\x8f\a\xe1\x1e(3\xb4i\xcb\x1c\xbf\xad\x9b\x83f\xcf\x8911,\x1bkb\xad\x0f\xb0\xeez\x9b\xd6\x05\x89\"\x9dNXj\xaa}\x98\t\xdf~\x01\xefwu/\xbeK\xc89\xca.\xb2\xd0r\xf9\xaf\xd7\xa4\x06\xa9\x02'}]}, 0x1e0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045007, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000380)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000380)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x121800, 0x0) (async) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x121800, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000140)={@loopback, @broadcast, r8}, 0xc) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000180)) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x18, r11, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x20008840) ioctl$TIOCGPKT(r9, 0x80045438, &(0x7f0000000000)) (async) ioctl$TIOCGPKT(r9, 0x80045438, &(0x7f0000000000)) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) 7m41.035971028s ago: executing program 2 (id=886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000020601080000000000000000000000000900020073797a300000000012000300686173683a6e65742c706f727400"/60], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 7m40.687697312s ago: executing program 32 (id=886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000020601080000000000000000000000000900020073797a300000000012000300686173683a6e65742c706f727400"/60], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 6m15.338507389s ago: executing program 1 (id=1131): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in=@dev={0xac, 0x14, 0x14, 0xa}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x200003, 0x0, 0x5}, {0x4, 0x2, 0x8000000}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 6m15.248335752s ago: executing program 1 (id=1132): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000e40)=ANY=[@ANYBLOB="1400", @ANYBLOB="5317"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x400c0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 6m12.194429869s ago: executing program 1 (id=1138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x15}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x96f1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7fffffff}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x134, r1, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0x28, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3a}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HE_OBSS_PD={0x64, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "d196abadcb1ae6b1"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x13}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x4}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xd}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "42aa283fbf6aca4e"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xe}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x24, 0x4c, [0xfac10, 0xfac0e, 0x87a19, 0xfac17, 0xfac0d, 0xfac01, 0xfac05, 0xf]}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac04, 0xfac0a, 0xfac0b, 0xfac09]}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac02]}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x6}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_PMK={0x12, 0xfe, "ee6143ab25ea8646e9af8b0d93e7"}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r1, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x1b}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x9]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008850}, 0x20000004) (async) r4 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x5b, 0x0, 0xc0}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xf4, 0x0, 0x3}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0xf, 0xc5, 0x4, 0x8, 0x3}, 0x19, &(0x7f00000005c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "22ad711b408cdfe7808680e378ab1703"}]}, 0x2, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x810}}, {0x32, &(0x7f0000000640)=@string={0x32, 0x3, "7508ebd2cf041b0f77780ac6d290bed31a4afa1bad2ece9d2a67bb3bba4fc08b6737bd662e9a3881874edf44b4ee8371"}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000740)={0x14, &(0x7f00000006c0)={0x40, 0x22, 0x3a, {0x3a, 0x22, "32c03a0606d9fd2e39f1f7ccd800718b4ded206940b47fc5a4ad01dc26b3666b2f8ab5cba697fcaae67253fe758b891474c5eaf1335f1d86"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200e}}}, &(0x7f0000000980)={0x34, &(0x7f0000000780)={0x40, 0x11, 0x39, "4f3cbac2e37c3358c512930354cfd9e296c02fe3fd7500a18fbbc5b0199fc6a7b1382eaa2f9df3c0208099c84330a029cc2aca4bca9f437846"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f0000000840)={0x20, 0x0, 0xa8, {0xa6, "0cce1cd73d480b960c237a32a30eb4a4f7fda4c4f7ab4e83b663cb98ac3a0d0c0446956b2a111123e6294d387252860384dca03bacaa020d48a76c8d0be1c81d361ef9a764c41a0978dfba8c089ce4415cd526f5efc3e2ebce51a4b79f72e9c32eaf87f76d2255693cd48048516da2d31782adfa431cd4546f12bdac021ec630d11131a0f01e6cd72a19e9f577e0807aa14ca8c6b90b1620d2841752e6b7f5b6e65770a74f7d"}}, &(0x7f0000000900)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000940)={0x20, 0x0, 0x1, 0x1}}) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e23, @multicast1}, 0x10) (async) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000a00)) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000028c0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002880)={&(0x7f0000000a80)={0x1dd4, r1, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0xe0, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2c}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x10}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe33e}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xab}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xed}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc9c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000001}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x49}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x6a7b40e6bcfbf015}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xef}]}]}, @NL80211_ATTR_TID_CONFIG={0x41c, 0x11d, 0x0, 0x1, [{0x3a4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x354, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfbff, 0x400, 0x0, 0x9, 0x31, 0x7, 0x2, 0xed]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x8, 0x1, 0x4, 0xc, 0x9, 0x6, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x4, 0x66, 0x84, 0x8000, 0x9, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x9ee, 0x800, 0x9, 0x4eb9, 0xfff6, 0x9, 0x10]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0xaf10, 0x400, 0x5, 0x5, 0xf63b, 0x6134]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x7, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x0, 0xa}, {0x5, 0x3}, {0x2, 0x6}, {0x7, 0x5}, {0x5, 0x1}, {0x2, 0x2}, {0x6, 0x3}, {0x6, 0x9}, {0x5, 0x5}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x5}, {0x1, 0x6}, {0x2, 0x3}, {0x3}, {0x6, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x40, 0x1000, 0x7, 0x4, 0x2, 0x8, 0x1]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x60, 0x24, 0x27, 0x18, 0x3, 0xc, 0x6c, 0x6c, 0x48, 0x1, 0x41, 0x5, 0x24, 0x12, 0x9, 0x6, 0x16, 0x5, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xdce, 0x9, 0x3, 0x2b27, 0x57, 0x89, 0xea, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0xa, 0xa457, 0x3, 0x101, 0x1, 0xfffd]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x2, 0x30, 0x1, 0x18, 0xb]}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2d59, 0xc, 0xffff, 0x3, 0x34eb, 0x0, 0x8, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x7}, {0x3}, {0x5, 0x3}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x4}, {0x2, 0xa}, {0x0, 0xa}, {0x2, 0x9}, {0x1, 0x5}, {0x6}, {0x5, 0x8}, {0x3, 0x1}, {0x7, 0x4}, {0x7, 0x6}, {0x7, 0x7}, {0x1, 0x2}, {0x1, 0x4}, {0x2, 0x5}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0xa}, {0x5, 0x8}, {0x6, 0x2}, {0x3, 0x1}, {0x1, 0x9}, {0x4, 0x9}, {0x2, 0xa}, {0x2, 0x8}, {0x4, 0x5}, {0x1}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x6, 0x6}, {0x1, 0x9}, {0x4, 0xa}, {0x0, 0x6}, {0x0, 0xa}, {0x1, 0x4}, {0x4, 0x4}, {0x1, 0x8}, {0x2, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x4, 0x2}, {0x5, 0x3}, {0x5, 0x3}, {0x5, 0xa}, {0x7, 0x5}, {0x1, 0x8}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x4}, {0x0, 0x7}, {0x5, 0x1}, {0x1, 0x8}, {0x0, 0x5}, {0x1, 0xa}, {0x2, 0x9}, {0x1, 0xa}, {0x1, 0x5}, {0x6, 0x7}, {}, {0x6, 0x7}, {0x6, 0x7}, {0x7, 0xa}, {0x3, 0x8}, {0x3, 0x1}, {0x4, 0x5}, {0x6, 0x9}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x6}, {0x7, 0x4}, {0x3}, {0x1, 0x1}, {0x4, 0x8}, {0x6, 0x3}, {0x4, 0x1}, {0x0, 0x5}, {0x7, 0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x80, 0x2, 0x3ff, 0x4, 0x9, 0x7]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x3, 0x61, 0xfff5, 0x50de, 0x3, 0x6, 0x9]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0xc, 0xc, 0x18, 0x9, 0x18, 0x4, 0x6, 0x3, 0x18, 0x2, 0x16, 0x2, 0xc, 0x1, 0x24, 0x0, 0x60, 0x5, 0xb]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x200, 0x2, 0x400, 0x75, 0x5, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x3}, {0x1, 0x4}, {0x2, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x67a, 0x3ff, 0xf, 0x2, 0x9, 0x1fb1, 0x6, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x81, 0x0, 0x800, 0x9, 0xfffc, 0xbb, 0xfffb]}}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe0c, 0x3, 0x755, 0xe, 0x53, 0x8bd9, 0x0, 0x1]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4b, 0x60, 0x24, 0x1b, 0x36, 0x0, 0x3, 0x1b, 0x18, 0x9, 0x12, 0x16, 0x30, 0x1, 0x12, 0x12, 0x4, 0x2, 0x6c, 0x48, 0x14, 0x24, 0x12, 0x1b, 0x5, 0x6, 0x24, 0x36, 0xb, 0x6f, 0x2, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x388, 0xfe01, 0x8, 0xff, 0x4b2, 0xe9ab, 0x5]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x2, 0xa}, {0x0, 0x5}, {0x1, 0x9}, {0x3}, {0x3, 0x3}, {0x0, 0x6}, {0x2, 0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x5, 0xa}, {0x6, 0xa}, {0x6, 0x4}, {0x6, 0x8}, {0x3, 0x6}, {0x0, 0x9}, {0x3, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x3}, {0x4, 0xa}, {0x1, 0xa}, {0x2, 0x3}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0xa}, {}, {0x4, 0x8}, {0x2, 0x9}, {0x3, 0x5}, {0x3}, {0x0, 0xa}, {0x0, 0x8}, {0x3, 0x5}, {0x4, 0x7}, {0x6, 0x9}, {0x0, 0x6}, {0x0, 0x5}, {0x7, 0xa}, {0x1, 0x2}, {0x0, 0xa}, {0x6, 0x6}, {0x5, 0x4}, {0x3, 0x8}, {}, {0x7, 0x7}, {}, {0x5, 0x7}, {0x4, 0x9}, {0x2, 0x7}, {0x3, 0x5}, {0x4, 0x5}, {0x4, 0xa}, {0x2, 0xa}, {0x0, 0x4}, {0x0, 0x3}, {0x4, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7ff, 0x7, 0x1000, 0x7, 0x9, 0x100, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5e90, 0x0, 0x1, 0x5598, 0xd, 0x1, 0x9]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xaf}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x21e400000000}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x70}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x59}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x11}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x42}]}]}, @NL80211_ATTR_TID_CONFIG={0xd60, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x3f0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3cc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x6}, {0x7, 0x8}, {0x3, 0x8}, {0x3, 0x6}, {0x4, 0x8}, {0x3, 0x1}, {0x5, 0xa}, {0x2, 0x4}, {0x4, 0x7}, {0x0, 0x7}, {0x2, 0x5}, {0x4, 0x8}, {0x4, 0xa}, {0x4, 0x6}, {0x7, 0x1}, {0x6, 0xa}, {0x4, 0x4}, {0x2, 0x4}, {0x2, 0x3}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x5}, {0x7, 0x4}, {0x5, 0x9}, {0x3, 0x9}, {0x5, 0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x6, 0x9}, {0x1, 0x8}, {0x5, 0x1}, {0x4, 0x6}, {}, {0x0, 0x1}, {0x4, 0xa}, {0x3, 0x2}, {0x7, 0xa}, {0x2, 0x1}, {}, {0x0, 0x3}, {0x4, 0x9}, {0x6}, {0x7, 0xa}, {0x2, 0x5}, {0x1, 0x6}, {0x0, 0x7}, {0x7, 0x1}, {0x7, 0x7}, {0x7, 0x9}, {0x1, 0x4}, {0x6, 0x9}, {0x2}, {0x7, 0x5}, {0x1, 0x5}, {0x4, 0x6}, {0x0, 0x3}, {0x6, 0x3}, {0x1, 0x2}, {0x3, 0xa}, {0x2, 0x9}, {0x0, 0x8}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x3, 0x8}, {0x7, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x7, 0x3, 0x9, 0x0, 0x0, 0x6]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x0, 0x6, 0x10, 0x24, 0x0, 0xc, 0x1, 0x4e, 0x6c, 0xc, 0x18, 0x9, 0x48, 0x5, 0x2, 0x12, 0x30, 0x1b, 0x9, 0x12]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x100, 0x2, 0x0, 0x3, 0xc0, 0xfff8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x100, 0x8, 0x1, 0x5, 0x9, 0x1, 0xfffd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4d03, 0x1000, 0x1, 0x2, 0x4, 0xffff, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbc, 0x1, 0x4, 0x9, 0xa, 0x3, 0x8, 0x200]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x7, 0x2}, {0x0, 0x2}, {0x1}, {0x6, 0x7}, {0x6, 0x9}, {0x0, 0x7}, {0x4, 0x4}, {0x4, 0x7}, {0x0, 0x8}, {0x0, 0x3}, {0x1}, {0x5, 0x6}, {0x6, 0x5}, {0x3, 0x1}, {0x0, 0x8}, {0x7}, {0x4, 0x2}, {0x3, 0x9}, {0x1, 0x5}, {0x2, 0xa}, {0x0, 0x2}, {0x5, 0x7}, {0x0, 0x9}, {0x5, 0x3}, {0x1, 0x6}, {0x5}, {0x0, 0x6}, {0x6, 0x2}, {0x2, 0xa}, {0x2, 0xa}, {0x0, 0x1}, {0x2, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x3, 0x8}, {0x7, 0xa}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x8}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x8}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x18, 0x12, 0x12, 0x5, 0xb, 0x36, 0xb, 0xb, 0x12, 0x16, 0x6c, 0x1, 0x30, 0x1, 0x48, 0x9, 0x5, 0x1, 0x48, 0x30, 0x5, 0xb, 0x48, 0x48, 0x60, 0x60, 0x6, 0x1, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x8000, 0x1, 0x3400, 0xdd49, 0x5, 0xcc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x4, 0x7ff, 0x0, 0x200, 0x29e, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x30, 0x48, 0x5, 0x24, 0x18, 0x43, 0x6, 0x30, 0xc, 0x3, 0x0, 0x18, 0xb, 0x1, 0x1b, 0x1b, 0xb, 0x9]}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x24, 0xcdcf76b80a224eb2, 0x1, 0x6, 0xb, 0x39, 0x2b, 0x3, 0x3a, 0x1b, 0x4, 0x4, 0x0, 0x18, 0xf5263117d6e3dbda, 0xb, 0xb, 0x3, 0x12, 0x2, 0x1b, 0x1, 0x9, 0x48, 0x5, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0x6}, {0x2, 0x2}, {0x3, 0xa}, {0x0, 0x8}, {0x4}, {0x5, 0x7}, {0x1, 0x2}, {0x5, 0x7}, {0x3, 0x9}, {0x5, 0x3}, {0x2, 0x3}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0x7}, {0x5, 0x9}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x5}, {0x5}, {0x4, 0x6}, {0x6, 0x8}, {0x4, 0xa}, {0x4, 0x6}, {0x6, 0x9}, {0x4, 0x5}, {0x5, 0x2}, {0x3, 0x7}, {0x0, 0x1}, {0x3, 0xa}, {0x2, 0x7}, {0x5, 0x9}, {0x7, 0x3}, {0x5, 0x6}, {0x1, 0x2}, {0x5, 0x3}, {0x0, 0x8}, {0x4, 0x3}, {0x1, 0x1}, {0x6, 0x7}, {0x1, 0x7}, {0x3, 0x7}, {0x1, 0x2}, {0x6, 0x7}, {0x0, 0xa}, {0x7, 0x6}, {0x1, 0xa}, {0x4, 0x2}, {0x1, 0xa}, {0x0, 0x2}, {0x3, 0x7}, {0x4}, {0x1, 0x7}, {0x0, 0x5}, {0x0, 0x9}, {0x4, 0x5}, {0x6, 0x4}, {0x2, 0x2}, {0x0, 0x5}, {0x6, 0x6}, {0x2, 0x5}, {0x4, 0xa}, {0x4, 0x7}, {}, {0x7, 0x3}, {0x5, 0x3}, {0x6, 0x5}, {0x3, 0x5}, {0x5, 0x8}, {0x0, 0x8}, {0x3, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff, 0xb77e, 0xa, 0x0, 0xf, 0x9, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0xb130, 0x0, 0x2, 0x6, 0x7ff, 0x9]}}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x12, 0x16, 0x36, 0x6c, 0xb, 0x16, 0x4, 0x4, 0x4, 0x12, 0x2, 0x60, 0xf760a7f0284a5e8f, 0x4, 0x6c, 0x18, 0x16, 0xc, 0x12, 0x60, 0x9, 0x3, 0xb, 0x60, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x9, 0x3ff, 0x0, 0x1000, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x60, 0x48, 0x48, 0x1b, 0x0, 0x12]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x7}, {0x3, 0x3}, {0x4, 0x7}, {0x4, 0xa}, {0x2, 0x1}, {0x3, 0x7}, {0x7, 0x4}, {0x7, 0xa}, {0x7, 0x9}, {0x2, 0x1}, {0x5, 0x3}, {0x6, 0x2}, {0x6, 0x8}, {0x1, 0x7}, {0x7, 0x6}, {0x1, 0x3}, {}, {0x4, 0x4}, {}, {0x0, 0x4}, {0x2, 0x7}, {0x4, 0x6}, {0x4}, {0x1, 0x3}, {0x2, 0x7}, {0x5, 0xa}, {0x1, 0x3}, {0x6, 0xa}, {0x1, 0x8}, {0x0, 0x8}, {0x4, 0x5}, {0x7}, {0x3, 0x3}, {0x5, 0x5}, {0x2, 0x7}, {0x1, 0x4}, {0x4, 0x2}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}]}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8a, 0x5, 0xd, 0x8, 0x4, 0x4, 0xecf, 0x7]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x12, 0xb, 0x16, 0x6c, 0x36, 0x48, 0x4, 0x12, 0x36, 0x3, 0x60, 0x5, 0x24, 0x0, 0x5, 0x4, 0x16, 0x6c, 0x18]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x8}, {0x3, 0x4}, {0x1, 0x3}, {0x6, 0x7}, {0x5, 0xa}, {0x6, 0x4}, {0x2}, {0x0, 0x4}, {0x6, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x3, 0x8}, {0x7, 0x1}, {0x2, 0x8}, {0x2, 0x8}, {0x1, 0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x7, 0x6}, {0x0, 0x8}, {0x6, 0xa}, {0x5, 0x9}, {0x1, 0x5}, {0x2, 0x7}, {0x2, 0x3}, {0x1, 0x6}, {0x2, 0x6}, {0x7}, {0x5, 0x7}, {0x3, 0x5}, {0x7, 0x2}, {0x0, 0x6}, {0x1, 0x3}, {0x1}, {0x5, 0xa}, {0x0, 0x8}, {0x2, 0x9}, {0x7, 0x3}, {0x1}, {0x5, 0x9}, {0x2, 0x1}, {0x1, 0x6}, {0x3, 0x2}, {0x2, 0x7}, {0x7, 0x1}, {0x4, 0x3}, {0x4, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x27a766f20d6d0ea5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x12, 0x1, 0x4, 0x3, 0x2, 0x36, 0x12, 0x1, 0x18, 0xc, 0x7f, 0x5, 0x60, 0x36, 0x3, 0x9, 0x48, 0x36]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x5, 0x2, 0x27b6, 0xb903, 0x5, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0x6}, {}, {0x2, 0x5}, {0x0, 0xa}, {0x3, 0x9}, {0x4, 0xa}, {0x7, 0x7}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x4, 0x12, 0x1, 0xa79b838e723f16bc]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xce}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2000000000}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdf}]}, {0x518, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x50c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x48, 0x30, 0x60, 0x18, 0x60, 0x18, 0x36, 0x36, 0x1b, 0x2, 0x0, 0x5, 0xb, 0x5, 0x6c, 0x36, 0x30, 0x31]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0xb, 0x24, 0x12, 0x9, 0xc73f50c631699c51, 0x4, 0x16, 0x5, 0x30, 0x9, 0x2, 0x60, 0x3f, 0x48, 0x1b, 0x36, 0x18, 0x6, 0x9, 0x1b, 0x4, 0x18, 0x3, 0x1b, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0xa}, {0x2, 0x9}, {0x7, 0x4}, {0x0, 0x7}, {}, {0x2, 0x9}, {0x2, 0x3}, {0x2, 0x9}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1b, 0x48, 0x36, 0x37, 0x3, 0xb, 0x4, 0x12, 0x48, 0x6, 0x1b, 0x1, 0xb, 0x1b, 0x30, 0x24, 0x1a, 0x16, 0x1, 0x12, 0x9, 0x36, 0x18, 0x48, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2025, 0xfff, 0x401, 0x75, 0x1000, 0x9, 0x9, 0x6]}}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfc01, 0x5, 0x1000, 0xff9f, 0x7, 0x4, 0x1000, 0x1]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x5}, {0x4, 0x7}, {0x6, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0xa}, {0x7, 0x1e}, {0x1}, {0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x0, 0x3}, {0x2, 0x13}, {0x4, 0x6}, {0x4, 0x7}, {0x7, 0x4}, {0x0, 0x2}, {0x7, 0x6}, {0x0, 0x4}, {0x1, 0x7}, {0x1, 0x6}, {0x0, 0x9}, {0x3, 0x9}, {0x7, 0x5}, {0x4}, {0x6, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x9}, {0x6, 0xa}, {0x0, 0x9}, {0x7, 0x9}, {0x7, 0x7}, {0x5}, {0x6, 0x8}, {0x2}, {0x7, 0x2}, {0x7, 0xa}, {0x3, 0x3}, {0x4, 0x7}, {0x7, 0x9}, {0x1}, {0x3, 0x9}, {0x1, 0xa}, {0x5, 0x2}, {0x3, 0x5}, {0x7, 0x9}, {0x4, 0x3}, {0x0, 0x9}, {0x5, 0x3}, {0x7, 0x8}, {0x1, 0x1}, {0x7, 0x7}, {0x1, 0x6}, {0x2, 0x5}, {0x3, 0xa}, {0x5, 0x9}, {0x6, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8001, 0x0, 0x8, 0x8001, 0x8, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x101, 0x5, 0x1ff, 0x0, 0x5, 0x6, 0x77]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf8, 0x8, 0x4, 0x5, 0x800, 0xe, 0x7, 0x400]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{}, {0x0, 0x6}, {0x5, 0x7}, {0x2, 0xa}, {0x4, 0x5}, {0x6, 0x1}, {0x3, 0x3}, {0x4, 0x9}, {0x3, 0x5}, {0x4}, {0x3, 0x4}, {0x1, 0x9}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x4}, {0x2, 0x6}, {0x7, 0x6}, {0x0, 0xa}, {0x2, 0x8}, {0x7}, {0x1, 0x7}, {0x2, 0x3}, {0x5, 0xa}, {0x6}, {0x3, 0x6}, {0x0, 0x5}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x6}, {}, {0x3, 0x2}, {0x2}, {0x6, 0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x6, 0xa}]}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x5, 0xfffb, 0x7, 0x8, 0xb, 0x4, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfffb, 0x9eed, 0x100, 0x8, 0x9, 0x39b3, 0x144c]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x7, 0xa}, {0x2, 0x3}, {0x4, 0x2}, {0x1, 0x2}, {0x5, 0x7}, {0x2, 0x8}, {0x2, 0x5}, {0x7, 0x5}, {0x6, 0x6}, {0x0, 0x1}, {0x5, 0xa}, {0x6}, {0x0, 0x5}, {0x2, 0x5}, {0x5, 0x7}, {0x6, 0x9}, {0x1, 0x2}, {0x3, 0x5}, {0x2, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x2}, {0x0, 0x3}, {0x1, 0x1}, {0x7, 0x9}, {0x7, 0x6}, {0x1, 0x5}, {0x1, 0x6}, {0x2}, {0x5, 0x2}, {0x0, 0x5}, {}, {0x4, 0xa}, {0x0, 0x9}, {0x7, 0x7}, {0x2, 0x6}, {0x3, 0x7}, {0x4, 0x2}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0x7}, {0x5, 0x9}, {0x2, 0x4}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x3}, {0x5, 0x2}, {0x6, 0x2}, {0x5, 0x9}, {0x3, 0x3}, {0x1, 0x7}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x4}, {0x5, 0x4}, {0x4, 0x2}, {0x0, 0x1f}, {0x1, 0x1}, {0x7, 0x6}, {0x3, 0x1}, {0x7, 0x9}, {0x6, 0x6}, {0x1, 0x8}, {0x6, 0xa}, {0x5, 0x9}, {0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x0, 0x9}, {0x2, 0x5}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x4}, {}, {0x1, 0x1}, {0x0, 0x6}]}]}, @NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x60, 0x2, 0x6, 0x60, 0x48, 0xc, 0x11, 0xb, 0x48, 0x18, 0x4, 0x19, 0x2c, 0x1, 0x5, 0x1b, 0x36, 0x30, 0x24, 0x24, 0x2, 0x2, 0x3, 0x36, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb9, 0x8000, 0x7, 0xfff, 0x7, 0x3, 0x9, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8000, 0xf5, 0x0, 0x1, 0x6, 0xf, 0xb]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x7}, {0x3, 0x5}, {0x3, 0xa}, {0x4, 0x4}, {0x1, 0x3}, {0x0, 0x4}, {0x5, 0x9}, {0x1, 0xa}, {0x0, 0x8}, {0x6, 0x5}, {0x5}, {0x1}, {0x4, 0x9}, {0x5, 0x8}, {0x7, 0xa}, {0x4, 0x5}, {0x2}, {0x4}, {0x0, 0x6}, {0x2, 0x4}, {0x3, 0x2}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x2}, {0x1, 0x8}, {0x0, 0x6}, {}, {0x1}, {0x0, 0x8}, {0x4, 0x8}, {0x2, 0x3}, {}, {0x5}, {0x3, 0x4}, {0x3, 0x9}, {0x4, 0x8}, {0x2}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0x2}, {0x1, 0x1}, {0x4}, {0x6, 0x6}, {0x3, 0xa}, {0x2, 0x6}, {0x0, 0x9}, {0x4}, {0x5, 0xa}, {0x4, 0x1}, {}, {0x6, 0x8}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x18aa, 0x9, 0x1, 0xffff, 0x1ff, 0x6, 0x9, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x24, 0x18, 0x60, 0x48, 0x36, 0x48, 0xc, 0x12, 0x3, 0x48, 0xc, 0x1b, 0x30, 0xc, 0x16, 0x9, 0x48, 0xc]}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x4, 0x4}, {}, {0x4}, {0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x1, 0x4}, {0x1, 0x4}, {0x7, 0x9}, {0x4, 0x4}, {}, {0x4}, {0x4, 0x3}, {0x1, 0x9}, {0x1, 0x4}, {0x2, 0x1}, {0x1, 0x2}, {0x1, 0x2}, {0x2, 0x5}, {0x7, 0x5}, {0x1, 0x4}, {0x2, 0x6}, {0x5, 0x9}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x3}, {0x7, 0x7}, {0x4, 0x7}, {0x4, 0x3}, {0x0, 0x2}, {0x4, 0x7}, {0x1, 0x2}, {0x4, 0x9}, {0x4, 0x1}, {0x0, 0x7}, {0x3, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x2}, {0x4, 0x9}, {0x4, 0x4}, {0x6, 0x5}, {0x2, 0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x7, 0xa}, {0x2, 0x3}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0xa}, {0x4, 0x9}, {0x4}, {0x5, 0x9}, {0x3, 0x4}, {0x3, 0x6}, {0x5, 0x4}, {0x5, 0x1}, {0x0, 0x7}, {0x4, 0xa}, {0x4, 0xa}, {0x2, 0x5}, {0x4, 0xa}, {0x7, 0x9}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xac, 0x3, 0xd, 0x3b0, 0x9, 0x4, 0x3, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x60, 0x36, 0x36, 0x2, 0x18, 0x6, 0x2, 0x60, 0x9, 0x1, 0xb, 0x30, 0x3, 0x60, 0x36, 0x30, 0x52, 0x30, 0x60, 0x18]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1b, 0x6, 0x10, 0x5, 0x7, 0x948, 0x8000, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7f, 0x1, 0x100, 0x2, 0x6, 0x4, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x9, 0xf2f, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff2, 0x4, 0xfff8, 0x8, 0x8, 0x1, 0x2, 0xd5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x3f8, 0x0, 0x6, 0x2, 0xfffa, 0xff, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6c, 0x9, 0x16, 0x0, 0x12, 0x12, 0x24, 0x0, 0x36, 0xb]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x4, 0x1}, {0x6, 0x1}, {0x2, 0xa}, {0x0, 0x9}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0x8}, {0x5, 0x2}, {0x4, 0x8}, {0x2}, {0x7, 0x3}, {0x4, 0x2}, {0x4, 0x9}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0x2}, {}, {0x4, 0xa}, {0x1, 0x7}, {0x2, 0x5}, {0x3, 0x1}, {0x5, 0xa}, {0x3, 0x5}, {0x5, 0x2}, {0x1, 0x7}, {0x5, 0x2}, {0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x2, 0x5}, {0x1, 0x3}, {0x4, 0xa}, {0x3, 0x6}]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x16, 0x24, 0xb, 0x48, 0xc, 0x5, 0x5, 0x3, 0x48, 0x48, 0x48, 0x9, 0x1e, 0x30, 0x1b, 0x2, 0x30, 0x16, 0x6c, 0x60, 0xb, 0x6, 0x30, 0xb, 0x48, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x298, 0x10, 0x8, 0xfffc, 0x8, 0x4, 0x4]}}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0xfff8, 0x70, 0x5, 0x0, 0x8d3, 0x25, 0x6]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x9}, {0x0, 0x5}, {0x4, 0x1}, {0x1, 0x7}, {0x5, 0x9}, {0x0, 0x4}, {0x6, 0x8}, {0x5, 0x4}, {0x3, 0x1}, {0x3, 0x3}, {0x0, 0x3}, {0x0, 0x6}, {0x3, 0x8}, {0x4, 0x7}, {0x0, 0x6}, {0x7, 0x5}, {0x1, 0x4}, {0x7, 0x8}, {0x2, 0x2}, {0x6, 0x2}, {0x2, 0x4}, {0x0, 0x6}, {0x7}, {0x7, 0x4}, {0x5, 0x4}, {0x2, 0x6}, {0x1, 0x1}, {0x2, 0x9}, {0x5, 0x2}, {0x6, 0x3}, {0x6}, {0x2, 0x8}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x16, 0x24, 0xb, 0x1b, 0x48, 0x6, 0x12, 0x16, 0x4, 0x36, 0x24, 0x18, 0x6, 0x16, 0x36, 0x36, 0x2, 0x30, 0x3, 0xc, 0xc, 0x36]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x9, 0x18, 0x3, 0x4, 0x1b, 0x3, 0x48, 0x6c, 0xc, 0x3, 0x1, 0xc, 0x16, 0x3, 0x3, 0x1b, 0x0, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0xb000, 0x8000, 0x5, 0x3, 0x98f, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x6c, 0x36, 0x65, 0x3a3aa8d807c4f7c0, 0x6, 0x2, 0x48, 0x9, 0x60, 0x16, 0x2, 0x2, 0x24, 0x1b, 0xebd0fbdb81d5e0f0, 0x12, 0x36, 0x6c, 0x1b, 0x48, 0x30, 0x1, 0x0, 0x24, 0x6c, 0x1]}]}]}]}, {0x404, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2a0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x5}, {0x1, 0x6}, {0x5, 0xa}, {0x7, 0x8}, {0x4, 0x9}, {0x4, 0x3}, {0x4, 0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x6}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x4}, {0x3, 0xa}, {0x7, 0x7}, {0x0, 0x3}, {0x6, 0x1}, {0x3, 0x7}, {0x0, 0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x5}, {0x5, 0x18}, {}, {0x2, 0x2}, {0x3, 0xa}, {0x4, 0x1}, {0x4, 0xa}, {0x5, 0x8}, {0x5, 0x8}, {0x6, 0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0xa}, {0x7}, {0x4, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0xfeff, 0x2, 0x9, 0x8, 0xfff, 0xd5, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x1, 0x8, 0x9, 0x9, 0xc406, 0x9, 0x3]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5, 0x6}, {0x0, 0x6}, {0x7}, {0x5, 0x8}, {0x1, 0x1}, {0x5, 0x3}, {0x0, 0x9}, {0x7, 0x5}, {0x5, 0x3}, {0x0, 0x3}, {0x4, 0xa}, {0x3, 0x5}, {0x1, 0x2}, {0x2}, {0x2}, {0x3, 0x5}, {0x0, 0x6}, {0x2, 0x4}, {0x6}, {0x4, 0x7}, {0x2, 0x9}, {0x6, 0x1}, {0x5, 0x6}, {0x2, 0x2}, {0x7, 0x3}, {0x7, 0x2}, {0x5, 0x7}, {0x3, 0x5}, {0x0, 0x5}, {0x3, 0x9}, {0x5, 0x1}, {0x5, 0x7}, {0x7, 0x2}, {0x6, 0xa}, {0x1, 0x7}, {0x1, 0x6}, {0x6, 0x8}, {0x4}, {0x4, 0x1}, {0x2, 0x9}, {0x2, 0xa}, {0x1}, {0x7, 0x9}, {0x3}, {0x1, 0x5}, {0x7, 0x8}]}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x400, 0x6, 0x200, 0x3, 0x8001, 0x5, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x2, 0x9, 0x8, 0x3, 0x9, 0x78]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x72, 0x2c, 0x24, 0x6, 0x1b, 0xb, 0x16, 0x2, 0xf, 0x4, 0xc, 0x6]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x2}, {0x4, 0x7}, {0x3, 0x8}, {0x2}, {0x0, 0x6}, {0x2, 0x5}, {0x4, 0x8}, {0x7, 0x3}, {0x7, 0x4}, {0x2, 0xa}, {0x1, 0x5}, {0x4, 0x1}, {0x2, 0x5}, {0x1}, {0x0, 0x4}, {0x1, 0x7}, {0x4, 0x8}, {0x0, 0x6}, {0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x6, 0xa}, {0x1}, {0x2, 0x7}, {0x4, 0x5}, {0x7, 0x3}, {0x2, 0x6}, {0x2, 0x1}, {0x5, 0x9}, {0x5, 0x7}, {0x7, 0x3}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x2}, {0x3, 0x6}, {0x6, 0x6}, {0x2, 0x4}, {0x2, 0x4}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xe, 0x1, 0x8, 0xfffc, 0x1, 0x372, 0x3]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x2, 0x30, 0x30, 0x6, 0xc, 0x6, 0x16fad5440aab1405, 0x53, 0x2, 0x1b, 0x24, 0x36, 0xb, 0x6, 0xb, 0x5, 0x24, 0x18, 0x30, 0x6a, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x8, 0x8, 0x1, 0x4c, 0x9, 0xa6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x24, 0x27]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7ff, 0x800, 0x2000, 0x7ff, 0x3, 0x85, 0x4]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0x9}, {0x3, 0x9}, {0x1, 0x2}, {0x5, 0x2}, {0x5, 0x6}, {0x1, 0x9}, {0x2, 0x2}, {0x6, 0xa}, {0x7, 0x9}, {0x1, 0x7}, {0x5, 0x8}, {0x6, 0xa}, {0x5, 0x3}, {}, {}, {0x3, 0x2}, {0x7, 0x7}, {0x1}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x8}, {0x4, 0x7}, {0x5, 0x7}, {0x2, 0x6}, {0x4, 0x1}, {0x5, 0x5}, {0x1, 0x6}, {0x1, 0xa}, {0x5}, {0x7, 0x6}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {0x5, 0x5}, {0x6, 0x8}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x2}, {0x7}, {0x5, 0x6}, {0x7, 0x2}, {0x0, 0x5}, {0x1, 0x5}, {0x5, 0xa}, {0x1}, {}, {0x1, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x12, 0x36, 0x1, 0xb, 0x24, 0xab937ea7f3c764da, 0x1, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7fff, 0xd, 0x3, 0x4, 0x10, 0x387, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x4, 0x5, 0x1, 0x36, 0x9, 0x5a, 0x24, 0x9, 0x1, 0x4, 0x4, 0x9, 0x6d, 0x12, 0x0, 0x1b, 0x3, 0x21, 0x30, 0x12, 0x3, 0x6b, 0x36, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x9, 0xb, 0x1b, 0x16, 0x3, 0x1b, 0x16, 0x5, 0x24]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x16, 0x1, 0xc, 0x93ce903609b30165, 0x4, 0x5, 0x3, 0xc, 0x6c, 0x16, 0x9, 0x60, 0x30, 0x60, 0x6, 0x5, 0x6c, 0x30, 0x30, 0xb, 0x4, 0x30, 0x16, 0x2, 0x18, 0x48, 0x3, 0x1b]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0x6c, 0x24, 0x60, 0x3, 0x36, 0x30, 0x9, 0x1, 0x36, 0x9, 0x48, 0x4, 0x16, 0x0, 0x1c, 0x21]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x124, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x1, 0x1}, {0x4, 0x3}, {0x1, 0x8}, {0x0, 0x4}, {0x2, 0x4}, {0x7}, {0x3, 0x1}, {0x1, 0x9}, {0x6, 0x7}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x3}, {0x2, 0x7}, {0x3, 0x7}, {0x6}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x4}, {0x5, 0x9}, {0x6, 0x8}, {0x7}, {0x2, 0x5}, {0x5}, {0x6, 0x2}, {0x1, 0x9}, {}, {0x3, 0x6}, {0x3, 0x1f}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x6}, {0x3, 0x8}, {0x1, 0x9}, {0x1}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x5}, {0x5, 0x5}, {0x0, 0x6}, {0x0, 0x2}, {0x0, 0x6}, {0x2, 0x3}, {0x2}, {0x2, 0x5}, {0x2, 0xa}, {0x3, 0xa}, {0x3, 0x7}, {0x1, 0x8}, {0x1, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x6}, {0x4, 0xa}, {0x6, 0x4}, {0x1, 0x8}, {0x6, 0x3}, {0x2, 0x5}, {0x6}, {0x4, 0x2}, {0x6, 0x5}, {0x4}, {0x3, 0x9}, {0x6, 0x4}, {0x3, 0x6}, {0x4, 0x1}, {0x0, 0x7}, {0x4, 0x7}, {0x6, 0x4}, {0x3, 0x6}, {0x3}, {0x7, 0x7}, {0x4, 0x6}, {0x1, 0x7}, {0x4, 0xa}, {0x7}, {0x7, 0x6}, {0x6, 0x2}, {0x7, 0x1}, {0x7}, {0x2, 0x6}, {0x4}, {}, {0x2, 0x5}, {0x7, 0x7}, {0x6}, {0x3, 0x5}, {0x1, 0x6}, {0x3, 0x1e}, {0x4, 0x9}, {0x7, 0x4}, {0x7, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x0, 0x1b, 0x4, 0x30, 0xf, 0x5, 0xb, 0x1, 0x48, 0x60, 0x60, 0x16, 0x1, 0x4, 0x7a, 0x1, 0x1, 0x5, 0x24, 0x36, 0x1, 0x30, 0x6c, 0x2d, 0xc, 0x16, 0x24, 0x48]}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x5, 0x36, 0x24, 0x3, 0x60, 0x4, 0xb, 0xc, 0x5, 0x36, 0x1, 0x12, 0x6c, 0x36, 0x3, 0x12, 0x1, 0x9, 0xb, 0x60, 0x0, 0x6c, 0x2, 0x18, 0x36, 0xb, 0x2, 0x24, 0x2, 0x1, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x100, 0x6, 0x9, 0x8, 0x7, 0x9, 0x2]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x7}, {0x0, 0x10}, {0x1}, {0x2, 0x2}, {0x2}, {0x5, 0x4}, {0x7, 0x4}, {0x7, 0x2}, {0x3, 0xa}, {0x5, 0xa}, {0x0, 0xa}, {0x4, 0x7}, {0x2, 0x9}, {0x5, 0x5}, {0x7, 0x8}, {0x1, 0x1}, {0x5, 0x2}, {0x6, 0x2}, {0x6}, {0x4, 0x9}, {0x1, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x13c, 0x11d, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xcc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x30, 0x47b5, 0x401, 0x10, 0xffff, 0x4]}}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0x1}, {0x2, 0x4}, {0x2, 0x5}, {0x2, 0x6}, {0x7, 0x6}, {0x2}, {0x1, 0x8}, {0x2, 0xa}, {0x7, 0xa}, {0x3, 0x6}, {0x4, 0x9}, {0x0, 0x6}, {0x4, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x4, 0x6}, {0x7, 0x8}, {0x7, 0x3}, {0x6, 0x1}, {0x6, 0x4}, {0x0, 0x7}, {0x6}, {0x0, 0x2}, {0x3, 0xa}, {}, {0x2, 0x2}, {0x1, 0x7}, {0x6, 0x1}, {0x4, 0x1}, {0x7, 0x7}, {0x4, 0x4}, {0x4, 0x4}, {0x3, 0x4}, {0x6, 0x9}, {0x4, 0x2}, {0x0, 0x9}, {0x7, 0x9}, {0x5, 0x4}, {0x4, 0x1}, {0x1, 0x5}, {0x2, 0x9}, {0x0, 0x6}, {0x2, 0x1}, {0x7, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x9, 0x5, 0x3, 0x9, 0x2, 0xee]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x6, 0x18, 0x6c, 0x30, 0x4e1ca02212ca3bdd, 0x3e, 0x60, 0x6, 0x6, 0x2, 0x3, 0xf, 0x2, 0x2, 0x24, 0x36, 0x16, 0x1, 0xb, 0x0, 0x4, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x401, 0x0, 0x2, 0x3, 0x369, 0x2, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0xa, 0x3fc9, 0x1, 0xea, 0x6, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3c}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xda}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf7}]}]}, @NL80211_ATTR_TID_CONFIG={0x640, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x200, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x84}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1cc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x4, 0x5, 0x56, 0x20, 0x1, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5b83, 0x4, 0xd42e, 0x4, 0x3ff, 0x0, 0x6, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x100, 0x4, 0x9, 0x2, 0xc7d1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x1913, 0x1, 0x7, 0x9, 0x512, 0x3c]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x6c, 0x2, 0x30, 0x1b, 0xb, 0x4, 0x6c, 0x5, 0x3, 0x12, 0x9, 0x30, 0x12, 0x1, 0x5, 0x18, 0xc, 0x2, 0x3, 0x3, 0xb]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0x5}, {0x0, 0x8}, {0x0, 0xa}, {0x4, 0x4}, {0x5, 0xa}, {0x5, 0x9}, {}, {0x0, 0x2}, {0x1}, {0x2, 0x2}, {0x2, 0x3}, {0x5, 0x9}, {0x7, 0xa}, {0x7, 0x8}, {0x1, 0x8}, {0x6, 0x2}, {0x7, 0x1}, {0x1, 0x3}, {0x7, 0x4}, {0x3}, {0x1, 0x1}, {0x5, 0x7}, {}, {0x4, 0x4}, {0x6, 0x9}, {0x6, 0x1}, {0x3, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x1, 0x1}, {0x1, 0x2}, {0x3, 0x5}, {0x1, 0xa}, {0x2}, {0x1}, {0x3, 0x7}, {0x0, 0x2}, {0x4, 0xa}, {0x0, 0x8}, {0x4, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x6, 0x5}, {0x0, 0x1}, {0x6}, {0x7, 0x2}, {0x6, 0x4}, {0x4, 0x9}, {0x4, 0x7}, {0x1, 0x3}, {0x7, 0x4}, {0x5, 0x8}, {0x0, 0x1}, {0x2, 0x6}, {0x3, 0x1}, {0x1, 0x4}, {0x1}, {0x7, 0x2}, {0x1, 0x6}, {0x3, 0x5}, {0x4, 0x8}, {0x4, 0x8}, {0x1}, {0x4, 0x9}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x80, 0x0, 0x3, 0x3, 0x54f0, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0x18, 0x24, 0x9, 0x3, 0x6c, 0xab, 0x24, 0x9, 0x16, 0x9, 0x60, 0x24, 0x6c, 0x30, 0x3]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x2, 0x0, 0xc, 0xc]}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x0, 0x9, 0x9, 0x9, 0x2, 0xfffa]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x4, 0x5, 0x30, 0x12]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0x16, 0x60, 0x6c, 0x48, 0x18, 0x18, 0x48, 0x77, 0xc, 0xa30724d109ee8778, 0x6c, 0xc, 0x65, 0x24, 0xc, 0xc, 0x1, 0x2, 0x1, 0x24]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x5}, {0x4, 0x7}, {0x2, 0x8}, {0x2, 0x9}, {0x7, 0x6}, {0x5}, {0x7, 0x1}, {0x5, 0x9}, {0x1, 0x7}, {0x7, 0x9}, {0x3, 0x7}, {0x6, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x0, 0x3}, {0x4, 0x9}, {0x0, 0x2}, {0x7, 0x9}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x4}, {0x0, 0x1}, {0x0, 0x4}, {0x2, 0x2}, {0x4, 0x1}, {0x4, 0x5}, {0x6, 0x8}, {0x7, 0x3}, {0x3}, {0x2}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0xa}, {0x0, 0x5}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x8}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x2, 0x6, 0x5, 0x1, 0xfff9, 0x3]}}]}]}]}, {0x1c0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x5, 0x4, 0x40, 0x2, 0x3ff, 0x1000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x100, 0x9, 0x9, 0xfff9, 0x42, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0xdc82, 0x1, 0xdb64, 0x0, 0x6, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xff, 0x7, 0x81, 0xffff, 0x6, 0x5, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x5, 0xc55, 0x3, 0x5, 0x200, 0x9]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x5, 0x16, 0x65, 0x36, 0x16, 0xb, 0x36, 0x3, 0x16, 0x24, 0x36, 0x6, 0x6, 0x18, 0x1b, 0x12, 0x4, 0x18, 0x24, 0x1, 0x18, 0x24, 0x18, 0x18, 0x237f3a3de5e1b81c, 0x48, 0x9, 0x6c, 0x1b, 0x16, 0x9]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x3, 0x30, 0x9, 0x4, 0x4, 0x2, 0x0, 0x4, 0x3d2cd7f8adf0791f, 0x2, 0x18, 0x30, 0x9, 0xc, 0x4, 0x3, 0x3, 0x0, 0x12, 0x24, 0x1b, 0x4, 0x60, 0xc, 0x48]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd6d, 0xf67b, 0x4, 0x7, 0x2, 0xa, 0x9, 0x7fff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0x3}, {0x6, 0xa}, {0x3, 0x4}, {0x3, 0x2}, {0x5, 0x2}, {0x5, 0x3}, {0x0, 0x7}, {0x3, 0x7}, {0x7, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x0, 0x1}, {0x4, 0x8}, {0x3, 0x8}, {0x2, 0x8}, {0x6, 0x9}, {0x3, 0x2}, {0x5, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x100, 0xc3, 0x8000, 0x3cc7, 0x81, 0x81, 0x628]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x5}, {0x1, 0x7}, {0x6, 0x4}, {0x0, 0x5}, {0x5, 0x9}, {0x4, 0xa}, {0x4}, {0x6, 0x6}, {0x1}, {0x2, 0xa}, {0x4, 0x5}, {0x7}, {0x7, 0x4}, {0x1, 0x8}, {0x4, 0x1a}, {0x5, 0x4}, {0x1, 0xa}, {0x5, 0x6}, {0x6, 0x8}, {0x6, 0x1}, {0x0, 0x3}, {0x3, 0x2}, {0x1}, {0x1, 0x5}, {0x3, 0x1}, {0x0, 0x6}, {0x4, 0x9}, {0x7, 0x8}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x7]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x12]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3ff, 0x4ee, 0x1, 0x9, 0x81, 0xc000, 0x81]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff00000000}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x25c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x238, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x1000, 0x8, 0x200, 0x1f8f, 0x7, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff8, 0x200, 0xd, 0x3, 0x9, 0x3, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x12, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x9, 0x0, 0x5, 0x1ff, 0x101, 0x5, 0xc56]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x0, 0x8, 0xffff, 0x6759, 0x1, 0x45f]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x7}, {}, {0x3, 0x5}, {0x1, 0xa}, {0x6, 0xa}, {0x1, 0x3}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x8}, {0x7, 0x2}, {0x1, 0x6}, {0x6, 0x1}, {0x0, 0x1}, {0x3, 0xa}, {0x2}, {0x7, 0x9}, {0x5, 0x4}, {0x6, 0x1}, {0x7, 0x2}, {0x1, 0x6}, {0x0, 0xa}, {0x2, 0x9}, {0x3, 0x1}, {0x7, 0x8}, {0x1, 0x9}, {0x2, 0x5}, {0x4}, {0x0, 0x7}, {0x2, 0x6}, {0x5, 0x4}, {0x7, 0x2}, {0x6, 0x7}, {0x1, 0x4}, {0x2, 0x4}, {0x2, 0xa}, {0x7, 0x1}, {0x0, 0x7}, {0x2, 0xa}, {0x4, 0xa}, {0x1, 0x1}, {0x3, 0x7}, {0x0, 0x7}, {0x7, 0x1}, {0x1, 0x6}, {0x7, 0x8}, {0x3, 0x9}, {0x7}, {0x6, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x7}, {0x0, 0x4}, {0x6, 0x5}, {0x7, 0x3}, {0x5, 0x4}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x3}, {0x4}, {0x6, 0x8}, {0x6, 0x9}, {0x2, 0x8}, {0x4, 0x7}, {0x1, 0x1}, {0x2, 0x4}, {0x5, 0x2}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7}, {0x3, 0xa}, {0x4, 0x3}, {0x5, 0x4}, {0x4, 0x3}, {0x3, 0x1}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x8}, {0x1}, {0x4, 0x6}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0x7}, {0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x0, 0x8, 0xfeff, 0xcde2, 0x8, 0xd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x9d25, 0xda67, 0x800, 0x4, 0x7f, 0x8001]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x2, 0x5, 0x7, 0x9, 0x7ff, 0x7, 0xf]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x2, 0x8ef, 0x7, 0x5, 0x9, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6d, 0x7, 0x6, 0xff, 0x7, 0x9, 0x2]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x8}, {0x4, 0x2}, {0x7, 0x7}, {0x3}, {0x4, 0x1}, {0x3, 0xa}, {0x4, 0x4}, {0x2, 0x2}, {0x4, 0x5}, {0x6, 0x4}, {0x7}, {0x6, 0x2}, {0x7, 0x8}, {0x4, 0x2}, {0x1, 0x3}, {0x2, 0x6}, {0x7, 0x6}, {0x2}, {0x6, 0x8}, {0x7, 0x7}, {0x4, 0x4}, {0x1, 0x4}, {0x2, 0x2}, {0x6, 0x7}, {0x4, 0x1}, {0x4, 0x9}, {0x2, 0x8}, {0x6, 0x7}, {0x1, 0x1}, {0x2, 0x6}, {0x1, 0x4}, {0x7, 0x9}, {0x3, 0x7}, {0x1, 0x4}, {0x0, 0x3}, {0x3, 0x2}, {0x5, 0x9}, {0x1, 0x1}, {0x7, 0x7}, {0x0, 0x5}, {0x3, 0x8}, {0x4}, {0x7, 0x6}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x1}, {0x2, 0x4}]}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x1}, {0x4, 0x1}, {0x7, 0x6}, {0x5, 0x8}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0xa}, {0x6, 0x4}, {0x0, 0x5}, {0x4, 0x4}, {0x5, 0x9}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0x3}, {0x1, 0x4}, {0x4, 0x4}, {0x5, 0x2}, {0x2}, {0x2, 0xa}, {0x0, 0x1}, {0x7, 0x4}, {0x1, 0x1}, {0x6, 0x4}, {0x1, 0x2}, {0x7, 0x7}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x48, 0x3, 0x2, 0x9, 0xffff, 0xcd9, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0x16, 0x1b, 0x24, 0x0, 0x5a, 0x36, 0x6, 0x5, 0x9, 0xb, 0x18, 0x1, 0x3, 0x2, 0x36, 0x3, 0x30, 0x60, 0x18, 0xb, 0x5, 0x34]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0x1b, 0x4, 0x4, 0x6c, 0x0, 0x6, 0xc, 0x2, 0x24, 0x4, 0x6, 0x24, 0x12, 0xb, 0x24, 0x74, 0x24, 0x6c, 0xb, 0x1, 0x2, 0x60, 0x16, 0x60, 0x24, 0x6, 0x1b, 0x5, 0x9, 0x18, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0xb8, 0x11d, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x6c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfd9, 0x3, 0x2, 0x6, 0xa95, 0x800, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x60, 0x36, 0x30, 0x4, 0x4, 0x48, 0x60, 0x9, 0x36, 0x6c, 0xb, 0x9, 0xb, 0x56, 0x1, 0x6c, 0x18, 0x36, 0x24, 0x4, 0x1b, 0x24, 0x12, 0x3, 0x48, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x4, 0x0, 0x8, 0x10, 0x8001, 0x63]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x58, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb1d2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x73}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x264, 0x11d, 0x0, 0x1, [{0x4}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xca}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdf}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9a}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x93}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000000000000000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9842}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x1dc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0xa}, {0x5, 0x2}, {0x4}, {0x5, 0x5}, {0x2}, {0x4, 0x2}, {0x0, 0x3}, {0x6, 0x1}, {0x3, 0x7}, {0x6, 0x8}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xfe}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xff73, 0x8, 0x5, 0x3, 0x0, 0x5, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x6, 0x9, 0xd3b, 0xff5b, 0x0, 0x65, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0x3, 0xb, 0x3, 0x1, 0x1b, 0xc, 0x4, 0x6, 0x12, 0x60, 0x12, 0x30, 0x6c, 0x16, 0x9, 0x48, 0x24, 0x2, 0xb, 0x60, 0x3]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x5, 0x42d, 0x24c9, 0x6d, 0x6]}}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x8}, {0x1, 0x1}, {0x5, 0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x4}, {0x3, 0x3}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x9}, {0x4, 0x2}, {0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x1000, 0x9, 0x3, 0x8, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6c, 0x9, 0x59, 0x12, 0x1b, 0x6c, 0x5, 0x1b, 0x6, 0x2, 0x12, 0x18, 0x6c]}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xf857, 0xfb45, 0x6, 0x101, 0x7ff, 0x1, 0x4]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0x4}, {0x3, 0x9}, {0x6, 0x3}, {0x0, 0x8}, {0x1, 0x6}, {0x3, 0x1}, {0x4, 0x8}, {0x6}, {0x6}, {0x2, 0x7}, {0x6, 0x9}, {0x0, 0x8}, {0x1}, {0x2, 0x3}, {0x0, 0x2}, {0x7, 0x2}, {0x4}, {0x6, 0x1}, {0x3}, {0x5, 0x5}, {0x7, 0x9}, {0x1, 0x6}, {0x1, 0x9}, {0x1, 0x1}, {0x0, 0x8}, {0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x3, 0x5}, {0x4, 0x9}, {0x3, 0x3}, {}, {0x1, 0x3}, {0x4, 0xa}, {0x5, 0x2}, {0x4, 0x5}, {0x4, 0x9}, {0x0, 0x2}, {0x5, 0x2}, {0x1, 0x3}, {0x5, 0x3}, {0x2, 0x3}, {0x5, 0x3}, {0x7, 0x9}, {}, {0x0, 0x4}, {0x4, 0x9}, {0x4, 0x3}, {0x6, 0xa}, {0x7, 0x8}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x3}, {0x4, 0x1}, {0x1, 0x2}, {0x6, 0xa}, {0x2, 0x6}, {0x1}, {0x7, 0x6}, {0x7, 0xa}, {0x0, 0x2}, {0x4, 0x1}, {0x3, 0x9}, {0x1, 0x9}, {0x3, 0x5}, {0x7}, {0x5, 0xa}, {0x4}, {0x7, 0x8}, {0x5}, {0x6, 0x9}, {0x2, 0xa}, {0x4}, {0x2, 0x6}, {0x6, 0x4}, {0x6, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x7}, {0x3, 0x9}, {0x7, 0x7}, {0x0, 0x1}, {0x6, 0x9}, {0x4, 0x5}, {0x7, 0xa}, {0x0, 0xa}, {0x6, 0xa}, {0x0, 0x7}, {0x7, 0x5}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x24, 0x9, 0x3, 0x36, 0x5, 0x5, 0x30, 0x2, 0x60, 0x0, 0x1]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x8, 0xf, 0x4, 0x1, 0x0, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x30, 0x12, 0x1, 0x3, 0x1b, 0x6c, 0x6, 0x2, 0x60, 0x16, 0x3, 0x4, 0x1, 0x24, 0x16, 0x5, 0x6, 0x48, 0x1b, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x1dd4}, 0x1, 0x0, 0x0, 0x1040}, 0x4000) (async) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000002900)="49188f46042f8664038e6734788200ef6064243afdf7c1bea439b58d23a47150b85e5d1aaa15fbe4e5d5bbf562dd62d649ccbf7ee972aefa58e3bde4b6c9162d71661c69d58630dd55d03747ff0d") listen(r0, 0x9) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x58, 0xd, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20084800) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x20, 0x1404, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000014}, 0x40000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_buf(r5, 0x0, 0x20, &(0x7f0000002bc0)=""/4096, &(0x7f0000003bc0)=0x1000) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000003c00)) (async) ioctl$F2FS_IOC_COMPRESS_FILE(r7, 0xf518, 0x0) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003c40), 0x62200, 0x0) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000003c80)=0x2000000) (async) r9 = syz_open_dev$sndmidi(&(0x7f0000003cc0), 0x2, 0x22500) writev(r9, &(0x7f0000003e00)=[{&(0x7f0000003d00)="06f21d1c11dcec07c68a296ddd871fb3e5454a5601a18f56fcac82692bb153061707184e76e36803f98931c06e29d4cef66f8070ac7c2c1f24a8a27b1210c5a39196b2bea6e273c8a927398c342f4055da1d7b492dda275e4389e1de83897a8936b8b3f22d5adab66c4c6e0ab2bee8229d3f283f83cc9e7c372af4851d8f8817942488b535816b6a5514f63620a244bcf1dc1a59ab55ffd2bad2292dd337ce7ffbaaee49117e3023f3f2f4dc09c9538ee004d1", 0xb3}, {&(0x7f0000003dc0)="11346f9e256651d5cf125145b0", 0xd}], 0x2) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r10, &(0x7f0000003f40)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003f00)={&(0x7f0000003ec0)={0x24, r11, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xd248a6e38c1d511f}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x40) 6m12.101799075s ago: executing program 1 (id=1139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000027c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000002880)={'wpan0\x00', 0x0}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/219, 0xdb) writev(r6, &(0x7f0000003740)=[{&(0x7f0000001440)='deny', 0x4}], 0x1) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000028c0)={0x1c, r4, 0x403, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8080) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24048000}, 0x8) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, r7, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCGNPMODE(r8, 0xc008744c, &(0x7f0000001b80)={0x2b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd00000a0000008d0000006809c2b4001406ff000000000000000000000000000c0000ff0200000000000000000000000000013b06000000000000002fecfa7d6266d62810628e9bec0764d366921e7982b0f38470a736c2bcf722b3b7bfff48a599afc05f7e1f7eb3f80930000000000000000000000000000000000000000000000000004e2300004e2000000001000000000000000400000004"], 0x9e) 6m11.859224852s ago: executing program 1 (id=1144): r0 = socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r1], 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000022c0)="f14889c2ad234ad6f0a71da72859c7c1e176134eff431253493482c723f8633d838bf127adff9f48a8854702b8", 0x2d}, {&(0x7f00000001c0)="825080b96eb16344308f20b77249a647154130357d29417ddf68b5f9602c8199fae5917d0d342257b583bd03aa1fb40da947e39177e8a2db5fbabc5d5d8dbe2e1ce03d718c765ee5580c5c3ff6facf9720f4199dcd9431f6589b7535949ab78f70531d564113d891b71714ac816e08199b14e72b0e503aba9796b22cc24b5ff7e259458fa808acfb7ceb9363955e86852f2ce931a83caa86d2817985c37a8fd333f70b9cb21fde278031e1bb46bd4bdcbacb5142fc5beafac588889bd72e0f64d3827ab99a1ae0fcadb4303cd5c0167f0514f7", 0xd3}, {&(0x7f0000000640)="d1f95eec5207bfacaa7221834e70fd78612f16838eeeb9fe30cb09521d18a5b7e420bd81853b5bdfd96dfb18718721abf0bd05599c02d78d319b637d61c8ab7e30250c4e322c5e25d903642a186fb15fb5ab7e6391432bdec3107b230176d43ced3c64a7fe008febe919153bf1d067710dd11d4debde1a10d4cf04787f531f9b7c700a8b75d03b89f1cdadf309ca64641f36875ec068019869e92fb5e303c220e071bddc2d3f33655ec8e8ff6095b0c672d1c3952ef08dadd94b6411ded03f602f63ff00172c96d99999f93f0837a14eda3f6d9a9b5e046ab23b93aa0c7a35d1c0f1e0d91a6715f4d8d7b3d92e01136c523842069163caa0d90f18b89c852204182df6e42d49164f2ddaa5276709f3785e2e60e0df043c49a29207e1ba1fdc0d3053b3896b931ae935b49e53326e7da451d77fe31eec1a912f3ce0c2e76f2c24c48f474bd26fd37a3d4d94adc6e805ed3a88816f1d491ed0125418ca4d4cda3155f8a6f6352c8ceec8a557c57fe9e27b3aad05ff91d457c2b45e1f252847c6dd05f1b8d243e78bcbe3571f8532ee0483e0ac002b43e71ae2d0070ede2886f3a5e2fe9f3c572195823264cfc133f138e47895f57adfd75ee8730710cc90d77d53a2d18b80f38b7d4bdbf52ba1826a469e45886f5b400e266570ba8e12ddd6ccd34533dbe3cf30f9bcfa238fb1014d8d0e637809f5869bd61d0d74eb9a043c514e27eacef53354af2a97bb695e47458dceff94198a47c3a79cd45c078f580f459dff30afda66a37fcb1cd589137e6d3ebb35b1849444b25066c5ef7ff0962ec9689f1660077ff51b2af603bf5b7b82890d2171437788a72fe9fa43628b0c5da9d7e79875d477ddf6c94333d8673a4bc43c616b7b34e5ee2abdb9d1f874dd24a1c79cf82e8a3bedb33130b07691ad4af3b69a0b4a55d51b74bd6647d5814ddd6d35a9edfa3258a20df3e63531274ddae6a9516062317f83ff5893ae88d137072e2521dc3cf37b6ec348018843019df8488b25bf1e775e0e9c521bdf6dabf5a206c20e5014e42c7b9718331ead97dc413aeb09cc919b4bd1c863a62ad873b4c36e6d8020543635ba0134e6f6734c30b403c41feb80fde5c1018875fbcd472e87a6bd31ff9530b6dd9c4136cd9c10c6fa5e20dd6cca4b386b0e3107b080968db33efeac158b9ffc5aa6293d79c8aef2a99b1ca0e21df26b4a96f43a0ebc5ce09d86a13a175571c19ef75cc4a06aca9400d60805487955d8b326995c4a1592861758f49014f4e7c7ffd85f7158252be35bc9f29e1bdb4d77557ee36e10725e00da6eb745e1561dc4a896b20afaf59b6a52caa7be2a5c187c76721f47feff7f73270b3ba2f757975d0c71c7feea7307ba1a8368d326dccec8d33178a621ae6c4863d54e7cdd92625ee9d97fa93b64a09afa25e66e0e7b57cc465e682042fcd61ed0e71ceaa909e9bce153fbc775eb0c64eca8e703759b340e93a2743cf6c30423ad08a595aa6c7388620ddc7ea09d50b27425eb45a15bd53fdd430dfbc4e07ae692cda353b8509a7c32280855966181e41ac1a176b50b113bd277b49e2914ccea44f7c3076fd750461a742eb0a36c04a16d6c863654a29d34693bccb9cc2fc3dada9dd539b522dff8577f436fe55e9300c4d28da515a9399918669e4ff149bb5aadc46809fe235b43927f74e72d6bede18ae78f288959dec5f39190f56c8501f9132ab13f33ffd4f57340b65320663acb37646ca71e2b3c8688ca2b98f65f512c5be11f6002b117bb7c0461281db25bb73b1a6f59c733677ed3a640c77fbdb27d072fcfd46941d3fada39449d52694ab00479387d4cda886dbc39e6a9504622149312cac43f6917a3d1dca4fc80f860fc6c392d65b421cb8125b528bcec4c92f2b836333b59868751d6f6772ca95cbcbc217dd670e5539c6b4595ce332d0a1645538841c2cbec40cc3c075eab12754481ed0816af876cbc1148a3e9297deb9a8b472a9e86cc84597bd0aa719a56dcf5bd38fb7a4204015b4a068986f3ef7beb463ec37fa331b4a5934042a318179f3b64f6ca654b27f08ea5d986b983a4894c8b682c22a77efa1b7dbc50563160371a01cf1c2ffab888d7871c0d9c0168b3ec51232cf4819c06f33c5fe83c84bd2243acf54e7f3b3c4f286c3a6072729a7cb33526f26050b0e4f70f1485b13abc1a270547aeeef93182be4a6dfa81429dd1dc71bc401c2fd4e43895de8338d11c57013c97fbe5f1a00e31ead44a83c5aaed40c4d1bab50bf71680b55ba55e64218ce68d189fa542b6b152cdaf3e16b9297f7a8ca43e688079cf107dbf405d441f3a6f03ee3a8bb75efffad46fb044556e1699f289939ec11bfaf51f1e25218ac7cd9d0fb033703fe1a2c336bedea6357ad0c3888adc4e33939e7d8d720fdf1d5470600608e03934ae42ef780bf4e0cd2ce48a805cb9d1d4227737a91a07375df0a82bb9f7ef63764a1c2f84b8890922602311f59fa455e41c98812f065f7c815ffbb3b123b1d2092ad59f0ca2fe372dcd797cf0715e577e5e9792baecaf48a0de885e3e1db61be9aa8faaeba1a57b1ec0be143b2ff9ee22f80577328a234da1a8d79c14d629e73a5b116bc15f091c2f306d845c1eb75be8a2b7c9aeee3672a17806a47cde41147d3e5f94535b9b6cdd22d309edbde7730e848aab2c07f3dc682373307f06dcbbb55b023cccb7a5e9ad8b414e0215b8fecb2075a2ccb113adc44dcf12052bb6f852e3e67c1ad447e20dd65ac05645e46fc9c569f39a2d350a4f91368de406614c34872f0ac22241430c276bb5b38e4aa30521ef0f2c7f6a9ff2437065788873685840df89804c0331b5498b3373e495752ffba398002f292360ff56e149f01ae759e577e287b98c526bfd4b42f274a25403bdcf69e04e46164fcd09de72bad6a97e6fed3d6b41a633ec2a2a14c76a405d9ae4c60c673bf8d6db55dbc0e3585ef3a7aad08c943f2624b5549528c040caaa84404f4dcba99b8dda51731a79ab9ef29737ca24040e61a80d1d2b3cca6f3e92c462356fa9d90dd529f84ad8509cabe1a49043d418278936793affe5ecc0230c909a93971a50ef7606058c7ee5fdfba99ed9525f771634d958b18e93e4c0e1c1f068639bd8bf33ac0399bde7d8f6ea27267a1837a3d944ef33cf0cc331236ee1c50398acc90280856247966ea3ed1a0101051cc37edcc3bf0d09dc63ee0b2635835335fea8a66d8ef882e69ae3a654d557d1bfda56ded65f9d30c2de6b263f4d7af86304559798aaa7db5d514ad3aed70346ad4774d42f13423457893a2c8baaccf6a79657737803239456e40bb6cdb7a8b7144bc5f0451b36fe66d06088ad430f3f2c0092f3bba884b008464c7113d3d459e05befc9e1c95b53ce648bd8021d502fca8410b3560287957c695a808b283c530c20104e542b96e80c85084a8acddaa908765f3b742adf51d714bb15a85e68a10554f7246c1ea77389e99d9c59e34b56a3004ead89d5515e560b7225d45e004ffdb7f7732b11ced7a3aba4c06af9acb026453f96b5ad12a7ff8cca0edf233cc83f64636fec2d10a49599845cece52276a7e874928a880ddd1ce28ea503781869cf4fd3f0887b6553433de0c8151e9bc1c55a078ce925f1d3bea7e4cd7273d5a903252796daa5d1129110e09476b3f9f255dac7df742156b399d012ae94e3ebab8028e25ba42d4cafc7c9c8a12cfcb34b4f147aef13a51a8cdfb0c17a6f07298622b4b91f4627a6cff2fabbefc61691a4c3c0a935e031976431411e6282818c3d6c36c6b6e6422cb1a943d49bde260d0260745c09242f81", 0xa89}], 0x3}, 0x20000044) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000180)=""/232, &(0x7f0000000000)=0xe8) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="14f500006000000000000000000000000018f56d852f122263685a923f60c64586b1f72716549ac53566067c9c64419bfeb736d05db6fb5ca2e95502ae85aeb5a4b681a11fbc17fe9db8611bbc5d108d7568b796ce3f67103f7a6377c16363d8ced29909c87d1fa2e5fdc001a21522a77b141366bac05d71e0122bf4b98e7de4f34b194837bfb32c2bf838dc6e6d9857c5a176ccce73d700"/167, 0xa7}], 0x1}, 0x2400c000) 6m11.472346631s ago: executing program 1 (id=1145): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x40, 0xd, 0x3, "60298c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6m11.274607913s ago: executing program 33 (id=1145): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb70000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)={0x40, 0xd, 0x3, "60298c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m43.116435296s ago: executing program 5 (id=2149): r0 = syz_open_dev$dri(&(0x7f00000005c0), 0x4a7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f000001f880)={0x0, &(0x7f0000000280)=[{}], r1, 0x0, '\x00', 0x0, 0x1}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x2000, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10) write(r3, &(0x7f0000000140)="826500000000000000b02872dccae05f3eb6385ef1e710d7", 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x6, 0xfa00, {0x2000000000000004, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={r1}) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x4734}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x400, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80}, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}, 0xfffffc00}, 0xffffffffffffffff, 0x80}}, 0x48) close_range(r2, r2, 0x0) 2m43.090530034s ago: executing program 5 (id=2150): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f00000000c0)={"b5ed26fad65c60ebc476c562aa00a01b117778b7b9433a23a3222285c3e7189d"}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c80071006d00010004060f000006000004090202070700f6fff7ff040433000100fcff05010102020100020206000610c100010401040000ff07000004000000061081020001070000000100000005000000010202003f0d0c01000d0908000600"], 0x76) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 2m43.032826413s ago: executing program 5 (id=2151): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e00180010000000028000001294", 0x2e}], 0x1}, 0x0) (async) request_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, 0x0, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x8, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) (async, rerun: 32) r4 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r6, 0x4068aea3, &(0x7f0000000480)={0xc4, 0x0, 0x3}) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) (async) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async, rerun: 32) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_S_CROP(r7, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x200, 0x0, 0x7}}) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x6, {0x9, 0x2c0, 0x7, 0x4f46}}) syz_usb_connect(0x2, 0x3d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022b000100000000090400000201035100090583130000000000072501"], 0x0) r8 = accept4(r4, 0x0, 0x0, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000007080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a0000000900010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d3000000000000014000100766513fbb96d84c2ef9700000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) (async, rerun: 32) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)={0x34, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@nested={0x4, 0x12a}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0xb, 0x0, 0x1, [@generic="e8"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async, rerun: 32) sendmmsg$alg(r8, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd326", 0x3f}], 0x2}], 0x1, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000e40)=ANY=[@ANYBLOB="40cdcc05000000000000000040f400bec073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="001446000000fd07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) 2m42.868336104s ago: executing program 5 (id=2152): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000040)={0x20, 0x21, 0x1a, {0x1a, 0x23, "e5964763d726dddb747bebc26264bf0ec11eaf295e2af84e"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}, &(0x7f0000000340)=ANY=[@ANYBLOB="0072278899548a218e297f93fe0753f500"/29], &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0xd00}}}}, &(0x7f0000000300)={0x2c, &(0x7f0000000180)={0x40, 0x3, 0x56, "82de4baaeccf77d609e4967cdc66f1712e44b85fd6fa4e07e9b6023976b789d76509be3eb896970961e5664adf3080a752059ef57b2c548fe04021a1082eefa8ce72b233557cd98ca1eaa820158f1f2f4fd5c77f5d43"}, &(0x7f0000000200)={0x0, 0xa, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000280)={0x20, 0x1, 0x2, "17f7"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) 2m42.254738472s ago: executing program 5 (id=2156): openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x30, 0xffffffff, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x1, 0x1007, 0x6, 0xffff, 0xffff, 0xbfffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x0, 0x1, 0x4, 0xed2]}) 2m42.154314178s ago: executing program 5 (id=2158): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_usb_connect(0x4, 0x1cb, &(0x7f0000000ac0)=ANY=[@ANYRESHEX=r2, @ANYRES64=r1, @ANYBLOB="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", @ANYRES8=r2], 0x0) r4 = shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) shmdt(r4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io(r3, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x71e7f739623c9be, 0x3a, 0xb8, {0xb8, 0x1, "3158398dba848e555a431ff59e7cc92addf04310a69b18f35f1d5c93a33a27d57443758189a66bb797fab637749a3377816f022bd902d8c270771a88fe92dfc6b00ac361c21871530643913337c453185c3ce23815803c2c8f823368493899520bd0c4d2839eeb972ec71cd32598d808ca8d586d6fa57913b6d079e0d3c68cf4a212fd37100d5a463665fb985c67b6db0a044d426d23ab704b6056cbe3f12715f80022a1ec8fe86f1939be53a4d63a092d025dbe3eeb"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, &(0x7f00000003c0)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x5, 0x8}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfe, 0x10, 0x8, 0xfb, "b9e5cc1e", "d049c933"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x2, 0xb, 0xfe, 0x0, 0xe3e, 0x1}}}, &(0x7f0000001b00)={0x84, &(0x7f00000004c0)={0x0, 0xd, 0x2b, "7822b8dbc43fb27633acbd4889fc1baad1552c313e52bda9c32bf459778d7226070ba650ec36200a74ae10"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5f}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x7, 0x2}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x100, 0x8}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x81}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0xe9}, &(0x7f0000000880)={0x40, 0xb, 0x2, "59c4"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="a33d95db2f9c"}, &(0x7f0000000940)={0x40, 0x17, 0x6, @broadcast}, 0xfffffffffffffffd, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x34}}) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5001000010001304000000000000f6a066b700010000000000000000000000002001000000000000ddffffff00000000000000074e2000000200002000000000fff1c28d37665b601b2fe061622b0c97d8359fce68c8c6a9cfd4b05f7835fd96011559a27235477beccb813653cf5bccdd8bd0b844de954a1da0e72d323f43fff832ebcf9d6098bc9ae40664870587938944a9d347920d7bc942731a5f68acde7a64cbe35a7759cd30", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB="fe8000000000000000000000000000280000000032000000ac1414fe0000000000000000000000000000000000000000070000000000000000000000000000000400000000000000ffffffffffffffff00000000000000000800000000020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000010000000100000000000000000000000200010100000000000000005f001200726663343330392863636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000098000000400000007ae978427b16add9e6b50c9917d0e0684cb2e600"], 0x150}}, 0x10040804) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000140)={0x25, 0x1, 0x0, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2"}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40000014) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="24005a80200001800500040003000000140003"], 0x40}}, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) write(r11, &(0x7f0000000280), 0x0) ioctl$VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f00000001c0)={0x7, @pix_mp={0x9, 0x2, 0x3432564e, 0x6, 0x1, [{0x1, 0x4}, {0xd3, 0x4}, {0x5, 0x4f13}, {0x5, 0x6}, {0x4, 0x3}, {0x400, 0x80000000}, {0x400, 0x2000002}, {0x5, 0x800000}], 0x9, 0xbe, 0x3}}) 2m26.622870703s ago: executing program 34 (id=2158): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_usb_connect(0x4, 0x1cb, &(0x7f0000000ac0)=ANY=[@ANYRESHEX=r2, @ANYRES64=r1, @ANYBLOB="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", @ANYRES8=r2], 0x0) r4 = shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) shmdt(r4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io(r3, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x71e7f739623c9be, 0x3a, 0xb8, {0xb8, 0x1, "3158398dba848e555a431ff59e7cc92addf04310a69b18f35f1d5c93a33a27d57443758189a66bb797fab637749a3377816f022bd902d8c270771a88fe92dfc6b00ac361c21871530643913337c453185c3ce23815803c2c8f823368493899520bd0c4d2839eeb972ec71cd32598d808ca8d586d6fa57913b6d079e0d3c68cf4a212fd37100d5a463665fb985c67b6db0a044d426d23ab704b6056cbe3f12715f80022a1ec8fe86f1939be53a4d63a092d025dbe3eeb"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, &(0x7f00000003c0)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x5, 0x8}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfe, 0x10, 0x8, 0xfb, "b9e5cc1e", "d049c933"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x2, 0xb, 0xfe, 0x0, 0xe3e, 0x1}}}, &(0x7f0000001b00)={0x84, &(0x7f00000004c0)={0x0, 0xd, 0x2b, "7822b8dbc43fb27633acbd4889fc1baad1552c313e52bda9c32bf459778d7226070ba650ec36200a74ae10"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5f}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x7, 0x2}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x100, 0x8}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x81}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0xe9}, &(0x7f0000000880)={0x40, 0xb, 0x2, "59c4"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="a33d95db2f9c"}, &(0x7f0000000940)={0x40, 0x17, 0x6, @broadcast}, 0xfffffffffffffffd, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x34}}) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5001000010001304000000000000f6a066b700010000000000000000000000002001000000000000ddffffff00000000000000074e2000000200002000000000fff1c28d37665b601b2fe061622b0c97d8359fce68c8c6a9cfd4b05f7835fd96011559a27235477beccb813653cf5bccdd8bd0b844de954a1da0e72d323f43fff832ebcf9d6098bc9ae40664870587938944a9d347920d7bc942731a5f68acde7a64cbe35a7759cd30", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB="fe8000000000000000000000000000280000000032000000ac1414fe0000000000000000000000000000000000000000070000000000000000000000000000000400000000000000ffffffffffffffff00000000000000000800000000020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000010000000100000000000000000000000200010100000000000000005f001200726663343330392863636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000098000000400000007ae978427b16add9e6b50c9917d0e0684cb2e600"], 0x150}}, 0x10040804) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000140)={0x25, 0x1, 0x0, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2"}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140a, 0x1, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x40000014) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="24005a80200001800500040003000000140003"], 0x40}}, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) write(r11, &(0x7f0000000280), 0x0) ioctl$VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f00000001c0)={0x7, @pix_mp={0x9, 0x2, 0x3432564e, 0x6, 0x1, [{0x1, 0x4}, {0xd3, 0x4}, {0x5, 0x4f13}, {0x5, 0x6}, {0x4, 0x3}, {0x400, 0x80000000}, {0x400, 0x2000002}, {0x5, 0x800000}], 0x9, 0xbe, 0x3}}) 2m12.087184222s ago: executing program 3 (id=2270): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f00000001c0)={0x0, 0x21, 0x59, {0x59, 0x21, "a79fd22ca22f1f0f508367a86e21bb6479e180c1b283860bbf49d768ebc17ca84b25722ea3ff78de1347ee13a1c7789e2fdddb11dd0d051b0110b858dcfe5081efda239a3b4a9097b60a7bdd77e9005ff12b506402b3c6"}}, &(0x7f0000000240)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "c76841400a452d3e7c01b0b62f6e1260d391dcbd333c7208068af6231e5dce7ed087846baec425059cb9689ce6e7753d8236db791cb1de5307578c17a662159cffc41b24d6bf9e1f351dacec8758d3779b00f5721911bb2124d9bc79d12908186ab452c18b60062e2f3306e31e00a44e379485d6246f45bceba4d55bde7d29c92a61e5a1ebfc706cef958d543239a02db4693899810656c2f7d312ff422024f882581c5f57b376fb0fab495cf8122922e20bc31d96a0337df2c781d1cd841e21226ac014f11b30775a88583096a68942c3bf69e5"}}, &(0x7f00000000c0)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x1, "c7ee5db6"}, @main=@item_4={0x3, 0x0, 0xc, "d668d670"}, @local=@item_012={0x2, 0x2, 0x1, '\x00}'}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffc, 0x2, 0x1, {0x22, 0x86f}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0xf, 0xe7, "b40f5c8664c1cc7237fd5ac7243c37bd1693a32cb54ae57ede9538493788600501be492f4ab23fc6a77e1915a16b14c2c399d66565a8faa840c95f6097d9b988126e1b8bcbc3ff671ea9ec0c8f6097914db661d91536ed1933d80f6d4e1f8ca58d807df0224a2035cbbd55076aede8b76b67a41f6ff8411b9e43aa506b64e891b814397f531ba499f7f60efa75bbad801cd34cb6a4e57980f86b8ab7e1cb21cb339ef4c9f0eb4158c0ea068934358bec4f3167ed8855ba583206dceefa11f0d0fee17f8fb4552d5d208c8ccb731140e6c9bce4ce321b56d600ed2496c5aaa7a8533656b84f0733"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000540)={0x20, 0x1, 0x37, "3f9fb850cc1c7885996e35d4de2f6af2f8f6569eb8dee6fe1395a222fd4edc60fc50120f37d52a5839cdcfeb7f2b05ccd45901307494c7"}, 0xfffffffffffffffd}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x48840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 2m10.641083346s ago: executing program 3 (id=2274): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xc8, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x59) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0xfffffffe, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) syz_open_dev$vim2m(&(0x7f0000000040), 0xc8, 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x59) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0xfffffffe, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) (async) 2m10.460370611s ago: executing program 3 (id=2275): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x6, 0xfa00, {0x2000000000000004, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) close_range(r0, r0, 0x4000000000000000) 2m10.429569631s ago: executing program 3 (id=2276): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x6, 0xfa00, {0x2000000000000004, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) close_range(r0, r0, 0x0) 2m10.356759596s ago: executing program 3 (id=2277): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setreuid(0x0, 0xee00) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) tkill(r1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c811}, 0x4004090) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x20040815) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000000)='./file1/file3\x00', 0x1c8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r6) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}}, 0x4000000) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x5, 0x4002) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x52ad161fca77d7ee, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) 2m9.4244724s ago: executing program 3 (id=2278): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x101803, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0xffffffff, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x1, 0x1007, 0x6, 0xffff, 0xffff, 0xbfffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x0, 0x1, 0x4, 0xed2]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r1, 0x0, 0x1) ioctl$BLKFRAGET(r1, 0x1265, &(0x7f0000000000)) 1m54.131426592s ago: executing program 35 (id=2278): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x101803, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0xffffffff, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x1, 0x1007, 0x6, 0xffff, 0xffff, 0xbfffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x0, 0x1, 0x4, 0xed2]}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r1, 0x0, 0x1) ioctl$BLKFRAGET(r1, 0x1265, &(0x7f0000000000)) 28.496155034s ago: executing program 6 (id=2654): sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffffc, 0x0, 0x3}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x8a, &(0x7f0000000680)) r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008001e00fff3c00e", 0x24}], 0x1}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000100)={0x40, 0x5, 0xef, {0xef, 0x1, "b13cd3833e16d29cd14e9668893887766c234fc63093b73e04660303ff518a5d8988ff2cbf6c6a54d30c9bd812634fb0a9b64b457c79d3e5fbf38d26ec858a6d65d41ebae3d00b054bea4bf31a975406f9ab706fccda3ed0ba6db09816885cdbe4bb24682cc3e9e0c07203377ce41cc1f27aa273e857606edcd932f1dcab6f9b0f8088fb220df7eed98f826614d80d3819624da74479a03f1ed70134e8166d9997fadd838e8dc44c937a30115e094a95f6ff0273cb9d3a82ec4bed685c27024141976fb0aefb5b765a215e6e93606d903f5473c0554e37cd8946e3582ba3e29e990240b6bb10c05cbe7b144857"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x1c, &(0x7f00000002c0)={0x20, 0x31, 0xc9, "915f353376ebef4955464d8e5f186954e71a19beaa4fd43502558f68b53c24d8235712986a0d64fe8384b748abbe41200644ab2f01d7ac470256b37c12a7a6fa373ed4975eab8ecc0e2261874fbf53973d5741aca581c7ee9e31b375c1adeac30f6e6d1673104526bbbf86ab6f2058482c036266b25f8b3d85f71cbb9e9a135d5940a73fb0fc98d6f5874680236fbbd545b7004379eab1e6b5874bd0c74b9ba38b5d7ca1def1add6e603739e731fb190931437d3fbd6b49708a8c2ef3cfb2a2a5bce1ed671426aff00"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xc}}) 27.910225021s ago: executing program 6 (id=2656): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'os2.', '}/@\'\x9c/!!+\'&\x00'}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 26.684765839s ago: executing program 6 (id=2663): openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0xffffffff, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x1, 0x1007, 0x6, 0xffff, 0xffff, 0xbfffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x5000000, 0x1, 0x4, 0xed2]}) 26.531773111s ago: executing program 6 (id=2665): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="002106000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) 25.09817043s ago: executing program 6 (id=2667): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110500000000feffffff05000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0xe00c050) r2 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) 23.607973584s ago: executing program 6 (id=2670): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d564b"]) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x3ff, 0x6}, {0x6}, {0x5d1d}, {0xe2, 0x8001}, {0x1b3a, 0x2}, {0xffc6, 0x7}]}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000080)) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x8001, 0x0, 0x1, 0x0, 0x40, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x1, 0x5], 0x8000000, 0x49340}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x4) syz_usb_connect(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000e24b420df2001006d970102030109025100010000100009047b000076a98700052406000105330002000d240f0101000000217c10000106241a40000005240100090524ab0f"], 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x20080c4, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x80004, 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r9) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="150626bd7000ffdbdf252a00000008002f00000000000a0001007770616e3000000036b7db86c2704663de284cf7da5a8d419dea331b6d62e68d62b69d4b3e1fdb16495f3eb104fc044cc5a36d929ad41ffafbaf8ffc38e04ab251bd1fb6d1fb5e0e2cfeee160e54fd9912e6e4d87217cedb337fd220d2b31b673920bb349c66a24a61b2c7058406f41998dfd3b5b5e0c60cb44773c902c007ce3d93856e679fb9df1b4fae2fc6339a6e607eae94960eb51178a7a28a40d9b9d0772479220a42c26e105785eca5ea0c13911ff89a4d120867953b53fe41c78f8a478f185fda9fd0"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0xc040) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01002b9d7000fbdbdf252100200008000300", @ANYRES32=r13, @ANYBLOB="3c002c8008000000fdffffff0800"], 0x74}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x22040810}, 0x4000801) 22.010703773s ago: executing program 7 (id=2676): syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40040904000702b95fc3030905880320000602040905830200", @ANYRESOCT], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)=@getsadinfo={0x3dc, 0x23, 0x2, 0x70bd2a, 0x25dfdbff, 0x0, [@coaddr={0x14, 0xe, @in=@local}, @algo_comp={0xa0, 0x3, {{'lzjh\x00'}, 0x2c0, "952c3b454ada2f2e7f182a80714284bcf8d1a9c0323364e846225a67cb04d8d07694e65dc06486ccc2d0e7770a52d26a7df13e255c5786b2732b4187221866c0d58e7a1a9928f704b3a3e7ab1961014e4839b20d5dff4727"}}, @algo_crypt={0x49, 0x2, {{'lrw(serpent)\x00'}, 0x8, 'm'}}, @tfcpad={0x8, 0x16, 0x7}, @sa={0xe4, 0x6, {{@in6=@private2, @in=@empty, 0x4e23, 0x9, 0x4e24, 0x0, 0xa, 0x20, 0x80, 0x89, r1, r2}, {@in=@multicast1, 0x4d2, 0x2b}, @in6=@mcast1, {0xef, 0x1, 0x8000000000000001, 0x1, 0x5, 0x8f01, 0xfffffffffffffffe, 0x3}, {0x8, 0x40, 0x695, 0xfffffffffffffff7}, {0x6, 0x1, 0xe}, 0x70bd28, 0x3500, 0xa, 0x2, 0x6, 0x1}}, @coaddr={0x14, 0xe, @in=@rand_addr=0x64010101}, @algo_crypt={0x109, 0x2, {{'ecb-aes-aesni\x00'}, 0x608, "b21441b20a99cbb629534acb7db8e09921f9862cf647060cc53aa5a0f8b6d4d1c23d8164c37cefe0ebf54b3458475351fc440608e2990ac269e7f402a681373de73fad235be40fd446f978df926d91039aedf40ddb4e58bf984afae48173777d0ba204cce75c9e27b0b1407acf107849509e753c13c596548d1cb0610ff0a44e959dee8e4f030e95934756938ad3d39021109a70479bf645675e011fac3a480837297b6da515327fb047d89f304236868c7aa794c63532da63ac0279ce91d3de47"}}, @replay_thresh={0x8, 0xb, 0x5}, @algo_auth={0x98, 0x1, {{'cmac-aes-neon\x00'}, 0x280, "3d60653e662305de0e39c8700d233444a080f4ef21ac668c47180fd996997840abfc6262fccc9ac4b4359c763174fc62cf2bbabaad0801a05aa8ae20bbc1831c0b8c446f3223c44c276cd806c34f61a0"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd28, 0x70bd27, 0x70bd2a, 0x70bd29, 0x6}}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x2c044880}, 0x48044) syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40040904000702b95fc3030905880320000602040905830200", @ANYRESOCT], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00'}) (async) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180)) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)=@getsadinfo={0x3dc, 0x23, 0x2, 0x70bd2a, 0x25dfdbff, 0x0, [@coaddr={0x14, 0xe, @in=@local}, @algo_comp={0xa0, 0x3, {{'lzjh\x00'}, 0x2c0, "952c3b454ada2f2e7f182a80714284bcf8d1a9c0323364e846225a67cb04d8d07694e65dc06486ccc2d0e7770a52d26a7df13e255c5786b2732b4187221866c0d58e7a1a9928f704b3a3e7ab1961014e4839b20d5dff4727"}}, @algo_crypt={0x49, 0x2, {{'lrw(serpent)\x00'}, 0x8, 'm'}}, @tfcpad={0x8, 0x16, 0x7}, @sa={0xe4, 0x6, {{@in6=@private2, @in=@empty, 0x4e23, 0x9, 0x4e24, 0x0, 0xa, 0x20, 0x80, 0x89, r1, r2}, {@in=@multicast1, 0x4d2, 0x2b}, @in6=@mcast1, {0xef, 0x1, 0x8000000000000001, 0x1, 0x5, 0x8f01, 0xfffffffffffffffe, 0x3}, {0x8, 0x40, 0x695, 0xfffffffffffffff7}, {0x6, 0x1, 0xe}, 0x70bd28, 0x3500, 0xa, 0x2, 0x6, 0x1}}, @coaddr={0x14, 0xe, @in=@rand_addr=0x64010101}, @algo_crypt={0x109, 0x2, {{'ecb-aes-aesni\x00'}, 0x608, "b21441b20a99cbb629534acb7db8e09921f9862cf647060cc53aa5a0f8b6d4d1c23d8164c37cefe0ebf54b3458475351fc440608e2990ac269e7f402a681373de73fad235be40fd446f978df926d91039aedf40ddb4e58bf984afae48173777d0ba204cce75c9e27b0b1407acf107849509e753c13c596548d1cb0610ff0a44e959dee8e4f030e95934756938ad3d39021109a70479bf645675e011fac3a480837297b6da515327fb047d89f304236868c7aa794c63532da63ac0279ce91d3de47"}}, @replay_thresh={0x8, 0xb, 0x5}, @algo_auth={0x98, 0x1, {{'cmac-aes-neon\x00'}, 0x280, "3d60653e662305de0e39c8700d233444a080f4ef21ac668c47180fd996997840abfc6262fccc9ac4b4359c763174fc62cf2bbabaad0801a05aa8ae20bbc1831c0b8c446f3223c44c276cd806c34f61a0"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd28, 0x70bd27, 0x70bd2a, 0x70bd29, 0x6}}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x2c044880}, 0x48044) (async) 18.913011929s ago: executing program 7 (id=2681): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r2, 0xb97534d5fe9704cf, 0x70bd29, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5422, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r4 = getpid() capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x4, 0x5}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x20, 0x200000}) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0x20000006}) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r7, &(0x7f0000000280)={r5, r6, 0x4}) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r7, @ANYRESHEX, @ANYRESOCT=r4, @ANYRES32=r6], 0x0) 15.775997216s ago: executing program 7 (id=2688): sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffffc, 0x0, 0x3}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000280)={0x14, &(0x7f0000000100)={0x40, 0x5, 0xef, {0xef, 0x1, "b13cd3833e16d29cd14e9668893887766c234fc63093b73e04660303ff518a5d8988ff2cbf6c6a54d30c9bd812634fb0a9b64b457c79d3e5fbf38d26ec858a6d65d41ebae3d00b054bea4bf31a975406f9ab706fccda3ed0ba6db09816885cdbe4bb24682cc3e9e0c07203377ce41cc1f27aa273e857606edcd932f1dcab6f9b0f8088fb220df7eed98f826614d80d3819624da74479a03f1ed70134e8166d9997fadd838e8dc44c937a30115e094a95f6ff0273cb9d3a82ec4bed685c27024141976fb0aefb5b765a215e6e93606d903f5473c0554e37cd8946e3582ba3e29e990240b6bb10c05cbe7b144857"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x1c, &(0x7f00000002c0)={0x20, 0x31, 0xc9, "915f353376ebef4955464d8e5f186954e71a19beaa4fd43502558f68b53c24d8235712986a0d64fe8384b748abbe41200644ab2f01d7ac470256b37c12a7a6fa373ed4975eab8ecc0e2261874fbf53973d5741aca581c7ee9e31b375c1adeac30f6e6d1673104526bbbf86ab6f2058482c036266b25f8b3d85f71cbb9e9a135d5940a73fb0fc98d6f5874680236fbbd545b7004379eab1e6b5874bd0c74b9ba38b5d7ca1def1add6e603739e731fb190931437d3fbd6b49708a8c2ef3cfb2a2a5bce1ed671426aff00"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xc}}) 12.712694213s ago: executing program 7 (id=2694): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xd, 0xcc, 0x20, 0x545, 0x8333, 0x8f86, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x4, 0x1a0, 0x20, [{{0x9, 0x4, 0xfa, 0x10, 0x0, 0x3e, 0xb2, 0x2b, 0x8}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0xf3, &(0x7f0000000580)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, 0x0) 9.62367252s ago: executing program 7 (id=2703): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000000101010000000000000000020000020400164000e000000108000200e00000010c00b6bc200345000000000000400000000200"/66], 0x48}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r2, 0x6f000) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)={0x4, 0x0, [{0xd, 0x0, 0x7bf0660d79e35f4f, 0x5, 0xfff, 0x3, 0x2}, {0x80000008, 0x9, 0x7, 0x5, 0x1000, 0xfffffffd, 0x1}, {0xc0000001, 0xac22, 0x3, 0x9, 0x0, 0xfffff000, 0x3}, {0x0, 0xc, 0x3, 0xfffffffe, 0x2, 0x0, 0x6}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x4, 0x93, 0x2, 0x1, 0x2, @private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x80, 0x20, 0x6, 0x400}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000980)={0x2c4, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x140, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa5, 0x4, "3ae4a2b2e43be3fbef381f6faba432eeb398849ef1bc5ac0b691346da6434e50f32fb03444e1057adee17d1cddab3a4dc1c7ca481deab0dd5139d544da0c15a2e1ece3168683412caf1fb6f0a70aaa213fc8f075ce1b7bdbaf4c09bbadc7b64b9035f5a57b9e8258ef4011a2bd8cebc127e5053943328a05d363df6c405ccc1ebb13cfdfbe5888dc8810f358c60ff0170dc7517645675907ff4d190c2329e0b7cb"}, @ETHTOOL_A_BITSET_VALUE={0x92, 0x4, "f81d161e2fd505183556ea391dbb45d12eb6159bf38f1cb7847fc50aadff91bc7e152d6a9af778c50b5d28b9b6841ce9ff0293fba794c863d8525ce8dbe6109b6a0ec791b13d1734025ef6dda5bcb4b4c124110bcb864aef3200096fb4edb1d1f9d83d4cd3cae431623ba568a6ef037a0b307ac6e3c3c6df9aea8e67bac7767d10ea2d78c887aa210b27bbb3e1f1"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xe8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xe4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'w,/$)\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '(\\,}:^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe19f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe5f7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.:%]\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8a7}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x800}, 0x4008011) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}]}, 0x54}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup(r9) cachestat(r7, &(0x7f0000000440)={0xfffffffffffffffb, 0x5}, &(0x7f0000000480), 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="3b00000000000001800000c0"]) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) ioctl$FS_IOC_GETFSSYSFSPATH(r10, 0x80811501, &(0x7f0000000540)={0x80}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x64, r11, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xba6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x90d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x135}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5c9}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x719}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x24004000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) 9.511015768s ago: executing program 7 (id=2704): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f00000001c0)={0x0, 0x21, 0x59, {0x59, 0x21, "a79fd22ca22f1f0f508367a86e21bb6479e180c1b283860bbf49d768ebc17ca84b25722ea3ff78de1347ee13a1c7789e2fdddb11dd0d051b0110b858dcfe5081efda239a3b4a9097b60a7bdd77e9005ff12b506402b3c6"}}, &(0x7f0000000240)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "c76841400a452d3e7c01b0b62f6e1260d391dcbd333c7208068af6231e5dce7ed087846baec425059cb9689ce6e7753d8236db791cb1de5307578c17a662159cffc41b24d6bf9e1f351dacec8758d3779b00f5721911bb2124d9bc79d12908186ab452c18b60062e2f3306e31e00a44e379485d6246f45bceba4d55bde7d29c92a61e5a1ebfc706cef958d543239a02db4693899810656c2f7d312ff422024f882581c5f57b376fb0fab495cf8122922e20bc31d96a0337df2c781d1cd841e21226ac014f11b30775a88583096a68942c3bf69e5"}}, &(0x7f00000000c0)={0x0, 0x22, 0xd, {[@global=@item_4={0x3, 0x1, 0x1, "c7ee5db6"}, @main=@item_4={0x3, 0x0, 0xc, "d668d670"}, @local=@item_012={0x2, 0x2, 0x1, '\x00}'}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffc, 0x2, 0x1, {0x22, 0x86f}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0xf, 0xe7, "b40f5c8664c1cc7237fd5ac7243c37bd1693a32cb54ae57ede9538493788600501be492f4ab23fc6a77e1915a16b14c2c399d66565a8faa840c95f6097d9b988126e1b8bcbc3ff671ea9ec0c8f6097914db661d91536ed1933d80f6d4e1f8ca58d807df0224a2035cbbd55076aede8b76b67a41f6ff8411b9e43aa506b64e891b814397f531ba499f7f60efa75bbad801cd34cb6a4e57980f86b8ab7e1cb21cb339ef4c9f0eb4158c0ea068934358bec4f3167ed8855ba583206dceefa11f0d0fee17f8fb4552d5d208c8ccb731140e6c9bce4ce321b56d600ed2496c5aaa7a8533656b84f0733"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000540)={0x20, 0x1, 0x37, "3f9fb850cc1c7885996e35d4de2f6af2f8f6569eb8dee6fe1395a222fd4edc60fc50120f37d52a5839cdcfeb7f2b05ccd45901307494c7"}, 0xfffffffffffffffd}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x48840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 8.470686961s ago: executing program 36 (id=2670): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d564b"]) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x3ff, 0x6}, {0x6}, {0x5d1d}, {0xe2, 0x8001}, {0x1b3a, 0x2}, {0xffc6, 0x7}]}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000080)) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x8001, 0x0, 0x1, 0x0, 0x40, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x1, 0x5], 0x8000000, 0x49340}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x4) syz_usb_connect(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000e24b420df2001006d970102030109025100010000100009047b000076a98700052406000105330002000d240f0101000000217c10000106241a40000005240100090524ab0f"], 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x20080c4, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x80004, 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r9) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="150626bd7000ffdbdf252a00000008002f00000000000a0001007770616e3000000036b7db86c2704663de284cf7da5a8d419dea331b6d62e68d62b69d4b3e1fdb16495f3eb104fc044cc5a36d929ad41ffafbaf8ffc38e04ab251bd1fb6d1fb5e0e2cfeee160e54fd9912e6e4d87217cedb337fd220d2b31b673920bb349c66a24a61b2c7058406f41998dfd3b5b5e0c60cb44773c902c007ce3d93856e679fb9df1b4fae2fc6339a6e607eae94960eb51178a7a28a40d9b9d0772479220a42c26e105785eca5ea0c13911ff89a4d120867953b53fe41c78f8a478f185fda9fd0"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0xc040) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01002b9d7000fbdbdf252100200008000300", @ANYRES32=r13, @ANYBLOB="3c002c8008000000fdffffff0800"], 0x74}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x22040810}, 0x4000801) 7.740074683s ago: executing program 4 (id=2710): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x20200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r1, r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 6.793108726s ago: executing program 4 (id=2712): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000001000000000000000f0ffffffffffffff10"]) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 6.596891528s ago: executing program 4 (id=2713): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'nr0\x00', {0x2}, 0x5c0}) r1 = socket$kcm(0x29, 0x5, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) sendmsg$kcm(r1, &(0x7f0000001900)={&(0x7f0000000040)=@nfc={0x27, r2, 0x1}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)="c00d50f61aa7db35798769e73e072ba4dbfa9e07bd63b7aea6a83f562218e67f393383c66d9a0d970edd2d074c50272ddf1968cc52195b0904dad9e405686e6ce88224876dc2890583d263126d716c0f2f9f7a8079e3c93f28c15c9b90b72c4546380cfee98c868a03ad9e85d41182db4003f7eda0efbc3f5c2e9377420c5ed9cd930605295fa69ca432b26a200afb93", 0x90}, {&(0x7f00000001c0)="e781c3d16160e9ef78563bd34d0d935013b1fa91f23b3846ac47b2d254659058adf8124c0a0ec2f4d513db5509aad5c5829d19cd08b2ef973a0cdf9572eeaffff8eeb3527fa0bc65d21ee3d2dd21e1455ae2b1f46245ac6d207c095a3ac169f8d575d4c45a394838c03555d78de48e561938f6e64bcd7c5e752ce63f5e84120d8730b09700e62b393440f5c892c18c208d211e0ed034648f3019ee16c6634899fd7414170b5436471a18fa1f303bee488cc0590141a8ee86b5c22f204bed715ac66b6c1c26e3a32f4afcee0d032b", 0xce}, {&(0x7f00000002c0)="71f6aeba45a0783dac52f9a6482050c451204778fc4f3312a70e2fa8ac9ec474a6f60bbfde24d9448fe453c22225b820bbe27560b7e5096c5b83b7a71f40468335d7c2d0682077b6927685fecfc1", 0x4e}, {&(0x7f0000000340)="a5a135071c9b8b1f81b97cb17ffd20761a63fbc46ee7aeef8b9ebfb2fbd5fe9b377654321799e3e548ebe2fa155e56973a781a8bd36d9ed69548bfa14ab36ec115043ef72df48d9690d395ff057f4c953c1346df09d8138bb186c4f1a5f8fd1195a023bf8105ad2037c13d47173f8fd3160eec2bba3d15891a9af960d2e08eca5c8e7bb3be52b407127a6cca86ab39ff60662f7b7f799439", 0x98}, {&(0x7f0000000400)="d60a48faa24a8ad010931ee51ad6bfe1593d68746e47a195ad4d8a6d512792e8fdc96125b228a5556384f69a", 0x2c}, {&(0x7f0000000440)="33dacbe6be5f5fb856562a577f63ce3b0fc1146a178e01001099b809dfacfe513b4447ad25e345e7f9321bf877dec892e6479ac0bf66ff17ea92c5bc086dbfbccb36dbbf7d851e2fa5e2a6a1709ca25df980a96c9d0f325abf2a58e62aba4e656b53b900fe5d42d41b87e482b9ede0dc1a76c8fde019689cd8037a4bc4daaae35552f15e656852073f763dd93c3f69e5382657b3785fe1462209d4dfeceee0ba3199b7279617de9e521256bc128db5a9b0ed470f2d432696aea9908c5cf85bf8bcdaa62dc240bfbfd42721dfcfbd624c3bd6", 0xd2}, {&(0x7f0000000540)="0ec3bb9f78b33fafe911bcfabb2d2380f18996574c6f094bcb5a3443f466c499", 0x20}], 0x7, &(0x7f0000000600)=[{0x88, 0x114, 0x4, "1e568243c0f8d9b9f3b510896c5a357c73c85ad2776a0c8d9d456f7982fe76fd0aa02b709042a9fe206ecb0ecd493ead9f0e1891006bcb9c6165f465ebcbbd40aee932b615b95c8a0a02695b676504eb87a0119ecd962cf516b9487ecb4a0998441e12941bf139e4049c760f0d1188910bdabce1d3"}, {0x1010, 0x84, 0x44, "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"}, {0xf0, 0x113, 0x5, "d85fca96e0815886398622e67eae0af4da7ec6551065cd3252baaacb4bbe9bf31069abb070457f3c43182ec5c9d169d105fc36c8ffec8049a121b436ba3615e024f5c5fecd2b2780593adfa2d336c1121a727e4a10349b99ad1605b503718e866a0e7d262a1d910f117636e5295f325d6fab659368f5e2bfb3c0d7201291d27e8ba2b83e086633ffa2ab9e6b30c6161be03c2974340c85c0e1b1e00b1099c115411547914249612a6808ce1be9c7430df20b4af0f3a2ed2484c1a4fdfd6f12c8a2709ab85846cefb92113984545b99f7a6de49e68891e6714e930e19656370d5"}, {0x30, 0x22, 0xa, "77a55f837ec541d9f55b93eec686aef1ca822d2cba36e67187df5b68cba0"}, {0x90, 0x0, 0x9, "92f988d12bc2e244765b1a24a6a2df099517c3c0b071dffee43bc9a54090b3f3c79ab4fb44e56ac226d9664cdcd84e10c280459aa493e3d9ec6b08eda4444b6675817990aaac7f3107d4523383974a5f3dfcc359225e59c4f8721e348b4b777e55d8dcb95e4111e9119c373ac837764f7d6589479651abca0016e23ca3c6"}, {0xb8, 0x29, 0x3, "6495e24702f6bfe66e9cb1483b35e05e278c8a58dfcbf80ab1a092640e0e39b8526c7fb9232f3932f5a1f075fe9f2ed253d7ccd13d14e01769fd9e7b78773ae1717779d72d20fa07b49955b581391ecfd87c81395d6543f803939ff7f99ee783017a776c471639e0beac043370f59ca6862058eb4e1e0b61740193e3fae309f740e87341a247a5896f43874c2ecde8372ef72fd98edc456194e6a697401c0f59f8f080"}], 0x1300}, 0x2040000) 6.340247374s ago: executing program 4 (id=2714): sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffffc, 0x0, 0x3}, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000280)={0x14, &(0x7f0000000100)={0x40, 0x5, 0xef, {0xef, 0x1, "b13cd3833e16d29cd14e9668893887766c234fc63093b73e04660303ff518a5d8988ff2cbf6c6a54d30c9bd812634fb0a9b64b457c79d3e5fbf38d26ec858a6d65d41ebae3d00b054bea4bf31a975406f9ab706fccda3ed0ba6db09816885cdbe4bb24682cc3e9e0c07203377ce41cc1f27aa273e857606edcd932f1dcab6f9b0f8088fb220df7eed98f826614d80d3819624da74479a03f1ed70134e8166d9997fadd838e8dc44c937a30115e094a95f6ff0273cb9d3a82ec4bed685c27024141976fb0aefb5b765a215e6e93606d903f5473c0554e37cd8946e3582ba3e29e990240b6bb10c05cbe7b144857"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x1c, &(0x7f00000002c0)={0x20, 0x31, 0xc9, "915f353376ebef4955464d8e5f186954e71a19beaa4fd43502558f68b53c24d8235712986a0d64fe8384b748abbe41200644ab2f01d7ac470256b37c12a7a6fa373ed4975eab8ecc0e2261874fbf53973d5741aca581c7ee9e31b375c1adeac30f6e6d1673104526bbbf86ab6f2058482c036266b25f8b3d85f71cbb9e9a135d5940a73fb0fc98d6f5874680236fbbd545b7004379eab1e6b5874bd0c74b9ba38b5d7ca1def1add6e603739e731fb190931437d3fbd6b49708a8c2ef3cfb2a2a5bce1ed671426aff00"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xc}}) 5.697610286s ago: executing program 0 (id=2715): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') ioctl$KVM_RUN(r0, 0xae80, 0x0) getdents64(r0, &(0x7f0000001fc0)=""/4079, 0xfef) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x20, 0x5, 0x2c, {0x2c, 0x2, "672039a31cda2d6573727a8cd32651318aa8ec7b55b3e4ebcb018440901bde25dce9e311dcacb55b2778"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) futex(&(0x7f0000000000), 0xc, 0x1, 0x0, &(0x7f00000000c0)=0x2, 0x2) getdents64(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) getdents64(r0, &(0x7f0000001fc0)=""/4079, 0xfef) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x20, 0x5, 0x2c, {0x2c, 0x2, "672039a31cda2d6573727a8cd32651318aa8ec7b55b3e4ebcb018440901bde25dce9e311dcacb55b2778"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) futex(&(0x7f0000000000), 0xc, 0x1, 0x0, &(0x7f00000000c0)=0x2, 0x2) (async) getdents64(r0, 0x0, 0x0) (async) 4.286231849s ago: executing program 0 (id=2716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88c}, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f00000016c0)=ANY=[@ANYBLOB="1201000092e59e208c106901b9750102030109022b0001000010000904db00020dfa000309058000000000fc000705db224370bf09050b02"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@local, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, 0xfffffffffffffffa}}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000fe80000000000000000000000000000e4e200000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100000000000000000000000000000000000000000000000000000000000000d309000000000000ffffffff000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000fdffffffb56b6e000000000000000000112b56b44bf90888415904d2618b751d76bed5d9142f19f9023f21fb8a0efd8acecd101002499fec8b62fc1eaa6a65cc22c848ed66cac1dec201feae4a27be86ee3bca56efd40450faaf406b06615e"], 0xb8}}, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x28, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0xae, [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x1, 0x1, 0x57, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x416}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6c, 0x3, 0x8}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x3, 0x2, 0x9, 0x40, 0x14}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x2, 0xc, 0xfb04}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x820}}, {0x76, &(0x7f0000000100)=@string={0x76, 0x3, "a956399bf5749c3af56b36964cfa98d49b5a4d3efe5aecfd595f1b0aac50aa60bcc38c7a582d375886ef407bb2cf9af9adb5b784cb7a003f720c1334282918fe0c7a031e9dfe43c506e353e04a1a498a3ec9a1fd4a23250d51798d6211648096ca34a7fb5fe9b4ca873920ed40353b80e56adab4"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x455}}]}) 3.511807769s ago: executing program 4 (id=2717): openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0xffffffff, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x1, 0x1007, 0x6, 0xffff, 0xffff, 0xbfffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x0, 0x1, 0x14, 0xed2]}) 3.26826605s ago: executing program 4 (id=2718): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x28) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x4}, 0x6) write$bt_hci(r2, &(0x7f0000000040)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x3}}}, 0x6) r3 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="4005"], 0xdd12}], 0x1}, 0x20040051) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4040, 0xd) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, &(0x7f0000000c00)={0x14, &(0x7f0000000a40)={0x40, 0x7, 0xd1, {0xd1, 0x31, "6b111c495af9d6f5ae49d26481c3ce1c9918c175eb6216b04adef87ff473bb474eb6a5ce145fff6cfcd60d3fb6bf5932d41a4d45f13d4d012d56a90487e4879dc079a6858023af329e29cdea221aad09041b57a02e4491f23d3c64547408d7acb2908f327c70ca39398532a38c0033df4d2584a57c35be368c88135748f473bef2004cf4e0b8d46cd91ead1e23571c1ad083cc842ca17dcf96e77b2231a697c2b0c4b7491668e0c65654779ef2665f671bc372628150cb3b15271d162419ac2808dd0d9b10bfb587dd56caa661971e"}}, &(0x7f0000000b40)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "a5750a3e5dbdef88c08db310761e7d269356bf326ddd9ef5bb2eb8d127e73379d4aa54d58f34af6b2ec11a7d63f031941aa607e8fea59cb1fc9af9cb46b880a09c7e1158ded0389943466e3ba727d81a5cc97c90e987104f9d07a7e8e2b0833dd7cb557a2b6f06f0aff4ac535e12f4321cd7b736571181dd3139abe46fa3f0c0d32f990b8b05eb841aebea72f5204fe02bcdb4f12bb3b29b60db70dfdb5be7f9741031b02c"}}}, &(0x7f0000000e40)={0x34, &(0x7f0000000c40)={0x20, 0x0, 0xaa, "1a992c900fe78b2862078b5c9f29e462e7922c95de2f214a890d4bff47f27e92fec95a8551b310124a2065d2005f00e0aa6b1c6970569af20af0ecb6918a01adc7d96127082d9881022c211a96621d56ee25ec75b0f31b040ad3f7edd4a9f2ffc6af95c4dba7800d4ba9dae3759a43ebafeff578dfd0fac0f689de0aa384116f79787d6ae722434f1058643b58f8e334d23e6b7bcf327b868eee3158c7e6e0791bd87da29d81f6dee09c"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000d80)={0x20, 0x0, 0x26, {0x24, "237b0712137eb7a4475318329d96dc54a4b0ada1632450d95a5e7d34059694b51517f58b"}}, &(0x7f0000000dc0)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000e00)={0x20, 0x0, 0x1, 0x80}}) syz_usb_control_io$printer(r5, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000200)={0x20, 0x28}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f91100"}) syz_usb_control_io(r5, &(0x7f0000000480)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x6e, {0x6e, 0x2, "9d720612ac4fa545653812a81dc5e37824b9d674f54462e79c8f199f2d09681dfed0ef270dc25ff23da84be9d4190ed7484727e847eabfb9096dde4b1a5b93de86ba74e44fb8cdc4017223b37281f945502eee1e45d325a442d6773ab621af44dfd2f84df99bc0f042a8b939"}}, &(0x7f0000000140)={0x0, 0x3, 0x3c, @string={0x3c, 0x3, "ea004de107a0ce36c36c838c2640ed2761b3981495f67cbb7d1f22e3fb00bce7383fc7b3d112cd81dc2f9cdf27130d5e9caf812cb2b608149291"}}, &(0x7f0000000280)={0x0, 0xf, 0x1b4, {0x5, 0xf, 0x1b4, 0x6, [@generic={0xb0, 0x10, 0x2, "65361a09480861193450c7ad94855da65e981f62994f7d2f54f9d1848a4f099c18513926a59dd8665bc8bbebee0ee5ed788aa16b611f890e5bcb6b981212387b5d0349b9d2f552c0bf951f15a9291332ccb5e92e2e6fbadb0af7c7e815f82a69106f372246dbb31f6576db85ccde9a45eb43abf1591a2dbe9d360af7e53ae14c6a7060859f2a70c1c340daf6a527ed335a7aa05490662529c860b1ae8043e5b41deeb951d7a83a4f2820499fc6"}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0xa1ef, 0x0, 0x5, [0x90, 0x7f7f3f, 0xc0c0, 0x3f00, 0x1e]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x40, 0x5, 0x2}, @generic={0xc7, 0x10, 0x2, "f6bf66dbf7477bb300ff1054bd51e5d91be046bfb06f6a0d2e6299aae2d22a2670691e988be1f0d96509d0e9cc0e07ec113fc8136ef7fadb906f2236dea994ff0bae1c1f0a1579ee4666e4f261088053e126635226aaae4887c92ea6775dced338a6c72c75454124bb13eea074f2cdeddbbf4ac36dfd24b492ef345a6253f26480c60033a04502753b71a5d407b99e27c3a8f8666db21f472838025473ac5a698f9610ca60c0f6cac4f2445675dcf0f7f390f97d158bbf4c50e7da17bb0b13154872afda"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x5, 0x2}, @ptm_cap={0x3}]}}, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x19, 0x60, 0x0, 0x1b, "9b62cd98", "7bbf7330"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x0, 0x9, 0xa, 0xaa, 0x9, 0xfffc}}}, &(0x7f0000000980)={0x84, &(0x7f0000000540)={0x40, 0x16, 0x28, "082fa857694194c1e5f3824ae52c877370044e31d77109e5daf60387d333df6e93cc699fddf0822f"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x100, 0x1}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000700)={0x40, 0xb, 0x2, 'Z)'}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x756c}, &(0x7f0000000780)={0x40, 0x13, 0x6}, &(0x7f0000000800)={0x40, 0x17, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000840)={0x40, 0x19, 0x2, "561d"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x1000}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x2}}) r6 = socket$kcm(0x10, 0x400000002, 0x0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) pidfd_send_signal(r7, 0xc, &(0x7f0000000200)={0x7, 0x8, 0x3}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000e80)='/proc/keys\x00', 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='hpfs\x00', 0x0, 0x0) 2.434958039s ago: executing program 0 (id=2719): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x20200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r1, r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.872841636s ago: executing program 8 (id=2705): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={0x14, 0x26, 0x229, 0x0, 0x56, {0x2}}, 0x14}}, 0x0) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff}, 0x80) r3 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.504111562s ago: executing program 0 (id=2720): lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10096, &(0x7f0000000200)={[{@memory_hugetlb_accounting}, {@memory_hugetlb_accounting}], [{@flag='rw'}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@uid_gt={'uid>', r0}}]}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001700010300000000fbdbdf2552"], 0x64}], 0x1}, 0x840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x36) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x200000c0}, 0x90) 1.337200251s ago: executing program 0 (id=2721): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0xffffffff, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x5, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_usb_connect(0x5, 0x3b, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xd6, 0x23, 0xd3, 0x8, 0x13d8, 0x1, 0x5a0b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x3, 0x7, 0x40, 0x8, [{{0x9, 0x4, 0xad, 0x8, 0x0, 0xea, 0x7a, 0xb0, 0x80, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x7a9, 0x4}}]}}]}}]}}, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$unix(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x11) syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYRES64=r1], 0x0) 0s ago: executing program 0 (id=2722): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xcc, 0xd, 0xcc, 0x20, 0x545, 0x8333, 0x8f86, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x4, 0x1a0, 0x20, [{{0x9, 0x4, 0xfa, 0x10, 0x0, 0x3e, 0xb2, 0x2b, 0x8}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0xf3, &(0x7f0000000580)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, 0x0) kernel console output (not intermixed with test programs): =3 [ 727.397146][ T5924] usb 1-1: Product: syz [ 727.401329][ T5924] usb 1-1: Manufacturer: syz [ 727.406178][ T5924] usb 1-1: SerialNumber: syz [ 727.497010][ T5860] usb 7-1: Using ep0 maxpacket: 16 [ 727.504610][ T5860] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 727.514165][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.524833][ T5860] usb 7-1: config 0 descriptor?? [ 727.533657][ T5860] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 727.620603][T14157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.630298][T14157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.801335][ T5924] usb 1-1: USB disconnect, device number 91 [ 727.930104][T14163] comedi comedi0: Minor 3 specified more than once! [ 728.048199][ T30] audit: type=1326 audit(1757479479.982:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14164 comm="syz.7.2401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faae038ebe9 code=0x0 [ 728.070130][ C0] vkms_vblank_simulate: vblank timer overrun [ 728.803071][ T5860] gspca_sonixj: reg_w1 err -71 [ 728.826852][ T5860] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 728.837500][ T5860] usb 7-1: USB disconnect, device number 20 [ 728.951083][T14174] FAULT_INJECTION: forcing a failure. [ 728.951083][T14174] name failslab, interval 1, probability 0, space 0, times 0 [ 728.964664][T14174] CPU: 0 UID: 0 PID: 14174 Comm: syz.0.2404 Not tainted syzkaller #0 PREEMPT(full) [ 728.964695][T14174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 728.964708][T14174] Call Trace: [ 728.964717][T14174] [ 728.964726][T14174] dump_stack_lvl+0x189/0x250 [ 728.964765][T14174] ? __pfx____ratelimit+0x10/0x10 [ 728.964794][T14174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 728.964824][T14174] ? __pfx__printk+0x10/0x10 [ 728.964860][T14174] ? __pfx___might_resched+0x10/0x10 [ 728.964898][T14174] should_fail_ex+0x414/0x560 [ 728.964927][T14174] should_failslab+0xa8/0x100 [ 728.964953][T14174] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 728.964974][T14174] ? bonding_attach+0x44e/0xe70 [ 728.965005][T14174] ? bonding_attach+0x44e/0xe70 [ 728.965034][T14174] krealloc_node_align_noprof+0x140/0x390 [ 728.965061][T14174] bonding_attach+0x44e/0xe70 [ 728.965108][T14174] ? __pfx_bonding_attach+0x10/0x10 [ 728.965136][T14174] ? __pfx___mutex_lock+0x10/0x10 [ 728.965195][T14174] comedi_device_attach+0x51f/0x720 [ 728.965229][T14174] comedi_unlocked_ioctl+0x5ff/0x1020 [ 728.965255][T14174] ? kasan_quarantine_put+0xdd/0x220 [ 728.965285][T14174] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 728.965382][T14174] ? __fget_files+0x2a/0x420 [ 728.965413][T14174] ? __fget_files+0x3a0/0x420 [ 728.965436][T14174] ? __fget_files+0x2a/0x420 [ 728.965465][T14174] ? bpf_lsm_file_ioctl+0x9/0x20 [ 728.965493][T14174] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 728.965522][T14174] __se_sys_ioctl+0xfc/0x170 [ 728.965547][T14174] do_syscall_64+0xfa/0xfa0 [ 728.965572][T14174] ? lockdep_hardirqs_on+0x9c/0x150 [ 728.965617][T14174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.965636][T14174] ? clear_bhb_loop+0x60/0xb0 [ 728.965661][T14174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.965680][T14174] RIP: 0033:0x7f3ffa78ebe9 [ 728.965700][T14174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.965717][T14174] RSP: 002b:00007f3ffb538038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 728.965750][T14174] RAX: ffffffffffffffda RBX: 00007f3ffa9c5fa0 RCX: 00007f3ffa78ebe9 [ 728.965764][T14174] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 728.965778][T14174] RBP: 00007f3ffb538090 R08: 0000000000000000 R09: 0000000000000000 [ 728.965791][T14174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 728.965803][T14174] R13: 00007f3ffa9c6038 R14: 00007f3ffa9c5fa0 R15: 00007fff25f6bc48 [ 728.965840][T14174] [ 728.965891][T14174] comedi comedi0: Could not allocate memory. Out of memory? [ 729.318240][ T94] usb 5-1: USB disconnect, device number 55 [ 729.425969][T14179] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2407'. [ 729.431128][T14181] fuse: Unknown parameter 'user_i00000000000000000000' [ 729.564568][T14185] comedi comedi0: Minor 3 specified more than once! [ 729.776738][ T5924] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 729.876669][ T94] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 729.926753][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 729.934599][ T5924] usb 5-1: config 8 has an invalid interface number: 250 but max is 0 [ 729.944242][ T5924] usb 5-1: config 8 has no interface number 0 [ 729.951473][ T5924] usb 5-1: config 8 interface 250 has no altsetting 0 [ 729.961783][ T5924] usb 5-1: New USB device found, idVendor=0545, idProduct=8333, bcdDevice=8f.86 [ 729.971999][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.980557][ T5924] usb 5-1: Product: syz [ 729.984746][ T5924] usb 5-1: Manufacturer: syz [ 729.989496][ T5924] usb 5-1: SerialNumber: syz [ 730.040790][ T94] usb 7-1: unable to get BOS descriptor or descriptor too short [ 730.051721][ T94] usb 7-1: config 9 has an invalid interface number: 166 but max is 1 [ 730.061479][ T94] usb 7-1: config 9 has an invalid interface number: 224 but max is 1 [ 730.070108][ T94] usb 7-1: config 9 has no interface number 0 [ 730.076227][ T94] usb 7-1: config 9 has no interface number 1 [ 730.082507][ T94] usb 7-1: config 9 interface 166 has no altsetting 0 [ 730.089394][ T94] usb 7-1: config 9 interface 224 has no altsetting 0 [ 730.103568][ T94] usb 7-1: string descriptor 0 read error: -22 [ 730.110223][ T94] usb 7-1: New USB device found, idVendor=06f8, idProduct=3002, bcdDevice=d8.0a [ 730.122976][ T94] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.360464][T14082] usb 7-1: USB disconnect, device number 21 [ 730.375807][T13412] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 730.409849][T14183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.419636][T14183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.436063][ T5924] gspca_main: tv8532-2.14.0 probing 0545:8333 [ 730.512657][ T5924] usb 5-1: USB disconnect, device number 56 [ 731.124390][T14202] comedi comedi0: Minor 3 specified more than once! [ 731.177303][T14206] fuse: Unknown parameter 'user_i00000000000000000000' [ 731.337166][T14082] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 731.373330][T14212] FAULT_INJECTION: forcing a failure. [ 731.373330][T14212] name failslab, interval 1, probability 0, space 0, times 0 [ 731.386799][ T5924] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 731.392681][T14212] CPU: 0 UID: 0 PID: 14212 Comm: syz.0.2421 Not tainted syzkaller #0 PREEMPT(full) [ 731.392709][T14212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 731.392720][T14212] Call Trace: [ 731.392731][T14212] [ 731.392740][T14212] dump_stack_lvl+0x189/0x250 [ 731.392771][T14212] ? __pfx____ratelimit+0x10/0x10 [ 731.392796][T14212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 731.392821][T14212] ? __pfx__printk+0x10/0x10 [ 731.392850][T14212] ? __pfx___might_resched+0x10/0x10 [ 731.392871][T14212] ? fs_reclaim_acquire+0x7d/0x100 [ 731.392896][T14212] should_fail_ex+0x414/0x560 [ 731.392922][T14212] should_failslab+0xa8/0x100 [ 731.392945][T14212] __kmalloc_cache_noprof+0x6f/0x6f0 [ 731.392965][T14212] ? bonding_attach+0x336/0xe70 [ 731.392996][T14212] bonding_attach+0x336/0xe70 [ 731.393038][T14212] ? __pfx_bonding_attach+0x10/0x10 [ 731.393062][T14212] ? __pfx___mutex_lock+0x10/0x10 [ 731.393108][T14212] comedi_device_attach+0x51f/0x720 [ 731.393137][T14212] comedi_unlocked_ioctl+0x5ff/0x1020 [ 731.393161][T14212] ? kasan_quarantine_put+0xdd/0x220 [ 731.393187][T14212] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 731.393272][T14212] ? __fget_files+0x2a/0x420 [ 731.393300][T14212] ? __fget_files+0x3a0/0x420 [ 731.393320][T14212] ? __fget_files+0x2a/0x420 [ 731.393345][T14212] ? bpf_lsm_file_ioctl+0x9/0x20 [ 731.393369][T14212] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 731.393394][T14212] __se_sys_ioctl+0xfc/0x170 [ 731.393417][T14212] do_syscall_64+0xfa/0xfa0 [ 731.393439][T14212] ? lockdep_hardirqs_on+0x9c/0x150 [ 731.393461][T14212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.393478][T14212] ? clear_bhb_loop+0x60/0xb0 [ 731.393500][T14212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.393516][T14212] RIP: 0033:0x7f3ffa78ebe9 [ 731.393534][T14212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.393548][T14212] RSP: 002b:00007f3ffb538038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 731.393569][T14212] RAX: ffffffffffffffda RBX: 00007f3ffa9c5fa0 RCX: 00007f3ffa78ebe9 [ 731.393582][T14212] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 731.393593][T14212] RBP: 00007f3ffb538090 R08: 0000000000000000 R09: 0000000000000000 [ 731.393604][T14212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 731.393614][T14212] R13: 00007f3ffa9c6038 R14: 00007f3ffa9c5fa0 R15: 00007fff25f6bc48 [ 731.393646][T14212] [ 731.706715][T14082] usb 5-1: device descriptor read/64, error -71 [ 731.796671][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 731.803535][ T5924] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 731.811841][ T5924] usb 7-1: config 0 has no interface number 0 [ 731.820698][ T5924] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 731.830025][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.838544][ T5924] usb 7-1: Product: syz [ 731.843540][ T5924] usb 7-1: Manufacturer: syz [ 731.851742][ T5924] usb 7-1: SerialNumber: syz [ 731.861475][ T5924] usb 7-1: config 0 descriptor?? [ 731.872592][ T5924] smsc95xx v2.0.0 [ 731.946679][T14082] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 732.066920][ T5980] usb 1-1: new low-speed USB device number 92 using dummy_hcd [ 732.081105][T14082] usb 5-1: device descriptor read/64, error -71 [ 732.197267][T14082] usb usb5-port1: attempt power cycle [ 732.213028][ T5980] usb 1-1: device descriptor read/64, error -71 [ 732.279048][ T5924] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 732.290528][ T5924] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 732.456710][ T5980] usb 1-1: new low-speed USB device number 93 using dummy_hcd [ 732.502193][ T5924] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 732.513722][ T5924] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 732.536645][T14082] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 732.558247][T14082] usb 5-1: device descriptor read/8, error -71 [ 732.586662][ T5980] usb 1-1: device descriptor read/64, error -71 [ 732.698265][ T5980] usb usb1-port1: attempt power cycle [ 732.796804][T14082] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 732.818595][T14082] usb 5-1: device descriptor read/8, error -71 [ 732.930086][T14082] usb usb5-port1: unable to enumerate USB device [ 733.046781][ T5980] usb 1-1: new low-speed USB device number 94 using dummy_hcd [ 733.067456][ T5980] usb 1-1: device descriptor read/8, error -71 [ 733.306775][ T5980] usb 1-1: new low-speed USB device number 95 using dummy_hcd [ 733.327531][ T5980] usb 1-1: device descriptor read/8, error -71 [ 733.439141][ T5980] usb usb1-port1: unable to enumerate USB device [ 734.243514][ T5924] usb 7-1: USB disconnect, device number 22 [ 734.361940][T13412] Bluetooth: hci5: Malformed LE Event: 0x0d [ 734.523904][T14226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2427'. [ 734.539311][T14082] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 734.606826][ T5924] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 734.711064][T14082] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.722377][T14082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 734.730201][T14082] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 734.741452][T14082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.753260][T14082] usb 5-1: config 0 descriptor?? [ 734.777957][ T5924] usb 7-1: Using ep0 maxpacket: 16 [ 734.785092][ T5924] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 734.794693][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.805012][ T5924] usb 7-1: config 0 descriptor?? [ 734.815648][ T5924] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 734.916770][ T5860] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 735.017933][T14220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.027059][T14220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.076873][ T5860] usb 1-1: Using ep0 maxpacket: 32 [ 735.084536][ T5860] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 735.093439][ T5860] usb 1-1: config 0 has no interface number 0 [ 735.100061][ T5860] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 735.110452][ T5860] usb 1-1: config 0 interface 196 has no altsetting 0 [ 735.122559][ T5860] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 735.131933][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.140467][ T5860] usb 1-1: Product: syz [ 735.145955][ T5860] usb 1-1: Manufacturer: syz [ 735.150929][ T5860] usb 1-1: SerialNumber: syz [ 735.159185][ T5860] usb 1-1: config 0 descriptor?? [ 735.165029][T14227] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 735.175965][T14082] usbhid 5-1:0.0: can't add hid device: -71 [ 735.196823][T14082] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 735.208898][T14082] usb 5-1: USB disconnect, device number 61 [ 735.389446][ T5860] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 735.398685][ T5860] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 735.447033][ T5860] usb 1-1: USB disconnect, device number 96 [ 735.454615][ T5924] gspca_sonixj: reg_r err -32 [ 735.461355][ T5924] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 735.727221][T14231] fuse: Unknown parameter 'user_id00000000000000000000' [ 735.784335][T14233] comedi comedi2: Minor 3 specified more than once! [ 736.080806][ T5860] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 736.257014][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 736.263693][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.276440][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.286414][ T5860] usb 5-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 736.295827][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.307721][ T5860] usb 5-1: config 0 descriptor?? [ 736.466917][ T5924] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 736.639760][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 736.648236][ T5924] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 736.657342][ T5924] usb 1-1: config 0 has no interface number 0 [ 736.668490][ T5924] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 736.679259][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.689472][ T5924] usb 1-1: Product: syz [ 736.693785][ T5924] usb 1-1: Manufacturer: syz [ 736.698916][ T5924] usb 1-1: SerialNumber: syz [ 736.713586][ T5924] usb 1-1: config 0 descriptor?? [ 736.719484][T13412] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 736.720652][T14236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.739684][ T5924] smsc95xx v2.0.0 [ 736.743358][T14236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.767508][ T5860] usbhid 5-1:0.0: can't add hid device: -71 [ 736.773751][ T5860] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 736.786932][ T5860] usb 5-1: USB disconnect, device number 62 [ 737.145706][ T5924] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 737.156842][ T5924] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 737.341739][ T9] usb 7-1: USB disconnect, device number 23 [ 737.369504][ T5924] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 737.399558][ T5924] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 737.412278][T14250] comedi comedi0: Minor 3 specified more than once! [ 737.627309][T14258] fuse: Unknown parameter 'user_id00000000000000000000' [ 737.714805][T14260] FAULT_INJECTION: forcing a failure. [ 737.714805][T14260] name failslab, interval 1, probability 0, space 0, times 0 [ 737.739307][T14260] CPU: 0 UID: 0 PID: 14260 Comm: syz.6.2439 Not tainted syzkaller #0 PREEMPT(full) [ 737.739349][T14260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 737.739361][T14260] Call Trace: [ 737.739370][T14260] [ 737.739380][T14260] dump_stack_lvl+0x189/0x250 [ 737.739416][T14260] ? __pfx____ratelimit+0x10/0x10 [ 737.739444][T14260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 737.739473][T14260] ? __pfx__printk+0x10/0x10 [ 737.739505][T14260] ? __pfx___might_resched+0x10/0x10 [ 737.739527][T14260] ? fs_reclaim_acquire+0x7d/0x100 [ 737.739555][T14260] should_fail_ex+0x414/0x560 [ 737.739585][T14260] should_failslab+0xa8/0x100 [ 737.739611][T14260] __kmalloc_cache_noprof+0x6f/0x6f0 [ 737.739632][T14260] ? bonding_attach+0x336/0xe70 [ 737.739668][T14260] bonding_attach+0x336/0xe70 [ 737.739713][T14260] ? __pfx_bonding_attach+0x10/0x10 [ 737.739740][T14260] ? __pfx___mutex_lock+0x10/0x10 [ 737.739790][T14260] comedi_device_attach+0x51f/0x720 [ 737.739822][T14260] comedi_unlocked_ioctl+0x5ff/0x1020 [ 737.739849][T14260] ? kasan_quarantine_put+0xdd/0x220 [ 737.739876][T14260] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 737.739969][T14260] ? __fget_files+0x2a/0x420 [ 737.740000][T14260] ? __fget_files+0x3a0/0x420 [ 737.740022][T14260] ? __fget_files+0x2a/0x420 [ 737.740050][T14260] ? bpf_lsm_file_ioctl+0x9/0x20 [ 737.740078][T14260] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 737.740108][T14260] __se_sys_ioctl+0xfc/0x170 [ 737.740133][T14260] do_syscall_64+0xfa/0xfa0 [ 737.740157][T14260] ? lockdep_hardirqs_on+0x9c/0x150 [ 737.740184][T14260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.740203][T14260] ? clear_bhb_loop+0x60/0xb0 [ 737.740228][T14260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.740247][T14260] RIP: 0033:0x7fdab418ebe9 [ 737.740276][T14260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.740293][T14260] RSP: 002b:00007fdab4fb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 737.740315][T14260] RAX: ffffffffffffffda RBX: 00007fdab43c5fa0 RCX: 00007fdab418ebe9 [ 737.740331][T14260] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 737.740344][T14260] RBP: 00007fdab4fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 737.740357][T14260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 737.740368][T14260] R13: 00007fdab43c6038 R14: 00007fdab43c5fa0 R15: 00007ffcd327c7e8 [ 737.740405][T14260] [ 737.997893][ T5924] usb 5-1: new low-speed USB device number 63 using dummy_hcd [ 738.156758][ T5924] usb 5-1: device descriptor read/64, error -71 [ 738.299630][ T94] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 738.396929][ T5924] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 738.468725][ T94] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 738.478506][ T94] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.489968][ T94] usb 7-1: config 0 descriptor?? [ 738.527185][ T5924] usb 5-1: device descriptor read/64, error -71 [ 738.641203][ T5924] usb usb5-port1: attempt power cycle [ 738.700683][ T94] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 738.986967][ T5924] usb 5-1: new low-speed USB device number 65 using dummy_hcd [ 739.011641][ T5924] usb 5-1: device descriptor read/8, error -71 [ 739.256646][ T5924] usb 5-1: new low-speed USB device number 66 using dummy_hcd [ 739.277426][ T5924] usb 5-1: device descriptor read/8, error -71 [ 739.334900][ T5860] usb 1-1: USB disconnect, device number 97 [ 739.405800][ T5924] usb usb5-port1: unable to enumerate USB device [ 739.513160][T14281] fuse: Unknown parameter 'user_id00000000000000000000' [ 739.696914][ T5860] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 739.837094][ T5860] usb 1-1: device descriptor read/64, error -71 [ 740.076675][ T5860] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 740.217924][ T5860] usb 1-1: device descriptor read/64, error -71 [ 740.327396][ T5860] usb usb1-port1: attempt power cycle [ 740.666867][ T5860] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 740.689147][ T5860] usb 1-1: device descriptor read/8, error -71 [ 740.926699][ T5860] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 740.948143][ T5860] usb 1-1: device descriptor read/8, error -71 [ 740.987031][ T94] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 740.997366][ T9] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 741.005123][ T94] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 741.017719][ T94] asix 7-1:0.0: probe with driver asix failed with error -71 [ 741.028183][ T94] usb 7-1: USB disconnect, device number 24 [ 741.057619][ T5860] usb usb1-port1: unable to enumerate USB device [ 741.168874][T14037] block nbd2: Possible stuck request ffff888025600000: control (read@0,1024B). Runtime 90 seconds [ 741.179997][T13756] block nbd0: Possible stuck request ffff888025585240: control (read@0,1024B). Runtime 90 seconds [ 741.180131][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 741.192144][T13756] block nbd0: Possible stuck request ffff888025585400: control (read@1024,1024B). Runtime 90 seconds [ 741.197076][T14037] block nbd2: Possible stuck request ffff8880256001c0: control (read@1024,1024B). Runtime 90 seconds [ 741.207786][T13756] block nbd0: Possible stuck request ffff8880255855c0: control (read@2048,1024B). Runtime 90 seconds [ 741.223263][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 741.230399][T13756] block nbd0: Possible stuck request ffff888025585780: control (read@3072,1024B). Runtime 90 seconds [ 741.239794][T14037] block nbd2: Possible stuck request ffff888025600380: control (read@2048,1024B). Runtime 90 seconds [ 741.263058][T14037] block nbd2: Possible stuck request ffff888025600540: control (read@3072,1024B). Runtime 90 seconds [ 741.274404][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.284619][ T9] usb 5-1: config 0 descriptor?? [ 741.297198][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 741.818521][T13762] block nbd3: Possible stuck request ffff8880256be000: control (read@0,1024B). Runtime 90 seconds [ 741.829450][ T8163] block nbd7: Possible stuck request ffff8880257f5080: control (read@0,1024B). Runtime 90 seconds [ 741.841067][T13756] block nbd6: Possible stuck request ffff888025777000: control (read@0,1024B). Runtime 90 seconds [ 741.852278][T13756] block nbd6: Possible stuck request ffff8880257771c0: control (read@1024,1024B). Runtime 90 seconds [ 741.863444][T13762] block nbd3: Possible stuck request ffff8880256be1c0: control (read@1024,1024B). Runtime 90 seconds [ 741.875313][ T8163] block nbd7: Possible stuck request ffff8880257f5240: control (read@1024,1024B). Runtime 90 seconds [ 741.887726][ T8163] block nbd7: Possible stuck request ffff8880257f5400: control (read@2048,1024B). Runtime 90 seconds [ 741.899079][T13756] block nbd6: Possible stuck request ffff888025777380: control (read@2048,1024B). Runtime 90 seconds [ 741.902589][T14287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.919363][T13762] block nbd3: Possible stuck request ffff8880256be380: control (read@2048,1024B). Runtime 90 seconds [ 741.928577][T14287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.931162][T13756] block nbd7: Possible stuck request ffff8880257f55c0: control (read@3072,1024B). Runtime 90 seconds [ 741.949346][ T8163] block nbd6: Possible stuck request ffff888025777540: control (read@3072,1024B). Runtime 90 seconds [ 741.960577][ T984] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 741.971048][T13756] block nbd3: Possible stuck request ffff8880256be540: control (read@3072,1024B). Runtime 90 seconds [ 741.986122][T14287] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2449'. [ 742.126747][ T984] usb 7-1: Using ep0 maxpacket: 32 [ 742.134604][ T984] usb 7-1: config 4 has an invalid interface number: 128 but max is 0 [ 742.143479][ T984] usb 7-1: config 4 has no interface number 0 [ 742.150154][ T984] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.161672][ T984] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.171898][ T984] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 742.181339][ T984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.198784][ T984] hub 7-1:4.128: USB hub found [ 742.400926][ T984] hub 7-1:4.128: 2 ports detected [ 742.407097][ T984] hub 7-1:4.128: Using single TT (err -22) [ 742.448695][T13756] block nbd1: Possible stuck request ffff8880255d0000: control (read@0,1024B). Runtime 90 seconds [ 742.460443][T13756] block nbd1: Possible stuck request ffff8880255d01c0: control (read@1024,1024B). Runtime 90 seconds [ 742.470755][T14293] comedi comedi0: Minor 3 specified more than once! [ 742.472109][T13756] block nbd1: Possible stuck request ffff8880255d0380: control (read@2048,1024B). Runtime 90 seconds [ 742.495660][T13756] block nbd1: Possible stuck request ffff8880255d0540: control (read@3072,1024B). Runtime 90 seconds [ 742.613041][ T9] gspca_sonixj: reg_w1 err -71 [ 742.638519][T14291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.671983][ T9] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 742.681078][T14291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.698161][ T9] usb 5-1: USB disconnect, device number 67 [ 742.706770][ T984] hub 7-1:4.128: hub_hub_status failed (err = -71) [ 742.742897][ T984] hub 7-1:4.128: config failed, can't get hub status (err -71) [ 742.782721][ T984] usb 7-1: USB disconnect, device number 25 [ 742.856895][ T5980] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 743.016712][ T5980] usb 1-1: Using ep0 maxpacket: 32 [ 743.023579][ T5980] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 743.033725][ T5980] usb 1-1: config 0 has no interface number 0 [ 743.042522][ T5980] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 743.051969][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.060194][ T5980] usb 1-1: Product: syz [ 743.064392][ T5980] usb 1-1: Manufacturer: syz [ 743.069186][ T5980] usb 1-1: SerialNumber: syz [ 743.076153][ T5980] usb 1-1: config 0 descriptor?? [ 743.088109][ T56] block nbd10: Possible stuck request ffff888025cb5080: control (read@0,1024B). Runtime 90 seconds [ 743.088253][T13756] block nbd4: Possible stuck request ffff8880256ee000: control (read@0,1024B). Runtime 90 seconds [ 743.099263][T13763] block nbd9: Possible stuck request ffff888025c77000: control (read@0,1024B). Runtime 90 seconds [ 743.110427][T13756] block nbd4: Possible stuck request ffff8880256ee1c0: control (read@1024,1024B). Runtime 90 seconds [ 743.121631][ T39] block nbd11: Possible stuck request ffff888025d25080: control (read@0,1024B). Runtime 90 seconds [ 743.133993][T13756] block nbd4: Possible stuck request ffff8880256ee380: control (read@2048,1024B). Runtime 90 seconds [ 743.144442][ T11] block nbd8: Possible stuck request ffff888025c25080: control (read@0,1024B). Runtime 90 seconds [ 743.155459][T13756] block nbd4: Possible stuck request ffff8880256ee540: control (read@3072,1024B). Runtime 90 seconds [ 743.165831][ T56] block nbd10: Possible stuck request ffff888025cb5240: control (read@1024,1024B). Runtime 90 seconds [ 743.165863][ T56] block nbd10: Possible stuck request ffff888025cb5400: control (read@2048,1024B). Runtime 90 seconds [ 743.165890][ T56] block nbd10: Possible stuck request ffff888025cb55c0: control (read@3072,1024B). Runtime 90 seconds [ 743.165950][T14037] block nbd5: Possible stuck request ffff888025717700: control (read@0,1024B). Runtime 90 seconds [ 743.221687][T13763] block nbd9: Possible stuck request ffff888025c771c0: control (read@1024,1024B). Runtime 90 seconds [ 743.233954][ T39] block nbd11: Possible stuck request ffff888025d25240: control (read@1024,1024B). Runtime 90 seconds [ 743.245256][ T11] block nbd8: Possible stuck request ffff888025c25400: control (read@2048,1024B). Runtime 90 seconds [ 743.256736][T13763] block nbd9: Possible stuck request ffff888025c77380: control (read@2048,1024B). Runtime 90 seconds [ 743.267923][ T39] block nbd11: Possible stuck request ffff888025d25400: control (read@2048,1024B). Runtime 90 seconds [ 743.279091][ T11] block nbd8: Possible stuck request ffff888025c255c0: control (read@3072,1024B). Runtime 90 seconds [ 743.290115][T13763] block nbd9: Possible stuck request ffff888025c77540: control (read@3072,1024B). Runtime 90 seconds [ 743.296129][T14302] fuse: Bad value for 'fd' [ 743.301128][ T39] block nbd11: Possible stuck request ffff888025d255c0: control (read@3072,1024B). Runtime 90 seconds [ 743.301218][ T11] block nbd8: Possible stuck request ffff888025c25240: control (read@1024,1024B). Runtime 90 seconds [ 743.301296][T14037] block nbd5: Possible stuck request ffff8880257178c0: control (read@1024,1024B). Runtime 90 seconds [ 743.301325][T14037] block nbd5: Possible stuck request ffff888025717a80: control (read@2048,1024B). Runtime 90 seconds [ 743.301373][T14037] block nbd5: Possible stuck request ffff888025717c40: control (read@3072,1024B). Runtime 90 seconds [ 743.317273][ T5980] smsc95xx v2.0.0 [ 743.462869][T14306] FAULT_INJECTION: forcing a failure. [ 743.462869][T14306] name failslab, interval 1, probability 0, space 0, times 0 [ 743.476147][T14306] CPU: 1 UID: 0 PID: 14306 Comm: syz.4.2458 Not tainted syzkaller #0 PREEMPT(full) [ 743.476175][T14306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 743.476186][T14306] Call Trace: [ 743.476196][T14306] [ 743.476204][T14306] dump_stack_lvl+0x189/0x250 [ 743.476239][T14306] ? __pfx____ratelimit+0x10/0x10 [ 743.476264][T14306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 743.476302][T14306] ? __pfx__printk+0x10/0x10 [ 743.476325][T14306] ? __pfx___might_resched+0x10/0x10 [ 743.476339][T14306] ? fs_reclaim_acquire+0x7d/0x100 [ 743.476356][T14306] should_fail_ex+0x414/0x560 [ 743.476379][T14306] should_failslab+0xa8/0x100 [ 743.476405][T14306] __kmalloc_cache_noprof+0x6f/0x6f0 [ 743.476425][T14306] ? bonding_attach+0x336/0xe70 [ 743.476457][T14306] bonding_attach+0x336/0xe70 [ 743.476495][T14306] ? __pfx_bonding_attach+0x10/0x10 [ 743.476522][T14306] ? __pfx___mutex_lock+0x10/0x10 [ 743.476572][T14306] comedi_device_attach+0x51f/0x720 [ 743.476605][T14306] comedi_unlocked_ioctl+0x5ff/0x1020 [ 743.476632][T14306] ? kasan_quarantine_put+0xdd/0x220 [ 743.476662][T14306] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 743.476756][T14306] ? __fget_files+0x2a/0x420 [ 743.476787][T14306] ? __fget_files+0x3a0/0x420 [ 743.476810][T14306] ? __fget_files+0x2a/0x420 [ 743.476839][T14306] ? bpf_lsm_file_ioctl+0x9/0x20 [ 743.476867][T14306] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 743.476896][T14306] __se_sys_ioctl+0xfc/0x170 [ 743.476921][T14306] do_syscall_64+0xfa/0xfa0 [ 743.476947][T14306] ? lockdep_hardirqs_on+0x9c/0x150 [ 743.476973][T14306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.476992][T14306] ? clear_bhb_loop+0x60/0xb0 [ 743.477018][T14306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.477038][T14306] RIP: 0033:0x7fcb6918ebe9 [ 743.477056][T14306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.477074][T14306] RSP: 002b:00007fcb69fee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 743.477097][T14306] RAX: ffffffffffffffda RBX: 00007fcb693c5fa0 RCX: 00007fcb6918ebe9 [ 743.477112][T14306] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 743.477125][T14306] RBP: 00007fcb69fee090 R08: 0000000000000000 R09: 0000000000000000 [ 743.477137][T14306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 743.477150][T14306] R13: 00007fcb693c6038 R14: 00007fcb693c5fa0 R15: 00007ffc6d12d068 [ 743.477187][T14306] [ 743.731156][ T5980] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 743.764777][ T5980] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 743.967503][ T5924] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 743.988887][ T5980] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 744.000785][ T5980] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 744.106727][ T5924] usb 7-1: device descriptor read/64, error -71 [ 744.116776][ T984] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 744.246634][ T984] usb 5-1: device descriptor read/64, error -71 [ 744.358966][ T5924] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 744.516770][ T984] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 744.524701][ T5924] usb 7-1: device descriptor read/64, error -71 [ 744.639385][ T5924] usb usb7-port1: attempt power cycle [ 744.656679][ T984] usb 5-1: device descriptor read/64, error -71 [ 744.769718][ T984] usb usb5-port1: attempt power cycle [ 744.986797][ T5924] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 745.012130][ T5924] usb 7-1: device descriptor read/8, error -71 [ 745.107331][ T984] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 745.128797][ T984] usb 5-1: device descriptor read/8, error -71 [ 745.256913][ T5924] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 745.280986][ T5924] usb 7-1: device descriptor read/8, error -71 [ 745.366737][ T984] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 745.388467][ T984] usb 5-1: device descriptor read/8, error -71 [ 745.399477][ T5924] usb usb7-port1: unable to enumerate USB device [ 745.510366][ T984] usb usb5-port1: unable to enumerate USB device [ 745.642802][ T5980] usb 1-1: USB disconnect, device number 102 [ 745.867862][T14316] vxcan1: entered allmulticast mode [ 745.932972][T14315] comedi comedi0: Minor 3 specified more than once! [ 746.445904][T14324] fuse: Bad value for 'fd' [ 746.932819][T14335] comedi comedi0: Minor 3 specified more than once! [ 746.933023][ T9] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 747.136687][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 747.144531][ T9] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 747.152823][ T9] usb 7-1: config 0 has no interface number 0 [ 747.161993][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 747.171904][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.180224][ T9] usb 7-1: Product: syz [ 747.184536][ T9] usb 7-1: Manufacturer: syz [ 747.189300][ T9] usb 7-1: SerialNumber: syz [ 747.196059][ T9] usb 7-1: config 0 descriptor?? [ 747.205132][ T9] smsc95xx v2.0.0 [ 747.296686][ T94] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 747.446633][ T94] usb 5-1: Using ep0 maxpacket: 16 [ 747.454969][ T94] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 747.465351][ T94] usb 5-1: config 1 interface 0 has no altsetting 0 [ 747.475570][ T94] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 747.484813][ T94] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.492930][ T94] usb 5-1: Product: 쬩捋打坎씶貰럔셍ᆉ裑鱝藡飫䩃暭ᒡ톊﯉곙訕蟀ӡ㲺쬌栆남꟮경㡾料먼꠻⋃鼢刞핔丕浣ᘫ鮋븙띶쾬ᘚ䒂ㆻ繹컂㑣缺滃㣘锬ꤪ括๨䇰⨐듀ൺ纹襦륛ౢ劮龹燅幙㇍㉀ꔔ軋窷Ƶꇦ⺾땮㟾堠⣓栵膇帳籖잁䵏櫂ꜽ籽ᣮ㺙엓ꕹ᧋ᗅ陫苣쬕끷粽선竄왔㋼ [ 747.527702][ T94] usb 5-1: Manufacturer: 珒ꈥ켾ừ∩︵ч鄯 [ 747.535161][ T94] usb 5-1: SerialNumber: syz [ 747.546213][T14337] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 747.570466][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.577288][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.608137][ T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 747.619766][ T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 747.830518][ T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 747.843603][ T9] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 747.892829][ T94] usb 5-1: USB disconnect, device number 72 [ 747.997953][T14343] FAULT_INJECTION: forcing a failure. [ 747.997953][T14343] name failslab, interval 1, probability 0, space 0, times 0 [ 748.011258][T14343] CPU: 0 UID: 0 PID: 14343 Comm: syz.4.2473 Not tainted syzkaller #0 PREEMPT(full) [ 748.011283][T14343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 748.011294][T14343] Call Trace: [ 748.011304][T14343] [ 748.011313][T14343] dump_stack_lvl+0x189/0x250 [ 748.011347][T14343] ? __pfx____ratelimit+0x10/0x10 [ 748.011371][T14343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 748.011398][T14343] ? __pfx__printk+0x10/0x10 [ 748.011427][T14343] ? __pfx___might_resched+0x10/0x10 [ 748.011454][T14343] ? fs_reclaim_acquire+0x7d/0x100 [ 748.011486][T14343] should_fail_ex+0x414/0x560 [ 748.011513][T14343] should_failslab+0xa8/0x100 [ 748.011537][T14343] __kmalloc_cache_noprof+0x6f/0x6f0 [ 748.011558][T14343] ? bonding_attach+0x336/0xe70 [ 748.011590][T14343] bonding_attach+0x336/0xe70 [ 748.011636][T14343] ? __pfx_bonding_attach+0x10/0x10 [ 748.011659][T14343] ? __pfx___mutex_lock+0x10/0x10 [ 748.011701][T14343] comedi_device_attach+0x51f/0x720 [ 748.011729][T14343] comedi_unlocked_ioctl+0x5ff/0x1020 [ 748.011751][T14343] ? kasan_quarantine_put+0xdd/0x220 [ 748.011773][T14343] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 748.011852][T14343] ? __fget_files+0x2a/0x420 [ 748.011881][T14343] ? __fget_files+0x3a0/0x420 [ 748.011899][T14343] ? __fget_files+0x2a/0x420 [ 748.011924][T14343] ? bpf_lsm_file_ioctl+0x9/0x20 [ 748.011946][T14343] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 748.011970][T14343] __se_sys_ioctl+0xfc/0x170 [ 748.011992][T14343] do_syscall_64+0xfa/0xfa0 [ 748.012014][T14343] ? lockdep_hardirqs_on+0x9c/0x150 [ 748.012038][T14343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.012055][T14343] ? clear_bhb_loop+0x60/0xb0 [ 748.012074][T14343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.012091][T14343] RIP: 0033:0x7fcb6918ebe9 [ 748.012106][T14343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.012120][T14343] RSP: 002b:00007fcb69fee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 748.012141][T14343] RAX: ffffffffffffffda RBX: 00007fcb693c5fa0 RCX: 00007fcb6918ebe9 [ 748.012152][T14343] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 748.012175][T14343] RBP: 00007fcb69fee090 R08: 0000000000000000 R09: 0000000000000000 [ 748.012187][T14343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 748.012198][T14343] R13: 00007fcb693c6038 R14: 00007fcb693c5fa0 R15: 00007ffc6d12d068 [ 748.012227][T14343] [ 748.546661][ T94] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 748.718359][ T94] usb 5-1: Using ep0 maxpacket: 32 [ 748.725956][ T94] usb 5-1: config 8 has an invalid interface number: 250 but max is 0 [ 748.734368][ T94] usb 5-1: config 8 has no interface number 0 [ 748.741090][ T94] usb 5-1: config 8 interface 250 has no altsetting 0 [ 748.750462][ T94] usb 5-1: New USB device found, idVendor=0545, idProduct=8333, bcdDevice=8f.86 [ 748.759683][ T94] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.768951][ T94] usb 5-1: Product: syz [ 748.773177][ T94] usb 5-1: Manufacturer: syz [ 748.777924][ T94] usb 5-1: SerialNumber: syz [ 748.843736][T14348] fuse: Bad value for 'fd' [ 749.202705][T14346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.212104][T14346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.232299][ T94] gspca_main: tv8532-2.14.0 probing 0545:8333 [ 749.261713][ T5860] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 749.284117][ T94] usb 5-1: USB disconnect, device number 73 [ 749.413824][T14362] comedi comedi0: Minor 3 specified more than once! [ 749.420870][ T5860] usb 1-1: device descriptor read/64, error -71 [ 749.666658][ T5860] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 749.778658][T14366] fuse: Unknown parameter '0x0000000000000004' [ 749.797735][ T5860] usb 1-1: device descriptor read/64, error -71 [ 749.810194][ T94] usb 7-1: USB disconnect, device number 30 [ 749.881103][T14370] FAULT_INJECTION: forcing a failure. [ 749.881103][T14370] name failslab, interval 1, probability 0, space 0, times 0 [ 749.895646][T14370] CPU: 1 UID: 0 PID: 14370 Comm: syz.6.2486 Not tainted syzkaller #0 PREEMPT(full) [ 749.895675][T14370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 749.895687][T14370] Call Trace: [ 749.895696][T14370] [ 749.895705][T14370] dump_stack_lvl+0x189/0x250 [ 749.895738][T14370] ? __pfx____ratelimit+0x10/0x10 [ 749.895764][T14370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 749.895793][T14370] ? __pfx__printk+0x10/0x10 [ 749.895827][T14370] ? __pfx___might_resched+0x10/0x10 [ 749.895857][T14370] should_fail_ex+0x414/0x560 [ 749.895896][T14370] should_failslab+0xa8/0x100 [ 749.895923][T14370] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 749.895944][T14370] ? bonding_attach+0x44e/0xe70 [ 749.895974][T14370] ? bonding_attach+0x44e/0xe70 [ 749.896003][T14370] krealloc_node_align_noprof+0x140/0x390 [ 749.896030][T14370] bonding_attach+0x44e/0xe70 [ 749.896078][T14370] ? __pfx_bonding_attach+0x10/0x10 [ 749.896106][T14370] ? __pfx___mutex_lock+0x10/0x10 [ 749.896167][T14370] comedi_device_attach+0x51f/0x720 [ 749.896198][T14370] comedi_unlocked_ioctl+0x5ff/0x1020 [ 749.896225][T14370] ? kasan_quarantine_put+0xdd/0x220 [ 749.896256][T14370] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 749.896353][T14370] ? __fget_files+0x2a/0x420 [ 749.896383][T14370] ? __fget_files+0x3a0/0x420 [ 749.896406][T14370] ? __fget_files+0x2a/0x420 [ 749.896434][T14370] ? bpf_lsm_file_ioctl+0x9/0x20 [ 749.896461][T14370] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 749.896494][T14370] __se_sys_ioctl+0xfc/0x170 [ 749.896517][T14370] do_syscall_64+0xfa/0xfa0 [ 749.896540][T14370] ? lockdep_hardirqs_on+0x9c/0x150 [ 749.896565][T14370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.896584][T14370] ? clear_bhb_loop+0x60/0xb0 [ 749.896609][T14370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.896626][T14370] RIP: 0033:0x7fdab418ebe9 [ 749.896644][T14370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.896661][T14370] RSP: 002b:00007fdab4fb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 749.896681][T14370] RAX: ffffffffffffffda RBX: 00007fdab43c5fa0 RCX: 00007fdab418ebe9 [ 749.896696][T14370] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 749.896709][T14370] RBP: 00007fdab4fb6090 R08: 0000000000000000 R09: 0000000000000000 [ 749.896721][T14370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 749.896733][T14370] R13: 00007fdab43c6038 R14: 00007fdab43c5fa0 R15: 00007ffcd327c7e8 [ 749.896770][T14370] [ 750.155369][ T5860] usb usb1-port1: attempt power cycle [ 750.163068][T14370] comedi comedi0: Could not allocate memory. Out of memory? [ 750.215072][T14372] comedi comedi0: Minor 3 specified more than once! [ 750.287205][ T5924] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 750.446833][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 750.459526][ T5924] usb 5-1: config 0 has an invalid interface number: 207 but max is 0 [ 750.477848][ T5924] usb 5-1: config 0 has no interface number 0 [ 750.484529][ T5924] usb 5-1: config 0 interface 207 has no altsetting 0 [ 750.496707][ T5860] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 750.508590][ T5924] usb 5-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=ee.45 [ 750.521699][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.530249][ T5924] usb 5-1: Product: syz [ 750.534727][ T5924] usb 5-1: Manufacturer: syz [ 750.539952][ T5860] usb 1-1: device descriptor read/8, error -71 [ 750.546426][ T5924] usb 5-1: SerialNumber: syz [ 750.557423][ T5924] usb 5-1: config 0 descriptor?? [ 750.566197][ T5924] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 750.756888][ T9] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 750.796908][ T5860] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 750.838010][ T5860] usb 1-1: device descriptor read/8, error -71 [ 750.847626][ T5924] gspca_zc3xx: reg_w_i err -71 [ 750.852557][ T5924] gspca_zc3xx 5-1:0.207: probe with driver gspca_zc3xx failed with error -71 [ 750.864201][ T5924] usb 5-1: USB disconnect, device number 74 [ 750.920356][ T9] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 750.930036][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.942395][ T9] usb 7-1: config 0 descriptor?? [ 750.958560][ T5860] usb usb1-port1: unable to enumerate USB device [ 751.154697][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 751.450994][T13412] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 752.084360][T14387] fuse: Unknown parameter '0x0000000000000004' [ 752.136975][ T94] usb 5-1: new low-speed USB device number 75 using dummy_hcd [ 752.296778][ T94] usb 5-1: device descriptor read/64, error -71 [ 752.386862][ T5924] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 752.546695][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 752.554795][ T5924] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 752.556919][ T94] usb 5-1: new low-speed USB device number 76 using dummy_hcd [ 752.564027][ T5924] usb 1-1: config 0 has no interface number 0 [ 752.581302][ T5924] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 752.591204][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.599771][ T5924] usb 1-1: Product: syz [ 752.603972][ T5924] usb 1-1: Manufacturer: syz [ 752.609011][ T5924] usb 1-1: SerialNumber: syz [ 752.616669][ T5924] usb 1-1: config 0 descriptor?? [ 752.642951][ T5924] smsc95xx v2.0.0 [ 752.690859][T14393] comedi comedi0: Minor 3 specified more than once! [ 752.701558][ T94] usb 5-1: device descriptor read/64, error -71 [ 752.796144][T14395] netlink: 'syz.7.2497': attribute type 63 has an invalid length. [ 752.804417][T14395] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2497'. [ 752.828357][ T94] usb usb5-port1: attempt power cycle [ 752.914418][T14397] comedi comedi0: Minor 3 specified more than once! [ 752.923080][T14397] FAULT_INJECTION: forcing a failure. [ 752.923080][T14397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.939861][T14397] CPU: 1 UID: 0 PID: 14397 Comm: syz.7.2498 Not tainted syzkaller #0 PREEMPT(full) [ 752.939894][T14397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 752.939906][T14397] Call Trace: [ 752.939914][T14397] [ 752.939924][T14397] dump_stack_lvl+0x189/0x250 [ 752.939959][T14397] ? __pfx____ratelimit+0x10/0x10 [ 752.939986][T14397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 752.940015][T14397] ? __pfx__printk+0x10/0x10 [ 752.940057][T14397] should_fail_ex+0x414/0x560 [ 752.940086][T14397] _copy_to_user+0x31/0xb0 [ 752.940107][T14397] simple_read_from_buffer+0xe1/0x170 [ 752.940138][T14397] proc_fail_nth_read+0x1b3/0x220 [ 752.940170][T14397] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 752.940203][T14397] ? rw_verify_area+0x2a6/0x4d0 [ 752.940223][T14397] ? __lock_acquire+0xab9/0xd20 [ 752.940241][T14397] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 752.940272][T14397] vfs_read+0x200/0xa30 [ 752.940292][T14397] ? fdget_pos+0x247/0x320 [ 752.940323][T14397] ? __pfx___mutex_lock+0x10/0x10 [ 752.940352][T14397] ? __pfx_vfs_read+0x10/0x10 [ 752.940376][T14397] ? __fget_files+0x2a/0x420 [ 752.940413][T14397] ? __fget_files+0x3a0/0x420 [ 752.940436][T14397] ? __fget_files+0x2a/0x420 [ 752.940471][T14397] ksys_read+0x145/0x250 [ 752.940496][T14397] ? __pfx_ksys_read+0x10/0x10 [ 752.940523][T14397] ? do_syscall_64+0xbe/0xfa0 [ 752.940554][T14397] do_syscall_64+0xfa/0xfa0 [ 752.940578][T14397] ? lockdep_hardirqs_on+0x9c/0x150 [ 752.940604][T14397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.940623][T14397] ? clear_bhb_loop+0x60/0xb0 [ 752.940648][T14397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.940667][T14397] RIP: 0033:0x7faae038d5fc [ 752.940686][T14397] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 752.940703][T14397] RSP: 002b:00007faae120e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 752.940725][T14397] RAX: ffffffffffffffda RBX: 00007faae05c5fa0 RCX: 00007faae038d5fc [ 752.940749][T14397] RDX: 000000000000000f RSI: 00007faae120e0a0 RDI: 0000000000000004 [ 752.940762][T14397] RBP: 00007faae120e090 R08: 0000000000000000 R09: 0000000000000000 [ 752.940774][T14397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 752.940786][T14397] R13: 00007faae05c6038 R14: 00007faae05c5fa0 R15: 00007ffc1a918778 [ 752.940822][T14397] [ 753.209828][ T5924] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 753.221223][ T5924] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 753.270955][T14399] comedi comedi0: fl512: I/O port conflict (0x3,16) [ 753.276834][ T94] usb 5-1: new low-speed USB device number 77 using dummy_hcd [ 753.311973][ T94] usb 5-1: device descriptor read/8, error -71 [ 753.402634][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 753.416834][ T9] asix 7-1:0.0: probe with driver asix failed with error -71 [ 753.439376][ T9] usb 7-1: USB disconnect, device number 31 [ 753.446032][ T5924] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 753.459368][ T5924] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 753.566681][ T94] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 753.587143][ T94] usb 5-1: device descriptor read/8, error -71 [ 753.700318][ T94] usb usb5-port1: unable to enumerate USB device [ 754.190014][ T94] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 754.340141][ T94] usb 7-1: device descriptor read/64, error -71 [ 754.586753][ T94] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 754.716859][ T94] usb 7-1: device descriptor read/64, error -71 [ 754.757216][T14406] fuse: Unknown parameter '0x0000000000000004' [ 754.821566][T13412] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 754.838163][ T94] usb usb7-port1: attempt power cycle [ 755.126795][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 755.206803][ T94] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 755.231685][ T5924] usb 1-1: USB disconnect, device number 107 [ 755.244549][ T94] usb 7-1: device descriptor read/8, error -71 [ 755.277296][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 755.287142][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 755.302200][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.320932][ T9] usb 5-1: config 0 descriptor?? [ 755.330021][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 755.496686][ T94] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 755.517601][ T94] usb 7-1: device descriptor read/8, error -71 [ 755.637332][ T94] usb usb7-port1: unable to enumerate USB device [ 755.666665][ T5924] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 755.816894][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 755.825095][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.837957][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.848300][ T5924] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 755.857703][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.870455][ T5924] usb 1-1: config 0 descriptor?? [ 756.136101][T14410] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2504'. [ 756.148518][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2504'. [ 756.287333][ T5924] hid-multitouch 0003:1FD2:6007.0050: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 756.531949][T14416] comedi comedi0: Minor 3 specified more than once! [ 756.552176][ T9] usb 1-1: USB disconnect, device number 108 [ 756.783075][T14422] comedi comedi0: Minor 3 specified more than once! [ 757.011876][T14426] fuse: Unknown parameter '0x0000000000000004' [ 757.386828][ T9] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 757.397269][ T94] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 757.518620][ T9] usb 7-1: device descriptor read/64, error -71 [ 757.568416][ T94] usb 1-1: Using ep0 maxpacket: 32 [ 757.575722][ T94] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 757.584088][ T94] usb 1-1: config 0 has no interface number 0 [ 757.593506][ T94] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 757.602797][ T94] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.611053][ T94] usb 1-1: Product: syz [ 757.615462][ T94] usb 1-1: Manufacturer: syz [ 757.620161][ T94] usb 1-1: SerialNumber: syz [ 757.627221][ T94] usb 1-1: config 0 descriptor?? [ 757.635679][ T94] smsc95xx v2.0.0 [ 757.766660][ T9] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 757.895242][ T5924] usb 5-1: USB disconnect, device number 79 [ 757.916953][ T9] usb 7-1: device descriptor read/64, error -71 [ 758.009428][T14436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2514'. [ 758.037661][ T94] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 758.049041][ T9] usb usb7-port1: attempt power cycle [ 758.057278][ T94] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 758.269043][ T94] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 758.281292][ T94] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 758.406793][ T9] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 758.429472][ T9] usb 7-1: device descriptor read/8, error -71 [ 758.446724][ T5950] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 758.620031][ T5950] usb 5-1: config 0 has an invalid interface number: 82 but max is 0 [ 758.628597][ T5950] usb 5-1: config 0 has no interface number 0 [ 758.636687][ T5950] usb 5-1: New USB device found, idVendor=0506, idProduct=11f8, bcdDevice=b6.28 [ 758.645751][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.654020][ T5950] usb 5-1: Product: syz [ 758.658341][ T5950] usb 5-1: Manufacturer: syz [ 758.663048][ T5950] usb 5-1: SerialNumber: syz [ 758.671182][ T5950] usb 5-1: config 0 descriptor?? [ 758.687533][ T9] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 758.708538][ T9] usb 7-1: device descriptor read/8, error -71 [ 758.822578][ T9] usb usb7-port1: unable to enumerate USB device [ 758.888786][ T5950] kaweth 5-1:0.82: Firmware present in device. [ 759.080577][ T5950] kaweth 5-1:0.82: Statistics collection: 0 [ 759.086771][ T5950] kaweth 5-1:0.82: Multicast filter limit: 0 [ 759.092811][ T5950] kaweth 5-1:0.82: MTU: 0 [ 759.097604][ T5950] kaweth 5-1:0.82: Read MAC address 00:00:00:00:00:00 [ 759.287095][T13412] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 759.298296][ T5950] kaweth 5-1:0.82: probe with driver kaweth failed with error -5 [ 759.311626][ T5950] usb 5-1: USB disconnect, device number 80 [ 760.028599][T14445] comedi comedi0: Minor 3 specified more than once! [ 760.151244][T14449] fuse: Unknown parameter '0x0000000000000004' [ 760.190734][T14451] comedi comedi0: Minor 3 specified more than once! [ 760.257378][ T9] usb 1-1: USB disconnect, device number 109 [ 760.716742][ T9] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 760.879533][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 760.888414][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 760.897726][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.908484][ T9] usb 1-1: config 0 descriptor?? [ 760.918446][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 761.007238][ T5950] usb 7-1: new low-speed USB device number 40 using dummy_hcd [ 761.157397][ T5950] usb 7-1: device descriptor read/64, error -71 [ 761.406921][ T5950] usb 7-1: new low-speed USB device number 41 using dummy_hcd [ 761.476034][T14471] comedi comedi0: Minor 3 specified more than once! [ 761.557053][ T5950] usb 7-1: device descriptor read/64, error -71 [ 761.605088][T14475] fuse: Unknown parameter '0x0000000000000004' [ 761.670046][ T5950] usb usb7-port1: attempt power cycle [ 761.916821][ T94] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 762.026818][ T5950] usb 7-1: new low-speed USB device number 42 using dummy_hcd [ 762.057737][ T5950] usb 7-1: device descriptor read/8, error -71 [ 762.078606][ T94] usb 5-1: Using ep0 maxpacket: 32 [ 762.086197][ T94] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 762.094710][ T94] usb 5-1: config 0 has no interface number 0 [ 762.103315][ T94] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 762.112633][ T94] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.120943][ T94] usb 5-1: Product: syz [ 762.125157][ T94] usb 5-1: Manufacturer: syz [ 762.130012][ T94] usb 5-1: SerialNumber: syz [ 762.136911][ T94] usb 5-1: config 0 descriptor?? [ 762.148490][ T94] smsc95xx v2.0.0 [ 762.296704][ T5950] usb 7-1: new low-speed USB device number 43 using dummy_hcd [ 762.317530][ T5950] usb 7-1: device descriptor read/8, error -71 [ 762.438558][ T5950] usb usb7-port1: unable to enumerate USB device [ 762.552242][ T94] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 762.564196][ T94] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 762.775672][ T94] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 762.787471][ T94] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 763.381352][ T94] usb 1-1: USB disconnect, device number 110 [ 763.731690][ T94] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 763.906879][ T94] usb 1-1: Using ep0 maxpacket: 32 [ 763.913742][ T94] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 763.924307][ T94] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.939714][ T94] usb 1-1: config 0 descriptor?? [ 763.994331][T14497] comedi comedi0: Minor 3 specified more than once! [ 764.050910][T14499] fuse: Unknown parameter 'fd0x0000000000000004' [ 764.167075][T14486] comedi comedi0: Minor 3 specified more than once! [ 764.174695][ T5924] usb 1-1: USB disconnect, device number 111 [ 764.356736][ T94] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 764.518711][ T94] usb 7-1: no configurations [ 764.523505][ T94] usb 7-1: can't read configurations, error -22 [ 764.656842][ T94] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 764.762652][ T10] usb 5-1: USB disconnect, device number 81 [ 764.819274][ T94] usb 7-1: no configurations [ 764.825563][ T94] usb 7-1: can't read configurations, error -22 [ 764.843106][ T94] usb usb7-port1: attempt power cycle [ 764.946681][ T5924] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 765.117020][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 765.135211][ T5924] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 765.155413][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.176458][ T5924] usb 1-1: config 0 descriptor?? [ 765.195142][ T5924] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 765.206806][ T94] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 765.239803][ T94] usb 7-1: no configurations [ 765.244613][ T94] usb 7-1: can't read configurations, error -22 [ 765.376660][ T94] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 765.413307][ T94] usb 7-1: no configurations [ 765.419665][ T94] usb 7-1: can't read configurations, error -22 [ 765.430128][ T94] usb usb7-port1: unable to enumerate USB device [ 765.547684][ T30] audit: type=1326 audit(1757479517.472:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14525 comm="syz.4.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6918ebe9 code=0x7fc00000 [ 765.583548][ T30] audit: type=1326 audit(1757479517.482:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14525 comm="syz.4.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb6918ebe9 code=0x7fc00000 [ 765.611169][ T30] audit: type=1326 audit(1757479517.482:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14525 comm="syz.4.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6918ebe9 code=0x7fc00000 [ 765.637667][ T30] audit: type=1326 audit(1757479517.482:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14525 comm="syz.4.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6918ebe9 code=0x7fc00000 [ 765.664450][ T30] audit: type=1326 audit(1757479517.482:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14525 comm="syz.4.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6918ebe9 code=0x7fc00000 [ 765.690647][ T30] audit: type=1326 audit(1757479517.482:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14525 comm="syz.4.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6918ebe9 code=0x7fc00000 [ 766.039229][ T5924] gspca_sonixj: reg_r err -32 [ 766.048193][ T5924] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 767.793612][ T5924] usb 1-1: USB disconnect, device number 112 [ 769.006991][T14573] pim6reg1: entered allmulticast mode [ 769.546090][T14597] tracefs: Invalid gid '0x00000000ffffffff' [ 770.181012][T14619] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 771.358507][T14037] block nbd2: Possible stuck request ffff888025600000: control (read@0,1024B). Runtime 120 seconds [ 771.369881][T14037] block nbd2: Possible stuck request ffff8880256001c0: control (read@1024,1024B). Runtime 120 seconds [ 771.382044][T14037] block nbd2: Possible stuck request ffff888025600380: control (read@2048,1024B). Runtime 120 seconds [ 771.394477][T14037] block nbd2: Possible stuck request ffff888025600540: control (read@3072,1024B). Runtime 120 seconds [ 772.299666][ T97] block nbd6: Possible stuck request ffff888025777000: control (read@0,1024B). Runtime 120 seconds [ 772.311751][T13762] block nbd7: Possible stuck request ffff8880257f5080: control (read@0,1024B). Runtime 120 seconds [ 772.324674][T13756] block nbd0: Possible stuck request ffff888025585240: control (read@0,1024B). Runtime 120 seconds [ 772.335728][ T8163] block nbd3: Possible stuck request ffff8880256be000: control (read@0,1024B). Runtime 120 seconds [ 772.346675][ T97] block nbd6: Possible stuck request ffff8880257771c0: control (read@1024,1024B). Runtime 120 seconds [ 772.358744][T13762] block nbd7: Possible stuck request ffff8880257f5240: control (read@1024,1024B). Runtime 120 seconds [ 772.369969][T13756] block nbd0: Possible stuck request ffff888025585400: control (read@1024,1024B). Runtime 120 seconds [ 772.381125][ T8163] block nbd3: Possible stuck request ffff8880256be1c0: control (read@1024,1024B). Runtime 120 seconds [ 772.393091][T13756] block nbd0: Possible stuck request ffff8880255855c0: control (read@2048,1024B). Runtime 120 seconds [ 772.404974][T13756] block nbd0: Possible stuck request ffff888025585780: control (read@3072,1024B). Runtime 120 seconds [ 772.419209][ T97] block nbd6: Possible stuck request ffff888025777380: control (read@2048,1024B). Runtime 120 seconds [ 772.430526][ T8163] block nbd3: Possible stuck request ffff8880256be380: control (read@2048,1024B). Runtime 120 seconds [ 772.441890][T13762] block nbd7: Possible stuck request ffff8880257f5400: control (read@2048,1024B). Runtime 120 seconds [ 772.453144][ T97] block nbd6: Possible stuck request ffff888025777540: control (read@3072,1024B). Runtime 120 seconds [ 772.464611][ T8163] block nbd3: Possible stuck request ffff8880256be540: control (read@3072,1024B). Runtime 120 seconds [ 772.475812][T13762] block nbd7: Possible stuck request ffff8880257f55c0: control (read@3072,1024B). Runtime 120 seconds [ 772.532833][T13762] block nbd1: Possible stuck request ffff8880255d0000: control (read@0,1024B). Runtime 120 seconds [ 772.543797][T13762] block nbd1: Possible stuck request ffff8880255d01c0: control (read@1024,1024B). Runtime 120 seconds [ 772.554920][T13762] block nbd1: Possible stuck request ffff8880255d0380: control (read@2048,1024B). Runtime 120 seconds [ 772.626578][T13762] block nbd1: Possible stuck request ffff8880255d0540: control (read@3072,1024B). Runtime 120 seconds [ 772.717517][T14652] fuse: Unknown parameter 'fd0x0000000000000004' [ 773.132244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 773.169090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 773.954618][T13762] block nbd4: Possible stuck request ffff8880256ee000: control (read@0,1024B). Runtime 120 seconds [ 773.954840][ T9771] block nbd5: Possible stuck request ffff888025717700: control (read@0,1024B). Runtime 120 seconds [ 773.965697][T13762] block nbd4: Possible stuck request ffff8880256ee1c0: control (read@1024,1024B). Runtime 120 seconds [ 773.976578][T14300] block nbd8: Possible stuck request ffff888025c25080: control (read@0,1024B). Runtime 120 seconds [ 773.988904][T13762] block nbd4: Possible stuck request ffff8880256ee380: control (read@2048,1024B). Runtime 120 seconds [ 774.944625][ T94] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 774.945600][T13762] block nbd4: Possible stuck request ffff8880256ee540: control (read@3072,1024B). Runtime 120 seconds [ 774.953178][ T10] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 774.953316][ T11] block nbd11: Possible stuck request ffff888025d25080: control (read@0,1024B). Runtime 120 seconds [ 774.953356][ T11] block nbd11: Possible stuck request ffff888025d25240: control (read@1024,1024B). Runtime 120 seconds [ 774.953385][ T11] block nbd11: Possible stuck request ffff888025d25400: control (read@2048,1024B). Runtime 120 seconds [ 775.958217][T13763] block nbd9: Possible stuck request ffff888025c77000: control (read@0,1024B). Runtime 120 seconds [ 775.969091][T14037] block nbd10: Possible stuck request ffff888025cb5080: control (read@0,1024B). Runtime 120 seconds [ 775.981539][ T9771] block nbd5: Possible stuck request ffff8880257178c0: control (read@1024,1024B). Runtime 120 seconds [ 775.992816][T13763] block nbd9: Possible stuck request ffff888025c771c0: control (read@1024,1024B). Runtime 120 seconds [ 776.004637][T14300] block nbd8: Possible stuck request ffff888025c25400: control (read@2048,1024B). Runtime 120 seconds [ 776.016918][T14037] block nbd10: Possible stuck request ffff888025cb5240: control (read@1024,1024B). Runtime 120 seconds [ 776.028258][ T9771] block nbd5: Possible stuck request ffff888025717a80: control (read@2048,1024B). Runtime 120 seconds [ 776.039340][T13763] block nbd9: Possible stuck request ffff888025c77380: control (read@2048,1024B). Runtime 120 seconds [ 776.050523][T14300] block nbd8: Possible stuck request ffff888025c255c0: control (read@3072,1024B). Runtime 120 seconds [ 776.061592][T14037] block nbd10: Possible stuck request ffff888025cb5400: control (read@2048,1024B). Runtime 120 seconds [ 776.072856][ T9771] block nbd5: Possible stuck request ffff888025717c40: control (read@3072,1024B). Runtime 120 seconds [ 776.084148][T14300] block nbd8: Possible stuck request ffff888025c25240: control (read@1024,1024B). Runtime 120 seconds [ 776.095430][T13763] block nbd9: Possible stuck request ffff888025c77540: control (read@3072,1024B). Runtime 120 seconds [ 776.107171][T14037] block nbd10: Possible stuck request ffff888025cb55c0: control (read@3072,1024B). Runtime 120 seconds [ 776.118655][ T11] block nbd11: Possible stuck request ffff888025d255c0: control (read@3072,1024B). Runtime 120 seconds [ 776.276615][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 776.298434][ T10] usb 5-1: device descriptor read/all, error -71 [ 776.307389][ T94] usb 7-1: Using ep0 maxpacket: 32 [ 776.355341][ T94] usb 7-1: device descriptor read/all, error -71 [ 776.405426][T14662] tmpfs: Bad value for 'mpol' [ 776.498011][T13412] Bluetooth: hci5: link tx timeout [ 776.504283][T13412] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 776.604953][T14670] comedi comedi0: Minor 3 specified more than once! [ 776.612450][ T9] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 776.699237][T14672] comedi comedi0: Minor 3 specified more than once! [ 776.791244][T14676] fuse: Unknown parameter 'fd0x0000000000000004' [ 776.798766][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.822565][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.835101][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 776.884681][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 776.911198][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.928872][ T9] usb 1-1: config 0 descriptor?? [ 776.936224][ T9] hub 1-1:0.0: USB hub found [ 776.996700][ T94] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 777.140261][ T9] hub 1-1:0.0: 14 ports detected [ 777.145839][ T9] hub 1-1:0.0: insufficient power available to use all downstream ports [ 777.154572][ T94] usb 7-1: Using ep0 maxpacket: 16 [ 777.162137][ T94] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 777.171594][ T94] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.186589][ T10] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 777.195732][ T94] usb 7-1: config 0 descriptor?? [ 777.217849][ T94] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 777.346647][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 777.354655][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 777.364543][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.377600][ T10] usb 5-1: config 0 descriptor?? [ 777.399156][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 777.407395][T14683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.420624][T14683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.582885][ T9] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 777.594452][ T9] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 777.626107][ T94] gspca_sonixj: reg_r err -71 [ 777.633605][ T9] usb 1-1: USB disconnect, device number 113 [ 777.641458][ T94] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 777.660618][ T94] usb 7-1: USB disconnect, device number 49 [ 778.010585][T14678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.021975][T14678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.407872][ T984] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 778.436737][ T5924] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 778.566759][ T984] usb 1-1: Using ep0 maxpacket: 32 [ 778.573964][ T984] usb 1-1: config 8 has an invalid interface number: 250 but max is 0 [ 778.582349][ T984] usb 1-1: config 8 has no interface number 0 [ 778.589237][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 778.594514][ T984] usb 1-1: config 8 interface 250 has no altsetting 0 [ 778.603223][ T5924] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 778.611604][T13454] Bluetooth: hci5: command 0x0406 tx timeout [ 778.615273][ T5924] usb 7-1: config 0 has no interface number 0 [ 778.625022][ T984] usb 1-1: New USB device found, idVendor=0545, idProduct=8333, bcdDevice=8f.86 [ 778.639610][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.648016][ T984] usb 1-1: Product: syz [ 778.652397][ T5924] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 778.662512][ T984] usb 1-1: Manufacturer: syz [ 778.668155][ T984] usb 1-1: SerialNumber: syz [ 778.674108][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.683639][ T5924] usb 7-1: Product: syz [ 778.690795][ T5924] usb 7-1: Manufacturer: syz [ 778.695953][ T5924] usb 7-1: SerialNumber: syz [ 778.718287][ T5924] usb 7-1: config 0 descriptor?? [ 778.726947][ T5924] smsc95xx v2.0.0 [ 779.107215][T14690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.117026][T14690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.132785][ T984] gspca_main: tv8532-2.14.0 probing 0545:8333 [ 779.139236][ T5924] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 779.152009][ T5924] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 779.202845][ T984] usb 1-1: USB disconnect, device number 114 [ 779.364998][ T5924] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 779.376850][ T5924] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 779.905765][T13412] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 779.950819][T14701] comedi comedi0: Minor 3 specified more than once! [ 780.115078][ T10] usb 5-1: USB disconnect, device number 83 [ 780.183908][T14710] netlink: 'syz.7.2616': attribute type 1 has an invalid length. [ 780.195023][T14710] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2616'. [ 780.218891][T14710] comedi comedi0: Minor 3 specified more than once! [ 780.396032][T14716] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 780.414190][T14717] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 780.627025][ T10] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 780.680334][T13412] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 780.786804][ T10] usb 5-1: device descriptor read/64, error -71 [ 781.026886][ T10] usb 5-1: new low-speed USB device number 85 using dummy_hcd [ 781.156841][ T10] usb 5-1: device descriptor read/64, error -71 [ 781.267704][ T10] usb usb5-port1: attempt power cycle [ 781.278505][T14082] usb 7-1: USB disconnect, device number 50 [ 781.607363][ T10] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 781.634262][ T10] usb 5-1: device descriptor read/8, error -71 [ 781.685010][T14731] comedi comedi0: Minor 3 specified more than once! [ 781.736863][ T94] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 781.896898][ T10] usb 5-1: new low-speed USB device number 87 using dummy_hcd [ 781.914841][ T94] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.928912][ T10] usb 5-1: device descriptor read/8, error -71 [ 781.940504][ T94] usb 1-1: config 0 has no interfaces? [ 781.949160][ T94] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 781.958784][ T94] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.967401][ T94] usb 1-1: Product: syz [ 781.971769][ T94] usb 1-1: Manufacturer: syz [ 781.976754][ T94] usb 1-1: SerialNumber: syz [ 781.984848][ T94] usb 1-1: config 0 descriptor?? [ 782.036982][ T10] usb usb5-port1: unable to enumerate USB device [ 783.026880][ T94] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 783.169084][ T94] usb 7-1: device descriptor read/64, error -71 [ 783.419025][ T94] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 783.423329][T14746] comedi comedi0: comedi_config --init_data is deprecated [ 783.567581][ T94] usb 7-1: device descriptor read/64, error -71 [ 783.687422][ T94] usb usb7-port1: attempt power cycle [ 783.973202][T14753] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 783.991954][T14753] 8021q: VLANs not supported on sit0 [ 783.999073][T13412] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 784.046923][ T94] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 784.063678][T14755] comedi comedi0: Minor 3 specified more than once! [ 784.093220][ T94] usb 7-1: device descriptor read/8, error -71 [ 784.152371][T14760] sock: sock_timestamping_bind_phc: sock not bind to device [ 784.152793][T14757] syz.4.2634 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 784.355504][T14767] GUP no longer grows the stack in syz.7.2635 (14767): 200000005000-200000008000 (200000001000) [ 784.367715][ T94] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 784.376401][T14767] CPU: 0 UID: 0 PID: 14767 Comm: syz.7.2635 Not tainted syzkaller #0 PREEMPT(full) [ 784.376422][T14767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 784.376429][T14767] Call Trace: [ 784.376435][T14767] [ 784.376440][T14767] dump_stack_lvl+0x189/0x250 [ 784.376466][T14767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 784.376501][T14767] ? __pfx__printk+0x10/0x10 [ 784.376524][T14767] ? find_vma+0xe7/0x160 [ 784.376546][T14767] ? vma_is_secretmem+0xd/0x50 [ 784.376564][T14767] ? check_vma_flags+0x50d/0x580 [ 784.376593][T14767] __get_user_pages+0x24d0/0x2ce0 [ 784.376619][T14767] ? xdp_umem_pin_pages+0x57/0x350 [ 784.376700][T14767] __gup_longterm_locked+0x3dc/0x1660 [ 784.376753][T14767] ? trace_kmalloc+0x1f/0xd0 [ 784.376770][T14767] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 784.376796][T14767] pin_user_pages+0x9e/0xd0 [ 784.376829][T14767] xdp_umem_pin_pages+0x11c/0x350 [ 784.376861][T14767] xdp_umem_create+0x677/0x8e0 [ 784.376900][T14767] xsk_setsockopt+0x7b0/0x8d0 [ 784.376928][T14767] ? __pfx_xsk_setsockopt+0x10/0x10 [ 784.376957][T14767] ? __pfx_aa_sk_perm+0x10/0x10 [ 784.376989][T14767] ? aa_sock_opt_perm+0xff/0x1b0 [ 784.377021][T14767] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 784.377047][T14767] ? __pfx_xsk_setsockopt+0x10/0x10 [ 784.377074][T14767] do_sock_setsockopt+0x17c/0x1b0 [ 784.377112][T14767] __x64_sys_setsockopt+0x13f/0x1b0 [ 784.377150][T14767] do_syscall_64+0xfa/0xfa0 [ 784.377177][T14767] ? lockdep_hardirqs_on+0x9c/0x150 [ 784.377206][T14767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.377226][T14767] ? clear_bhb_loop+0x60/0xb0 [ 784.377251][T14767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.377271][T14767] RIP: 0033:0x7faae038ebe9 [ 784.377291][T14767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.377308][T14767] RSP: 002b:00007faae11cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 784.377330][T14767] RAX: ffffffffffffffda RBX: 00007faae05c6180 RCX: 00007faae038ebe9 [ 784.377346][T14767] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000008 [ 784.377359][T14767] RBP: 00007faae0411e19 R08: 0000000000000020 R09: 0000000000000000 [ 784.377372][T14767] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 784.377385][T14767] R13: 00007faae05c6218 R14: 00007faae05c6180 R15: 00007ffc1a918778 [ 784.377423][T14767] [ 784.669719][ T94] usb 7-1: device descriptor read/8, error -71 [ 784.675958][T14082] usb 1-1: USB disconnect, device number 115 [ 784.778340][ T94] usb usb7-port1: unable to enumerate USB device [ 785.056968][ T5924] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 785.226989][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 785.233908][ T5924] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 785.242135][ T5924] usb 5-1: config 6 has no interface number 0 [ 785.248408][ T5924] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 785.258331][ T5924] usb 5-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 785.271230][ T5924] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 785.280695][ T5924] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 785.289165][ T5924] usb 5-1: Product: syz [ 785.294204][ T5924] usb 5-1: Manufacturer: syz [ 785.299042][ T5924] usb 5-1: SerialNumber: syz [ 785.312681][ T5924] hso 5-1:6.2: Failed to find INT IN ep [ 785.516992][T14773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.527350][T14773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.536573][ T9] usb 5-1: USB disconnect, device number 88 [ 785.876618][ T10] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 786.026932][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 786.044094][ T10] usb 1-1: config 8 has an invalid interface number: 250 but max is 0 [ 786.053909][ T10] usb 1-1: config 8 has no interface number 0 [ 786.077848][ T10] usb 1-1: config 8 interface 250 has no altsetting 0 [ 786.113660][ T10] usb 1-1: New USB device found, idVendor=0545, idProduct=8333, bcdDevice=8f.86 [ 786.140606][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.157544][ T10] usb 1-1: Product: syz [ 786.167920][ T10] usb 1-1: Manufacturer: syz [ 786.175443][ T10] usb 1-1: SerialNumber: syz [ 786.201741][T13412] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 786.222689][T14780] sp0: Synchronizing with TNC [ 786.242227][T14782] comedi comedi0: Minor 3 specified more than once! [ 786.395242][T14785] netlink: 'syz.6.2642': attribute type 2 has an invalid length. [ 786.413195][T14785] netlink: 'syz.6.2642': attribute type 2 has an invalid length. [ 786.636658][ T10] gspca_main: tv8532-2.14.0 probing 0545:8333 [ 786.671461][T14789] comedi comedi0: Minor 3 specified more than once! [ 786.699229][ T10] usb 1-1: USB disconnect, device number 116 [ 787.037252][ T9] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 787.213780][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.224269][T14762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 787.233247][ T9] usb 7-1: config 0 has no interfaces? [ 787.253765][ T9] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 787.273861][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.309370][ T9] usb 7-1: Product: syz [ 787.313688][ T9] usb 7-1: Manufacturer: syz [ 787.326685][ T9] usb 7-1: SerialNumber: syz [ 787.359048][ T9] usb 7-1: config 0 descriptor?? [ 787.407113][ T5924] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 787.566801][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 787.575459][ T5924] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 787.584359][ T5924] usb 1-1: config 0 has no interface number 0 [ 787.592355][ T5924] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 787.602497][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.614346][ T5924] usb 1-1: config 0 descriptor?? [ 787.623528][ T5924] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 787.825357][T14795] netlink: 'syz.0.2647': attribute type 16 has an invalid length. [ 787.835555][T14795] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2647'. [ 788.121275][T14807] comedi comedi0: Minor 3 specified more than once! [ 788.166035][T14809] tipc: Started in network mode [ 788.174444][T14809] tipc: Node identity 7f000001, cluster identity 4711 [ 788.193372][T14809] tipc: Enabled bearer , priority 10 [ 788.215230][T14809] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 788.226403][T14809] tipc: Enabled bearer , priority 10 [ 788.376751][ T10] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 788.518580][ T10] usb 5-1: device descriptor read/64, error -71 [ 788.756709][ T10] usb 5-1: new low-speed USB device number 90 using dummy_hcd [ 788.886772][ T10] usb 5-1: device descriptor read/64, error -71 [ 788.976921][ T5924] gspca_sonixj: reg_w1 err -110 [ 788.996693][ T5924] sonixj 1-1:0.3: probe with driver sonixj failed with error -110 [ 789.007324][ T10] usb usb5-port1: attempt power cycle [ 789.327763][ T5924] tipc: Node number set to 2130706433 [ 789.356608][ T10] usb 5-1: new low-speed USB device number 91 using dummy_hcd [ 789.377913][ T10] usb 5-1: device descriptor read/8, error -71 [ 789.618729][ T10] usb 5-1: new low-speed USB device number 92 using dummy_hcd [ 789.652550][ T10] usb 5-1: device descriptor read/8, error -71 [ 789.771706][ T10] usb usb5-port1: unable to enumerate USB device [ 789.803809][ T10] usb 7-1: USB disconnect, device number 55 [ 789.872833][T13412] Bluetooth: hci0: unexpected event for opcode 0x0407 [ 789.880986][T14816] program syz.6.2652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 789.963916][T14818] comedi comedi0: Minor 3 specified more than once! [ 790.196793][ T10] usb 1-1: USB disconnect, device number 117 [ 790.559435][ T10] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 790.726850][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 790.735986][ T10] usb 1-1: config 8 has an invalid interface number: 250 but max is 0 [ 790.745437][ T10] usb 1-1: config 8 has no interface number 0 [ 790.752044][ T10] usb 1-1: config 8 interface 250 has no altsetting 0 [ 790.761120][ T10] usb 1-1: New USB device found, idVendor=0545, idProduct=8333, bcdDevice=8f.86 [ 790.770349][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.778471][ T10] usb 1-1: Product: syz [ 790.782738][ T10] usb 1-1: Manufacturer: syz [ 790.787412][ T10] usb 1-1: SerialNumber: syz [ 790.888744][ T984] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 791.053728][ T984] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 791.063340][ T984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.073093][ T984] usb 7-1: Product: syz [ 791.078955][ T984] usb 7-1: Manufacturer: syz [ 791.083584][ T984] usb 7-1: SerialNumber: syz [ 791.092446][ T984] usb 7-1: config 0 descriptor?? [ 791.109324][ T984] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 056 [ 791.210985][ T10] gspca_main: tv8532-2.14.0 probing 0545:8333 [ 791.288501][ T10] usb 1-1: USB disconnect, device number 118 [ 791.309549][T14824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.310022][T14824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.311670][ T984] (null): failure setting delay to 10us [ 791.311739][ T984] i2c-tiny-usb 7-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 791.314730][ T984] usb 7-1: USB disconnect, device number 56 [ 791.673146][T14835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.684492][T14835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.904899][T13412] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 791.916447][T14845] comedi comedi0: Minor 3 specified more than once! [ 792.116817][ T984] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 792.268702][ T984] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.282746][T14082] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 792.290750][ T5917] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 792.298615][ T984] usb 5-1: config 0 has no interfaces? [ 792.308597][ T984] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 792.318257][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.326281][ T984] usb 5-1: Product: syz [ 792.330707][ T984] usb 5-1: Manufacturer: syz [ 792.335337][ T984] usb 5-1: SerialNumber: syz [ 792.343254][ T984] usb 5-1: config 0 descriptor?? [ 792.447003][T14082] usb 1-1: Using ep0 maxpacket: 32 [ 792.456009][ T5917] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 792.466202][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.475684][T14082] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 792.484741][T14082] usb 1-1: config 0 has no interface number 0 [ 792.493416][ T5917] usb 7-1: config 0 descriptor?? [ 792.505004][T14082] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 792.520655][T14082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.530112][T14082] usb 1-1: Product: syz [ 792.534387][T14082] usb 1-1: Manufacturer: syz [ 792.539300][T14082] usb 1-1: SerialNumber: syz [ 792.547123][T14082] usb 1-1: config 0 descriptor?? [ 792.561632][T14082] smsc95xx v2.0.0 [ 792.704608][ T5917] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 792.910943][ T5917] [drm:udl_init] *ERROR* Selecting channel failed [ 792.932892][ T5917] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 792.940096][ T5917] [drm] Initialized udl on minor 2 [ 792.949595][ T5917] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 792.960691][ T5917] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 792.968557][T14082] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 792.983153][ T5917] usb 7-1: USB disconnect, device number 57 [ 792.989610][ T984] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 792.998989][T14082] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 793.010474][ T984] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 793.716890][ T94] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 793.880468][ T94] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.891854][ T94] usb 7-1: config 0 interface 0 has no altsetting 0 [ 793.902392][ T94] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 793.912783][ T94] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.922152][ T94] usb 7-1: Product: syz [ 793.926439][ T94] usb 7-1: Manufacturer: syz [ 793.931197][ T94] usb 7-1: SerialNumber: syz [ 793.939051][ T94] usb 7-1: config 0 descriptor?? [ 793.949342][ T94] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 793.961498][ T94] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 793.983617][ T94] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 793.993772][ T94] usb 7-1: media controller created [ 794.024091][ T94] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 794.035305][T14082] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 794.065275][T14082] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 794.095998][T14082] usb 1-1: USB disconnect, device number 119 [ 794.101015][ T94] DVB: Unable to find symbol tda10046_attach() [ 794.115522][ T94] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 794.128954][ T94] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 794.351453][ T94] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 794.363662][ T94] usb 7-1: USB disconnect, device number 58 [ 794.801114][ T10] usb 5-1: USB disconnect, device number 93 [ 794.886909][ T94] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 794.963920][T14864] kvm: user requested TSC rate below hardware speed [ 795.066857][ T94] usb 1-1: Using ep0 maxpacket: 8 [ 795.074463][ T94] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 795.091137][ T94] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 795.100352][ T94] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 795.111443][ T94] usb 1-1: Product: syz [ 795.115724][ T94] usb 1-1: Manufacturer: syz [ 795.120656][ T94] usb 1-1: SerialNumber: syz [ 795.156688][ T10] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 795.217128][ T984] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 795.336759][ T94] usb 1-1: Invalid connection information received from device [ 795.357106][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 795.365783][ T10] usb 5-1: config 8 has an invalid interface number: 250 but max is 0 [ 795.376614][ T10] usb 5-1: config 8 has no interface number 0 [ 795.382756][ T10] usb 5-1: config 8 interface 250 has no altsetting 0 [ 795.388593][ T984] usb 7-1: config 0 has an invalid interface number: 123 but max is 0 [ 795.404919][ T984] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.407489][ T10] usb 5-1: New USB device found, idVendor=0545, idProduct=8333, bcdDevice=8f.86 [ 795.429787][ T984] usb 7-1: config 0 has no interface number 0 [ 795.434697][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.443420][ T984] usb 7-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 795.445511][ T10] usb 5-1: Product: syz [ 795.470256][ T10] usb 5-1: Manufacturer: syz [ 795.473947][ T984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.475141][ T10] usb 5-1: SerialNumber: syz [ 795.521334][ T984] usb 7-1: Product: syz [ 795.525570][ T984] usb 7-1: Manufacturer: syz [ 795.544051][ T984] usb 7-1: SerialNumber: syz [ 795.559479][ T984] usb 7-1: config 0 descriptor?? [ 795.572378][ T984] cdc_acm 7-1:0.123: skipping garbage [ 795.727388][T13412] Bluetooth: hci0: command 0x0406 tx timeout [ 795.835231][T14877] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2670'. [ 795.905025][ T10] gspca_main: tv8532-2.14.0 probing 0545:8333 [ 795.944721][ T10] usb 5-1: USB disconnect, device number 94 [ 796.502948][T14879] comedi comedi0: Minor 3 specified more than once! [ 796.836674][ T984] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 796.986689][ T984] usb 5-1: Using ep0 maxpacket: 32 [ 796.994906][ T984] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 797.003387][ T984] usb 5-1: config 0 has no interface number 0 [ 797.013183][ T984] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 797.022573][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.030765][ T984] usb 5-1: Product: syz [ 797.034956][ T984] usb 5-1: Manufacturer: syz [ 797.039798][ T984] usb 5-1: SerialNumber: syz [ 797.056909][ T984] usb 5-1: config 0 descriptor?? [ 797.064627][ T984] smsc95xx v2.0.0 [ 797.472037][ T984] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 797.483798][ T984] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 797.675364][ T5917] usb 1-1: USB disconnect, device number 120 [ 798.086753][ T5917] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 798.251668][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.262278][ T5917] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 798.274018][ T5917] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 798.283193][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.291749][ T5917] usb 1-1: Product: syz [ 798.296119][ T5917] usb 1-1: Manufacturer: syz [ 798.301451][ T5917] usb 1-1: SerialNumber: syz [ 798.309906][ T5917] usb 1-1: config 0 descriptor?? [ 798.508946][ T984] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 798.525977][ T984] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 798.540205][ T984] usb 5-1: USB disconnect, device number 95 [ 799.321154][ T30] audit: type=1326 audit(1757479551.252:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.4.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6918ebe9 code=0x7ffc0000 [ 799.350621][ T30] audit: type=1326 audit(1757479551.252:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.4.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6918ebe9 code=0x7ffc0000 [ 799.367005][T14892] pim6reg: entered allmulticast mode [ 799.380945][ T30] audit: type=1326 audit(1757479551.262:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.4.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb6918d550 code=0x7ffc0000 [ 799.420953][T14892] pim6reg: left allmulticast mode [ 799.425469][ T30] audit: type=1326 audit(1757479551.262:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.4.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6918ebe9 code=0x7ffc0000 [ 799.458484][ T30] audit: type=1326 audit(1757479551.262:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.4.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb6918ebe9 code=0x7ffc0000 [ 799.481479][ T30] audit: type=1326 audit(1757479551.262:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.4.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6918ebe9 code=0x7ffc0000 [ 799.504576][ T30] audit: type=1326 audit(1757479551.272:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.4.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fcb6918ebe9 code=0x7ffc0000 [ 799.529601][ T30] audit: type=1326 audit(1757479551.272:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.4.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6918ebe9 code=0x7ffc0000 [ 799.554063][ T30] audit: type=1326 audit(1757479551.272:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.4.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb6918ebe9 code=0x7ffc0000 [ 799.582510][ T30] audit: type=1326 audit(1757479551.272:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14890 comm="syz.4.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb6918ebe9 code=0x7ffc0000 [ 799.776952][ T94] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 799.906817][ T94] usb 5-1: device descriptor read/64, error -71 [ 800.147943][ T94] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 800.296764][ T94] usb 5-1: device descriptor read/64, error -71 [ 800.419737][ T94] usb usb5-port1: attempt power cycle [ 800.739858][T14082] usb 1-1: USB disconnect, device number 121 [ 800.766862][ T94] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 800.797587][ T94] usb 5-1: device descriptor read/8, error -71 [ 801.036745][ T94] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 801.057989][ T94] usb 5-1: device descriptor read/8, error -71 [ 801.156848][T14082] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 801.167175][ T94] usb usb5-port1: unable to enumerate USB device [ 801.306764][T14082] usb 1-1: Using ep0 maxpacket: 32 [ 801.313792][T14082] usb 1-1: config 8 has an invalid interface number: 250 but max is 0 [ 801.322610][T14082] usb 1-1: config 8 has no interface number 0 [ 801.328947][T14082] usb 1-1: config 8 interface 250 has no altsetting 0 [ 801.341338][T14082] usb 1-1: New USB device found, idVendor=0545, idProduct=8333, bcdDevice=8f.86 [ 801.350896][T14082] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.360617][T14082] usb 1-1: Product: syz [ 801.364811][T14082] usb 1-1: Manufacturer: syz [ 801.370886][T14082] usb 1-1: SerialNumber: syz [ 801.787546][T14903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.796650][T14903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.819899][T14082] gspca_main: tv8532-2.14.0 probing 0545:8333 [ 801.871928][T14082] usb 1-1: USB disconnect, device number 122 [ 801.972789][T14658] block nbd2: Possible stuck request ffff888025600000: control (read@0,1024B). Runtime 150 seconds [ 801.983663][T14658] block nbd2: Possible stuck request ffff8880256001c0: control (read@1024,1024B). Runtime 150 seconds [ 801.995764][T14658] block nbd2: Possible stuck request ffff888025600380: control (read@2048,1024B). Runtime 150 seconds [ 802.007098][T14658] block nbd2: Possible stuck request ffff888025600540: control (read@3072,1024B). Runtime 150 seconds [ 802.359451][T14908] comedi comedi0: Minor 3 specified more than once! [ 802.610159][ T97] block nbd1: Possible stuck request ffff8880255d0000: control (read@0,1024B). Runtime 150 seconds [ 802.621205][T13756] block nbd6: Possible stuck request ffff888025777000: control (read@0,1024B). Runtime 150 seconds [ 802.632956][ T8163] block nbd7: Possible stuck request ffff8880257f5080: control (read@0,1024B). Runtime 150 seconds [ 802.644757][T13756] block nbd6: Possible stuck request ffff8880257771c0: control (read@1024,1024B). Runtime 150 seconds [ 802.656002][ T8163] block nbd7: Possible stuck request ffff8880257f5240: control (read@1024,1024B). Runtime 150 seconds [ 802.667148][ T97] block nbd1: Possible stuck request ffff8880255d01c0: control (read@1024,1024B). Runtime 150 seconds [ 802.678856][T13762] block nbd0: Possible stuck request ffff888025585240: control (read@0,1024B). Runtime 150 seconds [ 802.689961][T13756] block nbd6: Possible stuck request ffff888025777380: control (read@2048,1024B). Runtime 150 seconds [ 802.690022][ T10] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 802.701419][ T8163] block nbd7: Possible stuck request ffff8880257f5400: control (read@2048,1024B). Runtime 150 seconds [ 802.701467][ T8163] block nbd7: Possible stuck request ffff8880257f55c0: control (read@3072,1024B). Runtime 150 seconds [ 802.701563][T13762] block nbd0: Possible stuck request ffff888025585400: control (read@1024,1024B). Runtime 150 seconds [ 802.745091][T13756] block nbd6: Possible stuck request ffff888025777540: control (read@3072,1024B). Runtime 150 seconds [ 802.757814][T13762] block nbd0: Possible stuck request ffff8880255855c0: control (read@2048,1024B). Runtime 150 seconds [ 802.769380][ T97] block nbd1: Possible stuck request ffff8880255d0380: control (read@2048,1024B). Runtime 150 seconds [ 802.780788][T14017] block nbd3: Possible stuck request ffff8880256be000: control (read@0,1024B). Runtime 150 seconds [ 802.791755][ T97] block nbd1: Possible stuck request ffff8880255d0540: control (read@3072,1024B). Runtime 150 seconds [ 802.803287][T14017] block nbd3: Possible stuck request ffff8880256be1c0: control (read@1024,1024B). Runtime 150 seconds [ 802.815647][T13762] block nbd0: Possible stuck request ffff888025585780: control (read@3072,1024B). Runtime 150 seconds [ 802.826845][T14017] block nbd3: Possible stuck request ffff8880256be380: control (read@2048,1024B). Runtime 150 seconds [ 802.839301][T14017] block nbd3: Possible stuck request ffff8880256be540: control (read@3072,1024B). Runtime 150 seconds [ 802.909526][ T10] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 802.920425][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.935699][ T10] usb 1-1: config 0 descriptor?? [ 803.172134][T14913] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2687'. [ 803.175752][T14918] PKCS8: Unsupported PKCS#8 version [ 803.181552][T13454] Bluetooth: hci1: unexpected event for opcode 0x6502 [ 803.199790][ T10] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 803.231723][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 803.263249][ T10] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 803.292360][ T10] [drm] Initialized udl on minor 2 [ 803.319867][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 803.357195][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 803.378888][ T5980] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 803.390127][ T10] usb 1-1: USB disconnect, device number 123 [ 803.397730][ T5980] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 803.627112][ T984] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 803.782016][ T984] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.800981][ T984] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 803.814280][ T984] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 803.833008][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.841792][ T984] usb 5-1: Product: syz [ 803.846084][ T984] usb 5-1: Manufacturer: syz [ 803.851050][ T984] usb 5-1: SerialNumber: syz [ 803.860220][ T984] usb 5-1: config 0 descriptor?? [ 804.057675][ T10] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 804.226629][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 804.234247][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 804.244117][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.256898][ T10] usb 1-1: config 0 descriptor?? [ 804.275452][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 804.529274][T14017] block nbd4: Possible stuck request ffff8880256ee000: control (read@0,1024B). Runtime 150 seconds [ 804.540504][T14017] block nbd4: Possible stuck request ffff8880256ee1c0: control (read@1024,1024B). Runtime 150 seconds [ 804.954077][T14017] block nbd4: Possible stuck request ffff8880256ee380: control (read@2048,1024B). Runtime 150 seconds [ 804.968190][T14017] block nbd4: Possible stuck request ffff8880256ee540: control (read@3072,1024B). Runtime 150 seconds [ 805.139603][T14937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2693'. [ 805.150863][T14933] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2693'. [ 805.167162][T14658] block nbd11: Possible stuck request ffff888025d25080: control (read@0,1024B). Runtime 150 seconds [ 805.178427][T14658] block nbd11: Possible stuck request ffff888025d25240: control (read@1024,1024B). Runtime 150 seconds [ 805.396911][ T10] gspca_sonixj: reg_r err -110 [ 805.402156][ T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 806.127709][T14658] block nbd11: Possible stuck request ffff888025d25400: control (read@2048,1024B). Runtime 150 seconds [ 806.140524][T14658] block nbd11: Possible stuck request ffff888025d255c0: control (read@3072,1024B). Runtime 150 seconds [ 806.420638][ T94] usb 5-1: USB disconnect, device number 100 [ 806.458941][T14037] block nbd10: Possible stuck request ffff888025cb5080: control (read@0,1024B). Runtime 150 seconds [ 806.470189][ T11] block nbd8: Possible stuck request ffff888025c25080: control (read@0,1024B). Runtime 150 seconds [ 806.481383][T14037] block nbd10: Possible stuck request ffff888025cb5240: control (read@1024,1024B). Runtime 150 seconds [ 806.493270][ T56] block nbd9: Possible stuck request ffff888025c77000: control (read@0,1024B). Runtime 150 seconds [ 806.504161][ T11] block nbd8: Possible stuck request ffff888025c25400: control (read@2048,1024B). Runtime 150 seconds [ 806.516297][T14658] block nbd5: Possible stuck request ffff888025717700: control (read@0,1024B). Runtime 150 seconds [ 806.527842][T14037] block nbd10: Possible stuck request ffff888025cb5400: control (read@2048,1024B). Runtime 150 seconds [ 806.539058][ T56] block nbd9: Possible stuck request ffff888025c771c0: control (read@1024,1024B). Runtime 150 seconds [ 806.550203][ T11] block nbd8: Possible stuck request ffff888025c255c0: control (read@3072,1024B). Runtime 150 seconds [ 806.561840][T14658] block nbd5: Possible stuck request ffff8880257178c0: control (read@1024,1024B). Runtime 150 seconds [ 806.572941][T14037] block nbd10: Possible stuck request ffff888025cb55c0: control (read@3072,1024B). Runtime 150 seconds [ 806.585936][ T56] block nbd9: Possible stuck request ffff888025c77380: control (read@2048,1024B). Runtime 150 seconds [ 806.597803][ T11] block nbd8: Possible stuck request ffff888025c25240: control (read@1024,1024B). Runtime 150 seconds [ 806.609495][T14658] block nbd5: Possible stuck request ffff888025717a80: control (read@2048,1024B). Runtime 150 seconds [ 806.621852][ T56] block nbd9: Possible stuck request ffff888025c77540: control (read@3072,1024B). Runtime 150 seconds [ 806.633230][T14658] block nbd5: Possible stuck request ffff888025717c40: control (read@3072,1024B). Runtime 150 seconds [ 806.869268][ T94] usb 1-1: USB disconnect, device number 124 [ 806.912866][T14943] comedi comedi0: Minor 3 specified more than once! [ 807.382074][T14958] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2700'. [ 807.696770][ T10] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 807.854004][ T10] usb 5-1: config 0 has an invalid descriptor of length 206, skipping remainder of the config [ 807.875566][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 807.884829][ T10] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 807.894244][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.905419][ T10] usb 5-1: config 0 descriptor?? [ 808.086730][ T984] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 808.246800][ T984] usb 1-1: Using ep0 maxpacket: 32 [ 808.257849][ T984] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 808.265976][ T984] usb 1-1: config 0 has no interface number 0 [ 808.276713][ T984] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 808.285816][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.294410][ T984] usb 1-1: Product: syz [ 808.298915][ T984] usb 1-1: Manufacturer: syz [ 808.303527][ T984] usb 1-1: SerialNumber: syz [ 808.310340][ T984] usb 1-1: config 0 descriptor?? [ 808.318642][ T984] smsc95xx v2.0.0 [ 808.720932][ T984] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 808.732345][ T984] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 808.912505][T14967] netlink: 'syz.7.2703': attribute type 21 has an invalid length. [ 808.920703][T14967] netlink: 14470 bytes leftover after parsing attributes in process `syz.7.2703'. [ 809.012778][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.026691][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.750582][ T984] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 809.779431][ T984] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 809.811085][ T984] usb 1-1: USB disconnect, device number 125 [ 810.413174][T14970] comedi comedi0: Minor 3 specified more than once! [ 810.481791][ T94] usb 5-1: USB disconnect, device number 101 [ 810.591408][T13412] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 810.608540][T14976] CUSE: zero length info key specified [ 810.615607][T13412] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 810.624368][T13412] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 810.634435][T13412] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 810.644059][T13412] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 810.646707][T14975] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2707'. [ 811.380808][ T984] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 811.549170][ T984] usb 1-1: Using ep0 maxpacket: 32 [ 811.560951][ T984] usb 1-1: config 8 has an invalid interface number: 250 but max is 0 [ 811.577795][ T984] usb 1-1: config 8 has no interface number 0 [ 811.581903][T14971] chnl_net:caif_netlink_parms(): no params data found [ 811.590700][ T984] usb 1-1: config 8 interface 250 has no altsetting 0 [ 811.612362][ T984] usb 1-1: New USB device found, idVendor=0545, idProduct=8333, bcdDevice=8f.86 [ 811.636434][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.655121][ T984] usb 1-1: Product: syz [ 811.662982][ T984] usb 1-1: Manufacturer: syz [ 811.691494][ T984] usb 1-1: SerialNumber: syz [ 811.981671][T14971] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.009314][T14971] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.025541][T14971] bridge_slave_0: entered allmulticast mode [ 812.036025][T14971] bridge_slave_0: entered promiscuous mode [ 812.052771][T14997] 8021q: VLANs not supported on nr0 [ 812.060327][T14971] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.082456][T14971] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.100297][T14971] bridge_slave_1: entered allmulticast mode [ 812.116836][T14971] bridge_slave_1: entered promiscuous mode [ 812.198562][T14987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.209640][T14987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.239770][T14971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.264854][ T984] gspca_main: tv8532-2.14.0 probing 0545:8333 [ 812.274279][T14971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.330621][ T984] usb 1-1: USB disconnect, device number 126 [ 812.403824][T14971] team0: Port device team_slave_0 added [ 812.439738][T14971] team0: Port device team_slave_1 added [ 812.497473][ T94] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 812.569539][T14971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.592608][T14971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.629076][T14971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.643735][T14971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.651023][T14971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.679131][T14971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.696679][ T94] usb 5-1: Using ep0 maxpacket: 32 [ 812.697082][T13454] Bluetooth: hci2: command tx timeout [ 812.713177][ T94] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 812.723410][ T94] usb 5-1: config 0 has no interface number 0 [ 812.763256][ T94] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 812.795270][ T94] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.816637][ T94] usb 5-1: Product: syz [ 812.820918][ T94] usb 5-1: Manufacturer: syz [ 812.845242][ T94] usb 5-1: SerialNumber: syz [ 812.895064][ T94] usb 5-1: config 0 descriptor?? [ 812.899937][T14971] hsr_slave_0: entered promiscuous mode [ 812.917754][T14971] hsr_slave_1: entered promiscuous mode [ 812.919774][ T94] smsc95xx v2.0.0 [ 812.942756][T14971] debugfs: 'hsr0' already exists in 'hsr' [ 812.963663][T14971] Cannot create hsr debugfs directory [ 813.176731][ T984] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 813.334851][ T94] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 813.349660][ T984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.371744][ T984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.373545][ T94] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 813.404492][ T984] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 813.435271][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.469509][ T984] usb 1-1: config 0 descriptor?? [ 813.511482][T14971] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 813.543205][T14971] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 813.583923][T14971] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 813.612142][T14971] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 813.842536][T14971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.885634][ T984] stadia 0003:18D1:9400.0051: unknown main item tag 0x0 [ 813.924655][ T984] stadia 0003:18D1:9400.0051: item fetching failed at offset 4/5 [ 813.934398][T14971] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.937241][ T984] stadia 0003:18D1:9400.0051: parse failed [ 813.953257][ T984] stadia 0003:18D1:9400.0051: probe with driver stadia failed with error -22 [ 813.967647][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.975028][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.022438][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.029789][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.110699][T15002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.144244][T15002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.214436][ T5917] usb 1-1: USB disconnect, device number 127 [ 814.442259][ T94] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 814.477756][ T94] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 814.500791][ T94] usb 5-1: USB disconnect, device number 102 [ 814.688498][ T5917] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 814.714792][T14971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.768713][T13454] Bluetooth: hci2: command tx timeout [ 814.848569][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 814.856095][ T5917] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 814.867553][ T5917] usb 1-1: config 0 has no interface number 0 [ 814.873784][ T5917] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 814.892468][ T5917] usb 1-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 814.928658][ T5917] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 814.948214][ T5917] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 814.983199][ T5917] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 815.005659][ T5917] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 815.046645][ T5917] usb 1-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 815.093826][ T5917] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 815.113643][T15023] comedi comedi0: Minor 3 specified more than once! [ 815.126670][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.134731][ T5917] usb 1-1: Product: syz [ 815.156954][ T5917] usb 1-1: Manufacturer: syz [ 815.176593][ T5917] usb 1-1: SerialNumber: syz [ 815.206924][ T5917] usb 1-1: config 0 descriptor?? [ 815.220219][T15015] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 815.445578][T15015] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2716'. [ 815.466052][ T5917] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 815.498731][ T5917] etas_es58x 1-1:0.219: could not retrieve the product info string [ 815.552599][T14971] veth0_vlan: entered promiscuous mode [ 815.568086][ T5917] usb 1-1: USB disconnect, device number 2 [ 815.606965][ T984] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 815.615786][ T5917] etas_es58x 1-1:0.219: Disconnecting syz syz [ 815.624486][T14971] veth1_vlan: entered promiscuous mode [ 815.744926][T14971] veth0_macvtap: entered promiscuous mode [ 815.770856][T14971] veth1_macvtap: entered promiscuous mode [ 815.777480][ T984] usb 5-1: Using ep0 maxpacket: 8 [ 815.795796][ T984] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 815.825945][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.846677][ T984] usb 5-1: Product: syz [ 815.855698][T14971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.863374][ T984] usb 5-1: Manufacturer: syz [ 815.876770][ T984] usb 5-1: SerialNumber: syz [ 815.895195][ T984] usb 5-1: config 0 descriptor?? [ 815.923853][T14971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.960967][T11191] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.040675][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.070952][T11191] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.111558][ T984] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 816.143449][T11191] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.383501][T11191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.408747][T11191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.502836][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.530308][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.846944][T13454] Bluetooth: hci2: command tx timeout [ 816.977138][ T5917] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 817.147400][ T5917] usb 9-1: Using ep0 maxpacket: 16 [ 817.169510][ T5917] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 817.186678][ T5917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.209293][ T5917] usb 9-1: config 0 descriptor?? [ 817.230216][ T5917] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 817.319828][T15027] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2718'. [ 817.407073][T13454] Bluetooth: hci4: command 0x0406 tx timeout [ 817.438579][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 817.596661][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 817.611265][ T10] usb 1-1: config 3 has an invalid interface number: 173 but max is 0 [ 817.621994][ T10] usb 1-1: config 3 has no interface number 0 [ 817.636318][ T10] usb 1-1: config 3 interface 173 has no altsetting 0 [ 817.653323][ T10] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=5a.0b [ 817.663941][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.673711][ T10] usb 1-1: Product: syz [ 817.680664][ T10] usb 1-1: Manufacturer: syz [ 817.685305][ T10] usb 1-1: SerialNumber: syz [ 817.905206][T15037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.916034][T15037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.960066][ T10] usb 1-1: selecting invalid altsetting 3 [ 817.965866][ T10] comedi comedi5: could not set alternate setting 3 in high speed [ 817.990434][ T10] usbdux 1-1:3.173: driver 'usbdux' failed to auto-configure device. [ 818.023041][ T10] usbdux 1-1:3.173: probe with driver usbdux failed with error -22 [ 818.067347][ T10] usb 1-1: USB disconnect, device number 3 [ 818.128646][ T984] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 818.473837][ T5917] gspca_sonixj: reg_w1 err -71 [ 818.500681][ T5917] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 818.524122][ T5917] usb 9-1: USB disconnect, device number 2 [ 818.615449][ T31] INFO: task syz.5.2158:13503 blocked for more than 143 seconds. [ 818.633898][ T31] Not tainted syzkaller #0 [ 818.644016][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 818.671020][ T31] task:syz.5.2158 state:D stack:27808 pid:13503 tgid:13502 ppid:10101 task_flags:0x400040 flags:0x00004004 [ 818.704526][ T31] Call Trace: [ 818.710542][ T31] [ 818.713664][ T31] __schedule+0x1798/0x4cc0 [ 818.726693][ T31] ? vfs_open+0x3b/0x340 [ 818.736580][ T31] ? __lock_acquire+0xab9/0xd20 [ 818.746376][ T31] ? __lock_acquire+0xab9/0xd20 [ 818.758498][ T31] ? __pfx___schedule+0x10/0x10 [ 818.767032][ T31] ? schedule+0x91/0x360 [ 818.796779][ T31] schedule+0x165/0x360 [ 818.801017][ T31] schedule_preempt_disabled+0x13/0x30 [ 818.826621][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 818.846640][ T31] __mutex_lock+0x7e6/0x1350 [ 818.851313][ T31] ? __mutex_lock+0x5bb/0x1350 [ 818.856322][ T31] ? bdev_open+0xe0/0xd30 [ 818.896592][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 818.901714][ T31] ? wait_on_inode+0xc0/0x230 [ 818.933129][T13454] Bluetooth: hci2: command tx timeout [ 818.969551][ T31] ? kobject_get_unless_zero+0x161/0x1f0 [ 818.976101][ T31] ? disk_block_events+0xab/0x120 [ 818.981818][ T31] ? bdev_open+0xaf/0xd30 [ 818.986933][ T31] bdev_open+0xe0/0xd30 [ 818.991284][ T31] blkdev_open+0x457/0x600 [ 818.995738][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 819.001147][ T31] do_dentry_open+0x953/0x13f0 [ 819.006145][ T31] vfs_open+0x3b/0x340 [ 819.008761][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 819.011986][ T31] ? path_openat+0x2ecd/0x3830 [ 819.020741][ T31] path_openat+0x2ee5/0x3830 [ 819.025413][ T31] ? __pfx_path_openat+0x10/0x10 [ 819.030665][ T31] do_filp_open+0x1fa/0x410 [ 819.035205][ T31] ? __lock_acquire+0xab9/0xd20 [ 819.046649][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 819.051937][ T31] ? _raw_spin_unlock+0x28/0x50 [ 819.057983][ T31] ? alloc_fd+0x64c/0x6c0 [ 819.062373][ T31] do_sys_openat2+0x121/0x1c0 [ 819.076535][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 819.081802][ T31] ? exc_page_fault+0x82/0x100 [ 819.087843][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 819.093197][ T31] __x64_sys_openat+0x138/0x170 [ 819.105138][ T31] do_syscall_64+0xfa/0xfa0 [ 819.116823][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 819.122194][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.133903][ T31] ? clear_bhb_loop+0x60/0xb0 [ 819.138987][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.145192][ T31] RIP: 0033:0x7fef5eb8d550 [ 819.149893][ T31] RSP: 002b:00007fef5fa92b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 819.161212][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fef5eb8d550 [ 819.169911][ T31] RDX: 0000000000000002 RSI: 00007fef5fa92c10 RDI: 00000000ffffff9c [ 819.178247][ T31] RBP: 00007fef5fa92c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 819.186327][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 819.194919][ T31] R13: 00007fef5edc6038 R14: 00007fef5edc5fa0 R15: 00007ffff204d178 [ 819.203333][ T31] [ 819.206788][ T31] [ 819.206788][ T31] Showing all locks held in the system: [ 819.218643][ T31] 5 locks held by kworker/0:1/10: [ 819.223832][ T31] #0: ffff888020ef9948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 819.248786][ T31] #1: ffffc900000f7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 819.286573][ T31] #2: ffff888027fca198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 819.318050][ T31] #3: ffff888027fcd518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 819.366548][ T31] #4: ffff888143b6a968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 819.376292][ T31] 1 lock held by khungtaskd/31: [ 819.400632][ T31] #0: ffffffff8e53c560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 819.446538][ T31] 3 locks held by kworker/0:2/94: [ 819.451637][ T31] 3 locks held by kworker/u8:7/1111: [ 819.471738][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 819.506740][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 819.515731][ T31] #2: ffff8880b8725918 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 819.566791][ T31] 2 locks held by getty/5624: [ 819.571527][ T31] #0: ffff888033d7b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 819.602759][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 819.633117][ T31] 3 locks held by kworker/1:4/5917: [ 819.660444][ T31] #0: ffff88801a871548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 819.691705][ T31] #1: ffffc900042cfba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 819.722601][ T31] #2: ffffffff8e541ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 819.786596][ T31] 1 lock held by udevd/10548: [ 819.791779][ T31] #0: ffff8880255a4358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 819.835406][ T31] 1 lock held by udevd/10549: [ 819.846717][ T31] #0: ffff888143745358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 819.856307][ T31] 1 lock held by udevd/10573: [ 819.880389][ T31] #0: ffff8880255a3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 819.896560][ T31] 1 lock held by udevd/10619: [ 819.901609][ T31] #0: ffff888025732358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 819.924221][ T31] 1 lock held by udevd/10627: [ 819.930226][ T31] #0: ffff888025527358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 819.939998][ T31] 1 lock held by udevd/10784: [ 819.944888][ T31] #0: ffff888025523358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 819.955523][ T31] 1 lock held by udevd/13395: [ 819.963459][ T31] #0: ffff8880255a6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 819.982765][ T31] 1 lock held by udevd/13396: [ 819.988230][ T31] #0: ffff8881437c8358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 819.998099][ T31] 1 lock held by udevd/13404: [ 820.002818][ T31] #0: ffff88802579d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 820.012717][ T31] 1 lock held by udevd/13405: [ 820.017961][ T31] #0: ffff888025734358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 820.027563][ T31] 1 lock held by udevd/13409: [ 820.033097][ T31] #0: ffff888025c48358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 820.043536][ T31] 1 lock held by udevd/13411: [ 820.048525][ T31] #0: ffff888025c4c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 820.058496][ T31] 1 lock held by syz.5.2158/13503: [ 820.063741][ T31] #0: ffff8880255a6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 820.073388][ T31] 3 locks held by syz-executor/13950: [ 820.079103][ T31] #0: ffff888063744dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 820.089251][ T31] #1: ffff8880637440b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 820.099108][ T31] #2: ffffffff8fab69e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 820.110159][ T31] 2 locks held by syz.6.2670/14864: [ 820.115498][ T31] #0: ffff88805784a0e0 (&type->s_umount_key#90/1){+.+.}-{4:4}, at: alloc_super+0x1bb/0x930 [ 820.126275][ T31] #1: ffff8881437c8358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 820.137432][ T31] 2 locks held by syz.4.2718/15027: [ 820.142676][ T31] #0: ffff88801af1c0e0 (&type->s_umount_key#91/1){+.+.}-{4:4}, at: alloc_super+0x1bb/0x930 [ 820.153502][ T31] #1: ffff8880255a4358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 820.162921][ T31] 4 locks held by syz.8.2705/15033: [ 820.168569][ T31] #0: ffff8880648d8dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 820.178793][ T31] #1: ffff8880648d80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 820.188789][ T31] #2: ffffffff8fab69e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 820.200204][ T31] #3: ffff88804b794338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 820.211134][ T31] 2 locks held by syz.0.2722/15038: [ 820.217250][ T31] #0: ffffffff8f951b48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 820.226558][ T31] #1: ffffffff8e541ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 820.240362][ T31] [ 820.251868][ T31] ============================================= [ 820.251868][ T31] [ 820.266606][ T31] NMI backtrace for cpu 0 [ 820.266625][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 820.266646][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 820.266656][ T31] Call Trace: [ 820.266663][ T31] [ 820.266672][ T31] dump_stack_lvl+0x189/0x250 [ 820.266711][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 820.266735][ T31] ? __pfx__printk+0x10/0x10 [ 820.266771][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 820.266793][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 820.266813][ T31] ? __pfx__printk+0x10/0x10 [ 820.266840][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 820.266859][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 820.266881][ T31] watchdog+0xf60/0xfa0 [ 820.266902][ T31] ? watchdog+0x1e2/0xfa0 [ 820.266924][ T31] kthread+0x711/0x8a0 [ 820.266951][ T31] ? __pfx_watchdog+0x10/0x10 [ 820.266966][ T31] ? __pfx_kthread+0x10/0x10 [ 820.266990][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 820.267010][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 820.267030][ T31] ? __pfx_kthread+0x10/0x10 [ 820.267053][ T31] ret_from_fork+0x47c/0x820 [ 820.267074][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 820.267100][ T31] ? __switch_to_asm+0x39/0x70 [ 820.267115][ T31] ? __switch_to_asm+0x33/0x70 [ 820.267131][ T31] ? __pfx_kthread+0x10/0x10 [ 820.267153][ T31] ret_from_fork_asm+0x1a/0x30 [ 820.267187][ T31] [ 820.267220][ T31] Sending NMI from CPU 0 to CPUs 1: [ 820.419023][ C1] NMI backtrace for cpu 1 [ 820.419042][ C1] CPU: 1 UID: 0 PID: 1111 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 820.419060][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 820.419071][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 820.419097][ C1] RIP: 0010:unwind_next_frame+0x130e/0x2390 [ 820.419119][ C1] Code: c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 [ 820.419133][ C1] RSP: 0018:ffffc9000429f498 EFLAGS: 00000a07 [ 820.419146][ C1] RAX: 0000000000000000 RBX: ffffffff9001d870 RCX: dffffc0000000000 [ 820.419158][ C1] RDX: ffffffff9001d844 RSI: ffffffff9083157c RDI: ffffffff8c04eb20 [ 820.419168][ C1] RBP: ffffffff9001d85c R08: 000000000000000c R09: ffffffff8173fd35 [ 820.419179][ C1] R10: ffffc9000429f5b8 R11: ffffffff81ac7470 R12: ffffffff8223c9ea [ 820.419190][ C1] R13: ffffffff9001d858 R14: ffffc9000429f568 R15: ffffffff9001d864 [ 820.419203][ C1] FS: 0000000000000000(0000) GS:ffff8881258b3000(0000) knlGS:0000000000000000 [ 820.419215][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 820.419227][ C1] CR2: 000055bfea9ae018 CR3: 000000000e338000 CR4: 00000000003526f0 [ 820.419243][ C1] DR0: 0000000000000006 DR1: 0000000000000001 DR2: 0000000000000098 [ 820.419252][ C1] DR3: 0000000000000003 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 820.419263][ C1] Call Trace: [ 820.419269][ C1] [ 820.419280][ C1] ? unwind_next_frame+0xa5/0x2390 [ 820.419299][ C1] ? __kasan_slab_free+0x5b/0x80 [ 820.419317][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 820.419338][ C1] arch_stack_walk+0x11c/0x150 [ 820.419360][ C1] ? __kasan_slab_free+0x5b/0x80 [ 820.419377][ C1] stack_trace_save+0x9c/0xe0 [ 820.419396][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 820.419414][ C1] ? __kasan_save_free_info+0x46/0x50 [ 820.419434][ C1] ? consume_skb+0x9e/0xf0 [ 820.419462][ C1] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 820.419479][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 820.419498][ C1] ? __lock_acquire+0xab9/0xd20 [ 820.419514][ C1] kasan_save_track+0x3e/0x80 [ 820.419528][ C1] ? kasan_save_track+0x3e/0x80 [ 820.419541][ C1] ? __kasan_save_free_info+0x46/0x50 [ 820.419558][ C1] ? __kasan_slab_free+0x5b/0x80 [ 820.419594][ C1] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 820.419612][ C1] __kasan_save_free_info+0x46/0x50 [ 820.419631][ C1] __kasan_slab_free+0x5b/0x80 [ 820.419645][ C1] kmem_cache_free+0x19a/0x690 [ 820.419664][ C1] nsim_dev_trap_report_work+0x7cf/0xb80 [ 820.419690][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 820.419708][ C1] process_scheduled_works+0xae1/0x17b0 [ 820.419736][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 820.419760][ C1] worker_thread+0x8a0/0xda0 [ 820.419779][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 820.419802][ C1] ? __kthread_parkme+0x7b/0x200 [ 820.419824][ C1] kthread+0x711/0x8a0 [ 820.419845][ C1] ? __pfx_worker_thread+0x10/0x10 [ 820.419862][ C1] ? __pfx_kthread+0x10/0x10 [ 820.419882][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 820.419900][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 820.419918][ C1] ? __pfx_kthread+0x10/0x10 [ 820.419938][ C1] ret_from_fork+0x47c/0x820 [ 820.419956][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 820.419976][ C1] ? __switch_to_asm+0x39/0x70 [ 820.419991][ C1] ? __switch_to_asm+0x33/0x70 [ 820.420006][ C1] ? __pfx_kthread+0x10/0x10 [ 820.420025][ C1] ret_from_fork_asm+0x1a/0x30 [ 820.420048][ C1] [ 820.571863][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 820.571887][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 820.571908][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 820.571920][ T31] Call Trace: [ 820.571929][ T31] [ 820.571937][ T31] dump_stack_lvl+0x99/0x250 [ 820.571970][ T31] ? __asan_memcpy+0x40/0x70 [ 820.572003][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 820.572028][ T31] ? __pfx__printk+0x10/0x10 [ 820.572074][ T31] vpanic+0x237/0x6d0 [ 820.572095][ T31] ? __pfx_vpanic+0x10/0x10 [ 820.572117][ T31] ? preempt_schedule_common+0x83/0xd0 [ 820.572148][ T31] panic+0xb9/0xc0 [ 820.572168][ T31] ? __pfx_panic+0x10/0x10 [ 820.572190][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 820.572218][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 820.572240][ T31] watchdog+0xf9f/0xfa0 [ 820.572265][ T31] ? watchdog+0x1e2/0xfa0 [ 820.572289][ T31] kthread+0x711/0x8a0 [ 820.572318][ T31] ? __pfx_watchdog+0x10/0x10 [ 820.572336][ T31] ? __pfx_kthread+0x10/0x10 [ 820.572362][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 820.572384][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 820.572414][ T31] ? __pfx_kthread+0x10/0x10 [ 820.572439][ T31] ret_from_fork+0x47c/0x820 [ 820.572462][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 820.572490][ T31] ? __switch_to_asm+0x39/0x70 [ 820.572507][ T31] ? __switch_to_asm+0x33/0x70 [ 820.572524][ T31] ? __pfx_kthread+0x10/0x10 [ 820.572548][ T31] ret_from_fork_asm+0x1a/0x30 [ 820.572582][ T31] [ 820.934065][ T31] Kernel Offset: disabled [ 820.938408][ T31] Rebooting in 86400 seconds..