last executing test programs:

19.411774146s ago: executing program 3 (id=364):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', '', [{0x20, '/dev/vhost-vsock\x00'}, {0x20, '#! '}, {0x20, '!]&$\'^,\xef-%\'!]\x91!$})-,@'}]}, 0x30)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x8000000})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x31})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0xb001, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x804)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000"], 0x34}, 0x1, 0x0, 0x0, 0x40080c0}, 0x40000)
syz_open_dev$tty20(0xc, 0x4, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)

16.182691688s ago: executing program 2 (id=369):
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0))
write$dsp(r2, &(0x7f0000000000)="81", 0x1)
close(r2)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0)
readv(r5, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e1d, 0x0, @loopback}, 0x1c)

15.956611574s ago: executing program 0 (id=370):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
syz_emit_ethernet(0x4a, 0x0, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82)
r5 = dup(r4)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x7fff, 0xf, 0x0, 0x2, 0x0})
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
getpgid(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000004e220000000000000a008080"], 0xb8}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0xb0, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x84, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fff, 0x1}}, @TCA_HTB_INIT={0xffffffffffffffa2, 0x2, {0x3, 0xfffffffd, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1b90}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0xbdbf}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x10}}]}}]}, 0xb0}}, 0x0)

15.688198991s ago: executing program 1 (id=372):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
close(0x3)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000010000000400000006000000010000"])
mlock(&(0x7f0000a38000/0x1000)=nil, 0x1000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0x1000, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a00010041"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, 0x0)
mlock2(&(0x7f0000a32000/0xe000)=nil, 0xe000, 0x0)

15.687840445s ago: executing program 3 (id=373):
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0))
write$dsp(r2, &(0x7f0000000000)="81", 0x1)
close(r2)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1], [0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x6, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x180d, 0x80000000, 0x9, 0x0, 0x0, 0xffff82ee, 0x2, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5]}, 0x45c)
readv(0xffffffffffffffff, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e1d, 0x0, @loopback}, 0x1c)

13.477939346s ago: executing program 4 (id=374):
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_setup(0x7d5, &(0x7f0000000500)={0x0, 0xfffffffc})
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000d00)={0x968, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4c}}}}, [@NL80211_ATTR_TID_CONFIG={0x5ec, 0x11d, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf6e7, 0x0, 0x6, 0xc7, 0x9, 0x1, 0x5, 0x598]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x1}, {0x2}, {0x5, 0x3}, {0x2, 0x1}, {0x6, 0x1}, {0x7, 0x2}, {0x5, 0x2}, {0x5, 0x2}, {0x7, 0x5}, {0x4, 0x6}, {0x3}, {0x2}, {0x3, 0x1}, {0x2, 0x18}, {0x6, 0xa}, {0x5, 0x3}, {0x1, 0x5}, {0x2, 0x7}, {0x6, 0xa}, {0x2, 0x9}, {0x5, 0x9}, {0x6, 0x5}, {0x2, 0x1}, {0x2, 0xa}, {0x1, 0x2}, {0x1, 0x4}, {0x2, 0xa}, {0x6, 0x9}, {0x3, 0x8}, {0x2, 0x4}, {0x5, 0x6}, {0x7, 0x4}, {0x4, 0x6}, {0x0, 0x2}, {0x7, 0x5}, {0x0, 0x3}, {0x1, 0x4}, {0x1, 0x8}, {0x3, 0x8}, {0x3, 0x3}, {0x5}, {0x7, 0x5}, {0x5, 0x2}, {0x6, 0x8}, {0x6, 0x1}, {0x7, 0x6}, {0x6, 0x4}, {0x3, 0x7}, {0x2, 0x8}, {0x3, 0x5}, {0x5, 0x7}, {0x1, 0x4}, {0x5, 0x2}, {0x6, 0x1}, {0x2, 0x2}, {0x0, 0x4}, {0x2, 0x9}, {0x7}, {0x7, 0x3}, {0x1, 0x1}, {0x6, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x4, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x464, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x34c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x800, 0x100, 0x81, 0x7fff, 0x6, 0x6ad, 0x12b]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6, 0x24, 0x2, 0xb, 0x36]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x6}, {0x2, 0x9}, {0x0, 0x1}, {0x2, 0x2}, {0x4, 0x2}, {0x3, 0xa}, {0x1, 0x6}, {0x2, 0x7}, {0x0, 0x8}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x4}, {0x4, 0x5}, {0x1, 0x2}, {0x3, 0x4}, {0x1, 0x5}, {0x6, 0x1}, {0x4, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {0x1, 0x3}, {0x4, 0x2}, {0x7, 0x3}, {0x4, 0x3}, {0x4, 0x2}, {0x4, 0x1}, {0x5, 0x3}, {0x4, 0x9}, {0x6, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x10, 0x9, 0x0, 0xc36, 0x5, 0x9, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x4, 0x8000, 0x5, 0x4, 0x8, 0xff, 0xf]}}]}, @NL80211_BAND_5GHZ={0x10c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x0, 0x2}, {0x0, 0x5}, {0x4, 0x4}, {0x6, 0x2}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x7}, {0x1, 0x1}, {0x0, 0x5}, {0x2, 0x9}, {0x2, 0x9}, {0x6, 0x7}, {0x7, 0x7}, {0x7, 0x5}, {0x7, 0x5}, {0x4, 0x3}, {0x5}, {0x7, 0x8}, {0x7, 0x7}, {0x5, 0x8}, {0x5, 0x1}, {0x2, 0x2}, {0x2, 0x3}, {0x7, 0x1}, {0x1, 0x3}, {0x2, 0x7}, {0x0, 0x9}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0x7}, {0x3, 0x9}, {0x3, 0x8}, {0x2, 0xa}, {0x0, 0x5}, {0x1, 0x5}, {0x7, 0x5}, {0x0, 0x5}, {0x6, 0x1}, {0x7, 0x3}, {0x5, 0x7}, {0x7, 0x2}, {0x6, 0x8}, {0x2, 0x4}, {0x2, 0x3}, {0x5}, {0x1, 0x2}, {0x3, 0x5}, {0x2}, {0x1, 0x8}, {0x4, 0x6}, {0x7, 0x1}, {0x0, 0x7}, {0x2, 0x1}, {0x5, 0x5}, {0x0, 0x3}, {}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x9}, {0x5, 0x2}, {0x3, 0x5}, {0x4, 0x7}, {0x5, 0x3}, {0x7, 0x3}, {0x7, 0x4}, {0x7, 0x4}, {0x2, 0x6}, {0x2, 0x7}, {0x0, 0x7}, {0x2, 0x9}, {0x5, 0x7}, {0x7, 0x1}, {0x0, 0xa}, {0x3, 0x6}, {0x0, 0x8}, {0x3, 0x5}, {0x3, 0x8}, {0x3}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x0, 0x4}, {0x2, 0x9}, {0x5, 0xa}, {0x2, 0x2}, {0x4, 0x6}, {0x5, 0x9}, {0x2, 0x8}, {0x6, 0x8}, {0x1, 0x1}, {0x3, 0x8}, {0x1, 0x5}, {0x1, 0x5}, {0x6, 0x1}, {0x1, 0x4}, {0x6, 0x1}, {0x4, 0xa}, {0x1, 0x6}, {0x2, 0xa}, {0x5, 0xa}, {0x1, 0x1}, {0x4}, {0x6, 0x9}, {0x2, 0x4}, {0x3, 0x1}, {0x7, 0x5}, {0x0, 0x6}, {0x1, 0x7}, {0x0, 0xa}, {0x4, 0x2}, {0x1, 0x13}, {0x0, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x5}, {0x3}, {0x4, 0x8}, {0x3, 0x7}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x7}, {0x0, 0xa}, {0x2, 0x8}, {0x3, 0x9}, {0x5, 0xa}, {0x1, 0x4}, {0x5, 0x2}, {0x0, 0x9}, {0x6, 0x4}, {0x5, 0x1}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x7}, {0x4, 0x8}, {0x5, 0x8}, {0x1, 0xa}, {0x5, 0x3}, {0x1}, {0x1, 0x8}, {0x0, 0x3}, {0x7, 0x6}, {0x4}, {0x2, 0x8}, {0x7, 0x2}, {0x6, 0x9}, {0x0, 0x8}, {0x7, 0x8}, {0x6, 0x9}, {0x4, 0x4}, {0x0, 0x9}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x0, 0x2}, {0x2, 0x8}, {0x6, 0xa}, {0x2, 0xa}, {0x4, 0x7}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x4}, {0x6, 0x4}, {0x2, 0x4}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0x6}, {0x6, 0x9}, {0x4, 0x7}, {0x0, 0x7}, {0x2, 0x5}, {0x3, 0x4}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x9}, {0x2, 0xa}, {0x0, 0x7}, {0x6, 0x8}, {0x1, 0x5}, {0x6, 0x8}, {0x7, 0x1}, {0x0, 0x3}, {}, {0x0, 0x9}, {0x1, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x3, 0x9, 0xff80, 0x0, 0x9, 0x6, 0x7]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x5, 0x6, 0x6, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x4, 0x1f4e, 0x7c0, 0x9, 0x400]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x401, 0xa, 0x2, 0x4, 0x4, 0x3, 0xd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x39, 0x2, 0xab4, 0x1, 0x5, 0x1, 0x1000, 0x8001]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x7, 0xcd39, 0x80, 0x0, 0xfff9, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x157, 0xc0d, 0x80, 0x800, 0x4, 0x7, 0x7fff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x3, 0xd, 0xff, 0x4, 0x9, 0x1]}}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6e73, 0x7fff, 0x9, 0x8, 0x1, 0x4, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x100, 0x4, 0x0, 0x6, 0x0, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x1, 0xe3, 0x2, 0x2, 0x8, 0x5092]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xfff7, 0x3ff, 0x6, 0x7f, 0x4, 0x8001, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x6, 0x0, 0x5272, 0x7, 0x2, 0x3]}}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x16, 0xc, 0x4, 0xc, 0x16, 0x30, 0x2, 0x30, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcce5, 0x4, 0x8, 0xffff, 0x4, 0x9, 0xf, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xe, 0x2, 0x80, 0x3, 0xba, 0x9, 0xe47]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x4, 0x101, 0x8, 0x401, 0x5, 0x34d]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0xb, 0x7, 0x3, 0x200, 0x4, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x60, 0x2, 0x60, 0xb, 0x4, 0x30, 0x24, 0x5a, 0x6c, 0x1, 0x6, 0x4, 0x48, 0x6, 0x0, 0x5, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0xd, 0x883a, 0x6, 0x1000, 0x9, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x1, 0x36, 0x18, 0x89, 0x4, 0x30, 0xb, 0x30, 0x36, 0x24, 0x6c, 0xb, 0x36, 0x18, 0xa, 0x1b, 0x3, 0x2, 0x18, 0x9]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xb, 0x9, 0x1b, 0xb, 0x36, 0x0, 0x30, 0x36, 0x2, 0x2, 0x2, 0x6c, 0x5, 0x18, 0x12, 0x36, 0x30, 0xf, 0x6, 0x3, 0x18, 0x1b, 0x4, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x7}, {0x3, 0x4}, {0x1}, {0x4, 0x7}, {0x1}, {0x1, 0x4}, {0x0, 0x8}, {0x7, 0x6}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x1}, {0x4, 0x7}, {0x2, 0x3}, {0x1, 0x3}, {0x0, 0xa}, {0x3, 0x6}, {0x6, 0x7}, {0x0, 0x9}, {0x2, 0x4}, {0x3, 0x4}, {0x4, 0x8}, {0x1, 0xa}, {0x1, 0x2}, {0x5, 0x6}, {0x1, 0xa}, {0x0, 0x7}, {0x7, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x8}, {0x2}, {}, {0x2}, {0x1, 0x5}, {0x7}, {0x6, 0x5}, {0x1, 0x2}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x6}, {0x4, 0x7}, {0x0, 0x4}, {0x0, 0x7}, {0x5, 0xa}, {0x0, 0x5}, {0x6, 0x7}, {0x5, 0x7}, {0x6, 0x9}, {0x4, 0x5}, {0x4, 0x3}, {0x7, 0x7}, {0x2, 0x7}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x2, 0x3}, {0x7, 0x5}, {0x0, 0x4}, {0x2, 0x6}, {0x4, 0xa}, {0x1, 0x6}, {0x2, 0x3}, {0x4, 0x7}, {0x4}, {}, {0x5, 0x3}, {0x0, 0x1}, {0x7, 0xa}, {0x7, 0x2}, {0x5, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x6, 0x800, 0x2, 0x6e, 0x7, 0x1ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x70ac}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x43}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x90}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x6c, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2d0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x43}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd}]}]}, @NL80211_ATTR_TID_CONFIG={0x2e8, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xca}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x228, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x204, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x8, 0x7, 0x5, 0x3, 0xa, 0xf7ca, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x778, 0x7, 0x39, 0xdb, 0x5, 0x10, 0x4]}}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x9}, {0x4, 0x9}, {0x2, 0x6}, {0x6, 0x7}, {0x7, 0x3}, {0x5}, {0x1, 0x8}, {0x5, 0x7}, {0x1}, {}, {0x7, 0x5}, {0x0, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x3, 0x7}, {0x4, 0xa}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x8}, {0x7, 0x4}, {0x1, 0x8}, {0x3, 0x9}, {0x3, 0x1}, {0x1, 0x9}, {0x3}, {0x4, 0x8}, {0x1, 0x6}, {0x1, 0x5}, {0x7, 0x8}, {0x1, 0x8}, {0x5, 0x4}, {0x2, 0x4}, {0x0, 0x5}, {0x5, 0x9}, {0x2, 0x3}, {0x6, 0x8}, {0x6, 0x7}, {0x4, 0x8}, {0x0, 0x6}, {0x4, 0x3}, {0x2, 0x6}, {0x4, 0x1}, {0x5, 0x2}, {0x4, 0x6}, {0x1, 0x6}, {0x4, 0x5}, {0x3, 0x1}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x1}, {0x6, 0xa}, {0x2, 0x5}, {0x3, 0x3}, {0x5}, {0x0, 0x5}, {0x6, 0x4}, {0x2, 0xa}, {0x3, 0x8}, {0x0, 0x3}, {0x7, 0x6}, {0x0, 0x1}, {0x4, 0xa}, {0x7, 0x3}, {0x7, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x7, 0x3}, {0x2, 0x5}, {0x3, 0x3}, {0x0, 0x6}, {0x1, 0x8}, {0x6, 0x3}, {}, {0x4, 0xa}, {0x2, 0x8}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x1}, {0x5, 0x5}, {0x2, 0x1}, {0x3, 0x8}, {0x6, 0x2}, {0x1, 0x2}, {0x0, 0x7}, {0x5, 0xa}, {0x3, 0xa}, {0x1, 0x8}, {0x4, 0x6}, {0x0, 0x4}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x4, 0x2, 0x4, 0x7, 0x3, 0x101, 0x6]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x36, 0x1b, 0xc, 0x6, 0x6, 0x18, 0x60, 0x48, 0xc, 0x60, 0x18, 0x14, 0xe0fcb00849cfc901, 0x12, 0x2, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x86ce, 0x4730, 0x4, 0x3, 0xb, 0x5, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x5, 0x4}, {0x5, 0x4}, {0x2, 0x7}, {0x5, 0x2}, {0x5, 0x6}, {0x6}, {0x4, 0x1}, {0x7, 0x6}, {0x0, 0x3}, {0x2, 0x1}, {0x2}, {0x7, 0xa}, {0x3, 0x3}, {0x4, 0x4}, {0x4, 0xa}, {0x1, 0x4}, {0x1, 0x4}, {0x6, 0x6}, {0x1}, {0x6, 0x6}, {0x0, 0x4}, {0x7, 0x9}, {0x1, 0x3}, {0x4, 0x7}, {0x4, 0x7}, {0x1, 0x6}, {0x3, 0x6}, {0x5, 0x5}, {0x7, 0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0xa}, {0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x5, 0x2}, {0x1, 0x2}, {0x2, 0x6}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x6}, {0x1, 0x9}, {0x5, 0x5}, {0x3, 0x5}, {0x3, 0x2}, {0x5, 0xa}, {0x1, 0x6}, {0x4, 0x9}, {0x2, 0x7}, {0x4, 0x6}, {0x0, 0x3}, {0x5, 0xa}, {0x2}, {0x3, 0x9}, {0x7, 0x5}, {0x4}, {0x1, 0x9}, {0x2, 0x1}, {0x2, 0x2}, {0x6, 0x3}, {0x0, 0x4}, {0x1, 0x7}, {0x1, 0x3}, {0x6, 0xa}, {0x0, 0x8}, {0x0, 0x9}, {0x5}, {0x2, 0x1}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0xfffa, 0x7, 0x4, 0x0, 0xa, 0x29d5]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x10, 0xd, 0x8001, 0x8, 0x40, 0x8000, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x309, 0x0, 0x4, 0x9, 0x5, 0x6, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x8, 0x1, 0xfffe, 0x4, 0x6, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x38}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x968}, 0x1, 0x0, 0x0, 0x10}, 0x48880)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000100070000000000000010797a3200000000140007800800064000000000080013400000170813000300686173683a6e65742c696661636500000500040002000000b5556359d2062c1f7f2a2e902ef81bc30824b167"], 0x58}}, 0x4004020)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x399, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0xfeedcafe, 0x8, 0x31435641, 0x9, 0x5, 0xb8, 0x3, 0x6, 0x0, 0x6, 0x0, 0x74c3924ecb75b6cd}})

13.354743594s ago: executing program 3 (id=375):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r4, &(0x7f0000000000)='\x00', 0x1, 0x800, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @loopback, 0x8080}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1840}, 0x40c0080)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
ftruncate(r8, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r8, 0x0)

13.290401552s ago: executing program 2 (id=376):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0xa00}}, 0x20}}, 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="600000000206010100000000000000000100ffff140007"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x4, 0x8a}, 0x9c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

13.237705668s ago: executing program 0 (id=377):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="850000002e000000661200000000000016000000ffffffff9500000000000000bd013f2755ac44ed976b5452165249753b10ad6f120f07a9645d62b69afe2e10772606696a2223d1b4ffffff7f000000007d3dd227bd388d99db7ef75d51b090729ef7ebb669afc4caf49d4cd1fcbdb4f7792dd759564d40819bb243b0e7989c7f047adba9793d44f274b1602135fb822cfb2793ac4b49c7fb09cc493dba49000000000000d1a30fdd"], &(0x7f0000000140)='GPL\x00', 0x4, 0xa, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_clone3(0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

13.188384208s ago: executing program 1 (id=378):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$dri(&(0x7f0000000000), 0x4, 0xa0002)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d80)=ANY=[@ANYBLOB="2800000012000554453abda1c708f40007000000a60e0000", @ANYRES32, @ANYBLOB="0c000080080031001caff8c2"], 0x28}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001000000000000000000fbc09e8e3c000000060a0b040000000000000000020000081c000480180001800e000100636f6e6e6c696d6974000000040002800d0000000011000100000000000000000000003318accd17fbcf74e303000a00"], 0x64}}, 0x0)
close(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socket$inet6(0xa, 0x6, 0xb3)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0]})
r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x109)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x9, &(0x7f0000000040), 0x18)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f0000000100)={0x0, 0x1, 0x2022})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2})
io_uring_enter(0xffffffffffffffff, 0x3f80, 0x3697, 0x25, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000400)={0x3, 0x1, 0x4, 0x1000, 0x2, 0x0, [{0x8, 0x1, 0xf, '\x00', 0x128c}, {0x200, 0x4, 0x81, '\x00', 0x8}]})
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)

10.680605126s ago: executing program 2 (id=379):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000002380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x28, 0x1, 0x0)
r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000140)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@secondary)
add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0xfffffffffffffe47, r2)
syz_open_dev$ttys(0xc, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0)
munlockall()
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f020})
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={&(0x7f0000000000)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x44814)
r5 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

10.169920706s ago: executing program 0 (id=380):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r4, &(0x7f0000000000)='\x00', 0x1, 0x800, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @loopback, 0x8080}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1840}, 0x40c0080)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
ftruncate(r7, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r7, 0x0)

10.032345812s ago: executing program 4 (id=381):
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f0000000540)='./cgroup\x00')
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x324, 0x1b8, 0x0, 0x148, 0x0, 0x148, 0x290, 0x240, 0x240, 0x290, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x11e, 0x10, 0x1, 0x0, 'syz0\x00'}}, @common=@addrtype={{0x2c}, {0x0, 0x400}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x188, 0x6, 0x3}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9, 0x4, 0x3, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x380)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x2ec}, 0x1, 0x0, 0x0, 0x20008811}, 0x0)
r5 = syz_mount_image$fuse(0x0, 0x0, 0x40cc, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r2, @ANYRESDEC, @ANYRESDEC=r3, @ANYRES64=r3, @ANYBLOB=',group_id=', @ANYBLOB="ffa48cb63523f54a5215a6418adb983b37ee", @ANYRESHEX=0x0, @ANYRES8=r2, @ANYRES64=r5])
lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00')
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
accept4(r6, 0x0, 0x0, 0x80000)
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016001d0a"], 0x14}}, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r7)

9.542376094s ago: executing program 3 (id=382):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
close_range(r0, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = socket(0x1d, 0x2, 0x6)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000140)={0x4})
epoll_create(0x9660)
close(r1)
r3 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000002840)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x8)
unshare(0x2c020400)
unshare(0x22020000)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_int(r5, 0x0, 0x17, 0x0, 0x0)
syz_emit_ethernet(0x396, &(0x7f0000000500)=ANY=[], 0x0)
close(0x3)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000000020101040000000000000000020001014400028006000340000400041400018008000100ac14142a08000200ac"], 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0x78, &(0x7f00002a0000/0x1000)=nil, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\'|\x00'/28], 0x48)
request_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x1}, &(0x7f0000001440)='/\x00', 0xfffffffffffffffe)

9.481698215s ago: executing program 1 (id=392):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r4, &(0x7f0000000000)='\x00', 0x1, 0x800, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @loopback, 0x8080}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1840}, 0x40c0080)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
ftruncate(r8, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r8, 0x0)

7.014468738s ago: executing program 0 (id=383):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x10, 0x0, 0x0, {0x9}}, 0x14}}, 0x20040000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
socketpair(0x29, 0x2, 0x0, &(0x7f0000000a40))
sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRES64=0x0, @ANYRES16=r3], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}}}]}, 0x48}}, 0x4004410)
r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f00000004c0)={0x8, @output={0x0, 0x1, {0x4, 0x80}, 0xffffff7f, 0x7}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r9=>0xffffffffffffffff})
r10 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100)=<r11=>0x0, &(0x7f0000000580)=<r12=>0x0)
syz_io_uring_submit(r11, r12, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd=r9, 0xffffffffffffffff, 0x8, 0x7, 0x9})
io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/92, 0x5c}], 0x1)
io_uring_enter(r10, 0x54, 0x0, 0x0, 0x0, 0x0)
r13 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r13, 0x8924, &(0x7f0000000100)={'caif0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}})
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', <r14=>0x0, 0x4, 0xd, 0x94, 0x8001, 0x54, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x10, 0x81, 0x6}})
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000e00)=@ll={0x11, 0xf6, r14, 0x1, 0x6, 0x6, @broadcast}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="27050200590200000600002fb96dbcf706d90500070088a8", 0x18}, {&(0x7f00000002c0)="17ddb4ffab95be775954502ab20abf52f5e2d3369b5daf52ddd9a69ab4e2db92fb80a3fabb59ff7057381bdc280e017fbdef680da8ee6f19f0057e9f77ca983ab4804df4c8c9b356cbdfcd6086b55476e2bd984477952b5a66ca841cb29dbc8324423475dfd99f6b219260a395fdf004cff4e1cab0b9334187ebd5fb6987823ab82f1e1254fce19270d6d535d92646ea0592c533175f057237ee72989d679250e5e71cd2762593d261643f31458e0ac367ea2f0cf1999d1c4a95d15e42757ea10b46ff36076955d74cc4f1b43fcd87f76ad3", 0xd2}], 0x2}, 0x0)

6.988323766s ago: executing program 2 (id=384):
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x65)
sigaltstack(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0)
r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@secondary)
add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0xb, 0x400)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000030c0)={0xf, 0xdcd, 0x40, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000003100)={r5})
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0x76, 0x2, 0x9}})
sendto$inet(r6, 0x0, 0x0, 0x11, 0x0, 0x0)
gettid()
r7 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$6lowpan_control(r7, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @local}, 0x2}}, 0x2e)

6.249838328s ago: executing program 0 (id=385):
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0))
write$dsp(r2, &(0x7f0000000000)="81", 0x1)
close(r2)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1], [0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x6, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x180d, 0x80000000, 0x9, 0x0, 0x0, 0xffff82ee, 0x2, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5]}, 0x45c)
readv(0xffffffffffffffff, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e1d, 0x0, @loopback}, 0x1c)

6.083842608s ago: executing program 4 (id=386):
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0))
write$dsp(r2, &(0x7f0000000000)="81", 0x1)
close(r2)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1], [0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x6, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x180d, 0x80000000, 0x9, 0x0, 0x0, 0xffff82ee, 0x2, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e1d, 0x0, @loopback}, 0x1c)

6.062461154s ago: executing program 3 (id=387):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
syz_emit_ethernet(0x4a, 0x0, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82)
r5 = dup(r4)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x7fff, 0xf, 0x0, 0x2, 0x0})
r6 = getpid()
sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
getpgid(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000004e220000000000000a008080"], 0xb8}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0xb0, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x84, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fff, 0x1}}, @TCA_HTB_INIT={0xffffffffffffffa2, 0x2, {0x3, 0xfffffffd, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1b90}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0xbdbf}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x10}}]}}]}, 0xb0}}, 0x0)

5.914342013s ago: executing program 1 (id=388):
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000100)={0x36, "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"})
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)={0x2c, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x814)
socket$kcm(0x11, 0x3, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_setup(0x5b06, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0)=<r8=>0x0, &(0x7f0000000440))
r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2, @void, @value}, 0x94)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_START(r9, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r9, 0x54a3)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000380)='sched_pi_setprio\x00', r10, 0x0, 0xac}, 0x18)
times(0x0)
syz_io_uring_submit(r8, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x500}, 0x1, 0x0, 0x0, 0x400c850}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xe000001a})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680))
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)

4.488029418s ago: executing program 1 (id=389):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0xa00}}, 0x20}}, 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="600000000206010100000000000000000100ffff140007"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x32, 0xb}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x4, 0x8a}, 0x9c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

4.332357833s ago: executing program 4 (id=390):
prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='//(\x00')
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
unshare(0x20000400)
r0 = openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000000280)={0x2020, 0x0, <r2=>0x0}, 0x2020)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x80000000, 0xbb46, 0x34324142, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}})
r3 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x1000, 0x2, 0xbfcffffc}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
unshare(0x22020600)
r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x161942, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r9 = eventfd(0xff7ffff7)
r10 = eventfd(0x0)
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000280)={r9, 0x2, 0x2, r10})
ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000140)={r9, 0x2, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40010002})
io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x2, @sliced={0x8, [0x1, 0x7, 0x5, 0x3ff, 0x9, 0x2, 0x6, 0x9, 0x1ff, 0xdd, 0x494, 0x139, 0x7, 0x5, 0x5, 0x7, 0x6, 0x9, 0x2, 0x5, 0x1, 0x1, 0xd, 0x6, 0x9, 0x8, 0xf6, 0x5, 0x7, 0x9, 0x4, 0x5, 0x9, 0x5, 0x5, 0x258d, 0xa, 0x9, 0x6, 0x1, 0xe, 0x40, 0x7ff, 0x7, 0x7f, 0xdea, 0x5, 0xbb], 0x80000000}})
write$FUSE_DIRENTPLUS(r1, &(0x7f00000022c0)=ANY=[@ANYBLOB="5801000000000000", @ANYRES64=r2], 0x158)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, <r11=>0xffffffffffffffff})
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', r11, 0x4000, r0}, 0x14)

4.214524262s ago: executing program 2 (id=391):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0)
r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x4}, 0x8)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x111, 0x9}}, 0x20)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = dup(r3)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r5, <r6=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={r6}, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8)
r9 = creat(&(0x7f0000000000)='./file0\x00', 0x6a)
write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[], 0x69)
close(r9)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000), &(0x7f00000001c0)=0x4)
sendmmsg(r7, &(0x7f0000001c00), 0x400000000000159, 0x40840)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, 0x0, 0x4804)
sendfile(r4, r4, 0x0, 0xffffffff)

3.126203803s ago: executing program 0 (id=393):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$qrtr(0x2a, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x80000}, 0x0)
syz_usb_connect(0x5, 0x3f, 0x0, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
openat$sysctl(0xffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000840), &(0x7f0000000880)=0x30)
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f0000000680), 0x0, 0x4000000)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r8, 0x3}, 0x8)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)

2.815845438s ago: executing program 3 (id=394):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x103, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
sendto$inet6(r4, &(0x7f0000000000)='\x00', 0x1, 0x800, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @loopback, 0x8080}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1840}, 0x40c0080)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
ftruncate(r7, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r7, 0x0)

1.945917506s ago: executing program 4 (id=395):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r6 = accept4(r5, 0x0, 0x0, 0x80000)
sendmsg$nl_xfrm(r6, 0x0, 0x40001)
r7 = userfaultfd(0x80801)
timer_create(0x2, 0x0, &(0x7f0000000480))
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000480)=<r8=>0x0)
timer_settime(r8, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_delete(r8)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
r10 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c)
recvfrom(r10, &(0x7f0000000040)=""/18, 0x12, 0x6667b9fe4a5fca0, 0x0, 0x0)
close_range(r9, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100})
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0)

936.119423ms ago: executing program 1 (id=396):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000200))
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x9df, 0x3, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"})
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
sendmmsg$inet6(r3, &(0x7f0000006c40)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}, 0x1c, &(0x7f0000000680)=[{0x0}], 0x1}}], 0x1, 0x4000)
r4 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f00000027c0)={0x0, 0x0, 0x40, 0x0, 0x3})
listen(r3, 0xf5db)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0)

766.384278ms ago: executing program 2 (id=397):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xffffff48)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0xa, {0x2, 0x0, @broadcast}, 'lo\x00'})
socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)="390000001300034700bb7ae1c3e4ffff0056000000250000e5ffff0800040000000000000000", 0x26}, {&(0x7f0000000200)="3933b526f89770a8cf0caaddae66ee36dd39deda4c7e0e006163e44ff0970953a3893a86252dc07c0fab00f336260ec72e1ae6073732420352fa4d7edec50ab8c641c2bc7e8bb55313b4ee01e8d4a4f88fecfd80dae9c50abe61d49a6643a59efe9c34d1d24579c6ee13cf", 0x6b}, {&(0x7f0000000280)="88e9123f9e4e2968c497eccaf9b31f6655870c05977e96d9ac0a09a1181e1c5e5b08a729a09f765dc281f0d1c67fe71875efe3e880daeb1c94c9d4816a18da876b6ee3ea8517875dec076a6308f4be8fb48d231b29a6ad7f4bd2f1966a496efc4c69c9de9949552b8d22a872263aeae4f754b2ff2fa1a49ec609ac09feccf05b9043929c4408d72feca24cf7f87301b5e7787f5d5bdbec6095d9e506d7db6199e59634ba311abd29d98588ea39ad647a03ae2cb65978", 0xb6}], 0x3)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x8c040)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r6=>0xffffffffffffffff})
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
dup3(r6, r7, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x101}]})
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
mknodat$loop(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x0, 0x1)
renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x5)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./file1\x00', 0x141142, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)

0s ago: executing program 4 (id=398):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7}, 0x1c)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c990", 0x11}], 0x1}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r4)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r5 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000940)=<r6=>0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c81, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c11)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8)
r8 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r8, 0x2285, 0x0)
writev(r8, 0x0, 0x0)
r9 = socket$tipc(0x1e, 0x5, 0x0)
fchdir(r9)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts.
[   81.509695][ T5817] cgroup: Unknown subsys name 'net'
[   81.628545][ T5817] cgroup: Unknown subsys name 'cpuset'
[   81.638256][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.278001][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   85.934706][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.952516][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.960123][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.992353][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.000108][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.008393][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.017222][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.025127][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.033013][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   86.041065][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.062167][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.069423][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   86.087436][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.092814][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.098705][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   86.110069][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   86.112062][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.118316][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   86.125610][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.138152][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.145768][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.154200][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.165199][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.172863][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.195132][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.956760][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   87.096929][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   87.167631][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   87.222322][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   87.307885][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   87.444788][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.452241][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.459595][ T5845] bridge_slave_0: entered allmulticast mode
[   87.468552][ T5845] bridge_slave_0: entered promiscuous mode
[   87.497390][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.505005][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.512329][ T5849] bridge_slave_0: entered allmulticast mode
[   87.519684][ T5849] bridge_slave_0: entered promiscuous mode
[   87.553864][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.561000][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.568355][ T5845] bridge_slave_1: entered allmulticast mode
[   87.575704][ T5845] bridge_slave_1: entered promiscuous mode
[   87.612512][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.619717][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.627842][ T5849] bridge_slave_1: entered allmulticast mode
[   87.635250][ T5849] bridge_slave_1: entered promiscuous mode
[   87.683444][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.690625][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.698120][ T5848] bridge_slave_0: entered allmulticast mode
[   87.705751][ T5848] bridge_slave_0: entered promiscuous mode
[   87.748279][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.758022][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.768083][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.775293][ T5848] bridge_slave_1: entered allmulticast mode
[   87.782697][ T5848] bridge_slave_1: entered promiscuous mode
[   87.791567][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.814757][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.822019][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.829137][ T5846] bridge_slave_0: entered allmulticast mode
[   87.837338][ T5846] bridge_slave_0: entered promiscuous mode
[   87.861479][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.899305][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.909066][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.917065][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.924396][ T5846] bridge_slave_1: entered allmulticast mode
[   87.931587][ T5846] bridge_slave_1: entered promiscuous mode
[   88.004329][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.011550][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.019984][ T5851] bridge_slave_0: entered allmulticast mode
[   88.027671][ T5851] bridge_slave_0: entered promiscuous mode
[   88.039458][ T5845] team0: Port device team_slave_0 added
[   88.050678][ T5845] team0: Port device team_slave_1 added
[   88.059687][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.088952][ T5849] team0: Port device team_slave_0 added
[   88.108682][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.116915][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.124837][ T5851] bridge_slave_1: entered allmulticast mode
[   88.132253][ T5851] bridge_slave_1: entered promiscuous mode
[   88.154229][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.165595][ T5849] team0: Port device team_slave_1 added
[   88.189025][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.193364][ T5838] Bluetooth: hci3: command tx timeout
[   88.198313][   T51] Bluetooth: hci4: command tx timeout
[   88.203934][ T5840] Bluetooth: hci0: command tx timeout
[   88.214537][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.272219][ T5838] Bluetooth: hci2: command tx timeout
[   88.278128][ T5838] Bluetooth: hci1: command tx timeout
[   88.327252][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.334734][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.361183][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.376728][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.383749][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.409692][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.423891][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.430867][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.456940][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.470635][ T5848] team0: Port device team_slave_0 added
[   88.493760][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.506655][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.516741][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.523775][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.549911][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.576548][ T5848] team0: Port device team_slave_1 added
[   88.600277][ T5846] team0: Port device team_slave_0 added
[   88.639841][ T5851] team0: Port device team_slave_0 added
[   88.649632][ T5851] team0: Port device team_slave_1 added
[   88.669513][ T5846] team0: Port device team_slave_1 added
[   88.761584][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.769105][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.795824][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.808896][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.816180][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.842295][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.854779][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.861753][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.887868][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.918239][ T5845] hsr_slave_0: entered promiscuous mode
[   88.924922][ T5845] hsr_slave_1: entered promiscuous mode
[   88.932849][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.939807][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.965901][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.996167][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.003890][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.030275][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.057763][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.064772][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.091507][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.121465][ T5849] hsr_slave_0: entered promiscuous mode
[   89.128244][ T5849] hsr_slave_1: entered promiscuous mode
[   89.135159][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.143467][ T5849] Cannot create hsr debugfs directory
[   89.185871][ T5848] hsr_slave_0: entered promiscuous mode
[   89.193349][ T5848] hsr_slave_1: entered promiscuous mode
[   89.199467][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.207778][ T5848] Cannot create hsr debugfs directory
[   89.271626][ T5851] hsr_slave_0: entered promiscuous mode
[   89.278198][ T5851] hsr_slave_1: entered promiscuous mode
[   89.285032][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.292685][ T5851] Cannot create hsr debugfs directory
[   89.433812][ T5846] hsr_slave_0: entered promiscuous mode
[   89.440190][ T5846] hsr_slave_1: entered promiscuous mode
[   89.447092][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.454823][ T5846] Cannot create hsr debugfs directory
[   89.984964][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   90.007860][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   90.019810][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   90.039243][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   90.109086][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   90.125424][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   90.137185][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   90.164367][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   90.234491][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   90.247767][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   90.261484][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   90.272031][ T5838] Bluetooth: hci3: command tx timeout
[   90.272053][ T5840] Bluetooth: hci4: command tx timeout
[   90.277437][   T51] Bluetooth: hci0: command tx timeout
[   90.300521][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   90.352025][ T5838] Bluetooth: hci1: command tx timeout
[   90.357482][   T51] Bluetooth: hci2: command tx timeout
[   90.445144][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   90.457891][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   90.498437][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   90.509940][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   90.566480][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.587158][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   90.625874][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   90.639897][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   90.654414][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.701741][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.727020][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.747458][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   90.787052][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.794421][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.826242][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.833398][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.884584][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   90.894974][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   90.931101][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.938345][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.956932][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.964166][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.984974][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.992175][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.044991][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.052201][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.119804][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.191216][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.248403][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   91.264354][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.299963][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.307112][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.319385][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.326601][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.339353][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   91.349812][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.385838][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.393023][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.429083][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.436270][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.527353][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.548660][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.558375][ T5848] veth0_vlan: entered promiscuous mode
[   91.643695][ T5848] veth1_vlan: entered promiscuous mode
[   91.732111][ T5851] veth0_vlan: entered promiscuous mode
[   91.747197][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.759826][ T5849] veth0_vlan: entered promiscuous mode
[   91.793404][ T5848] veth0_macvtap: entered promiscuous mode
[   91.825494][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.836905][ T5851] veth1_vlan: entered promiscuous mode
[   91.846170][ T5849] veth1_vlan: entered promiscuous mode
[   91.863985][ T5848] veth1_macvtap: entered promiscuous mode
[   91.875109][    T9] cfg80211: failed to load regulatory.db
[   91.950267][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.963188][ T5849] veth0_macvtap: entered promiscuous mode
[   91.975157][ T5845] veth0_vlan: entered promiscuous mode
[   91.989126][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.009927][ T5849] veth1_macvtap: entered promiscuous mode
[   92.036938][ T5845] veth1_vlan: entered promiscuous mode
[   92.055083][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.064909][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.074704][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.084343][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.120809][ T5851] veth0_macvtap: entered promiscuous mode
[   92.143416][ T5846] veth0_vlan: entered promiscuous mode
[   92.165675][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.178160][ T5851] veth1_macvtap: entered promiscuous mode
[   92.195474][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.236158][ T5846] veth1_vlan: entered promiscuous mode
[   92.255368][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.265698][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.274660][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.284780][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.295893][ T5845] veth0_macvtap: entered promiscuous mode
[   92.330325][ T5845] veth1_macvtap: entered promiscuous mode
[   92.348594][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.356250][   T51] Bluetooth: hci4: command tx timeout
[   92.362472][   T51] Bluetooth: hci3: command tx timeout
[   92.367909][   T51] Bluetooth: hci0: command tx timeout
[   92.401362][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.428957][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.439469][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.450347][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.457397][   T51] Bluetooth: hci2: command tx timeout
[   92.460247][ T5838] Bluetooth: hci1: command tx timeout
[   92.465400][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.478700][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.500912][  T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.502236][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.525847][  T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.556862][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.566855][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.575838][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.585734][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.629450][ T5846] veth0_macvtap: entered promiscuous mode
[   92.679292][  T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.689771][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.705502][  T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.709409][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.726109][ T5846] veth1_macvtap: entered promiscuous mode
[   92.803495][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.819235][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.838289][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.879149][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.882772][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   92.934656][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.951396][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.962259][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.970992][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.029025][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.042065][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.173839][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.181726][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.189607][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   93.335764][  T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.347973][ T5900] input: syz0 as /devices/virtual/input/input5
[   93.364060][  T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.398987][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.431138][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.579088][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.645698][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.715266][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.724590][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.416968][ T5904] syzkaller0: entered promiscuous mode
[   94.446781][ T5838] Bluetooth: hci0: command tx timeout
[   94.452336][ T5838] Bluetooth: hci3: command tx timeout
[   94.459196][ T5838] Bluetooth: hci4: command tx timeout
[   94.496077][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   94.597732][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   94.612933][   T51] Bluetooth: hci1: command tx timeout
[   94.621279][ T5838] Bluetooth: hci2: command tx timeout
[   94.655611][ T5910] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[   94.699574][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   94.793783][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   94.802764][ T5904] syzkaller0: entered allmulticast mode
[   94.805271][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.002338][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   95.011258][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.101918][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   95.110249][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   95.119578][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   95.155448][   T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   95.563715][    T9] usb 3-1: config 0 has no interfaces?
[   95.579368][    T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[   95.607364][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.624733][    T9] usb 3-1: Product: syz
[   95.630526][    T9] usb 3-1: Manufacturer: syz
[   95.637853][    T9] usb 3-1: SerialNumber: syz
[   95.672998][    T9] usb 3-1: config 0 descriptor??
[   95.871716][   T43] usb 1-1: config 0 has no interfaces?
[   95.890066][   T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[   95.900995][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.944315][   T43] usb 1-1: Product: syz
[   95.948636][   T43] usb 1-1: Manufacturer: syz
[   96.013880][   T43] usb 1-1: SerialNumber: syz
[   96.155007][ T5912] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure
[   96.182889][   T43] usb 1-1: config 0 descriptor??
[   96.460976][ T5920] loop6: detected capacity change from 0 to 64
[   96.599892][ T5920] Invalid logical block size (4)
[   98.094747][ T5940] sctp: failed to load transform for md5: -2
[   98.799385][ T5892] usb 3-1: USB disconnect, device number 2
[   99.312671][ T5884] usb 1-1: USB disconnect, device number 2
[   99.611464][ T5954] fuse: Bad value for 'group_id'
[   99.620867][ T5954] fuse: Bad value for 'group_id'
[   99.736325][ T5949] netlink: 'syz.2.11': attribute type 5 has an invalid length.
[   99.759322][ T5949] ip6erspan0: entered promiscuous mode
[   99.803983][ T5963] kAFS: unable to lookup cell '.,'
[  100.686099][ T5892] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  100.853330][ T5892] usb 1-1: config index 0 descriptor too short (expected 12592, got 77)
[  100.881905][ T5892] usb 1-1: config 55 has too many interfaces: 55, using maximum allowed: 32
[  100.932792][ T5892] usb 1-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config
[  100.985334][ T5892] usb 1-1: config 55 has 0 interfaces, different from the descriptor's value: 55
[  101.049375][ T5892] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  101.060506][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.069275][ T5892] usb 1-1: Product: syz
[  101.084750][ T5892] usb 1-1: Manufacturer: syz
[  101.101314][ T5892] usb 1-1: SerialNumber: syz
[  101.389442][   T30] audit: type=1800 audit(1748642026.081:2): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15" name="file0" dev="tmpfs" ino=36 res=0 errno=0
[  101.395883][ T5972] netlink: 'syz.2.16': attribute type 10 has an invalid length.
[  101.409584][    C1] vkms_vblank_simulate: vblank timer overrun
[  101.435182][ T5972] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16'.
[  101.454057][ T5972] bond0: entered promiscuous mode
[  101.465262][ T5968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.516492][ T5972] bond_slave_0: entered promiscuous mode
[  101.547456][ T5968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.639629][ T5972] bond_slave_1: entered promiscuous mode
[  101.655844][   T30] audit: type=1800 audit(1748642026.161:3): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15" name="file0" dev="tmpfs" ino=36 res=0 errno=0
[  101.786196][ T5972] bridge0: port 3(bond0) entered blocking state
[  102.161974][ T5972] bridge0: port 3(bond0) entered disabled state
[  102.239855][ T5972] bond0: entered allmulticast mode
[  102.246332][ T5972] bond_slave_0: entered allmulticast mode
[  102.289717][ T5972] bond_slave_1: entered allmulticast mode
[  102.349528][ T5972] bridge0: port 3(bond0) entered blocking state
[  102.356595][ T5972] bridge0: port 3(bond0) entered forwarding state
[  102.385671][ T5983] IPv6: Can't replace route, no match found
[  103.601872][ T5894] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  103.630954][ T5884] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  103.749619][ T5892] usb 1-1: USB disconnect, device number 3
[  104.024438][ T5894] usb 5-1: config 0 has no interfaces?
[  104.057515][ T5894] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  104.113202][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.137773][ T5894] usb 5-1: Product: syz
[  104.152816][ T5894] usb 5-1: Manufacturer: syz
[  104.165736][ T5884] usb 4-1: config 0 has no interfaces?
[  104.183918][ T5894] usb 5-1: SerialNumber: syz
[  104.210794][ T5884] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  104.226180][ T5894] usb 5-1: config 0 descriptor??
[  104.267117][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.304797][ T5884] usb 4-1: Product: syz
[  104.326635][ T5884] usb 4-1: Manufacturer: syz
[  104.353269][ T5884] usb 4-1: SerialNumber: syz
[  104.442182][ T5884] usb 4-1: config 0 descriptor??
[  105.270328][ T6014] loop9: detected capacity change from 0 to 8
[  105.281054][ T6012] ªªªªªª: renamed from lo (while UP)
[  105.318618][ T5882]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  105.330256][ T5882] loop9: partition table partially beyond EOD, truncated
[  105.351322][ T6015] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  105.592574][ T5882] loop9: p1 size 81768186 extends beyond EOD, truncated
[  105.957640][ T6007] sctp: failed to load transform for md5: -2
[  106.023062][ T6014]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  106.088528][ T6014] loop9: partition table partially beyond EOD, truncated
[  106.272288][ T6014] loop9: p1 size 81768186 extends beyond EOD, truncated
[  106.939973][ T5882] udevd[5882]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  107.017803][ T5892] usb 5-1: USB disconnect, device number 2
[  107.288493][ T5882] udevd[5882]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  107.701894][ T6035] process 'syz.4.26' launched '/dev/fd/5' with NULL argv: empty string added
[  107.883732][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'.
[  108.352329][   T43] usb 4-1: USB disconnect, device number 2
[  108.802439][ T6047] netlink: 'syz.0.27': attribute type 5 has an invalid length.
[  108.825380][ T6047] ip6erspan0: entered promiscuous mode
[  109.484611][ T6044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.154887][    T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  110.428085][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[  110.441571][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  110.461983][ T5884] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  110.555010][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  110.564521][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.579501][    T9] usb 4-1: Product: syz
[  110.589631][    T9] usb 4-1: Manufacturer: syz
[  110.647403][    T9] usb 4-1: SerialNumber: syz
[  110.653870][ T5884] usb 5-1: config index 0 descriptor too short (expected 12592, got 77)
[  110.752145][ T5884] usb 5-1: config 55 has too many interfaces: 55, using maximum allowed: 32
[  110.788137][    T9] usb 4-1: bad CDC descriptors
[  110.816254][ T5884] usb 5-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config
[  110.870633][ T6063] netlink: 'syz.0.33': attribute type 10 has an invalid length.
[  111.026052][ T6052] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  111.080142][ T5884] usb 5-1: config 55 has 0 interfaces, different from the descriptor's value: 55
[  111.125189][ T6063] netlink: 40 bytes leftover after parsing attributes in process `syz.0.33'.
[  111.169516][ T6063] bond0: entered promiscuous mode
[  111.380991][ T5884] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  111.405826][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.429399][ T5884] usb 5-1: Product: syz
[  111.447632][ T5884] usb 5-1: Manufacturer: syz
[  111.459958][ T5884] usb 5-1: SerialNumber: syz
[  111.480849][ T6063] bond_slave_0: entered promiscuous mode
[  111.566894][ T6063] bond_slave_1: entered promiscuous mode
[  111.607990][ T6063] bridge0: port 3(bond0) entered blocking state
[  111.626344][ T6063] bridge0: port 3(bond0) entered disabled state
[  111.649617][ T6063] bond0: entered allmulticast mode
[  111.768008][ T6057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.776673][   T30] audit: type=1800 audit(1748642036.481:4): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.31" name="file0" dev="tmpfs" ino=39 res=0 errno=0
[  111.805767][ T6057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.851915][ T6063] bond_slave_0: entered allmulticast mode
[  111.882198][   T30] audit: type=1800 audit(1748642036.481:5): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.31" name="file0" dev="tmpfs" ino=39 res=0 errno=0
[  111.946825][ T6063] bond_slave_1: entered allmulticast mode
[  111.975687][ T6063] bridge0: port 3(bond0) entered blocking state
[  111.982254][ T6063] bridge0: port 3(bond0) entered forwarding state
[  112.510318][ T6067] IPv6: Can't replace route, no match found
[  113.203314][ T5830] usb 4-1: USB disconnect, device number 3
[  113.347796][ T5884] usb 5-1: USB disconnect, device number 3
[  114.771962][ T5884] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  115.720470][ T5884] usb 1-1: config 0 has no interfaces?
[  115.813676][ T5884] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  115.831832][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.860398][ T5884] usb 1-1: Product: syz
[  115.881088][ T5884] usb 1-1: Manufacturer: syz
[  115.954483][ T5884] usb 1-1: SerialNumber: syz
[  115.994288][ T5884] usb 1-1: config 0 descriptor??
[  116.011945][ T5894] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  116.253102][ T5894] usb 3-1: config 0 has no interfaces?
[  116.262859][ T5894] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  116.272059][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.280050][ T5894] usb 3-1: Product: syz
[  116.310073][ T5894] usb 3-1: Manufacturer: syz
[  116.340899][ T5894] usb 3-1: SerialNumber: syz
[  116.355561][ T6081] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  116.683550][ T6100] input: syz0 as /devices/virtual/input/input6
[  116.824705][ T5894] usb 3-1: config 0 descriptor??
[  117.959637][ T5830] usb 1-1: USB disconnect, device number 4
[  118.159494][ T6116] input: syz0 as /devices/virtual/input/input7
[  118.361330][ T5894] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  118.517148][ T5894] usb 2-1: config 0 has no interfaces?
[  118.530756][ T5894] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  118.546803][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.561240][ T5894] usb 2-1: Product: syz
[  118.569747][ T5894] usb 2-1: Manufacturer: syz
[  118.577666][ T5894] usb 2-1: SerialNumber: syz
[  118.588928][ T5894] usb 2-1: config 0 descriptor??
[  119.439067][    T9] usb 3-1: USB disconnect, device number 3
[  121.191946][    T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  121.307956][ T5892] usb 2-1: USB disconnect, device number 2
[  121.478473][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  121.658775][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  121.685136][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  121.777595][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.786962][    T9] usb 5-1: Product: syz
[  121.791139][    T9] usb 5-1: Manufacturer: syz
[  121.797141][    T9] usb 5-1: SerialNumber: syz
[  121.924170][ T6152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.49'.
[  121.989471][    T9] usb 5-1: bad CDC descriptors
[  122.667621][ T6157] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  122.684367][ T6157] netlink: 'syz.2.50': attribute type 1 has an invalid length.
[  122.693688][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'.
[  123.135991][ T6157] hsr_slave_0: left promiscuous mode
[  123.226105][ T6157] hsr_slave_1: left promiscuous mode
[  123.335757][ T5894] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  123.576793][ T6164] futex_wake_op: syz.3.47 tries to shift op by -33; fix this program
[  123.602236][ T6164] netdevsim netdevsim3: Direct firmware load for .
[  123.602236][ T6164]  failed with error -2
[  123.616633][ T6164] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  123.616633][ T6164] 
[  123.705289][ T5894] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  123.889457][ T5894] usb 3-1: config 0 interface 0 has no altsetting 0
[  124.385768][ T5894] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  124.401834][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.417933][ T5884] usb 5-1: USB disconnect, device number 4
[  124.474759][ T5894] usb 3-1: Product: syz
[  124.539005][ T5894] usb 3-1: Manufacturer: syz
[  124.957394][ T5894] usb 3-1: SerialNumber: syz
[  125.204059][ T5894] usb 3-1: config 0 descriptor??
[  125.278215][ T5894] usb 3-1: selecting invalid altsetting 0
[  126.132323][ T6182] input: syz0 as /devices/virtual/input/input8
[  127.062337][ T2154] usb 3-1: USB disconnect, device number 4
[  127.966568][ T6201] ALSA: mixer_oss: invalid index 40000
[  128.180231][ T5892] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  128.332336][ T6207] input: syz0 as /devices/virtual/input/input9
[  128.741879][ T5892] usb 5-1: Using ep0 maxpacket: 16
[  128.798934][ T5892] usb 5-1: config 0 has no interfaces?
[  128.922425][ T5892] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  129.020666][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.059668][ T5892] usb 5-1: Product: syz
[  129.067331][ T5892] usb 5-1: Manufacturer: syz
[  129.081976][ T5892] usb 5-1: SerialNumber: syz
[  129.227896][ T5892] usb 5-1: config 0 descriptor??
[  129.262130][ T6213] input: syz0 as /devices/virtual/input/input10
[  129.972870][ T6200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.985616][ T6200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.933987][ T6228] tipc: Started in network mode
[  130.939112][ T6228] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  130.950377][ T6228] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  131.279260][ T5892] usb 5-1: USB disconnect, device number 5
[  132.096107][ T6240] input: syz0 as /devices/virtual/input/input11
[  132.836588][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  132.843396][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  135.307846][ T6266] input: syz0 as /devices/virtual/input/input12
[  135.906662][   T30] audit: type=1326 audit(1748642060.621:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7fc00000
[  136.101842][   T30] audit: type=1326 audit(1748642060.621:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f41539 code=0x7fc00000
[  136.183110][   T30] audit: type=1326 audit(1748642060.621:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7fc00000
[  136.452144][   T30] audit: type=1326 audit(1748642060.621:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7fc00000
[  136.529867][ T6277] CIFS: VFS: Malformed UNC in devname
[  136.717218][   T30] audit: type=1326 audit(1748642060.621:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7fc00000
[  137.001896][   T30] audit: type=1326 audit(1748642060.621:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7fc00000
[  137.084453][   T30] audit: type=1326 audit(1748642060.621:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7fc00000
[  137.126611][   T30] audit: type=1326 audit(1748642060.621:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7fc00000
[  137.321228][   T30] audit: type=1326 audit(1748642060.621:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7fc00000
[  137.471965][   T30] audit: type=1326 audit(1748642060.621:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7fc00000
[  137.885245][ T6284] input: syz0 as /devices/virtual/input/input13
[  138.377588][ T6295] input: syz0 as /devices/virtual/input/input14
[  139.181916][ T6301] netlink: 40 bytes leftover after parsing attributes in process `syz.0.78'.
[  141.331984][ T5886] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  142.014404][ T5886] usb 4-1: unable to get BOS descriptor or descriptor too short
[  142.131409][ T5886] usb 4-1: not running at top speed; connect to a high speed hub
[  142.205188][ T5886] usb 4-1: config 8 has an invalid interface number: 24 but max is 0
[  142.222912][ T5886] usb 4-1: config 8 has no interface number 0
[  142.229271][ T5886] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 64
[  142.250779][ T5886] usb 4-1: config 8 interface 24 has no altsetting 0
[  142.276179][ T5886] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  142.291917][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.371040][ T5886] usb 4-1: Product: syz
[  142.385784][ T5886] usb 4-1: Manufacturer: syz
[  142.390422][ T5886] usb 4-1: SerialNumber: syz
[  142.500197][ T6319] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  143.263843][ T5886] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'.
[  143.444113][ T5886] usb 4-1: USB disconnect, device number 4
[  143.742009][ T2154] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  143.946133][ T6349] netlink: 48 bytes leftover after parsing attributes in process `syz.1.88'.
[  144.132646][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'.
[  144.530230][ T2154] usb 5-1: config 0 has no interfaces?
[  144.615089][ T6345] 8021q: adding VLAN 0 to HW filter on device bond1
[  144.638056][ T6345] bridge0: port 4(bond1) entered blocking state
[  144.655020][ T2154] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  144.686712][ T2154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.699607][ T6345] bridge0: port 4(bond1) entered disabled state
[  144.726048][ T2154] usb 5-1: Product: syz
[  144.741847][ T6345] bond1: entered allmulticast mode
[  144.753637][ T2154] usb 5-1: Manufacturer: syz
[  144.773500][ T6345] bond1: entered promiscuous mode
[  144.788747][ T2154] usb 5-1: SerialNumber: syz
[  144.815680][ T6345] bridge0: port 4(bond1) entered blocking state
[  144.822432][ T6345] bridge0: port 4(bond1) entered forwarding state
[  144.852508][ T2154] usb 5-1: config 0 descriptor??
[  144.878379][ T6351] netlink: 'syz.3.89': attribute type 1 has an invalid length.
[  144.931529][ T6351] netlink: 'syz.3.89': attribute type 2 has an invalid length.
[  144.974018][   T36] bridge0: port 4(bond1) entered disabled state
[  145.274248][ T6358] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  145.516788][ T6361] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[6361]
[  145.657214][ T5886] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  145.844552][ T5886] usb 4-1: Using ep0 maxpacket: 16
[  146.429467][ T5886] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  146.429513][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.429535][ T5886] usb 4-1: Product: syz
[  146.429551][ T5886] usb 4-1: Manufacturer: syz
[  146.429567][ T5886] usb 4-1: SerialNumber: syz
[  146.455546][ T5886] r8152-cfgselector 4-1: Unknown version 0x0000
[  146.455573][ T5886] r8152-cfgselector 4-1: config 0 descriptor??
[  146.898394][ T6368] input: syz0 as /devices/virtual/input/input15
[  147.272627][   T43] usb 5-1: USB disconnect, device number 6
[  148.801854][   T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  148.972218][   T24] usb 1-1: config 5 has no interfaces?
[  148.977903][   T24] usb 1-1: New USB device found, idVendor=16d8, idProduct=8001, bcdDevice=87.11
[  148.987648][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.280065][ T5886] r8152-cfgselector 4-1: Unknown version 0x0000
[  149.291279][ T5886] r8152-cfgselector 4-1: bad CDC descriptors
[  149.389677][ T5886] r8152-cfgselector 4-1: USB disconnect, device number 5
[  150.508482][ T6398] netlink: 36 bytes leftover after parsing attributes in process `syz.3.98'.
[  151.440322][   T24] usb 1-1: string descriptor 0 read error: -71
[  151.552051][   T24] usb 1-1: USB disconnect, device number 5
[  152.761981][   T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  152.912078][   T43] usb 5-1: device descriptor read/64, error -71
[  153.023666][ T6417] input: syz0 as /devices/virtual/input/input16
[  153.182150][ T6421] netlink: 48 bytes leftover after parsing attributes in process `syz.0.102'.
[  153.273941][   T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  153.551955][   T43] usb 5-1: device descriptor read/64, error -71
[  153.667140][   T43] usb usb5-port1: attempt power cycle
[  154.182093][   T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  154.243566][   T43] usb 5-1: device descriptor read/8, error -71
[  154.482000][   T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  154.566395][   T43] usb 5-1: device descriptor read/8, error -71
[  154.698902][ T6433] input: syz0 as /devices/virtual/input/input17
[  154.766376][   T43] usb usb5-port1: unable to enumerate USB device
[  154.896742][ T6432] xt_connbytes: Forcing CT accounting to be enabled
[  154.908824][ T6432] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  155.516197][ T6441] netlink: 'syz.3.107': attribute type 6 has an invalid length.
[  155.863706][ T6444] input: syz0 as /devices/virtual/input/input18
[  157.872251][ T6454] netlink: 88 bytes leftover after parsing attributes in process `syz.0.109'.
[  157.988602][ T6460] usb usb8: usbfs: process 6460 (syz.4.111) did not claim interface 0 before use
[  158.434648][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  158.618171][    T9] usb 3-1: config 5 has no interfaces?
[  158.636988][    T9] usb 3-1: New USB device found, idVendor=16d8, idProduct=8001, bcdDevice=87.11
[  158.884119][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.470798][ T6474] netlink: 36 bytes leftover after parsing attributes in process `syz.0.114'.
[  159.511357][ T6475] futex_wake_op: syz.1.112 tries to shift op by -33; fix this program
[  159.705242][ T6475] netdevsim netdevsim1: Direct firmware load for .
[  159.705242][ T6475]  failed with error -2
[  159.777376][ T6475] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  159.777376][ T6475] 
[  161.303120][    T9] usb 3-1: string descriptor 0 read error: -71
[  161.347527][    T9] usb 3-1: USB disconnect, device number 5
[  162.172577][   T43] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  162.461906][   T43] usb 4-1: Using ep0 maxpacket: 16
[  162.483889][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.529406][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.611903][   T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  162.612217][ T5892] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  162.620971][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.732957][   T43] usb 4-1: config 0 descriptor??
[  162.861889][ T5886] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  162.929022][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  162.990855][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  163.084159][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  163.124339][ T5892] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  163.142057][ T5886] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  163.148562][   T43] appleir 0003:05AC:8241.0001: unknown main item tag 0x0
[  163.181685][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.192245][   T43] appleir 0003:05AC:8241.0001: unknown main item tag 0x0
[  163.199425][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.211849][ T5892] usb 1-1: Product: syz
[  163.216050][ T5892] usb 1-1: Manufacturer: syz
[  163.227236][   T43] appleir 0003:05AC:8241.0001: unknown main item tag 0x0
[  163.251561][ T5886] usb 3-1: config 0 descriptor??
[  163.256628][   T43] appleir 0003:05AC:8241.0001: unknown main item tag 0x0
[  163.256662][   T43] appleir 0003:05AC:8241.0001: unknown main item tag 0x0
[  163.258745][   T43] appleir 0003:05AC:8241.0001: No inputs registered, leaving
[  163.295842][ T5892] usb 1-1: SerialNumber: syz
[  163.318355][ T5892] usb 1-1: config 0 descriptor??
[  163.326440][ T6496] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  163.344998][ T6490] support for cryptoloop has been removed.  Use dm-crypt instead.
[  163.359784][ T6494] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  163.368505][ T6498] netlink: 136 bytes leftover after parsing attributes in process `syz.4.120'.
[  163.382089][ T6498] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  163.418043][ T5892] usb 1-1: ucan: probing device on interface #0
[  163.428959][   T43] appleir 0003:05AC:8241.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[  163.467663][ T5892] usb 1-1: ucan: invalid EP count (1)
[  163.482142][ T5892] usb 1-1: ucan: probe failed; try to update the device firmware
[  163.737410][ T6506] netlink: 48 bytes leftover after parsing attributes in process `syz.1.121'.
[  163.750509][ T6496] warning: `syz.2.119' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  164.081325][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  164.081344][   T30] audit: type=1326 audit(1748642088.791:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.3.117" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x0
[  164.145807][ T6514] input: syz0 as /devices/virtual/input/input19
[  164.336707][ T6496] netlink: 136 bytes leftover after parsing attributes in process `syz.2.119'.
[  164.347189][ T6496] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  164.802265][ T5886] usbhid 3-1:0.0: can't add hid device: -71
[  164.822070][ T5886] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  164.870838][ T5886] usb 3-1: USB disconnect, device number 6
[  164.904196][   T43] usb 1-1: USB disconnect, device number 6
[  165.260978][ T6524] input: syz0 as /devices/virtual/input/input20
[  165.636109][ T6531] netlink: 'syz.2.125': attribute type 6 has an invalid length.
[  166.282281][ T5892] usb 4-1: USB disconnect, device number 6
[  168.422540][ T6549] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  168.945736][ T6561] netlink: 36 bytes leftover after parsing attributes in process `syz.1.129'.
[  169.308523][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'.
[  170.719613][ T6576] input: syz0 as /devices/virtual/input/input21
[  171.430134][ T6583] netlink: 48 bytes leftover after parsing attributes in process `syz.3.134'.
[  171.995636][ T6589] input: syz0 as /devices/virtual/input/input22
[  172.919365][ T6601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.136'.
[  173.710033][   T30] audit: type=1326 audit(1748642098.431:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7fc00000
[  174.882386][ T6607] input: syz0 as /devices/virtual/input/input23
[  174.960531][ T6611] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  174.967455][ T6611] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  174.996344][ T6611] vhci_hcd vhci_hcd.0: Device attached
[  175.028066][ T6615] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11)
[  175.034693][ T6615] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  175.078270][ T6615] vhci_hcd vhci_hcd.0: Device attached
[  175.092857][ T6611] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  175.118816][ T6611] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16)
[  175.125476][ T6611] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  175.183239][ T5894] vhci_hcd: vhci_device speed not set
[  175.308516][ T5894] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  175.355732][ T6611] vhci_hcd vhci_hcd.0: Device attached
[  175.494660][ T6611] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(18)
[  175.495595][ T6626] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  175.501312][ T6611] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  175.570672][ T6611] vhci_hcd vhci_hcd.0: Device attached
[  175.745644][ T6615] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19)
[  175.752274][ T6615] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  175.866223][ T6631] input: syz0 as /devices/virtual/input/input24
[  175.942341][ T6615] vhci_hcd vhci_hcd.0: Device attached
[  176.111593][ T6633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.140'.
[  176.353451][ T6611] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  176.439008][ T6611] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  176.727732][ T6615] vhci_hcd vhci_hcd.0: port 0 already used
[  176.804636][ T6616] vhci_hcd: connection closed
[  176.807000][ T6612] vhci_hcd: connection reset by peer
[  176.817328][ T6619] vhci_hcd: connection closed
[  176.818239][   T13] vhci_hcd: stop threads
[  176.828295][ T6623] vhci_hcd: connection closed
[  176.869909][ T6624] vhci_hcd: connection closed
[  176.870180][   T13] vhci_hcd: release socket
[  176.950234][   T13] vhci_hcd: disconnect device
[  176.971443][   T13] vhci_hcd: stop threads
[  176.993356][   T13] vhci_hcd: release socket
[  177.031223][   T13] vhci_hcd: disconnect device
[  177.062802][   T13] vhci_hcd: stop threads
[  177.111867][   T13] vhci_hcd: release socket
[  177.120106][   T13] vhci_hcd: disconnect device
[  177.132088][   T13] vhci_hcd: stop threads
[  177.141911][   T13] vhci_hcd: release socket
[  177.160663][   T13] vhci_hcd: disconnect device
[  177.173879][   T13] vhci_hcd: stop threads
[  177.178249][   T13] vhci_hcd: release socket
[  177.215815][   T13] vhci_hcd: disconnect device
[  178.209101][ T6655] tipc: Started in network mode
[  178.232650][ T6655] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  178.378929][   T51] Bluetooth: hci4: command 0x0405 tx timeout
[  178.389465][ T6655] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  179.127136][ T6656] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  179.875079][ T6676] team0: Port device bridge1 added
[  180.641993][ T5894] vhci_hcd: vhci_device speed not set
[  181.109438][ T6684] input: syz0 as /devices/virtual/input/input25
[  181.746780][ T6688] netlink: 48 bytes leftover after parsing attributes in process `syz.4.150'.
[  182.245043][ T5886] usb usb42-port1: attempt power cycle
[  182.872728][ T5886] usb usb42-port1: unable to enumerate USB device
[  182.949273][ T6698] input: syz0 as /devices/virtual/input/input26
[  184.365712][ T6721] bridge_slave_0: left allmulticast mode
[  184.371433][ T6721] bridge_slave_0: left promiscuous mode
[  184.389778][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.475451][ T6721] bridge_slave_1: left allmulticast mode
[  184.536782][ T6721] bridge_slave_1: left promiscuous mode
[  184.543054][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.948445][ T6721] bond0: (slave bond_slave_0): Releasing backup interface
[  185.133294][ T6721] bond0: (slave bond_slave_1): Releasing backup interface
[  185.283840][ T6721] team0: Port device team_slave_0 removed
[  185.294326][ T6721] team0: Port device team_slave_1 removed
[  185.346803][ T6721] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.365846][ T6721] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.411241][ T6721] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.441965][ T6721] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.825746][ T6731] input: syz0 as /devices/virtual/input/input27
[  189.980719][ T6785] input: syz0 as /devices/virtual/input/input28
[  190.116794][ T6786] input: syz0 as /devices/virtual/input/input29
[  191.074568][ T6794] vim2m vim2m.0: vidioc_s_fmt queue busy
[  191.083588][ T6794] xt_TCPMSS: Only works on TCP SYN packets
[  192.225650][ T6801] netlink: 40 bytes leftover after parsing attributes in process `syz.3.171'.
[  193.128086][ T6810] input: syz0 as /devices/virtual/input/input30
[  194.275482][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  194.281918][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  195.073600][ T6822] netlink: 'syz.4.175': attribute type 6 has an invalid length.
[  195.623744][ T6827] fuse: Bad value for 'rootmode'
[  196.611102][ T6830] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[6830]
[  196.632930][ T6830] dns_resolver: Unsupported server list version (0)
[  197.356950][ T6818] syz.3.185 (6818): drop_caches: 2
[  199.399421][ T6853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.179'.
[  199.409937][ T6853] Zero length message leads to an empty skb
[  199.417378][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.179'.
[  200.833520][ T6864] input: syz0 as /devices/virtual/input/input31
[  201.114741][ T6875] input: syz0 as /devices/virtual/input/input32
[  201.165046][ T6876] input: syz0 as /devices/virtual/input/input33
[  204.539503][ T6895] usb usb8: usbfs: process 6895 (syz.0.190) did not claim interface 0 before use
[  204.553024][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'.
[  204.600569][ T6895] mmap: syz.0.190 (6895) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  204.884081][ T2154] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  205.784768][ T2154] usb 2-1: Using ep0 maxpacket: 16
[  205.931189][ T2154] usb 2-1: config 0 has no interfaces?
[  205.940574][ T2154] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  205.949815][ T2154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.958404][ T2154] usb 2-1: Product: syz
[  205.962669][ T2154] usb 2-1: Manufacturer: syz
[  205.967277][ T2154] usb 2-1: SerialNumber: syz
[  205.974987][ T2154] usb 2-1: config 0 descriptor??
[  206.721638][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.733145][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.866636][ T6922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.194'.
[  208.557244][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'.
[  208.761614][ T5886] usb 2-1: USB disconnect, device number 3
[  209.705097][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  210.069349][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  210.121964][    T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  210.179268][    T9] usb 4-1: New USB device found, idVendor=04da, idProduct=c002, bcdDevice= 0.00
[  210.251030][ T6943] input: syz0 as /devices/virtual/input/input34
[  210.295229][    T9] usb 4-1: New USB device strings: Mfr=0, Product=98, SerialNumber=0
[  210.536441][    T9] usb 4-1: Product: syz
[  210.599409][    T9] usb 4-1: config 0 descriptor??
[  211.861809][ T5835] Bluetooth: hci4: command 0x0405 tx timeout
[  211.861867][ T5835] Bluetooth: hci0: command 0x0406 tx timeout
[  211.861904][ T5835] Bluetooth: hci3: command 0x0406 tx timeout
[  211.861941][ T5835] Bluetooth: hci2: command 0x0406 tx timeout
[  211.861977][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[  211.958370][ T6954] input: syz0 as /devices/virtual/input/input35
[  213.583796][ T5886] usb 4-1: USB disconnect, device number 7
[  213.735847][ T6969] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  213.782416][ T5892] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  214.033344][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  214.063117][ T6971] random: crng reseeded on system resumption
[  214.140063][ T6969] xt_CT: No such helper "netbios-ns"
[  214.221238][ T5892] usb 5-1: config 0 has no interfaces?
[  214.263874][    T9] usb 1-1: Using ep0 maxpacket: 16
[  214.277753][ T5892] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  214.342364][ T6977] vim2m vim2m.0: vidioc_s_fmt queue busy
[  214.353758][ T6977] xt_TCPMSS: Only works on TCP SYN packets
[  214.498673][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.681233][ T5892] usb 5-1: Product: syz
[  215.117756][ T6981] ALSA: mixer_oss: invalid index 40000
[  215.138143][ T5892] usb 5-1: Manufacturer: syz
[  215.512024][ T5892] usb 5-1: SerialNumber: syz
[  215.603303][ T5892] usb 5-1: config 0 descriptor??
[  215.752835][ T6967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.762093][ T6967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.343578][ T6971] geneve2: entered promiscuous mode
[  216.349018][ T6971] geneve2: entered allmulticast mode
[  217.509023][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  217.542410][    T9] usb 1-1: unable to read config index 0 descriptor/start: -71
[  217.568223][ T2154] usb 5-1: USB disconnect, device number 11
[  217.588760][    T9] usb 1-1: can't read configurations, error -71
[  217.969940][ T6993] input: syz0 as /devices/virtual/input/input36
[  218.290674][ T2154] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  218.871971][ T2154] usb 2-1: Using ep0 maxpacket: 16
[  219.063747][ T2154] usb 2-1: config 0 has no interfaces?
[  219.091989][ T2154] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  219.092017][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  219.101038][ T2154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.158806][ T2154] usb 2-1: config 0 descriptor??
[  219.381855][    T9] usb 3-1: Using ep0 maxpacket: 8
[  219.429454][    T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  219.438706][    T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  219.515448][    T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  219.549026][    T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  219.580828][    T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  219.812357][    T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  219.822165][    T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  219.842539][    T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  219.887670][    T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  219.915656][    T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  219.950505][    T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  219.978444][    T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  220.009308][    T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  220.105639][    T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  220.125349][    T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  220.166636][    T9] usb 3-1: string descriptor 0 read error: -22
[  220.175360][    T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  220.638894][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.903900][    T9] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  221.464834][ T5892] usb 2-1: USB disconnect, device number 4
[  222.020056][ T7020] input: syz0 as /devices/virtual/input/input37
[  223.217706][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.217'.
[  223.335803][ T5884] usb 3-1: USB disconnect, device number 7
[  225.491865][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  225.662158][    T9] usb 2-1: Using ep0 maxpacket: 16
[  225.725871][ T7050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.736675][ T7050] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.168006][ T7071] input: syz0 as /devices/virtual/input/input38
[  227.325390][ T7070] input: syz0 as /devices/virtual/input/input39
[  228.221227][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  228.235688][    T9] usb 2-1: unable to read config index 0 descriptor/start: -71
[  228.286143][    T9] usb 2-1: can't read configurations, error -71
[  229.961844][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  230.190497][    T9] usb 2-1: Using ep0 maxpacket: 32
[  230.261357][    T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  230.347789][    T9] usb 2-1: config 0 has no interface number 0
[  230.388380][    T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  230.397985][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.408437][    T9] usb 2-1: Product: syz
[  230.415714][    T9] usb 2-1: Manufacturer: syz
[  230.420439][    T9] usb 2-1: SerialNumber: syz
[  230.431184][    T9] usb 2-1: config 0 descriptor??
[  231.156263][    T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  231.777598][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.232'.
[  232.021697][ T7106] input: syz0 as /devices/virtual/input/input40
[  233.580397][    T9] usb 2-1: qt2_attach - failed to power on unit: -71
[  233.647656][    T9] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71
[  233.776583][    T9] usb 2-1: USB disconnect, device number 6
[  234.606719][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'.
[  235.031829][ T5886] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  235.043525][ T7140] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[7140]
[  235.271167][ T5886] usb 5-1: Using ep0 maxpacket: 16
[  236.473389][ T7135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.484734][ T7135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.820350][ T7151] input: syz0 as /devices/virtual/input/input41
[  238.053168][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short
[  238.077256][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -71
[  238.146530][ T5886] usb 5-1: can't read configurations, error -71
[  238.766062][ T7164] input: syz0 as /devices/virtual/input/input42
[  239.310937][ T5892] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  239.472492][ T5886] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  239.641939][ T5892] usb 2-1: Using ep0 maxpacket: 16
[  239.650512][ T5892] usb 2-1: config 0 has no interfaces?
[  239.689629][ T5892] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  239.712133][ T5886] usb 5-1: Using ep0 maxpacket: 8
[  239.724490][ T5886] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  239.751930][ T5886] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  239.781873][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.111914][ T5892] usb 2-1: Product: syz
[  240.116920][ T5886] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  240.134898][ T5892] usb 2-1: Manufacturer: syz
[  240.169350][ T5892] usb 2-1: SerialNumber: syz
[  240.179248][ T5886] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  240.242887][ T5892] usb 2-1: config 0 descriptor??
[  240.325998][ T5886] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  240.415317][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.567622][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.578047][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.903780][ T5886] usb 5-1: GET_CAPABILITIES returned 0
[  240.918337][ T5886] usbtmc 5-1:16.0: can't read capabilities
[  241.591924][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  241.603888][    C0] raw-gadget.3 gadget.0: ignoring, device is not running
[  241.791983][    T9] usb 1-1: device descriptor read/64, error -32
[  242.062263][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  242.176357][ T5884] usb 2-1: USB disconnect, device number 7
[  242.231881][    T9] usb 1-1: Using ep0 maxpacket: 16
[  242.273120][    T9] usb 1-1: config 0 has no interfaces?
[  242.278782][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  242.309261][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.326450][    T9] usb 1-1: config 0 descriptor??
[  242.550653][ T5886] usb 5-1: USB disconnect, device number 13
[  242.770558][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  243.021903][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.032358][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  243.152233][    T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  243.161368][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  243.172245][    T9] usb 4-1: SerialNumber: syz
[  243.300868][ T7192] netlink: 48 bytes leftover after parsing attributes in process `syz.1.249'.
[  245.067317][ T5886] usb 1-1: USB disconnect, device number 10
[  245.605611][    T9] usb 4-1: 0:2 : does not exist
[  245.781969][    T9] usb 4-1: USB disconnect, device number 8
[  245.919853][   T30] audit: type=1326 audit(1748642170.631:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000
[  245.979169][   T30] audit: type=1326 audit(1748642170.641:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f41539 code=0x7ffc0000
[  246.121509][ T7215] ALSA: mixer_oss: invalid index 40000
[  246.173475][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  246.421943][   T30] audit: type=1326 audit(1748642170.641:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000
[  246.658484][   T30] audit: type=1326 audit(1748642170.641:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f41539 code=0x7ffc0000
[  247.286348][   T30] audit: type=1326 audit(1748642170.641:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000
[  247.628402][   T30] audit: type=1326 audit(1748642170.641:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f41539 code=0x7ffc0000
[  247.670922][   T30] audit: type=1326 audit(1748642170.641:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000
[  247.816256][   T30] audit: type=1326 audit(1748642170.641:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f41539 code=0x7ffc0000
[  248.261956][   T30] audit: type=1326 audit(1748642170.641:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000
[  248.291339][   T30] audit: type=1326 audit(1748642170.641:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f41539 code=0x7ffc0000
[  249.799414][ T5894] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  250.397483][ T5894] usb 2-1: config 0 has no interfaces?
[  250.442810][ T7256] input: syz0 as /devices/virtual/input/input43
[  250.544281][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'.
[  250.584516][ T5894] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  250.614314][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.656832][ T5894] usb 2-1: Product: syz
[  250.671870][ T5894] usb 2-1: Manufacturer: syz
[  250.687710][ T5894] usb 2-1: SerialNumber: syz
[  250.714381][ T5894] usb 2-1: config 0 descriptor??
[  251.736500][    T9] IPVS: starting estimator thread 0...
[  251.882004][ T7267] IPVS: using max 24 ests per chain, 57600 per kthread
[  252.308051][ T7268] kAFS: unable to lookup cell '.,'
[  252.714312][ T7281] netlink: 48 bytes leftover after parsing attributes in process `syz.4.263'.
[  253.685216][   T43] usb 2-1: USB disconnect, device number 8
[  254.292653][ T7291] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  254.528247][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'.
[  254.786064][   T30] kauditd_printk_skb: 61 callbacks suppressed
[  254.786085][   T30] audit: type=1326 audit(1748642179.501:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  254.814055][    C1] vkms_vblank_simulate: vblank timer overrun
[  254.892332][   T30] audit: type=1326 audit(1748642179.571:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000
[  255.272070][   T30] audit: type=1326 audit(1748642179.571:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  255.342832][   T30] audit: type=1326 audit(1748642179.571:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7285 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[  255.481851][   T10] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  255.538730][   T30] audit: type=1326 audit(1748642180.241:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000
[  255.714876][   T30] audit: type=1326 audit(1748642180.241:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf710e539 code=0x7ffc0000
[  255.768740][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  255.775920][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  255.812063][   T30] audit: type=1326 audit(1748642180.241:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000
[  255.892469][   T10] usb 4-1: config 0 has no interfaces?
[  255.916483][   T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  256.256225][   T30] audit: type=1326 audit(1748642180.241:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000
[  256.296331][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.317205][   T10] usb 4-1: Product: syz
[  256.324618][   T10] usb 4-1: Manufacturer: syz
[  256.329279][   T10] usb 4-1: SerialNumber: syz
[  256.362069][   T30] audit: type=1326 audit(1748642180.251:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e539 code=0x7ffc0000
[  256.384158][   T30] audit: type=1326 audit(1748642180.251:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000
[  256.392987][   T10] usb 4-1: config 0 descriptor??
[  258.299200][ T5886] usb 4-1: USB disconnect, device number 9
[  258.505519][   T43] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  258.824993][   T43] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  258.834625][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.851827][   T43] usb 2-1: Product: syz
[  258.877631][   T43] usb 2-1: Manufacturer: syz
[  258.887511][   T43] usb 2-1: SerialNumber: syz
[  259.016882][   T43] usb 2-1: config 0 descriptor??
[  259.661986][   T43] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  259.978008][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.277'.
[  260.750420][ T7358] program syz.0.281 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  261.252487][   T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  261.586984][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  261.641343][   T24] usb 1-1: config 0 has no interfaces?
[  261.688439][   T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  261.738288][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.748958][   T24] usb 1-1: Product: syz
[  261.753490][   T24] usb 1-1: Manufacturer: syz
[  261.758137][   T24] usb 1-1: SerialNumber: syz
[  261.769938][   T24] usb 1-1: config 0 descriptor??
[  262.664065][   T43] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  262.695212][   T43] usb 2-1: USB disconnect, device number 9
[  262.812986][ T7376] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.283' sets config #0
[  262.824509][ T7376] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.283' sets config #1
[  262.875823][ T7376] netlink: 44 bytes leftover after parsing attributes in process `syz.4.283'.
[  262.984876][ T7376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.283'.
[  263.842725][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'.
[  263.851615][ T7381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.284'.
[  264.525215][ T5886] usb 1-1: USB disconnect, device number 11
[  264.921881][   T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  265.278765][   T10] usb 3-1: config 0 has no interfaces?
[  265.353255][   T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  265.421946][    T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  265.585452][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.612803][   T10] usb 3-1: Product: syz
[  265.617134][   T10] usb 3-1: Manufacturer: syz
[  265.634061][   T10] usb 3-1: SerialNumber: syz
[  265.671972][   T10] usb 3-1: config 0 descriptor??
[  265.803373][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  265.829648][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  265.843663][    T9] usb 4-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0
[  265.874876][    T9] usb 4-1: Manufacturer: syz
[  265.907079][    T9] usb 4-1: config 0 descriptor??
[  265.929020][    T9] hub 4-1:0.0: USB hub found
[  266.194206][    T9] hub 4-1:0.0: 1 port detected
[  267.635503][ T2154] usb 3-1: USB disconnect, device number 8
[  267.686068][   T10] usb 4-1: USB disconnect, device number 10
[  268.016225][ T7408] netlink: 'syz.1.300': attribute type 10 has an invalid length.
[  268.065908][ T7408] 8021q: adding VLAN 0 to HW filter on device team0
[  268.167488][ T7408] bond0: (slave team0): Enslaving as an active interface with an up link
[  268.209128][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'.
[  269.824832][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  270.522384][ T7425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.551854][    T9] usb 2-1: Using ep0 maxpacket: 8
[  270.584108][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  270.628918][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  270.654519][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  270.684383][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  270.704215][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  270.733861][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.098930][    T9] usb 2-1: GET_CAPABILITIES returned 0
[  271.104725][    T9] usbtmc 2-1:16.0: can't read capabilities
[  272.147105][ T7455] program syz.2.297 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.292363][    T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  272.801825][ T5886] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  272.952612][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  272.981953][    T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  272.991043][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.066523][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  273.699110][ T5886] usb 3-1: config 0 has no interfaces?
[  273.726329][ T5886] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  273.736148][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.856324][    T9] usb 1-1: config 0 descriptor??
[  274.172012][ T5886] usb 3-1: Product: syz
[  274.178551][ T7453] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  274.201343][ T5886] usb 3-1: Manufacturer: syz
[  274.271379][ T5886] usb 3-1: SerialNumber: syz
[  274.298020][ T5886] usb 3-1: config 0 descriptor??
[  274.351076][   T43] usb 2-1: USB disconnect, device number 10
[  274.722519][    T9] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  274.915515][ T7453] netlink: 'syz.0.298': attribute type 23 has an invalid length.
[  275.271023][ T7476] ip6gretap1: entered promiscuous mode
[  275.276712][ T7476] ip6gretap1: entered allmulticast mode
[  275.925331][    T9] usb 1-1: reset full-speed USB device number 12 using dummy_hcd
[  276.084086][ T2154] usb 3-1: USB disconnect, device number 9
[  277.285048][   T10] usb 1-1: USB disconnect, device number 12
[  277.423991][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  277.601224][   T10] usb 1-1: config 0 has no interfaces?
[  278.535267][   T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  278.544484][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.575273][   T10] usb 1-1: Product: syz
[  278.590085][   T10] usb 1-1: Manufacturer: syz
[  278.605246][   T10] usb 1-1: SerialNumber: syz
[  278.633299][   T10] usb 1-1: config 0 descriptor??
[  279.102212][ T7506] fuse: Bad value for 'rootmode'
[  280.213914][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'.
[  281.242551][ T7502] syz.1.319 (7502): drop_caches: 2
[  281.533381][ T2154] usb 1-1: USB disconnect, device number 13
[  282.117226][   T30] kauditd_printk_skb: 63 callbacks suppressed
[  282.117245][   T30] audit: type=1326 audit(1748642206.831:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000
[  282.609632][   T30] audit: type=1326 audit(1748642206.831:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000
[  282.879978][   T30] audit: type=1326 audit(1748642206.831:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf710e539 code=0x7ffc0000
[  283.085371][   T30] audit: type=1326 audit(1748642206.831:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000
[  283.107303][    C1] vkms_vblank_simulate: vblank timer overrun
[  283.121899][   T30] audit: type=1326 audit(1748642206.831:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e539 code=0x7ffc0000
[  283.148765][   T30] audit: type=1326 audit(1748642206.831:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000
[  283.170617][    C1] vkms_vblank_simulate: vblank timer overrun
[  283.181822][   T30] audit: type=1326 audit(1748642206.831:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf710e539 code=0x7ffc0000
[  283.203553][    C1] vkms_vblank_simulate: vblank timer overrun
[  283.209990][   T30] audit: type=1326 audit(1748642206.831:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000
[  283.315027][   T30] audit: type=1326 audit(1748642206.831:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf710e539 code=0x7ffc0000
[  283.336745][    C1] vkms_vblank_simulate: vblank timer overrun
[  283.668990][   T30] audit: type=1326 audit(1748642206.831:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000
[  283.690912][    C1] vkms_vblank_simulate: vblank timer overrun
[  285.121825][ T5886] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  285.837240][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  285.851041][ T5886] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  285.870905][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.894436][ T5886] usb 3-1: config 0 descriptor??
[  285.901311][ T7559] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  286.817195][ T5886] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0
[  287.184777][ T7559] netlink: 'syz.2.317': attribute type 23 has an invalid length.
[  287.393244][ T7578] netlink: 'syz.0.323': attribute type 10 has an invalid length.
[  287.464859][   T30] kauditd_printk_skb: 58 callbacks suppressed
[  287.464880][   T30] audit: type=1326 audit(1748642212.171:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7568 comm="syz.4.322" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f78539 code=0x0
[  287.499518][ T7578] 8021q: adding VLAN 0 to HW filter on device team0
[  287.527272][ T7578] team0: entered promiscuous mode
[  287.557034][ T7578] team_slave_0: entered promiscuous mode
[  287.642535][ T7578] team_slave_1: entered promiscuous mode
[  287.669335][ T7578] team0: entered allmulticast mode
[  287.675965][ T7578] team_slave_0: entered allmulticast mode
[  287.685207][ T7578] team_slave_1: entered allmulticast mode
[  287.727867][ T7578] bond0: (slave team0): Enslaving as an active interface with an up link
[  287.942699][ T1210] usb 3-1: reset full-speed USB device number 10 using dummy_hcd
[  288.072543][ T7576] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  288.092567][ T7576] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  289.490350][ T7601] netlink: 48 bytes leftover after parsing attributes in process `syz.4.326'.
[  289.567151][ T5886] usb 3-1: USB disconnect, device number 10
[  290.835346][ T7607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.327'.
[  291.035515][ T7610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.328'.
[  291.117308][   T30] audit: type=1326 audit(1748642215.831:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000
[  291.189532][   T30] audit: type=1326 audit(1748642215.831:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf710e539 code=0x7ffc0000
[  291.254048][   T30] audit: type=1326 audit(1748642215.831:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000
[  291.324473][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  291.384268][   T30] audit: type=1326 audit(1748642215.831:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.0.328" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf710e539 code=0x7ffc0000
[  291.462036][   T30] audit: type=1326 audit(1748642215.831:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.0.328" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x0
[  291.518281][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'.
[  291.648916][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.666500][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  291.681577][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.829035][    T9] usb 4-1: config 0 descriptor??
[  292.409698][    T9] logitech 0003:046D:C50C.0004: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.3-1/input0
[  292.532065][   T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  292.615196][ T7612] netlink: 84 bytes leftover after parsing attributes in process `syz.3.329'.
[  292.642250][ T7612] netlink: 48 bytes leftover after parsing attributes in process `syz.3.329'.
[  292.843589][   T24] usb 2-1: config 0 has no interfaces?
[  292.859326][   T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  292.868762][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.881750][   T24] usb 2-1: Product: syz
[  292.888591][   T24] usb 2-1: Manufacturer: syz
[  292.897785][   T24] usb 2-1: SerialNumber: syz
[  292.915100][   T24] usb 2-1: config 0 descriptor??
[  293.041809][ T5892] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  293.115156][ T5886] usb 4-1: USB disconnect, device number 11
[  293.162173][ T7627] @: renamed from vlan0 (while UP)
[  293.179558][    T9] usb 2-1: USB disconnect, device number 11
[  293.282823][ T5892] usb 1-1: config 0 has no interfaces?
[  293.299307][ T5892] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  293.308793][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.335741][ T5892] usb 1-1: Product: syz
[  293.347686][ T5892] usb 1-1: Manufacturer: syz
[  293.362398][ T5892] usb 1-1: SerialNumber: syz
[  293.376917][ T5892] usb 1-1: config 0 descriptor??
[  294.041864][   T24] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  294.226970][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  294.354482][   T24] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  294.569135][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.778143][   T24] usb 5-1: config 0 descriptor??
[  295.025707][ T7642] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  295.333201][ T7650] sctp: [Deprecated]: syz.1.337 (pid 7650) Use of struct sctp_assoc_value in delayed_ack socket option.
[  295.333201][ T7650] Use struct sctp_sack_info instead
[  295.624522][   T24] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[  295.845123][ T7657] CIFS: VFS: Malformed UNC in devname
[  296.104420][    T9] usb 1-1: USB disconnect, device number 14
[  296.356592][ T7642] netlink: 'syz.4.336': attribute type 23 has an invalid length.
[  296.856237][ T5884] usb 5-1: reset full-speed USB device number 14 using dummy_hcd
[  297.651852][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'.
[  297.680982][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'.
[  298.264267][ T7678] netlink: 48 bytes leftover after parsing attributes in process `syz.2.343'.
[  299.933901][   T24] usb 5-1: USB disconnect, device number 14
[  301.862641][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'.
[  302.845293][ T7718] fuse: Bad value for 'fd'
[  302.902394][ T7718] netlink: 60 bytes leftover after parsing attributes in process `syz.4.351'.
[  305.389227][ T7745] netlink: 32 bytes leftover after parsing attributes in process `syz.2.356'.
[  305.483551][   T30] audit: type=1326 audit(1748642230.141:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  305.515743][   T30] audit: type=1326 audit(1748642230.151:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  306.021430][   T30] audit: type=1326 audit(1748642230.151:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  306.078841][   T30] audit: type=1326 audit(1748642230.151:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  306.179236][   T30] audit: type=1326 audit(1748642230.151:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  306.220835][   T30] audit: type=1326 audit(1748642230.151:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  306.282603][   T30] audit: type=1326 audit(1748642230.151:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  306.310821][   T30] audit: type=1326 audit(1748642230.151:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  306.340838][   T30] audit: type=1326 audit(1748642230.151:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  306.439605][   T30] audit: type=1326 audit(1748642230.161:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.2.356" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  306.975833][ T7751] netlink: 36 bytes leftover after parsing attributes in process `syz.4.358'.
[  308.465486][ T7773] Attempt to restore checkpoint with obsolete wellknown handles
[  308.626107][ T7773] Cannot find add_set index 0 as target
[  308.991885][    T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  309.358819][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  309.399859][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  309.438047][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  309.529396][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  309.696750][ T7788] ip6gretap1: entered promiscuous mode
[  309.712544][ T7788] ip6gretap1: entered allmulticast mode
[  309.726339][    T9] usb 5-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9
[  309.978881][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.519297][    T9] usb 5-1: config 0 descriptor??
[  310.535635][    T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  310.535709][    T9] usb 5-1: MIDIStreaming interface descriptor not found
[  310.752589][ T7778] netlink: 'syz.4.362': attribute type 2 has an invalid length.
[  310.797901][ T7778] ave_0: entered promiscuous mode
[  312.224151][ T7805] netlink: 'syz.1.368': attribute type 10 has an invalid length.
[  312.233344][ T7805] netlink: 52 bytes leftover after parsing attributes in process `syz.1.368'.
[  312.245352][ T7804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  312.650613][   T24] usb 5-1: USB disconnect, device number 15
[  313.246696][ T7824] CIFS: VFS: Malformed UNC in devname
[  314.665406][ T7819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  315.417664][ T7838] netlink: 60 bytes leftover after parsing attributes in process `syz.4.374'.
[  315.603689][ T7844] netlink: 56 bytes leftover after parsing attributes in process `syz.2.376'.
[  317.159070][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  317.165777][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  318.920254][ T7873] xt_CT: You must specify a L4 protocol and not use inversions on it
[  318.922172][ T7873] netlink: 40 bytes leftover after parsing attributes in process `syz.4.381'.
[  318.970616][ T7873] netlink: 268 bytes leftover after parsing attributes in process `syz.4.381'.
[  319.427938][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.382'.
[  319.448194][ T7881] netlink: 36 bytes leftover after parsing attributes in process `syz.3.382'.
[  319.527602][ T7872] trusted_key: encrypted_key: insufficient parameters specified
[  319.572432][ T5884] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  320.152236][ T5884] usb 5-1: Using ep0 maxpacket: 8
[  320.161420][ T5884] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  320.180468][ T5884] usb 5-1: config 0 has no interface number 0
[  320.229831][ T5884] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  320.273535][ T5884] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  320.362008][ T5884] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  320.430350][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.488482][ T5884] usb 5-1: config 0 descriptor??
[  320.524255][ T5884] hso 5-1:0.1: Failed to find BULK IN ep
[  321.702252][ T7889] geneve2: entered promiscuous mode
[  321.707587][ T7889] geneve2: entered allmulticast mode
[  321.780086][ T7889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.383'.
[  321.794852][ T7889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.383'.
[  322.005224][ T7889] erspan0: entered promiscuous mode
[  322.045155][ T7889] gretap0: entered promiscuous mode
[  322.324960][ T5884] usb 5-1: USB disconnect, device number 16
[  324.558251][ T7918] netlink: 56 bytes leftover after parsing attributes in process `syz.1.389'.
[  326.205780][ T7928] sctp: [Deprecated]: syz.0.393 (pid 7928) Use of struct sctp_assoc_value in delayed_ack socket option.
[  326.205780][ T7928] Use struct sctp_sack_info instead
[  328.558999][ T7947] page: refcount:515 mapcount:0 mapping:ffff888053e7c730 index:0x0 pfn:0x5b200
[  328.568797][ T7947] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0
[  328.577370][ T7947] aops:hugetlbfs_aops ino:37db dentry name(?):"anon_hugepage"
[  328.584878][ T7947] flags: 0xfff000000000c1(locked|waiters|head|node=0|zone=1|lastcpupid=0x7ff)
[  328.593766][ T7947] page_type: f4(hugetlb)
[  328.598036][ T7947] raw: 00fff000000000c1 ffffc9001dab7e10 ffffc9001dab7e10 ffff888053e7c730
[  328.606646][ T7947] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000
[  328.615254][ T7947] head: 00fff000000000c1 ffffc9001dab7e10 ffffc9001dab7e10 ffff888053e7c730
[  328.623949][ T7947] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000
[  328.632738][ T7947] head: 00fff00000000009 ffffea00016c8001 0000000000000000 0000000000000000
[  328.641431][ T7947] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200
[  328.650132][ T7947] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio))
[  328.657455][ T7947] page_owner tracks the page as allocated
[  328.663966][ T7947] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 5963, tgid 5951 (syz.3.12), ts 99889048971, free_ts 28959479789
[  328.684420][ T7947]  post_alloc_hook+0x240/0x2a0
[  328.689232][ T7947]  get_page_from_freelist+0x21e0/0x22c0
[  328.694811][ T7947]  __alloc_frozen_pages_noprof+0x181/0x370
[  328.700663][ T7947]  __folio_alloc_noprof+0x18/0x120
[  328.705817][ T7947]  alloc_buddy_hugetlb_folio+0xe2/0x570
[  328.711411][ T7947]  only_alloc_fresh_hugetlb_folio+0x8c/0x280
[  328.717438][ T7947]  alloc_surplus_hugetlb_folio+0x103/0x430
[  328.723287][ T7947]  alloc_hugetlb_folio+0xb1a/0x16a0
[  328.728518][ T7947]  hugetlb_fault+0x1de0/0x29e0
[  328.733495][ T7947]  handle_mm_fault+0x740/0x8e0
[  328.738290][ T7947]  __get_user_pages+0x1a78/0x30c0
[  328.743344][ T7947]  populate_vma_page_range+0x26b/0x340
[  328.748936][ T7947]  __mm_populate+0x24c/0x380
[  328.753558][ T7947]  vm_mmap_pgoff+0x3f0/0x4c0
[  328.758181][ T7947]  ksys_mmap_pgoff+0x587/0x760
[  328.762978][ T7947]  __do_fast_syscall_32+0xb6/0x2b0
[  328.768114][ T7947] page last free pid 1 tgid 1 stack trace:
[  328.773939][ T7947]  __free_frozen_pages+0xc6e/0xe50
[  328.779087][ T7947]  free_contig_range+0x1bd/0x4a0
[  328.784069][ T7947]  destroy_args+0x7e/0x5d0
[  328.788510][ T7947]  debug_vm_pgtable+0x412/0x450
[  328.793412][ T7947]  do_one_initcall+0x233/0x820
[  328.798214][ T7947]  do_initcall_level+0x137/0x1f0
[  328.803176][ T7947]  do_initcalls+0x69/0xd0
[  328.807536][ T7947]  kernel_init_freeable+0x3d9/0x570
[  328.812773][ T7947]  kernel_init+0x1d/0x1d0
[  328.817151][ T7947]  ret_from_fork+0x3fc/0x770
[  328.821855][ T7947]  ret_from_fork_asm+0x1a/0x30
[  328.826838][ T7947] ------------[ cut here ]------------
[  328.832322][ T7947] kernel BUG at mm/filemap.c:154!
[  328.837411][ T7947] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  328.843679][ T7947] CPU: 1 UID: 0 PID: 7947 Comm: syz.1.396 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) 
[  328.855214][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  328.865268][ T7947] RIP: 0010:filemap_unaccount_folio+0x715/0x790
[  328.871514][ T7947] Code: 58 c9 ff 48 89 df 48 c7 c6 20 2f 94 8b e8 b3 f4 10 00 90 0f 0b e8 bb 58 c9 ff 48 89 df 48 c7 c6 00 2e 94 8b e8 9c f4 10 00 90 <0f> 0b e8 a4 58 c9 ff 48 89 df 48 c7 c6 20 2f 94 8b e8 85 f4 10 00
[  328.891135][ T7947] RSP: 0018:ffffc9001e09f160 EFLAGS: 00010046
[  328.897209][ T7947] RAX: 608543eb9a2d6800 RBX: ffffea00016c8000 RCX: 608543eb9a2d6800
[  328.905183][ T7947] RDX: 0000000000000005 RSI: ffffffff8db5b60b RDI: ffff888031ddbc00
[  328.913152][ T7947] RBP: 0000000000000001 R08: ffff8880b8724293 R09: 1ffff110170e4852
[  328.921119][ T7947] R10: dffffc0000000000 R11: ffffed10170e4853 R12: 0000000000000040
[  328.929090][ T7947] R13: 1ffffd40002d9000 R14: 1ffffd40002d9001 R15: ffffea00016c8008
[  328.937060][ T7947] FS:  0000000000000000(0000) GS:ffff888125d65000(0063) knlGS:00000000f4bd9b40
[  328.945986][ T7947] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  328.952563][ T7947] CR2: 0000000080079018 CR3: 0000000053eaa000 CR4: 00000000003526f0
[  328.960532][ T7947] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  328.968501][ T7947] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  328.976471][ T7947] Call Trace:
[  328.979749][ T7947]  <TASK>
[  328.982677][ T7947]  __filemap_remove_folio+0xc3/0x500
[  328.987965][ T7947]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  328.993518][ T7947]  ? __pfx___filemap_remove_folio+0x10/0x10
[  328.999413][ T7947]  ? _raw_spin_lock_irq+0xae/0xf0
[  329.004442][ T7947]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  329.009991][ T7947]  filemap_remove_folio+0xe6/0x1f0
[  329.015114][ T7947]  remove_inode_hugepages+0x594/0x1100
[  329.020569][ T7947]  ? folio_try_get+0x1c/0x340
[  329.025262][ T7947]  ? __pfx_remove_inode_hugepages+0x10/0x10
[  329.031159][ T7947]  ? hugetlbfs_fallocate+0xbaf/0x1100
[  329.036557][ T7947]  ? up_write+0x1c4/0x420
[  329.040898][ T7947]  hugetlbfs_fallocate+0xbc7/0x1100
[  329.046098][ T7947]  ? __pfx_hugetlbfs_fallocate+0x10/0x10
[  329.051750][ T7947]  ? rcu_read_lock_any_held+0xb3/0x120
[  329.057211][ T7947]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  329.063116][ T7947]  vfs_fallocate+0x6a0/0x830
[  329.067716][ T7947]  ? __pfx_vfs_fallocate+0x10/0x10
[  329.072828][ T7947]  madvise_do_behavior+0x1749/0x3500
[  329.078207][ T7947]  ? __pfx_madvise_do_behavior+0x10/0x10
[  329.083841][ T7947]  ? __pfx___schedule+0x10/0x10
[  329.088701][ T7947]  ? __pfx_futex_wake_mark+0x10/0x10
[  329.093989][ T7947]  ? rcu_is_watching+0x15/0xb0
[  329.098756][ T7947]  ? trace_irq_disable+0x37/0x110
[  329.103777][ T7947]  ? preempt_schedule_irq+0xde/0x150
[  329.109142][ T7947]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  329.114855][ T7947]  ? irqentry_exit+0x74/0x90
[  329.119437][ T7947]  ? lockdep_hardirqs_on+0x9c/0x150
[  329.124636][ T7947]  ? __lock_acquire+0xab9/0xd20
[  329.129487][ T7947]  ? madvise_lock+0xda/0x200
[  329.134078][ T7947]  ? __se_sys_futex_time32+0x360/0x3e0
[  329.139547][ T7947]  __ia32_sys_madvise+0x10c/0x150
[  329.144582][ T7947]  __do_fast_syscall_32+0xb6/0x2b0
[  329.149692][ T7947]  do_fast_syscall_32+0x34/0x80
[  329.154541][ T7947]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  329.160866][ T7947] RIP: 0023:0xf704e539
[  329.164937][ T7947] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  329.184534][ T7947] RSP: 002b:00000000f4bd955c EFLAGS: 00000206 ORIG_RAX: 00000000000000db
[  329.193064][ T7947] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600002
[  329.201032][ T7947] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000
[  329.208997][ T7947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  329.216960][ T7947] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  329.224927][ T7947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  329.233024][ T7947]  </TASK>
[  329.236038][ T7947] Modules linked in:
[  329.239933][ T7947] ---[ end trace 0000000000000000 ]---
[  329.245377][ T7947] RIP: 0010:filemap_unaccount_folio+0x715/0x790
[  329.251612][ T7947] Code: 58 c9 ff 48 89 df 48 c7 c6 20 2f 94 8b e8 b3 f4 10 00 90 0f 0b e8 bb 58 c9 ff 48 89 df 48 c7 c6 00 2e 94 8b e8 9c f4 10 00 90 <0f> 0b e8 a4 58 c9 ff 48 89 df 48 c7 c6 20 2f 94 8b e8 85 f4 10 00
[  329.271470][ T7947] RSP: 0018:ffffc9001e09f160 EFLAGS: 00010046
[  329.277545][ T7947] RAX: 608543eb9a2d6800 RBX: ffffea00016c8000 RCX: 608543eb9a2d6800
[  329.285519][ T7947] RDX: 0000000000000005 RSI: ffffffff8db5b60b RDI: ffff888031ddbc00
[  329.293489][ T7947] RBP: 0000000000000001 R08: ffff8880b8724293 R09: 1ffff110170e4852
[  329.301546][ T7947] R10: dffffc0000000000 R11: ffffed10170e4853 R12: 0000000000000040
[  329.309618][ T7947] R13: 1ffffd40002d9000 R14: 1ffffd40002d9001 R15: ffffea00016c8008
[  329.317585][ T7947] FS:  0000000000000000(0000) GS:ffff888125d65000(0063) knlGS:00000000f4bd9b40
[  329.326598][ T7947] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  329.333172][ T7947] CR2: 0000000080079018 CR3: 0000000053eaa000 CR4: 00000000003526f0
[  329.341137][ T7947] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  329.349099][ T7947] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  329.357068][ T7947] Kernel panic - not syncing: Fatal exception
[  329.363477][ T7947] Kernel Offset: disabled
[  329.367799][ T7947] Rebooting in 86400 seconds..