last executing test programs:

10m17.815742485s ago: executing program 3 (id=146):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x109042)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01002ee200e5ffffff0000000000000000"])
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f0000000280), 0x0)
r8 = fanotify_init(0x200, 0x0)
r9 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1)
r10 = dup(r9)
fanotify_mark(r8, 0x1, 0x8000046, r10, 0x0)
r11 = memfd_create(&(0x7f00000001c0)='/duv/udmabuf\x00', 0x0)
fsetxattr$trusted_overlay_origin(r11, &(0x7f0000000080), 0x0, 0x0, 0x0)
fremovexattr(r11, &(0x7f0000000000)=@known='trusted.overlay.origin\x00')
r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r12, &(0x7f0000000100), 0x0, 0x2005c090)
r13 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x410801, 0x0)
ioctl$COMEDI_DEVCONFIG(r13, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r13, 0x40946400, 0x0)

10m16.776308638s ago: executing program 3 (id=150):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$packet(0x11, 0x3, 0x300)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x221}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000880)="bf179012296533580234ac76067d04939ea85851bdca33f17534e502cb6e8e1f4340054369c2da16d57dc8b0eddb61a51b3c081f3f3cacc3130716360b2e7dae87743054af3d18af4ebe87495a491c57a4646fb68fcef548eb65d64cb4546a0b8b4c0be4989152a14d7bbdf49b9455754ae11467f0cd66c23f6bcacff15f490f50a04fbf8db2092d1648ad098deaba26c3afdc75977d3f3b8e969029f3c45c9232bbcae32df534e30d6c177546cfdf0ccf4aeac1fde47dc20d0c5017edf24043608fe15318822fc5dc534f9979bf984573c42e0a0699fb096745d4", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001040)="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", 0x28d}], 0x1}}], 0x3, 0x480e0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

10m16.580473233s ago: executing program 3 (id=151):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x68c)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x19, 0x0, 0x0) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5, 0x5, 0x1, 0x5, 0x4, 0x20002, 0x103d, 0x4, 0x9, 0x100000000, 0xffffffffffffffff, 0x100000002, 0x1, 0x9, 0x800006, 0x800000000000], 0x4, 0x140057})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) (async, rerun: 64)
syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32)

10m16.335843869s ago: executing program 3 (id=153):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYRES64, @ANYRES16=r3]) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10m16.129244897s ago: executing program 3 (id=154):
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088800fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="800037e9220ca1ce", 0x8, 0x840, &(0x7f0000000140)={0xa, 0x4c24, 0x400006, @mcast1, 0x10}, 0x1c)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f00000021c0)={0xfc, {"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", 0x1000}}, 0x1006)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(r7, r7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
setpgid(0x0, r7)
mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0, <r9=>0x0}, &(0x7f00000000c0)=0x5)
setuid(r9)
quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000902, r9, &(0x7f0000000240))
ioctl$SG_BLKSECTGET(r6, 0x1267, &(0x7f00000000c0))
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000dc0)=ANY=[@ANYBLOB="140500002400010022bd7000fedbdf25020500800c00010002000000000000001103658045012180d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481f87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d38880800fa00", @ANYRES32=r4, @ANYBLOB="b9001d80395659cbee1ee6766c7549af751fbf2eb8788253b47d23023a32d9788c32998ee026024e276914d0aae70d786e120337fe9cbc0c9e9e9008c238dd702409482c45a977476e6638789f6c001e805900d480a4803e3fd1af764643b73de45d768de8db52619a63255c11ccef20dfffd887a99225e2f5ecae032cafb7216b237a1429eed88bc6f84aeb562009f34ab2a8894cd1d7697087420e5ab42922b7a9a487ed10c5c0e82b0000000c000f000001000000000000000000000000180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e3bd891225e8c0d45e6019a16c008707e0724a0a436faaabd146ae5a60224ca6e64f9e38c4349e259ac91811a57a27022ff05f15d010f800c0063000000000000000000796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed2344a4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b163633239d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f651e6ad3b3473949c0e79dcb948e0d4396e8c8a09ba50decb89def4523931fc20ba6e7ab5647f65f5ba45c278eec780cb651cd9c4ca1dc794060194b5f6e02947c12ad911895f1c0c5eee9b25581c2b4f208009400", @ANYRES32=r4, @ANYBLOB="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"], 0x514}], 0x1}, 0x0)

10m15.877032266s ago: executing program 3 (id=155):
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180))
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
pipe2(&(0x7f0000001040)={<r2=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x84000)
tee(r2, r3, 0xfffffffffffffc01, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000003d0007010000000008000000047c000008000880040008"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0)
syz_io_uring_setup(0xcbf, &(0x7f00000000c0)={0x0, 0xd94b, 0x40, 0x3, 0x256}, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xcc}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x7d}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}}, 0x0)
tee(r2, r3, 0x60000000000, 0x0)
read$msr(r0, &(0x7f0000000280)=""/102, 0x66)
ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x3, &(0x7f0000000580)=[0x138c, 0x8004, 0x1, 0x4, 0x9, 0x1ed, 0x2, 0x2, 0xbb, 0xc58f, 0x2060, 0xfed, 0xfffffffa, 0x1ac, 0xfffffff8], 0x0, 0x2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000002000000200001"], 0x34}}, 0x0)

10m0.844557721s ago: executing program 32 (id=155):
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180))
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
pipe2(&(0x7f0000001040)={<r2=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x84000)
tee(r2, r3, 0xfffffffffffffc01, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000003d0007010000000008000000047c000008000880040008"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0)
syz_io_uring_setup(0xcbf, &(0x7f00000000c0)={0x0, 0xd94b, 0x40, 0x3, 0x256}, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xcc}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x7d}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}}, 0x0)
tee(r2, r3, 0x60000000000, 0x0)
read$msr(r0, &(0x7f0000000280)=""/102, 0x66)
ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x3, &(0x7f0000000580)=[0x138c, 0x8004, 0x1, 0x4, 0x9, 0x1ed, 0x2, 0x2, 0xbb, 0xc58f, 0x2060, 0xfed, 0xfffffffa, 0x1ac, 0xfffffff8], 0x0, 0x2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000002000000200001"], 0x34}}, 0x0)

8m48.095533253s ago: executing program 2 (id=521):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c006a701db8ee99791eddfa2a328d00b54e274fd74a19a2af0aa4af9976ea", @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="73379aa25d31fab993f4b16bfa07774531129b1998fb6ee50f6118"], 0x1c}}, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x1ff, @mcast2, 0x3}}, 0x24)
r2 = openat$kvm(0xffffffffffffff9c, 0xfffffffffffffffc, 0x18000, 0x0)
ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x489, 0x0, 0x9}]})
socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x24)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, 0x0, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "fb0c6b63cee53d7a887cf960b2bed02788fd6931d58dd7060ca024b5e02f51f081ef3dc9a202c28a6c2136ee57579935077f5c181e8d11bcf0523c8879230f4a", 0x17}, 0x48, 0xfffffffffffffffd)
r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000480)={{0x1009, 0x0, 0xfffffffb, 0x80, '\x00', 0x7}, 0x1, 0x10000000, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x14)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000200)={0x18, r7, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x3ea4}]})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r7, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000})
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r9=>0x0)
sync_file_range(r6, 0x3, 0x8d329e3, 0x2)
r10 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ptype\x00')
pread64(r10, &(0x7f0000000140)=""/215, 0xd7, 0x100000076)
ioctl$VT_OPENQRY(r10, 0x5600, &(0x7f0000000380))
io_submit(r9, 0x1, &(0x7f00000002c0)=[&(0x7f0000000200)={0xffffff7f00000000, 0x0, 0xa0, 0x1, 0x0, r8, 0x0}])

8m48.085851059s ago: executing program 2 (id=522):
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xb96d)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0xe, 0xa, 0x100})
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x1541, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x1405, 0x100, 0x70bd2c, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8004000)
get_robust_list(0xffffffffffffffff, &(0x7f0000000300)=&(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)}}, &(0x7f0000000340)=0x18)
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000380), 0x80040, 0x0)
ioctl$TCSETA(r3, 0x5406, &(0x7f00000003c0)={0x6, 0x5261, 0x81, 0x8, 0x2, "2226d91144eaccb4"})
ioctl$VHOST_VDPA_SET_VRING_ENABLE(r1, 0x4008af75, &(0x7f0000000400)={0x1, 0x2})
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000440)={{0x0, 0x2, 0x2, 0x0, 0xffff22e2}, 0x8f0, 0x6})
ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000004c0)=""/9)
set_robust_list(&(0x7f0000000600)={&(0x7f0000000540)={&(0x7f0000000500)}, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)}}, 0x18)
ioctl$TCSETA(r3, 0x5406, &(0x7f0000000640)={0x59, 0x3, 0x0, 0x5, 0x6, "a2ac8a2c1418b124"})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000b00)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000a80)=[0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0], &(0x7f0000000ac0)=[0x0], 0xa, 0x5, 0x8})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000b80)={&(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[{}, {}, {}, {}], r5, 0x0, '\x00', 0x1, 0x4})
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000bc0)=0x3)
ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000c00)={0x0, 0xa})
ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000c40))
ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000c80)={0xffff, r4})
r6 = accept$netrom(r1, &(0x7f0000000cc0)={{0x3, @default}, [@null, @remote, @netrom, @remote, @null, @null, @netrom, @bcast]}, &(0x7f0000000d40)=0x48)
ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000d80)={0x200, 0x8, 0x8})
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000dc0)={<r7=>0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3, 0xf, 0xb9c3, 0x100, 0xff}, &(0x7f0000000e80)=0x98)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000ec0)={r7, @in={{0x2, 0x4e22, @local}}, 0xfffffffa, 0x5, 0x6, 0xc0000000, 0xffffffff}, &(0x7f0000000f80)=0x98)
r8 = accept$nfc_llcp(r1, &(0x7f0000000fc0), &(0x7f0000001040)=0x60)
close_range(r2, r8, 0x2)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001080)={0x8, 0x80, 0x200, 0x9, 0x53, 0x8001, 0x6, 0x40, r7}, 0x20)
ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff)

8m48.020508426s ago: executing program 2 (id=523):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000580)={'batadv0\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4d, 0x3, 0xf, 0x4, 0xb, 0x3, 0xff, 0x4, 0x3, 0xfe, [0x9, 0x1b, 0x3, 0x0, 0x10000, 0x8, 0x5, 0x10]}}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) (async)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async, rerun: 64)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8801) (rerun: 64)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x210)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x10, 0x700, 0x4, 0x3, {{0x8, 0x4, 0x2, 0x3c, 0x20, 0x68, 0x0, 0xa, 0x4, 0x0, @multicast2, @multicast2, {[@generic={0x88, 0xc, "d7433e2adb5aca459807"}]}}}}}) (async, rerun: 32)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f00000003c0)=@multiplanar_userptr={0x3, 0x1, 0x4, 0x400, 0x5, {}, {0x4, 0x8, 0x22, 0xa, 0x0, 0x0, "f9a8ea1a"}, 0x6, 0x2, {&(0x7f00000004c0)=[{0x63, 0xf553917, {&(0x7f0000000440)}, 0x6}, {0x8, 0xd, {&(0x7f0000000480)}, 0x3}]}, 0x6d0e}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
lseek(r7, 0x7, 0x4) (async, rerun: 32)
ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000280)=@mmap={0x2, 0x1, 0x4, 0x1, 0x0, {0x77359400}}) (rerun: 32)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async, rerun: 32)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) (rerun: 32)

8m47.879817943s ago: executing program 2 (id=524):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c76e3, 0x40)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000900))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x8, 0x80000)
fanotify_mark(r1, 0x104, 0x10, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40))

8m47.852525101s ago: executing program 2 (id=525):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
mbind(&(0x7f0000a52000/0xd000)=nil, 0xd000, 0x1, &(0x7f00000003c0)=0x3, 0xfffffffffffff3a9, 0x5) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a4002, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e)
mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) (async)
mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r1, 0x6f000) (async)
ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000640)={{&(0x7f00005d4000/0x1000)=nil, 0x1000}}) (async)
mlock(&(0x7f00000a7000/0x2000)=nil, 0x2000) (async)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000040ac05520240000102030109022400010100d000090400d00203010252092105000601224708090581030a007ff303"], &(0x7f0000000400)={0x0, 0x0, 0xd0, 0x0})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000600)=[{&(0x7f00000004c0)="d0fc6d5f6c3f7e4e1a5d8b17eaa3dc52961063dd90588fd5fec6113ab7e8176d1ced1188fb65375ced962f12286ade6f0fd016e57efa5318b7d7487f3b6977771c02b3f724581f2e9d01731cc4da67d7da132ef49fa9bbcad954d21ed696cce6e59ab75517aec139d2fd841f16b6b85b13ded65975fc9dbb282c4a57a2ee9e4b94f8183670074cf2ef7d85efb1625af9091f1379b939eb76c1db5e337642428b868f92d90239924c5817f63077ad8cfe48849cf5d3ae7d3919df3cfdeaa71e0bab50412590ad06713f9725867b1546", 0xcf}, {&(0x7f0000000340)="f8a735f3cd08a4779724f0bc9a3bda81bbdbb71b782baf408c5ebbb9114cbd6c6aa50d52b9c7dfbd996e", 0x2a}, {&(0x7f00000005c0)="89acede499db37ba", 0x8}], 0x3, &(0x7f0000000ac0)=[@cred={{0x1c}}], 0xfffffffffffffe2f, 0x48000}}], 0x1, 0x11) (async)
read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r4=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) (async)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, <r6=>0x0], &(0x7f0000000040), 0x3, r5, 0xcccccccc})
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000002c0)=[r5], &(0x7f0000000200), &(0x7f00000000c0)=[r6], &(0x7f0000000240), 0x0, 0x300}) (async)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af83, &(0x7f0000000200)=0x200000000)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3f, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000780)={0x1, @pix_mp={0x0, 0x0, 0x31384142, 0x0, 0x0, [{0x0, 0x7fff}, {0x0, 0x1}], 0x10, 0x0, 0x0, 0x0, 0x4}}) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'})

8m47.810656674s ago: executing program 2 (id=526):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000180), &(0x7f0000000200)=0x4)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340), 0x48000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})
syz_usb_connect(0x5, 0x116, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xde, 0x1b, 0xca, 0x20, 0xbb4, 0xa8f, 0x5a2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x104, 0x1, 0xa, 0x7, 0xa0, 0x6, [{{0x9, 0x4, 0xf5, 0x0, 0x3, 0x19, 0x47, 0x1f, 0x2, [@hid_hid={0x9, 0x21, 0xf, 0xa, 0x1, {0x22, 0x25f}}, @uac_control={{0xa, 0x24, 0x1, 0xf9, 0x76}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x2, 0x4, 0xf, 0xff}, @processing_unit={0x7, 0x24, 0x7, 0x4, 0x5, 0xa}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x4, 0x6, [0x5, 0x1, 0x9, 0x6, 0x3, 0x5], 0xd}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x30, "84466f1c"}, @mixer_unit={0xa, 0x24, 0x4, 0x3, 0x2, "7698253193"}]}], [{{0x9, 0x5, 0xc, 0x3, 0x200, 0x6, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x176}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x800}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x38, 0x0, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x6, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x9e}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x4, 0xa, 0x8, [@generic={0x69, 0x8, "d998f092d856ebba57c1c2a4b5671513e21049cfcbcc700122539f4df0d4e5cc0e535191e6bff2b3ca8ffaf10b8b0e56baad2cf43d32c6fac7ad84298ad677367cbc80d99117e9c87c5864e9dd410a2f2bcf043777c91b47eaf753305f8f563a9c695013a4b8b9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x2}]}}]}}]}}]}}, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

8m32.519506967s ago: executing program 33 (id=526):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000180), &(0x7f0000000200)=0x4)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340), 0x48000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})
syz_usb_connect(0x5, 0x116, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xde, 0x1b, 0xca, 0x20, 0xbb4, 0xa8f, 0x5a2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x104, 0x1, 0xa, 0x7, 0xa0, 0x6, [{{0x9, 0x4, 0xf5, 0x0, 0x3, 0x19, 0x47, 0x1f, 0x2, [@hid_hid={0x9, 0x21, 0xf, 0xa, 0x1, {0x22, 0x25f}}, @uac_control={{0xa, 0x24, 0x1, 0xf9, 0x76}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x2, 0x4, 0xf, 0xff}, @processing_unit={0x7, 0x24, 0x7, 0x4, 0x5, 0xa}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x4, 0x6, [0x5, 0x1, 0x9, 0x6, 0x3, 0x5], 0xd}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x30, "84466f1c"}, @mixer_unit={0xa, 0x24, 0x4, 0x3, 0x2, "7698253193"}]}], [{{0x9, 0x5, 0xc, 0x3, 0x200, 0x6, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x176}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x800}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x38, 0x0, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x6, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x9e}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x4, 0xa, 0x8, [@generic={0x69, 0x8, "d998f092d856ebba57c1c2a4b5671513e21049cfcbcc700122539f4df0d4e5cc0e535191e6bff2b3ca8ffaf10b8b0e56baad2cf43d32c6fac7ad84298ad677367cbc80d99117e9c87c5864e9dd410a2f2bcf043777c91b47eaf753305f8f563a9c695013a4b8b9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x2}]}}]}}]}}]}}, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

7m35.849570425s ago: executing program 5 (id=870):
unshare(0x2040400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xf0007, 0x0, {[0xffffffffffffffff, 0x100000000, 0x59, 0x2, 0x7fffffffffffffff, 0x2, 0x2, 0xbaf6]}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'geneve1\x00'})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x8000000000, 0x1, 0x1, 0xb, 0x4002004c5, 0x1000, 0x1, 0x0, 0x5, 0x80e, 0x0, 0x6, 0x40000000000000, 0x49], 0xdddd1000, 0x1c6256})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="06006500000000009e005b"], 0xc4}}, 0x0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000004080)={0x1afc, r3, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_PEER_MEASUREMENTS={0x144c, 0x111, 0x0, 0x1, {0x1448, 0x5, 0x0, 0x1, [{0x624, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x6c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf50}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x258, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x13c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x52}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2e0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd373}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}, {0x2c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x108, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5e}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x584, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x11c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x815}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa794}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x75cb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x1d4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xea43}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x72}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x88}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbb4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1b8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e}]}]}, {0x2a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x24}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x1ec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_MEASUREMENTS={0x680, 0x111, 0x0, 0x1, {0x67c, 0x5, 0x0, 0x1, [{0x274, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7e3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x214, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x140, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}]}]}]}, {0x148, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x10c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x18, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1d0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xcc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xad1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x21}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}]}}]}, 0x1afc}, 0x1, 0x0, 0x0, 0x20000004}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r9=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r10, 0x40485404, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, 0xbb2ab84}})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r11, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
io_setup(0x8a, &(0x7f0000000680)=<r12=>0x0)
io_submit(r12, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x3000, 0x3, 0x1, 0x80, r11, 0x0, 0x3000}])

7m35.603698953s ago: executing program 5 (id=871):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x5000, 0xc000})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xffffffffffffffe8, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_COMMENT={0x0, 0x1a, '/dev/vcs\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x248000, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @win={{0x2, 0x4, 0x1, 0x400}, 0x3, 0x5, &(0x7f0000000340)={{0x0, 0x5, 0x9, 0x4}, &(0x7f0000000300)={{0xfffffff1, 0xb, 0x80, 0x1}, &(0x7f0000000280)={{0x2, 0x177, 0x1, 0xfffffff7}}}}, 0xd, &(0x7f0000000440)="6a41f3a34c474a5f9de0c6b2b37ba450f1e062c7b5cf58ae0ffc50e39c194b60be6d327b0ed3e9e94ab567896c5f121a0882e0006ba34a45ca47d1668b058c383b35f22600af5b62e24d96c10b36afade1833e78dd045edd9f5943148e", 0x4}})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x3000, 0x10a000, 0x1})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000080)={0x10000, 0x9019baff90eebf70})
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={'dummy0\x00', 0xffff, 0x101})
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000005c0))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x850}, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2})

7m35.50002742s ago: executing program 5 (id=873):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r1], 0x9)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421})
r3 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[], 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x1000, 0xa, 0x2, 0xa, 0x0, [{0x8, 0x1, 0xa, '\x00', 0x1}, {0x4, 0x2, 0x8, '\x00', 0xff}, {0x4, 0xff, 0x81, '\x00', 0x3}, {0x3, 0xbb, 0x9, '\x00', 0xc}, {0x0, 0x8, 0x1}, {0x92, 0xdc, 0x0, '\x00', 0x1}, {0x5, 0x1, 0x40, '\x00', 0x1}, {0x8, 0x7f, 0x7}, {0x7, 0x8, 0x1}, {0xd, 0x1, 0xf3, '\x00', 0x8}, {0xc0, 0x39, 0x7, '\x00', 0x41}, {0x9, 0x2, 0x1, '\x00', 0x8}, {0x28, 0x3, 0x3, '\x00', 0x9}, {0x1, 0x3, 0xba}, {0x7, 0x7, 0x8, '\x00', 0x86}, {0x7, 0x3, 0x1, '\x00', 0x3}, {0x3, 0x3, 0xf5, '\x00', 0x3}, {0x30, 0x6, 0x1, '\x00', 0x3}, {0xff, 0x2, 0x9, '\x00', 0xa}, {0x9, 0x1, 0x4, '\x00', 0x54}, {0x5a, 0x0, 0x3}, {0xe0, 0xa0, 0x3, '\x00', 0xe}, {0x2, 0x6, 0x9, '\x00', 0x5}, {0x7f, 0xb3, 0x5, '\x00', 0x90}]}})
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)={0x40, 0x1, 0x2, "cbc7"}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df})

7m32.866566687s ago: executing program 5 (id=882):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x88)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/13, 0xd}, {&(0x7f0000000680)=""/212, 0xd4}], 0x2)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000180)="c1", 0x1}, {&(0x7f0000000480)="8c3206c17e367ae04671233facb3e7ac8f79975047cc48f37cbb2a2685c6274a6e46e5222b10a12fa346f2466d9e004fcd2638cae1cf", 0x36}, {&(0x7f0000000540)="3a970f1a34a3051622d217542018", 0xe}], 0x3}}], 0x1, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901)
chdir(&(0x7f0000000100)='./file0/file0\x00')
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x3)

7m32.691616229s ago: executing program 5 (id=883):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0xe}}, './file0\x00'})
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r1, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x20000810)
syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902120001000000000904"], 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x334, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x52c}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x71}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb8000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_BEARER={0x178, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @private2, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x89ec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @remote, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x97b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5ca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa6b1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe1d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3046f5a4}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x400c801}, 0x40000)

7m32.483748447s ago: executing program 5 (id=886):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[], &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0})

7m32.217081466s ago: executing program 34 (id=886):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[], &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0})

6m1.431910152s ago: executing program 0 (id=1348):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r1, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x6e21, 0x7, @empty}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, <r7=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r7, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x6, 0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00')
openat$cgroup_ro(r8, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0)

6m1.195526629s ago: executing program 0 (id=1349):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETA(r1, 0x5434, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x101000)
ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x1)
close(0x3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20008050}, 0x10000)
ptrace(0x4207, r2)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r9 = dup3(r8, r7, 0x0)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="000100001600010000000000000000000000008000000000000000000000000000000000000000000000004e200000000000000000a0000000000028c08eb6a697e98c9f2b2776c550aa9d2d62bb6a4f069d6c9a67474f70c88075541595fda9a15f06bde792bfdc6ddf826c6b724ebae7b73bb1b532d3e027314efcddeaf6750f305a46b21c605d66e93f4046aa2d1f239151b2546daea2e345b2427c643972859dd0c46f2a44c03d9a52e6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000005000000050000000800220007000000"], 0x100}}, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x3})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
r12 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x68000000)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff35a1e107fa5c8d3cbb1fa61229a00ecd207d9e6f2a208bf148e6bc56955cb53300"/80})
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000004c0)=[@free_buffer={0x40086303, r12}], 0x0, 0x0, 0x0})
ptrace$setregset(0x4205, r2, 0x2, 0x0)

6m0.831448565s ago: executing program 0 (id=1352):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x1c)

6m0.594850945s ago: executing program 0 (id=1355):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xf, 0x2)
add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) (async)
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') (async)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108)
setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) (async)
setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108)
getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) (async)
getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000300, 0x0, 0x0)
r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240))
writev(r5, &(0x7f0000000300)=[{&(0x7f0000000280)="91796a00aebf2fb511ec3d31eae58c27c60a3662612912d97043d8c686400473", 0x20}, {&(0x7f00000002c0)="44772db679f6", 0x6}], 0x2)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='.request_key_auth\x00', r2)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='.request_key_auth\x00', &(0x7f00000001c0)) (async)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='.request_key_auth\x00', &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc0300004800fe8000000000000000000000000000aaff0200000000000000000000000000013a00000005"], 0x7e)

6m0.430590418s ago: executing program 0 (id=1357):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0xf3e0e1d127bc7062, 0x4)
syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000001018610f4205ae06d316b6692010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x4)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3})
syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0)

5m58.825903234s ago: executing program 0 (id=1365):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000580)={0x1f, @none}, 0x8) (async)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4)
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040f20421140000000000010902240001000050b109040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="68b8bfe954939e160000b9da64482a163a9c26e55c07b8c54e480a6f9a8c8667f251103bbe486bda2afc7f565cb539cc379f95c885806e44eca1ac9f3ce31bae9c5b0361c53d00000000000000c29b"], 0x0, 0x0, 0x0, 0x0}, 0x0)

5m58.194627284s ago: executing program 35 (id=1365):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000580)={0x1f, @none}, 0x8) (async)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4)
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040f20421140000000000010902240001000050b109040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="68b8bfe954939e160000b9da64482a163a9c26e55c07b8c54e480a6f9a8c8667f251103bbe486bda2afc7f565cb539cc379f95c885806e44eca1ac9f3ce31bae9c5b0361c53d00000000000000c29b"], 0x0, 0x0, 0x0, 0x0}, 0x0)

3m43.285977017s ago: executing program 6 (id=1938):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
close(r3)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x6})
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x65}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8)
sendto$inet6(r0, &(0x7f0000000380)='\f', 0x1, 0xcd4e8ec47367e7d3, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, 0x1c)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0xa00}, 0x8)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x12, 0x29, 0xe1, 0x40, 0x61d, 0xc120, 0x95e2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0xa8, 0x4, 0x0, 0x37, 0x8f, 0x3f, 0x7}}]}}]}}, 0x0)

3m42.445959919s ago: executing program 6 (id=1939):
syz_open_dev$MSR(&(0x7f0000000080), 0x10002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000000))
syz_open_dev$MSR(&(0x7f0000000080), 0x10002, 0x0) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) (async)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000000)) (async)

3m42.293401646s ago: executing program 6 (id=1941):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x9ad4, "84851b", 0x0, 0xfe}) (async)
getsockname(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000000c0)=0x80) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="d1c4f66ab09d"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
socket$inet(0x2, 0x5, 0x8) (async, rerun: 32)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240)) (async, rerun: 32)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000280)=""/43, &(0x7f00000002c0)=0x2b) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r3) (async)
ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e)
r5 = getpgid(0xffffffffffffffff)
sched_getparam(r5, &(0x7f00000004c0))
r6 = dup3(r3, r2, 0x0)
setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f0000000500)=0x8, 0x4) (async, rerun: 32)
io_setup(0x4, &(0x7f0000000540)=<r7=>0x0) (rerun: 32)
io_cancel(r7, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x0, r3, &(0x7f0000000580)="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", 0xfb, 0x9, 0x0, 0x0, r6}, &(0x7f00000006c0)) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000740)={0x7, &(0x7f0000000700)=[{0x9, 0xa, 0x9, 0xffffff3e}, {0x6, 0x6, 0x9b, 0x80000001}, {0x19, 0x4, 0xf7, 0x8}, {0xf5b, 0x5, 0x2, 0x5}, {0x2, 0x1, 0x2, 0x6}, {0x4e36, 0x19, 0xfc, 0x1}, {0x0, 0x1, 0x0, 0x4}]}) (async)
r8 = openat$incfs(r6, &(0x7f0000000780)='.pending_reads\x00', 0x20001, 0x110)
fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000007c0), &(0x7f0000000800), 0x2, 0x0) (async, rerun: 64)
ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000840)={'veth1_virt_wifi\x00', 0x5}) (async, rerun: 64)
socket$kcm(0x29, 0x7, 0x0)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), r6)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r9, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x40) (async)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async)
close(r3) (async)
syncfs(r2)

3m42.027160314s ago: executing program 6 (id=1944):
r0 = fsopen(&(0x7f0000000000)='cramfs\x00', 0x1)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0xe8000, 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='\\\x00', 0x0, r1) (async, rerun: 64)
r2 = syz_io_uring_setup(0x115c, &(0x7f00000000c0)={0x0, 0xb994, 0x400, 0x2, 0xc1}, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000180)) (rerun: 64)
r4 = syz_io_uring_setup(0x5702, &(0x7f00000001c0)={0x0, 0xf563, 0x20, 0x2, 0x102, 0x0, r1}, &(0x7f0000000240), &(0x7f0000000280)=<r5=>0x0)
syz_io_uring_submit(r3, r5, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x1d, 0x0, r1, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000000300)='./file0\x00', 0x18, 0x0, 0x23456})
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x101000, 0x0)
close_range(r6, r4, 0x0) (async)
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, 0x0, 0x908, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40002}, 0x40041) (async, rerun: 64)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000840)={0x2c, &(0x7f0000000500)={0x20, 0x23, 0xd3, {0xd3, 0x30, "f12e6819f74234c6953797c7b282b81e71012f370cf1d7e525cdcaea7fc9c66901a9cb1f4597c18970a8c8fa2cf47847f5d6ef83414419194fd5f922a6c1f9e6b1f8ea96bc4566b1f1455dceaca09b5bfb6aad73222f605ff3c18dbc3957fa988c32d2305d479e2cd03d8553fa271cc5aed8c50afe6827a5d6cc69e85172adda56a2a97ab32be67d05548321009b6197442b2b214ea5e857c7609a995abda64e8fc96171449fdbf51b2e7c0b8c0f5332cd76519b5df756f32b2fac83c3c0e3c769f398a5e5a3f89e4c4e6c4b894db78027"}}, &(0x7f0000000600)={0x0, 0x3, 0x84, @string={0x84, 0x3, "f5ed145071ff6152f9d71bd58a143f82fe3f4e0eacdf8ecbc653adfb4532a5c57fceaa7c4c54ae7ada4f898c0d9d244bf0dfcad99798cabd3b17d6c470bd07a31a8608b417760575c8bb13452331ae60a30a5c2368c52a4c4d1019457acffdc69db7df494c540db540b1be4edfce8929d1a84501421aa5ade6e45545bc8952c9f0cc"}}, &(0x7f00000006c0)={0x0, 0xf, 0xed, {0x5, 0xf, 0xed, 0x2, [@generic={0xe5, 0x10, 0xb, "bc1dcb4711f3d985b74f99985a816cf299f1e5bef28259bcc2c214633dfb88a205a32daae38845cf3f3757bc7181b8294c72b69641cb23a3ceaa6f723b31b220a4680c363f913af35ae4672ef5efe89c6bc94449fb625496680c9ace72a6694c25b50aca14f15fc38691176abfe54c55dc3439e5e51da86b759a74df945760baa5c93dcb13691ad5cfec36e9200d7393a988080ac5efe1d12a7f3f08f1e5c8bffadc58be09a909abdcbc8c387e9ea18813ebb476b7f843948a796c058d9159314ea11be1bffa5acb8851aaba7336a8f5c1a8d7689173ea20a23fe4c69f68ab807617"}, @ptm_cap={0x3}]}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x3, 0x1e, "22ecd713", "cc879086"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0xf7, 0x8, 0x5, 0x5, 0x40}}}, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x0, 0x9, 0xb0, "325d3ff2e5f951a2227aa3c008b71d48321081727b4a0bcd369b6094c7986d953252c7af933b61c78222bacdc911e375cba0d9ea6234b794207e2e57241d3270eabec9abd703c4441688f5cf8f5f1f62ea722b8d7635d576d9838bdbf36f2522dbcab46e2aaadd37afd7d505ee27e300e01d5eddb68e923abe5c1a5a58d3aeb134d8b62fa07d7000e8913a2df88fac150346afe013c72486b4b23cd953c411cfd34bcbcae9a4a4928e0b320a012bd6a7"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x3a}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000a00)={0x20, 0x0, 0x8, {0xa0, 0x1, [0xf0f]}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, '^\''}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @local}, &(0x7f0000000b80)={0x40, 0x17, 0x6}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "9f5a"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0xfd}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0xf}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x1}}) (async, rerun: 64)
sendmsg$key(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x2, 0x9, 0x6, 0x0, 0x3, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e24}]}, 0x18}}, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001000)={&(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0], &(0x7f0000000f80)=[<r7=>0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0], 0x7, 0x2, 0x3, 0x3})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000001040)={&(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r7, 0x1c1c1c1c}) (async)
r8 = fspick(0xffffffffffffffff, &(0x7f0000001080)='./file0\x00', 0x0)
r9 = fsmount(r8, 0x0, 0x8) (async)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000010c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
close(r9)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='\x00', &(0x7f0000001140)='\\+\x00', 0x0) (async)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000001180)=0x8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f00000011c0)=0x3, 0x4)
preadv(r4, &(0x7f0000001480)=[{&(0x7f0000001200)=""/161, 0xa1}, {&(0x7f00000012c0)=""/214, 0xd6}, {&(0x7f00000013c0)=""/13, 0xd}, {&(0x7f0000001400)=""/80, 0x50}], 0x4, 0x5, 0xfff) (async, rerun: 32)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb3b1753a1d631ec3, 0x1010, r6, 0x0) (async, rerun: 32)
openat$comedi(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/comedi5\x00', 0x501000, 0x0) (async)
read$nci(r10, &(0x7f0000001500), 0x0) (async)
getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000001540)=""/162, &(0x7f0000001600)=0xa2) (async, rerun: 32)
ioctl$RTC_WIE_OFF(r10, 0x7010) (rerun: 32)
ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000001640)=0x7) (async)
write$P9_RLERRORu(r6, &(0x7f0000001680)={0xd, 0x7, 0x2, {{}, 0x2}}, 0xd)
preadv2(r8, &(0x7f0000002ac0)=[{&(0x7f00000016c0)=""/40, 0x28}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/226, 0xe2}, {&(0x7f0000002800)=""/100, 0x64}, {&(0x7f0000002880)=""/116, 0x74}, {&(0x7f0000002900)=""/253, 0xfd}, {&(0x7f0000002a00)=""/160, 0xa0}], 0x7, 0x7, 0x2, 0x8)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)

3m41.873794021s ago: executing program 6 (id=1945):
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r1)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r4, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0)

3m41.787279918s ago: executing program 6 (id=1947):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
pipe2$9p(&(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r0)
creat(&(0x7f00000001c0)='./file0\x00', 0x8)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}]}})
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x7ef}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x4, 0x2a40})
mmap(&(0x7f0000499000/0x7000)=nil, 0x7000, 0x1000006, 0x28011, r4, 0x0)
syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0xe, 0x7, {0x7, 0xd, '\t\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
sendfile(r4, r1, &(0x7f00000000c0)=0xaa03, 0x1)

3m26.172185788s ago: executing program 36 (id=1947):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
pipe2$9p(&(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r0)
creat(&(0x7f00000001c0)='./file0\x00', 0x8)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_L}]}})
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x7ef}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x4, 0x2a40})
mmap(&(0x7f0000499000/0x7000)=nil, 0x7000, 0x1000006, 0x28011, r4, 0x0)
syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0xe, 0x7, {0x7, 0xd, '\t\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
sendfile(r4, r1, &(0x7f00000000c0)=0xaa03, 0x1)

8.482371463s ago: executing program 4 (id=2784):
syz_80211_inject_frame(0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x8050)

7.845845614s ago: executing program 4 (id=2785):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0xffffffff, 0x2, 0x7ff, 0x101, 0x80})
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f00000000c0))
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000100))
r2 = fcntl$getown(r1, 0x9)
ptrace$setregset(0x4205, r2, 0x4, &(0x7f00000001c0)={&(0x7f0000000140)="7556131d5231ed6a4f12a2fda3b9c63a652b9727e28053262047c64d40ac117223ef5045570be288a9fc0920918e8f89db1a7dd648a9dfabbd062fd973fe69efd5a4f5b27d6555", 0x47})
r3 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x543, 0xe621, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x0, 0xd, 0x1, {0x22, 0x687}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x9, 0x51}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x9, 0x2, 0x40}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x3, 0x5, 0x1, 0xc7, 0x5}, 0x20, &(0x7f0000000280)={0x5, 0xf, 0x20, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x9, 0xb, 0x1, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0xf, 0xf, 0x4, [0xff3f00]}]}, 0x9, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}, {0xe8, &(0x7f0000000300)=@string={0xe8, 0x3, "97a5827fb9ced046d487960e23792d229cd4cd6ef1c5222b5add0918186c3a6b7f5d75d1a0cdf03a07d9b3be3eed787d87bdc255c55c73161fa96b4c767b9a893b8bec991fa1c8ceb1ce4b207476733a3118c434eeb41fae8a410b74f0f82ea96d9dedc93e5a9e3ee9c82665d90706c4417e6a34b747b088a74240a8aaadd891a6b7b683c1aba1c5b2ed230bb1d49d5865fc5b3de2b5856752c1989aee7c2e0d6ba5c62465ab7397d7a478ad22eadc69c7fe65dd18a885d1d84a7de9b5a77aad1de10b590c546470f6a5ede18133a753231cfe0925e14bcd7197edb6057b1d75ed41fda0a1e0"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x449}}, {0xb4, &(0x7f0000000480)=@string={0xb4, 0x3, "875c0e3a7364755f8da70f1647d7c770ace86c710483827a9430b0cbb17890d581172a18bb2a9ab46155669771ae76ca12ab8b5c90867531fb98bf608cc624c3124cdf635ef729f91549d0002684c6e2e754ebfcf13a2641951f5b454642bbc60c1d0ab7a356c3fd9ed9cb638c0a325c44d1f30d001d2bd8c7f67cd83e797fd3f6ab782245d6e2a2111397d0000a02863e90da2d7f1ef2cd9c8fd7d6fa6cfb452fab88d92a57c5329c4e462d2eacaef8271b"}}, {0xbe, &(0x7f0000000540)=@string={0xbe, 0x3, "e9e17d1753bd5877c715966768809d97264e8170780dca9083728b16eb20c06231d48d8ed3e754d601bc4f54405235d686687bebca3465974f838675df6271e17734f94f408264de6b3ae1b1d8bed07b0de0dd827aeacb513bbf5bea52685bafcf6759d002636959e2c5acb730a952c031569d13e9e7b9040d3cd6376144d5ee07197422c262691bab53e882c5cfbbdac53034b237da0ffa00abe8cc943d54ddd1df0bf44fbf8aca7a9880da894c807020de2ae778f2eac8c27594dc"}}, {0xd9, &(0x7f0000000600)=@string={0xd9, 0x3, "64e676cbfc68385979242267fc4eea093643450162fc36b34b20a1e7e67ffbf89421908a901f8dc25fc8e2b1a6f9d7eb6b694936181262e7051ae6f87a3aa8757839a90f887846f3e19dac46ca55215ddad9daacc0c05b4540066f35a55149c3fdff568834ba8c35c43bb93b9f9363010bdc8165207a9f0b5ac367f119f24059e2373c18443030c1d532380cdc32240a7c66b0275cab272a02d0e55549af62482830cabaeb41e9302e5367e1bc2bb3d898850fd47d204475b2ee191028274f40a2b38a45670c04b80d321e2205d3dbc3a50d949198b0a3"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000740)=@string={0x4, 0x3, "6819"}}]})
syz_usb_control_io$hid(r3, &(0x7f0000000ac0)={0x24, &(0x7f0000000840)={0x0, 0x4de7c208216e4679, 0xf0, {0xf0, 0x0, "5f871b0a9696523b2780ed4b8ed003eab50edab3296b7b9e438cbef41e09d9eec63cdc636d16af248bcfadc38cd45f3a31dc0461eec25a775e6d804a447625f2a96a608ab7a354a5471ccdae9833fe2c0189a57c5f551dad1237f0b01e906b731613747315837950266ea053ca734c36a1cf5685fe3adb1937b2e858eb272b660f13ed5834c48ebb03cb94691eb156cea76b593c1be79a508a6ff0ca4449068c7e85824673dcdfb9fc4e03eb2e980debfa7d03e5b523ef3f99374dd6e6478997a9a043c7b5d26ca2ba6a52027c8de4ad2514e3bbd2f7463101425a635dfdd5a81d9f5579cca4533b94a7fd8577b4"}}, &(0x7f0000000940)={0x0, 0x3, 0xd5, @string={0xd5, 0x3, "13fc8e0ea19dfe0b7103b3ab36469b5a2370b0245b8a735a6061b87032962f8a7e74ef7818e8deb1969e4e025a88c8f7c26d2d78b8757aee02ca0d10f363e8fe3fcd89c1020c0e957d7f679a906ee413df70e9c305602a02bd9f214805fd9dba1f15821eed2621a61a2e0854dc57e801976728179341ee9bceef58f552e9e20fddab6efc9d728d6aee3ed3a98f7ba33153bbb286fbbb1e986753e4bc4df799a30ce5f723579eb5728d40091dc018de846c9e02edb53782e92a72b9c240358d0dfb8c66be7c664318580c8c73e6c5a63dc441fb"}}, &(0x7f0000000a40)={0x0, 0x22, 0xe, {[@main=@item_4={0x3, 0x0, 0x9, "31d5fd53"}, @main=@item_012={0x2, 0x0, 0xa, "98c0"}, @local=@item_4={0x3, 0x2, 0x3, "f25c4ca4"}, @global=@item_012={0x0, 0x1, 0x5}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x578, 0x2, 0x1, {0x22, 0xddd}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)={0x20, 0x5, 0xbf, "f807d8e5dff1b5e4ce2f04c7253baad69780c1de8eb31d88f480aee233450e35bf41cd1ad5cfb370a78972c80d184c0d57300a5f6a5fa78c18a850b667be456e136d34eb32f309eb329c2b03e2c65a1fffe3bad7c947bb8fc6467df45b92886d2051f7c39d0ddb6b800520151529e4683c69ddde79d665b757235bb03a9d6b746c630ac13e361e49bd5ae3c1bcafffed273307bbde2cd853aa00227e06b7e4ea0697e3cc58c215b61c2c3cff1c149ca89727c9c74b10549bda8a0ac1e2a79a"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000c80)={0x20, 0x1, 0x7a, "bda096aa435e91687d5662884876d4778cb3c8b76d2a37acad6ea42b662a17d4c92d035ce3857c44c83c6e784399e2166eab13f8e7770a26267fa20a1ba4a98c5b65d6ba870e543947fca91b61cf52d41df7763285527a5d087d3df1d5e30d41304480c60b164fcbcbf922ec69a2bf68b792c3cf9cf6d716971c"}, &(0x7f0000000d00)={0x20, 0x3, 0x1, 0xb}})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000d80)={0x48, 0x2, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000e00)={0x10, 0x0, r4})
r5 = pidfd_getfd(r1, r1, 0x0)
syz_usb_control_io(r3, &(0x7f0000001080)={0x2c, &(0x7f0000000e40)={0x20, 0x24, 0xf7, {0xf7, 0x0, "88f62360b13116bb6387ac917ba3297155f5d5b676e83eb8e76fe7ee8517d0ba40ff7bae839807ee3fe76f01e539454fe57e9f32b57d651eb0f4665232aa655f63b4305a58ea78ec9f6309bd2005afb9edcf993f3c9e32d17470ee6a092116f9f573e8d848e5d0b752411c28041f9f8fecfcd429acb816033e84815df414b59705d8ff1cb6c76d4538bff18b22a1d570d704c778a6ec2e1a34de43a4ced15bd654fc04915ca20c16d567d79a01642c0feeeecacc14c5df6085c15b06e295b19e2bf88fea74a3714901e7bb2f942671d455d0e13c7b06459f253ce8474cc4935ed8cfb8a62e119f2449f12783212529e13f7559725e"}}, &(0x7f0000000f40)={0x0, 0x3, 0x47, @string={0x47, 0x3, "2da09d1495d7fa4e72c5062007c0a37758a4d3336ff0d142ceeca86cc0dc01e07b0724031149c34db873c45154bebd0785fd186a7f0c241dddf485e94f5f119b98aa9f51ad"}}, &(0x7f0000000fc0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001000)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf6, 0x80, 0x5, 0x7, "edc2e210", "b650d09c"}}, &(0x7f0000001040)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x1, 0x8, 0x0, 0x4, 0x2}}}, &(0x7f0000001580)={0x84, &(0x7f00000010c0)={0x0, 0x15, 0xf4, "a56faa601459d5c28e217ad398764cfd8bcd7ee5d123dac7a2836f0bf9e82f9f82ff6174e21f50de12d54fdd9a46437e9a02c2b48bd0058705636522863e3dfa91ce4a7283f8ab91fe90d790647846f14c4613c2cd80a2a7a279da1c2fd1d48e1d507eb244606aef421314ecc4e59298d138290f54a62184c9025c204338b58206d2605181f2eab4adcfd33f0f087df3800ab6a953114ee215e73165c39a13e794ac15a14111d31e33105e19a279e9062c1c047359edc1d74a7a66d163dec839450357faf7da12783ba18e72f3202083b5cb21409ceca1aa99545db39d7745ab268712da400a3cbfe59ff5214f600aad9c6dbecc"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001200)={0x0, 0x8, 0x1}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x8, 0x80}}, &(0x7f00000012c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000001300)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001340)={0x40, 0xb, 0x2, 'FD'}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0x80}, &(0x7f00000013c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000001400)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, &(0x7f0000001440)={0x40, 0x19, 0x2, "d71d"}, &(0x7f0000001480)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001540)={0x40, 0x21, 0x1, 0x4}})
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x38, 0x140b, 0xa02, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
r6 = syz_open_dev$vim2m(&(0x7f0000001740), 0x7, 0x2)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000001780)={{0x1, 0x1, 0x18, <r7=>r6, {0x5}}, './file0\x00'})
r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000017c0), 0x101000, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000001940)={0x4, 0x0, &(0x7f0000001800)=[@exit_looper], 0xfc, 0x0, &(0x7f0000001840)="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"})
write$sequencer(r1, &(0x7f0000001980)=[@e={0xff, 0xb, 0x4, 0xff, @SEQ_CONTROLLER=0xff, 0x81, 0x7b, 0x8e}, @e={0xff, 0xc, 0x2, 0xcc, @SEQ_CONTROLLER=0xff, 0x1, 0x1, 0x5}, @echo=0x9, @l={0x92, 0x2, 0xb0, 0xf, 0x40, 0x4, 0x328a}, @generic={0x8}, @v={0x93, 0x8, 0x80, 0x1d, @generic=0xd, 0x7, 0xe93}], 0x25)
ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000019c0)={0x697, 0xa, 0x2, "d6da285f9e4ffe5e6dbc6e0819a07cf2cfc762b387273ede91e9c250c0628391", 0x30314442})
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001a00)={<r9=>0x0, @empty, @private}, &(0x7f0000001a40)=0xc)
setsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000001a80)={r9, @multicast2, @local}, 0xc)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000001b00)={<r11=>0x0, @private, @multicast1}, &(0x7f0000001b40)=0xc)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r10, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x48, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001c80), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001f00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001ec0)={<r13=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r12, &(0x7f0000001f40)={0x5, 0x10, 0xfa00, {&(0x7f0000001cc0), r13, 0x1}}, 0x18)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000001f80)={0x2, @raw_data="450e63fae90c99c8d2994648da83aaf6bd3e1689d2c8e8f14e137ce931b18aefed1caa39d23264907ef75e932d848a102f84c227d5a1fe0b4052547fe3705285ec8205cb56aac1f81bc772786e8cd993aab862ad64036399cb8c7e8277fb834eea2766651dc2edf347fab798353eea72f73558b8020153d9457d17dd9ec6524eada9cbe5bf5be23b9a8571c89c2f5ee98ba8b86c7785b6c1df0c4a99250512076a68adf062f814f3b0479a798a3c6792ca37e54624d508c941c27b2182f3ded8cf2920c86b076851"})

7.162069977s ago: executing program 4 (id=2788):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x9}})
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000000)={{0x0, 0x4000, 0xe, 0x0, 0x81, 0x4, 0xd, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x2, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xdddd1000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x10, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x5, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0x3, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0x8e}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x108001, 0x8]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000391211f2d77f353119c49b9767739a93aa21e3cc8efd951c3556310eaac9602d0f613a06f0ed21d46e6a0400000047bee8a7882c37ad4fa9e51aca481d5077f4b1314d0477b5804bcf92a82f726eda60c9aa1100000000000000c86510149b28399fdeaffb8dbdfa2a843058f7f2bdea78f900a6011d7b899996a95a11f2e458b0aef038e6d5307bb828800f232ebc6b21e74db90ad3cce670a82cf3f8e45fda46784ad4b821bd1bb465ce642f2e9ef2d3f5fa5254d1333a5d"], 0x0, 0x0, 0x0, 0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r6=>0x0}, 0x2020)
r7 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0xdc)
fcntl$setlease(r7, 0x400, 0x0)
ioctl$EVIOCSKEYCODE(r7, 0x40084504, &(0x7f0000000300)=[0x2, 0x5])
ioctl$TIOCL_GETSHIFTSTATE(r7, 0x541c, &(0x7f0000000180))
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x80000000000002, {0x2, 0x0, 0x7ff, 0x10000, 0x0, 0x3, {0x0, 0x0, 0x400000, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x1, 0x7, 0x4, &(0x7f0000000040)={0x18, "061dc9cb6b83d7d8da999bc75f3ce6a0ae4c2c9bd619cf4d4102608511cf86a76b"}})
write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r6, {0x7, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
ioctl$FIBMAP(r8, 0x401870cb, &(0x7f0000000040))

6.035356482s ago: executing program 8 (id=2790):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000010000000000000000000d000000000000000000ff"])
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000340)={{0x7, 0x0, 0x80, {0x8080000, 0xffff1000}}, "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", "1acd2077949cf1f27e1e764566e4cffaa168dcad09bfe7c84a06d9db78a4e8f0504116608cffa736ae4427d04f27d39e5de80f8935f281bc483252d1c4e0dff576831d8505d3cf34ddc4f4760b53ec5182b54b352dea1b5975eea9b6bffd5b66524559c7c3e9981d7a0ff5ffe6814c923871db66426d98286aec1debc56864a4b29ee5cb46989af08546d6d1a5d9da45db7d8abea1d392d0c668cc040da5d129ddbbe6a95a7d9e51a13328ea3fbd9ac81f03914ed9d1d2b72c234093a351f7294556996ca5459d796cb4127a9aed8e0cca398d1b5af6eae257d02db91a61d49a5677ee9c8caf1855edd2c25b9b3a9a5174d2193108e5e87d781780d9506a890687c80c429f3a46028ed71364c4b8d3b2380b38d2cf7e447dee058f556dcae2627e49dfd316d169d382f2b6775233157f57c7be54b105e2493e140ad97ecf9c12df8f0db9a973d0ef9197ebbdebc5e822ee06852a408560c7f19c65ab8527edc9ec1d6378f2c748f7e84d1d6e98de8abab3e0e42a866e1ec5d00822b124a98d77e9c8dbb3ac6648afe409b21e1cf2f5458a0588cd11af6887f552f6c16a801abf2594eb9a80e704b8053573f661dd29706e71060b630272037144b33d684f66128950510d4138785418f726eb7c7f84c7dda646b3647d673122f95ef89c863c3d4adec4477664cfe911683f19862cc918451f70a6a359dbc66b3599c0af91858ebe13c253a6e9a96758955fdfd1be103777812339e3786484a25b18994ba69b4275f26a64afb9be5219061d94d7c472236f1a20a9217d70abab15182c5f04c6080d535e34045d6497c1c8a2ea53fc022eb159d0d1be59a21f277ce441f3c5cb03ef0e7e1ac63177dfe567e2cb9055228f32c9ca6d38d99093fdc129951380cedafcca40712a2da5cc0af8d872d8f848ea5ff95210a52d2390e236da76fffce86cc8a78a8ea0e1e4464ceac9021556d29d7470ca19849b417aa6aee032f3bd437cb5c839c9f5fb20ec1367449abfb5e19f8365b7947bda60e34136e2eb53e0243766c2718d4bfe6eec77f8ca04d177cc17bad59d651a08349651de6d4dbf5856a6d42cc8cb2441ab7dfa9420d87d4a5aa5914f619b2478a0d68a98280231c8e7558d11eec87e80f2d039b5d6b287d9b3667b020dc45b999b162247bf38f5ac5fc99b5eb6ac5939d35d7d6e71b366f9553ada2784671aecdbdcaf42a2f254dc0289f7be9c6f0c045b30f63ae1a8fac778030f27e04e980bae66e474bc4f9572b8a0d8119ce13ea2ad1285b3397bc929ff26a2ba1ef2760c77e3e114d15742740b27796cb2fc84761db427cdf3c63be71fd6734ed2cb1300a8d5e2b1964f2a0320bfbad8e9bce0cd9329c8c41d79107d77f65c99f3c03813c1f0f5351869434c2ccb685f1863fac38a44ecf354ffde4926ae3cee90833db386633e6dba3585ec36f1aca6701d4d1fc13ac1c5d4cf2ae8c8c418da372bce96451dc2add28828e45ce3f6e35da3d49dcdb8ceb084a581b68fc5fcd4c45246e6b215ca98ae7239c317fe45404984292a83ac7e62614665bec4a5e80b055a0635003e93172e2045ec88144d9d7a2b50c45333720e2273b165147a0b1af77fe87089fe8c0fd32c4e950aedf6798c9007575dc86c02089414089527baf9bbbe5eaf4d58289de0987f8f310d7900ef2350daa438ac83ff255344a2bc814a3e7055269544310b0fe78b07eb0ee5f16899fc8bdf8e3cc47d27a44c93528885452195706091eaf15930f9df5874c19d0a1deedde0cbe9cda7f0618c378bc4ba6fbe911d546c7bc76954fcc6b5ef56c77d306421f9d24e0770cf8b578aaa6276bff4b98e9968e9a1f8c78c6d647d8c52a42d27ee8359840747913e0983e049ad77d87e35800eeeb19cd786a5edf6886e610f51b4d2290d959c7fe906dad2d3e2a5648c5ec0d48becaf209fbb6599d1b0d6299cb2b2fad3b3efac6ba0911a63ae399fa3f19adecc9b10533c99bba28bf9e37600db41c2b463c25b0602fb86ef043ee72aa26e7f102c3afe4073d1318671a514f8320dcbc699514792d5c90c34fe6809102cb6537a4e76530256cd997a1dba4a75b1578c7f12b409af040afa35c54001a4abf1c402f91413995ced6b64256684c34283e644246d235af905fa2edf8f802a65c1c1e0ba24ea656cb3b1f876b6f335aed27c3a6e8da53b1b9c283d299390310df6dc84e5569ad3ac1744824b329fc24cb8612c061b09440464c1168012dc40e8df788f9c708bde6bd4eb3f6111729b08796d0243b07a21ac542ae418f19ec3d7171197c8ca216b20f786784400f2834d98819a5fbbd909677f7d7309dca5c0e2cf74a8a53c1791c78488fec0520d3c71a9698e5040920acc5eb7764f4c295cb2f00b5a62d5fc1e1d0040c639886712ad4fece171739fbc0519b93c8bccac49f871a0e2f5ba97331be916aaae29b8cd646028629cc227b916d1d8b4729da3baffb0e39b533e039eb9f10073c156485902745ec60b8d281b2f84a8651fe4c533119bab8424bcecb28c067ffb1e03e05bcf9d6d44dfe0782e072934fc36e70b1acbf30387495618ac2729811aa6c2901b109b33a0010cfbe666fe9fcac86cc81023dda253863714e89c78265e219d00ba20b3c846368dd21816f699a6af20a290f075f4346b98ad40d69caaf2614856c0bdaa661907975679f5cb5afd3738ba811db58123922647476de50ccf17360393433b547bf0377b2115a7cd357699d043bd80981a2a28c638f7c2e725d85f9edd2fdcfea1f7e2bf02f9f0d4236c9d14c6d382dad99192125b219eea6a13b5685efcf34454d2a12537c5354dc5e34ecda968422cc472f0fec174b95cd298e89e7efbc164465dae45059a40e104b1a980ebc781848b0109ce9cec600b190a34dcf741dd6145d56c4ec27c983a7d6328130c122217bbbb33e2cffba1a352b6805dbd715772153b53051db7215f475ba8673b0dd59e2db414a658d3d262c5304d300b930921c7c0a9910eed96a705eea2c8657be193836a20f23fcbc8ef105ca25551626caf63c511d3c9dcffd9d485f27a63b6992e4b6fa26b02903a4da52fd7fa06397fe2883f9b6a4cac2ffb8ce1f476ec72bccaf0ec7b16e6f601e72f46e835d9bc2a82dccaa449728d22a7ff17772276f54073c66b184de0fa7f681823dcb7603a20aa94b76a9b7adb9f11f447b8764b2d719bea91ea32edbb4d340d18f18b3f53d1d07d0405facb202c30ac1ec145516e071cc71c59cc6205db061a8c19bb2d3ab463f6fea1c6d3b5a69d96e5b67ed569e1c04cff6c9f69ab9343e9a71bf6776d3b84b47de2ecf9a0d45515ef5a3b5c6d55f2c6543ef2bf0eb795219da3026ab06c9ba9bbdc30d5dc7c3782a9f58141a63f8d4683ad5c1d156c92c508cefd9702e9267263e34ff96800c425f768bd204466f4f9badabdfaf35e1a8096150e8afeea3a30586b89d1002f041612f8e81de4dcd268bf538307c4d28d1d2ae1af979f3b02017ebe942cdc8fa7964fe978254eb15fed7478e4200e381409486d37e0205c597b5ec19243ab547da051dee03f18e079af60dcb2095fe86f292a4b4bba8682ed8b220c0b48958882aaa7e93448bfecebfba6ca3ef28e0752080cbc9f752d6da814a9dc5bc552d9fe73b8a1df8eb0158df58810fce8719f11b04c4e157ac8ae3692f825a4569ff859273775c45eb999fff7a47ca461b2fda6edfe8ed8371ed29c4f7499448cfff0bc47ca1d8fc9eb35f79db389781c36e89541b686edc21f088463b2d26fd9b650eaf5ed1cda0f00040000000000009b0c527ba655252f77b77c2f4cc0f7741c52a57629fe511c5f9c17ee44fec35da363f5356343037b2705a393115062719e6bd87bbff2472a7833be6d2270fe5ff4cc9f0439a53adb91fe1520ff4841c120e80c99fcc2d0ee794fa8c91dc9c4227ef9f9ac784ce41abefa69b84acb285e385b74501ea137be765172d90738f201497cb7c992dcc2f17341c9b6a0ef3dcb14350669802e3295b5a133142df7bc5645bbf222d2da033ee4cc4f225f248ad88782945869c29943eb6498c87c2b125fb2d4067118c2b417308a1703fd9f48c48ee2a9c5af44df473e3b99b8a941fc4967060b4960864bc97e4f2bf53e7a5c2ec3d47e7bf8345b56a4df5f84d0523c1b6cf9399110e393474b3ece22c4923f531ff12242d5e2b293846a7ed06e3e7f062cb173431a2b680188fb46d2cb74d4a0d9dae59e2be485aabbb54c26406e6e77de3031e049bd8a49139fa62151716a665fb9f1966cf6c57f4185f7cffbbc43341f3b69a3ae0a4dcfd9b37f0035a69ac552830f0ca56069c8f69162280bced2ec30c6789f32cd38d7f97953f0989b65cf90f01206b20b0111a3d22f3d2f85104b03283f4fd7b80e53f20f1c91d5bf3b67aac25c4300b3191c1f5d7bb0fe112deac0f6acbea3b57c20c5d8f0bad48873a7e7347ead5a4d0b73041c86bdcd3b91d6cbe0ebb5824fb90cb4e74f439505074f236679c4ea4015fbdf0c44b4063b62cdced485cbca0eae2404da7158a974b7dc14c5207107d5424de14a35739f68f3f151c6de20d0ad19d06521baf26ab2cb7ff7e8f83d60a9f554367f99fa5c44910b886e1c9c2418a7a4b33f19fff9af4724c7c8251ffc24cc4464b8804b6704bc0572b23498ec92263d37bdb54490f3316087c5b192a20027ad6cf1a2c3fef8043e2847b8734fa8dc91ce992474796e3f71580841379279f8b10ab8e6766196fb5a9b2ff44cabece6930fb9f32e867047313410c13b11a8a788a29ad93a5b9ae1b960a46fd48fe5cdd7168815c67b267065453547cb60db74f37238b2f7f3c78abc249ffe118a1d3e7eb5cdd326ad0a07a50bd24a6be4b5e56fade7fb7c3b515b4d0b16884c9eee7ef9c82f2ea4d89113e950622cee8e63519a899da3ee83bcd369b01b373934bbed73d8f94e3312e72d82d3fb8b8e65b0f5580cffda633467fc3285023159c3ac7273a46275d874b87254df07ea15d0806f4b8312c4e95235cab31e015a3603906c188233db45dea658dcf694f5097a9e26aba8b58e248210fa5e12fa08cbbe0a01afa9b2c36d38d298dd180ee6e358d45397471bc064e2e8e51da189e98bf41cc30b50b0d937e8cbfc5b138dc66143716b27190689efebcaa5676c9eb370465f77803b219b0ee1f65f343d70b01435f9adc46979b121944e13a02cbdd47a9898b26d6cc5294a9358971bad37a6b01d8b2ee251e50b02acbd560bcd4a212124f308d87eca79d13c77b90510675989ffb70a9d5643df2db6067bd4e0fd21d0a40b84177279587777f763bb9e2fc99186402ff1905eb61b6ea3bef862beb10ede1fbca93f5b426f683bb72099ffc61c99d8a7527fe9167b13d786402864d2b4237fa47426f46b6d5e0911de793f73610b46de4e62b8a67aaed298a9a2d5b5c5b7936f8bcc62a8f9d64d8ff1470a386974b35f382f42ad1fb2c9de214b35aa0afcff7806d7601ab9142a0dade5c7a9e6b0c16027c4d0fc413ba5d16f0d4826b3f469afa6e5ce4a19e21d2a2c2c1e3055706d0ce371dee59a06e534887cf5e300bd118b7c5e8eee2a8fd4bf6ca96df566f49049bd25533c8ae08eb2334ba183529c041f3d9b45139173f3ee8b1b8f8633c9cb7caa735805d56b1e3119a97f3ce86ecd8f21256c0a5a54266cc00927c881ac18fef64f25704b3f01b4885a9c4053aec5bfe5be638563267548cacbad2a95c3c48e6a913bd87ec0c489c236214b650a17d27081ae8def0d27c0d6a25553601875192d11c9e3ef2a3273c1f9b079"})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000023c0)={0x0, 0x0, @ioapic={0x10000, 0xfffff800, 0x5, 0x7, 0x0, [{0x9, 0x0, 0x5, '\x00', 0x7f}, {0x80, 0x6, 0xff, '\x00', 0x1}, {0xaf, 0x4, 0x5, '\x00', 0x1}, {0x40, 0x7, 0x5, '\x00', 0xf}, {0x1, 0x5, 0x6, '\x00', 0x1}, {0x2, 0x1, 0x8, '\x00', 0x3}, {0x8, 0x8, 0x48, '\x00', 0xd}, {0x3, 0x1, 0xcb, '\x00', 0x2}, {0x97, 0x4, 0xc, '\x00', 0x7}, {0x9, 0x2, 0x56, '\x00', 0x7}, {0x4, 0x2, 0x1, '\x00', 0x3}, {0x0, 0x2, 0x40, '\x00', 0xc}, {0x8, 0x40, 0x0, '\x00', 0x10}, {0xc, 0x4, 0xf9, '\x00', 0x3}, {0x9, 0x5, 0x5b, '\x00', 0x3}, {0x0, 0xf9, 0x1, '\x00', 0x5}, {0xc7, 0x4, 0x9, '\x00', 0x40}, {0x5, 0x80, 0x2, '\x00', 0x7f}, {0x9, 0x8, 0x7a, '\x00', 0x2}, {0x10, 0x7, 0x4}, {0x7, 0x6, 0x1, '\x00', 0x3}, {0x40, 0x81, 0x6, '\x00', 0x5}, {0xf1, 0x6, 0x6, '\x00', 0x5}, {0xe, 0x10, 0xb, '\x00', 0x7}]}})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000240)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x8, 0x0, 0x4}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(essiv(pcrypt(gcm_base(cfb(cast5),blake2b-512-generic)),c'}, 0x58)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

5.326210048s ago: executing program 7 (id=2793):
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0))
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0x1b687c17c91db8bd)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x82, &(0x7f0000000300)={r1, 0xb}, 0x8)
mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0)

5.049480938s ago: executing program 7 (id=2795):
r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046})
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000009c0)=ANY=[@ANYBLOB="48b318634d828554"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000000002000040"])
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000580)={0x40, 0x15, 0x4, "61f3be92"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af10, &(0x7f0000000040))
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0)={0x40, 0x12, 0x2, "00a3"}, 0x0, 0x0})

4.531514817s ago: executing program 8 (id=2797):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0xc, 0x6, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x8, 0x40, 0x1, 0x5}}) (async)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, r3, 0x1000004, 0x110, r2, 0x0)

4.323855243s ago: executing program 4 (id=2799):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBENT(r1, 0x4b46, 0xffffffffffffffff)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000ec0)="d80000001d0081044e81f782db44b904021d080500000000040000a1180002000000000000000e1208000f0100810401a8001600a40001400300000803600cfab94dcf5c0461c16f94007134cf6ee08000a0e408e8d8ef075c11503c6baace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd6bc09000000000000002483916ddf50b8b351f55551715b52facb", 0x9b}, {&(0x7f00000006c0)="54f6d4d87eb3f1c0c5", 0x9}, {&(0x7f0000000080)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d", 0x34}], 0x3, 0x0, 0x0, 0x7400}, 0xd0)
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = fsmount(0xffffffffffffffff, 0x0, 0xf3)
getsockopt$MRT6(r4, 0x29, 0xd0, &(0x7f0000000040), &(0x7f0000000140)=0x4)
ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086410, &(0x7f0000000080))
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)

4.239210792s ago: executing program 8 (id=2800):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180)=0x6, 0x4)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2cf1389d, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000180)={0x1, 0x0, {0x0, 0x0, 0x3007}})
sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f418490309860762750", 0x13}], 0x4}}], 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0xf4, 0x18, 0xa01, 0x70bd2d, 0x0, {0x80, 0x0, 0x300}, [@typed={0x8, 0x137, 0x0, 0x0, @fd=r0}, @typed={0xd7, 0xa5, 0x0, 0x0, @binary="4b2720993624db5ad06db05e77924db908610dc683d06f032cab5ce9cd73d6910df00f1d1f94191eb3007848f9110ee748a7c89d6388c1df12971cdba26cb80b8eca05354d42ee573393283bde9f6e6d4fbe2336c0210cfc3c7d78962ca80525f85142d2190be35953f0e53253cba7657946249449a01668e4f0a57d21daff0f6bd8707cb9790b0415aa5e8c96ebf41c684535f0d80a4683cf0c87dfcec3f3bf397117b2a713849a4ce4f9d158cd49864f4ead17667d0ecec90d00d31a85604563e6a527140eb352ca84b2b5d0239eefc89f9c"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x14}, 0x0)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
getsockname$tipc(r3, &(0x7f00000001c0)=@name, &(0x7f0000000200)=0x10)

3.943564102s ago: executing program 4 (id=2802):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000540)={r0, 0x8, {0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x9, 0x13, 0x15, "ee43fb906c85891b35d8717b6d01252740a9acecdaac91a6820607ff5f372ecdbaf4b4714e509a0fdda5eb1970eefcb9b19ce63e0b112cc3fedaef60fafec605", "d1ef43646f896c2612792add7a24773a536679d2157a20b082472afe5b429e1109cce927c72472b5cbfdaaab2d161c0366a69409146b71cf07f32c204f1f4f09", "6ccab30cfabb2c52bb6278ab1a3bc7b155cd678a161573776889e37d182f8ce0", [0x6, 0x7cd1e9c0]}})
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c000000000000000000000007"], 0x40}, 0xc0c0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
r4 = socket$key(0xf, 0x3, 0x2)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000380)={"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"})
sendmsg$key(r4, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r8, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f00000001c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}], 0x1, 0x8000)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00b94e3d500007000000e0ff00000018000500", [0x0, 0x2000000000001]}})
r9 = gettid()
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0xb, 0x8, 0xd, 0x2, <r10=>0x0}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000280)={r10, 0x1, 0xfffff333}, 0x10)
rt_sigqueueinfo(r9, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x9, 0x1, 0x5a74f0c4, 0x0, 'syz1\x00', 0x2}, 0x3, 0x10000000, 0x6acb, r9, 0x8, 0x48, 'syz1\x00', &(0x7f0000000000)=['\x00', '/dev/loop#\x00', '/dev/loop#\x00', '/dev/loop#\x00', ']+#:\x00', '/dev/loop#\x00', 'blkio.bfq.io_service_bytes_recursive\x00', 'blkio.bfq.io_service_bytes_recursive\x00'], 0x7c})
r11 = openat$null(0xffffffffffffff9c, &(0x7f0000000680), 0x12201, 0x0)
r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000400304c197000000000001090224000100000000090400000103000000092100000001220500090581030000000000"], 0x0)
syz_usb_control_io$hid(r12, 0x0, 0x0)
syz_usb_control_io(r12, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)={0x0, 0x22, 0x3e, {0x3e, 0x22, "b1b448720400000000000000f9e7f985e4806c13af86221475f597a5a82d3ff10acc4fecef293753e99021a2a1034458a3dae5a055ea6954dd22014d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
getsockopt$IP6T_SO_GET_INFO(r11, 0x29, 0x40, &(0x7f0000000800)={'nat\x00', 0x0, [0x7, 0x80, 0x7, 0x9]}, &(0x7f00000006c0)=0x54)
write$cgroup_pid(r11, &(0x7f0000000880)=r9, 0x12)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000740)=0x8001, 0x4)
fcntl$setown(r2, 0x8, r9)

3.885352426s ago: executing program 8 (id=2803):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a0004000100080017"], 0x3c}}, 0x0)
r3 = fsmount(r0, 0x0, 0x0)
fchdir(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc8)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1800)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x2, 0x3, 0x2)
sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

3.406380251s ago: executing program 8 (id=2804):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0xffffffff, "ff0f00003cde2cb894af41076b0000000000f0ffdefe00000000007900"})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r3})
ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000002c0)={[&(0x7f0000000580)='/dev/ppp\x00(\xc0\x91D\x83\xb4\x7f0\x02~Z(ex\a\x90%\x9fx<rb\x9a:e8*4\x8d\x90*/.\xdfc\xe6\xcf_|\xcbHs']})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r6, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x50, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xb8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x40000)
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x1)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x1, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x200400c0)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000880)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5)

3.172541594s ago: executing program 8 (id=2806):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
r1 = getpgid(r0)
tgkill(r1, r0, 0x3e)
syz_usb_connect(0x1, 0x38, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x84, 0x86, 0xa6, 0x20, 0x1199, 0x9063, 0x11d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x2, 0x0, 0x0, 0xb5, [{{0x9, 0x4, 0xa, 0x0, 0x0, 0xff, 0xcf, 0x51, 0xfd, [@cdc_ecm={{0x0, 0x24, 0x6, 0x0, 0x0, "ff9b"}, {0x0, 0x24, 0x0, 0xfffc}, {0x0, 0x24, 0xf, 0x1, 0xffff, 0x8, 0x1, 0x6}}], [{{0x9, 0x5, 0x6, 0x10, 0x0, 0x2, 0x8, 0x1, [@generic={0x0, 0x3, "a22512648bae2b4fe4e80ab706ccaf8ea6f1f54035ab0c7d843190fa5d736b2c69328ed78eab7d9338db918aed5e8a52532a735d42786042e19a3bade1a2402e71663ba63cf4a315d5750daa45ca6d506be593c02e98e55e2b18c5ce91304100b929f761f6549a49cb5f56c01e34a3dbab8751f8b41e659eac34b43c8546daa466951e4f174587"}, @generic={0x0, 0x4, "f2c00a43457da5817ee8cb030c2351477b88ba06120d5ca47b350f490f563421cbc61ed3f5ac6ab61025f5ca"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x5, 0x97, 0x10}}]}}]}}]}}, 0x0)

3.125550125s ago: executing program 1 (id=2807):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x714, 0x0, 0xfffffffffffffd25)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0x0, 0x0, 0x0})
r3 = socket(0x10, 0x803, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r4, &(0x7f0000000740)=[{0x84, 0x77, 0x0, 0x0, @tick=0x200, {}, {}, @raw32}, {0x2, 0x9, 0x40, 0x2, @tick, {0xa, 0x5}, {0x2, 0x7}, @addr={0x72, 0x4}}], 0x38)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @loopback, @remote}, &(0x7f00000003c0)=0xc)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth1_vlan\x00', &(0x7f0000000280)=@ethtool_rxfh_indir={0x38, 0x5, [0x9, 0x4, 0xfa, 0x7ff, 0x8000]}})
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000)
write$sndseq(r4, &(0x7f00000002c0)=[{0x49, 0x5, 0x6, 0x0, @time={0xb062, 0x4}, {0x6, 0x3}, {0x2, 0x2c}, @time=@time={0x1ff, 0x8}}, {0x5, 0x2, 0xe, 0xfd, @tick=0x9, {0x3, 0x3}, {0x9, 0x7}, @raw8={"4e3784ba42defb8e82eeae3d"}}, {0x2, 0xe0, 0xf7, 0x5, @tick=0x1000, {0x1, 0x9}, {0x8, 0xff}, @note={0x2, 0xbb, 0x3, 0xd3, 0x8}}, {0xe, 0x3, 0xed, 0xfb, @time={0x10000, 0x1}, {0x0, 0x9}, {0x6, 0xe}, @queue={0x8, {0xd8, 0x2}}}, {0x6, 0x2, 0x81, 0x9, @tick=0x5, {0xf7, 0x3}, {0x8, 0x80}, @ext={0x65, &(0x7f0000000100)="89eba157333de4c7dcb5e393320cd5a344fdf3c3c92bd3cd329888d86255940a97720fc67c45b32ea6abe3c31f2952900dc2dc5decb23d078f16fd837baaa267248f020930a21773de3a1a59afb39c0c8851c6075ff980ecb0facdb66bc33ab909ac1c94a1"}}], 0x8c)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x714, 0x0, 0xfffffffffffffd25) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) (async)
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0x0, 0x0, 0x0}) (async)
socket(0x10, 0x803, 0x0) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) (async)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async)
write$sndseq(r4, &(0x7f0000000740)=[{0x84, 0x77, 0x0, 0x0, @tick=0x200, {}, {}, @raw32}, {0x2, 0x9, 0x40, 0x2, @tick, {0xa, 0x5}, {0x2, 0x7}, @addr={0x72, 0x4}}], 0x38) (async)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @loopback, @remote}, &(0x7f00000003c0)=0xc) (async)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth1_vlan\x00', &(0x7f0000000280)=@ethtool_rxfh_indir={0x38, 0x5, [0x9, 0x4, 0xfa, 0x7ff, 0x8000]}}) (async)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) (async)
write$sndseq(r4, &(0x7f00000002c0)=[{0x49, 0x5, 0x6, 0x0, @time={0xb062, 0x4}, {0x6, 0x3}, {0x2, 0x2c}, @time=@time={0x1ff, 0x8}}, {0x5, 0x2, 0xe, 0xfd, @tick=0x9, {0x3, 0x3}, {0x9, 0x7}, @raw8={"4e3784ba42defb8e82eeae3d"}}, {0x2, 0xe0, 0xf7, 0x5, @tick=0x1000, {0x1, 0x9}, {0x8, 0xff}, @note={0x2, 0xbb, 0x3, 0xd3, 0x8}}, {0xe, 0x3, 0xed, 0xfb, @time={0x10000, 0x1}, {0x0, 0x9}, {0x6, 0xe}, @queue={0x8, {0xd8, 0x2}}}, {0x6, 0x2, 0x81, 0x9, @tick=0x5, {0xf7, 0x3}, {0x8, 0x80}, @ext={0x65, &(0x7f0000000100)="89eba157333de4c7dcb5e393320cd5a344fdf3c3c92bd3cd329888d86255940a97720fc67c45b32ea6abe3c31f2952900dc2dc5decb23d078f16fd837baaa267248f020930a21773de3a1a59afb39c0c8851c6075ff980ecb0facdb66bc33ab909ac1c94a1"}}], 0x8c) (async)

2.755964825s ago: executing program 1 (id=2808):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000deb6000040"])
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
close(0x3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
r3 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x122)
r4 = syz_usb_connect(0x3, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$sierra_net(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$sierra_net(r4, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect$rtl8150(0x4, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
close(0x3)

1.667142949s ago: executing program 4 (id=2809):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045520, &(0x7f0000002a40))
dup(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0x94}}, 0x0)
r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x204, &(0x7f0000000ac0)={[{0x95, 0x4e00, "d63c07a360fe2af170f45b1688d758fbdee00494658de8b8fe71946415ce3e560c271e66d764cfee1274bae93e3f2464bf8891d1c524331813d96278be8d82bc59b83501ebb2eebcaece7ca9fe738b196745f740214dfff948526239376ccdcd172e54ebefbb89c2059b69dd207d148d826ad6b384a11e9a92cfcf3d20f83bd1d75a4c3f72bad07400900abf0d9df7890fd3cb4c4f"}, {0x162, 0x4e00, "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"}]})

1.659235021s ago: executing program 7 (id=2810):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) (async, rerun: 32)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) (rerun: 32)

1.571917438s ago: executing program 7 (id=2811):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd) (async, rerun: 32)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (rerun: 32)
write$cgroup_type(r1, &(0x7f0000000100), 0x9) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000043000701000000000000000004"], 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x4040) (async, rerun: 32)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (rerun: 32)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r3, &(0x7f0000000080)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @multicast1}, @parameter_prob={0xc, 0x0, 0x0, 0x8, 0x3, 0x0, {0x5, 0x4, 0x3, 0x7, 0x8, 0x68, 0x1, 0x0, 0x2f, 0x1, @local, @local}}}}, 0x3e)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) (async)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async)
syz_clone(0xa009200, 0x0, 0xffffffffffffffe9, 0x0, 0x0, 0x0)

1.53884451s ago: executing program 7 (id=2812):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',aname=a']) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e25, @broadcast}}}, 0x108)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)={@multicast1=0xe0000000, @broadcast, 0x0, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
r5 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, r4)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000002000000200001"], 0x34}}, 0x0) (async)
keyctl$assume_authority(0x10, r4) (async)
r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000140)=0x11) (async)
keyctl$revoke(0x3, r5) (async)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x400040, 0x0) (async)
socket$inet6_udplite(0xa, 0x2, 0x88)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') (async)
r10 = openat$comedi(0xffffff9c, &(0x7f00000002c0)='/dev/comedi5\x00', 0x206100, 0x0)
ioctl$COMEDI_INSN(r10, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x1, 0x80000000}) (async)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async)
getdents64(r9, 0x0, 0x0) (async)
add_key$keyring(&(0x7f0000000800), 0x0, 0x0, 0x0, r5) (async)
r11 = socket$inet_icmp(0x2, 0x2, 0x1)
syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYRESHEX=r11, @ANYRESHEX=r11], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x504040)

1.466090704s ago: executing program 7 (id=2813):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = fsopen(&(0x7f0000000000)='omfs\x00', 0x0) (async)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async)
r4 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0xfffffffe, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2) (async)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1) (async)
sendmmsg$alg(r1, &(0x7f0000001c40)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000780)="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", 0x16a}, {0x0}, {&(0x7f00000000c0)="ed8f33bf1e0dc27785645f22e5841d47daff989738a6fd18b251ac71dd637802365f0b3a9c02", 0x26}, {&(0x7f0000000680)="fa2483068eed2f0cc285ec25bf79c2114ad054efec53c5873e73ea931e5949a260e606ba619254d088de2e9e00000000c1078f2db6c9d08a6a987a7ab8d09850e79da0234b57572bee7611e26e82e986a22f71e5b78b63c8985cb451e184d85aa8a6504a74e03e8ceb8f59021a73fcc0", 0x70}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24000810)
syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201180135e29672e108d0062206da60010203010902120001080880050904a11d00c331"], 0x0)

1.046513241s ago: executing program 1 (id=2814):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x2, @multicast}, 0x10) (async)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10) (async)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x141, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000080)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x700, &(0x7f0000000040)='trans=rdma,') (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="017e"])
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r6)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x880) (async)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x4c, r8, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback={0x200000000000000}}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}}]}, 0x4c}, 0x2, 0x34005}, 0x0) (async)
r9 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)="a637e5f99985ff8c2f15beedbcd485c6bf547d5a71879575e9c77a3a675f6371e7d26a278201333b8abf3ce74491fabff6771b36ad2746d54c14d1e73cbffbe0925de4c9307a3451fe74131d4a2845ccc03197aa115509e3ad2d6a4e00d04314bc9350b68e9a0368f47da754565e0c4459c960b045f0916b0822123f429a95e3b2b72c7cf97eba676272ce0fc9a38eb643ceba6100af10043dafd05b62a003732dd91d08381f65a6766cf4045eee2d4d82703d4a", 0xb4, r9)

988.854321ms ago: executing program 1 (id=2815):
r0 = socket(0x10, 0x3, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x2, 0x1, 0x4, 0x2}}, 0x2e)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x4000, 0x2}, 0x10)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r1, &(0x7f00000001c0)='\\', 0x1)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)

284.599934ms ago: executing program 1 (id=2816):
open(&(0x7f0000000300)='./file0\x00', 0x404882, 0x100)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x900)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f00000009c0), 0x43, 0x0)
close(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xe2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r1], 0x528}}, 0xc000)
r5 = dup(r3)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='-cpCr-cpu -blkio -net '], 0x16)
writev(r2, &(0x7f00000007c0)=[{&(0x7f0000000480)="0a3f222ac8de2d36535728fecfaadb8dda772b6864661354057b1e8d6762550678cb63709f94bedb826dcb055d2c51fbb953fb6915f0375cc90743cdfceeb8b453859e397c90999c8497d41810073a23ca06886d005907597d9fd29494cf73beb6fca9700c2136475f08d118087f775049fd020802b9d0b6172f06ff298d8add15b75f", 0x83}, {&(0x7f00000003c0)="15a1cee29d014db5a1623db000c985164b57c1268ff2fccc2443abbfd2be1ac52f6921258d979a09839bd95fced4e0f853aa2896759aa80a5aee077eea773d7175fadaafbf3e05fa2330e989d43ea37bf7444fb2562c104a1d", 0x59}, {&(0x7f0000000540)="62b325bc2d66daf1e984754052d8b3f9c6ed3453e9541ccec3c8e59269bab36c568f64fd0293b64688125ac11776a5a0971c", 0x32}, {&(0x7f0000000580)="b3431110e0a057b808986a5f45d9b95dcfc39dc555e151bc76e7b7486f87b36c97dad0223ee9204a647b4dc5fa4db14834217ef3773f7950b4ef95690c68224d978ca0df006f8d1ac30d847af69b29f9ed8debdfbb45c1012dba76313d882d4ba76b55f006f9443c6eac13", 0x6b}, {&(0x7f0000000600)="338440afffb1b361c71853", 0xb}, {&(0x7f00000006c0)="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", 0xfb}, {&(0x7f0000000880)="a87c7be843904d47f3ccaea21a7b6bd9ccfd78ab68139203f8951cc436ce7893cd91b24bc129d0102ee514a02f9c28076ad6bd013fc80a36caeef4246c34ab0f1fd8219ec1d05e344005aa92e5e123941fe18f6c70e9c133cb9e570c5fc73261c68298adb426966f2da0333bff0382602e478b52aa0e69652534ed2717f8f4b07f9058e098445155d62df20915816c1c6ecafcc2e93f97a44d46ef9c6ae4a745c99dc84a838d9f77f693a954d61a88e28d8f28424df0d3d64a4e73383ae44c8afe45", 0xc2}], 0x7)
r6 = socket$packet(0x11, 0x0, 0x300)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x9)
sendmmsg$sock(r6, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
socket$netlink(0x10, 0x3, 0x9fda3ef580bfb189)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'vxcan1\x00', @broadcast})
getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000340), &(0x7f0000000380)=0x30)
write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef288563"], 0xffdd)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000000240)={{0x5, 0xfe}, 'port0\x00', 0x51, 0x81425, 0x8, 0x6, 0x2, 0x4, 0x8, 0x0, 0x0, 0x2})

0s ago: executing program 1 (id=2817):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0)
r1 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000000c0)={0x7d, 0x3, &(0x7f00000004c0)})
readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x4, 0x67, 0x9b, 0x40, 0x733, 0x401, 0xad7d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xff, 0x0, 0x0, 0x1f, 0x50, 0x4}}]}}]}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0)

kernel console output (not intermixed with test programs):

: fail, usb_gadget_register_driver returned -16
[  644.800391][T14887] loop2: detected capacity change from 0 to 7
[  644.810861][T14887] Dev loop2: unable to read RDB block 7
[  644.817811][T14887]  loop2: unable to read partition table
[  644.827497][T14887] loop2: partition table beyond EOD, truncated
[  644.835725][T14887] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  644.867521][T14889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  644.878667][    C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20460 ms
[  644.878698][    C1] sl0: transmit timed out, driver error?
[  644.960633][T14894] input: syz1 as /devices/virtual/input/input73
[  644.974682][T14894] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2385'.
[  645.604649][   T24] usb 5-1: USB disconnect, device number 123
[  645.963274][   T24] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[  646.131585][   T24] usb 5-1: Using ep0 maxpacket: 16
[  646.138500][   T24] usb 5-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config
[  646.149095][   T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  646.159646][   T24] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00
[  646.168873][   T24] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0
[  646.176950][   T24] usb 5-1: Product: syz
[  646.184582][   T24] usb 5-1: config 0 descriptor??
[  646.746430][T14924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  646.755216][T14924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  647.115787][T14925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  647.124671][T14925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  647.158566][T14925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  647.167782][T14925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  647.193565][   T43] usb 5-1: USB disconnect, device number 124
[  647.283799][T14928] fuse: Unknown parameter ''
[  648.340591][   T24] usb 5-1: new full-speed USB device number 125 using dummy_hcd
[  648.491861][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  648.502167][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  648.514688][   T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  648.523919][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.533296][   T24] usb 5-1: Product: syz
[  648.537646][   T24] usb 5-1: Manufacturer: syz
[  648.543028][   T24] usb 5-1: SerialNumber: syz
[  648.753637][   T24] usb 5-1: 0:2 : does not exist
[  648.767042][   T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  648.810340][   T24] usb 5-1: USB disconnect, device number 125
[  648.847754][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  648.972564][T14935] max out of range
[  649.376329][T14945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'.
[  649.386554][T14945] openvswitch: netlink: Message has 3 unknown bytes.
[  649.740768][  T797] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[  649.879939][  T797] usb 5-1: device descriptor read/64, error -71
[  650.005173][ T5869] dvb-usb: did not find the firmware file 'dvb-usb-p7500.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  650.029146][ T5869] dvb-usb: found a 'Prof 7500 USB DVB-S2' in cold state, will try to load a firmware
[  650.042636][ T5869] usb 9-1: Direct firmware load for dvb-usb-p7500.fw failed with error -2
[  650.052241][ T5869] usb 9-1: Falling back to sysfs fallback for: dvb-usb-p7500.fw
[  650.119561][  T797] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[  650.249499][  T797] usb 5-1: device descriptor read/64, error -71
[  650.359672][  T797] usb usb5-port1: attempt power cycle
[  650.699269][  T797] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  650.719962][  T797] usb 5-1: device descriptor read/8, error -71
[  650.959232][  T797] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  650.980145][  T797] usb 5-1: device descriptor read/8, error -71
[  651.090119][  T797] usb usb5-port1: unable to enumerate USB device
[  652.726765][T14977] x_tables: duplicate underflow at hook 1
[  653.013649][T14982] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2415'.
[  653.183733][T14985] xt_limit: Overflow, try lower: 604147548/4200216962
[  653.366596][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2412'.
[  653.759281][T15009] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2420'.
[  655.344350][T15051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2424'.
[  655.395541][T15056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2425'.
[  655.849189][T15066] FAULT_INJECTION: forcing a failure.
[  655.849189][T15066] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  655.862562][T15066] CPU: 0 UID: 0 PID: 15066 Comm: syz.1.2427 Not tainted syzkaller #0 PREEMPT(full) 
[  655.862592][T15066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  655.862605][T15066] Call Trace:
[  655.862613][T15066]  <TASK>
[  655.862623][T15066]  dump_stack_lvl+0x189/0x250
[  655.862650][T15066]  ? __pfx____ratelimit+0x10/0x10
[  655.862674][T15066]  ? __pfx_dump_stack_lvl+0x10/0x10
[  655.862695][T15066]  ? __pfx__printk+0x10/0x10
[  655.862716][T15066]  ? __might_fault+0xb0/0x130
[  655.862750][T15066]  should_fail_ex+0x414/0x560
[  655.862780][T15066]  fpu__restore_sig+0x1bb/0x1100
[  655.862807][T15066]  ? __lock_acquire+0xab9/0xd20
[  655.862838][T15066]  ? __pfx_fpu__restore_sig+0x10/0x10
[  655.862894][T15066]  __ia32_sys_rt_sigreturn+0x704/0x860
[  655.862929][T15066]  ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10
[  655.862949][T15066]  ? _raw_spin_unlock_irq+0x2e/0x50
[  655.862999][T15066]  ? __task_pid_nr_ns+0x28/0x490
[  655.863026][T15066]  ? do_syscall_64+0xbe/0xfa0
[  655.863065][T15066]  do_syscall_64+0xfa/0xfa0
[  655.863087][T15066]  ? lockdep_hardirqs_on+0x9c/0x150
[  655.863111][T15066]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.863132][T15066]  ? clear_bhb_loop+0x60/0xb0
[  655.863157][T15066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.863176][T15066] RIP: 0033:0x7f0bcd38eec7
[  655.863195][T15066] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  655.863212][T15066] RSP: 002b:00007f0bce1a5038 EFLAGS: 00000246
[  655.863231][T15066] RAX: 0000000000000001 RBX: 00007f0bcd5e6180 RCX: 00007f0bcd38eec9
[  655.863247][T15066] RDX: 0000000000000098 RSI: 0000200000000880 RDI: 0000000000000003
[  655.863260][T15066] RBP: 00007f0bce1a5090 R08: 0000000000000000 R09: 0000000000000000
[  655.863273][T15066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  655.863286][T15066] R13: 00007f0bcd5e6218 R14: 00007f0bcd5e6180 R15: 00007ffdcc30a198
[  655.863321][T15066]  </TASK>
[  656.393848][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2428'.
[  656.491179][T15072] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2430'.
[  656.500638][T15072] bridge_slave_1: left allmulticast mode
[  656.509493][T15072] bridge_slave_1: left promiscuous mode
[  656.515375][T15072] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.527763][T15072] bridge_slave_0: left allmulticast mode
[  656.533444][T15072] bridge_slave_0: left promiscuous mode
[  656.539582][T15072] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.707408][T15076] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2431'.
[  656.717663][T15076] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2431'.
[  656.774185][   T30] audit: type=1326 audit(1760685714.546:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15077 comm="syz.8.2432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8671f8eec9 code=0x0
[  656.916128][T15085] dummy0: entered promiscuous mode
[  656.921857][T15085] dummy0: entered allmulticast mode
[  656.975277][T15087] syzkaller1: entered promiscuous mode
[  656.982671][T15087] syzkaller1: entered allmulticast mode
[  657.345128][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2439'.
[  657.561040][T15101] 9pnet: Could not find request transport: vd
[  657.677866][ T5896] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  657.815739][ T5896] usb 5-1: device descriptor read/64, error -71
[  658.055595][ T5896] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  658.186671][ T5896] usb 5-1: device descriptor read/64, error -71
[  658.295825][ T5896] usb usb5-port1: attempt power cycle
[  658.635346][ T5896] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  658.656698][ T5896] usb 5-1: device descriptor read/8, error -71
[  658.895114][ T5896] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  658.915622][ T5896] usb 5-1: device descriptor read/8, error -71
[  659.026341][ T5896] usb usb5-port1: unable to enumerate USB device
[  659.753299][T15113] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2445'.
[  659.772233][T15113] kernel profiling enabled (shift: 63)
[  659.778366][T15113] profiling shift: 63 too large
[  659.818271][ T5828] Bluetooth: hci0: unexpected event for opcode 0x040d
[  660.454142][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2448'.
[  660.589056][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2450'.
[  660.699203][T15128] FAULT_INJECTION: forcing a failure.
[  660.699203][T15128] name failslab, interval 1, probability 0, space 0, times 1
[  660.712140][T15128] CPU: 0 UID: 0 PID: 15128 Comm: syz.8.2452 Not tainted syzkaller #0 PREEMPT(full) 
[  660.712168][T15128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  660.712180][T15128] Call Trace:
[  660.712190][T15128]  <TASK>
[  660.712199][T15128]  dump_stack_lvl+0x189/0x250
[  660.712227][T15128]  ? __pfx____ratelimit+0x10/0x10
[  660.712244][T15128]  ? __pfx_dump_stack_lvl+0x10/0x10
[  660.712256][T15128]  ? __pfx__printk+0x10/0x10
[  660.712269][T15128]  ? __pfx___might_resched+0x10/0x10
[  660.712287][T15128]  ? fs_reclaim_acquire+0x7d/0x100
[  660.712312][T15128]  should_fail_ex+0x414/0x560
[  660.712343][T15128]  should_failslab+0xa8/0x100
[  660.712370][T15128]  __kmalloc_cache_noprof+0x84/0x700
[  660.712394][T15128]  ? nft_pernet+0x23/0x240
[  660.712417][T15128]  ? nft_pernet+0x23/0x240
[  660.712439][T15128]  ? nf_tables_newtable+0x435/0x1890
[  660.712467][T15128]  nf_tables_newtable+0x435/0x1890
[  660.712482][T15128]  ? nfnetlink_subsys_unregister+0x181/0x1b0
[  660.712511][T15128]  nfnetlink_rcv+0x11d9/0x2590
[  660.712548][T15128]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  660.712572][T15128]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  660.712587][T15128]  ? ref_tracker_free+0x63a/0x7d0
[  660.712603][T15128]  ? netlink_unicast+0x7fa/0x9e0
[  660.712618][T15128]  ? netlink_sendmsg+0x805/0xb30
[  660.712645][T15128]  ? __netlink_deliver_tap+0x866/0x8b0
[  660.712658][T15128]  ? netlink_deliver_tap+0x2e/0x1b0
[  660.712679][T15128]  netlink_unicast+0x82f/0x9e0
[  660.712701][T15128]  ? __pfx_netlink_unicast+0x10/0x10
[  660.712731][T15128]  ? netlink_sendmsg+0x642/0xb30
[  660.712741][T15128]  ? skb_put+0x11b/0x210
[  660.712755][T15128]  netlink_sendmsg+0x805/0xb30
[  660.712773][T15128]  ? __pfx_netlink_sendmsg+0x10/0x10
[  660.712787][T15128]  ? aa_sock_msg_perm+0xf1/0x1d0
[  660.712804][T15128]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  660.712819][T15128]  ? __pfx_netlink_sendmsg+0x10/0x10
[  660.712832][T15128]  __sock_sendmsg+0x21c/0x270
[  660.712851][T15128]  ____sys_sendmsg+0x505/0x830
[  660.712868][T15128]  ? __pfx_____sys_sendmsg+0x10/0x10
[  660.712886][T15128]  ? import_iovec+0x74/0xa0
[  660.712901][T15128]  ___sys_sendmsg+0x21f/0x2a0
[  660.712916][T15128]  ? __pfx____sys_sendmsg+0x10/0x10
[  660.712950][T15128]  ? __fget_files+0x2a/0x420
[  660.712966][T15128]  ? __fget_files+0x3a0/0x420
[  660.712988][T15128]  __x64_sys_sendmsg+0x19b/0x260
[  660.713003][T15128]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  660.713021][T15128]  ? __pfx_ksys_write+0x10/0x10
[  660.713038][T15128]  ? do_syscall_64+0xbe/0xfa0
[  660.713055][T15128]  do_syscall_64+0xfa/0xfa0
[  660.713068][T15128]  ? lockdep_hardirqs_on+0x9c/0x150
[  660.713082][T15128]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.713094][T15128]  ? clear_bhb_loop+0x60/0xb0
[  660.713109][T15128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.713121][T15128] RIP: 0033:0x7f8671f8eec9
[  660.713134][T15128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  660.713146][T15128] RSP: 002b:00007f86701f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  660.713161][T15128] RAX: ffffffffffffffda RBX: 00007f86721e5fa0 RCX: 00007f8671f8eec9
[  660.713170][T15128] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  660.713178][T15128] RBP: 00007f86701f6090 R08: 0000000000000000 R09: 0000000000000000
[  660.713186][T15128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  660.713194][T15128] R13: 00007f86721e6038 R14: 00007f86721e5fa0 R15: 00007ffc1c602538
[  660.713213][T15128]  </TASK>
[  661.127166][T15129] FAULT_INJECTION: forcing a failure.
[  661.127166][T15129] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  661.140768][T15129] CPU: 0 UID: 0 PID: 15129 Comm: syz.4.2451 Not tainted syzkaller #0 PREEMPT(full) 
[  661.140799][T15129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  661.140813][T15129] Call Trace:
[  661.140822][T15129]  <TASK>
[  661.140831][T15129]  dump_stack_lvl+0x189/0x250
[  661.140859][T15129]  ? __pfx____ratelimit+0x10/0x10
[  661.140882][T15129]  ? __pfx_dump_stack_lvl+0x10/0x10
[  661.140903][T15129]  ? __pfx__printk+0x10/0x10
[  661.140924][T15129]  ? __might_fault+0xb0/0x130
[  661.140959][T15129]  should_fail_ex+0x414/0x560
[  661.140991][T15129]  copy_fpstate_to_sigframe+0xa8d/0xce0
[  661.141031][T15129]  ? copy_fpstate_to_sigframe+0x181/0xce0
[  661.141062][T15129]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  661.141103][T15129]  ? __lock_acquire+0xab9/0xd20
[  661.141136][T15129]  ? fpu__alloc_mathframe+0xad/0x130
[  661.141162][T15129]  get_sigframe+0x58d/0x7d0
[  661.141192][T15129]  ? __pfx_get_sigframe+0x10/0x10
[  661.141221][T15129]  ? posixtimer_deliver_signal+0x305/0x410
[  661.141251][T15129]  x64_setup_rt_frame+0x15b/0xd40
[  661.141281][T15129]  ? lockdep_hardirqs_on+0x9c/0x150
[  661.141304][T15129]  ? _raw_spin_unlock_irq+0x2e/0x50
[  661.141320][T15129]  ? get_signal+0x1150/0x1340
[  661.141348][T15129]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  661.141370][T15129]  ? arch_do_signal_or_restart+0x385/0x790
[  661.141392][T15129]  arch_do_signal_or_restart+0x3f1/0x790
[  661.141414][T15129]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  661.141447][T15129]  ? exit_to_user_mode_loop+0x40/0x130
[  661.141470][T15129]  exit_to_user_mode_loop+0x72/0x130
[  661.141490][T15129]  do_syscall_64+0x2bd/0xfa0
[  661.141508][T15129]  ? lockdep_hardirqs_on+0x9c/0x150
[  661.141526][T15129]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.141542][T15129]  ? clear_bhb_loop+0x60/0xb0
[  661.141562][T15129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.141577][T15129] RIP: 0033:0x7ffb6358eec7
[  661.141592][T15129] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  661.141607][T15129] RSP: 002b:00007ffb64388038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  661.141626][T15129] RAX: 0000000000000001 RBX: 00007ffb637e6180 RCX: 00007ffb6358eec9
[  661.141637][T15129] RDX: 0000000000000098 RSI: 0000200000000880 RDI: 0000000000000003
[  661.141647][T15129] RBP: 00007ffb64388090 R08: 0000000000000000 R09: 0000000000000000
[  661.141658][T15129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  661.141668][T15129] R13: 00007ffb637e6218 R14: 00007ffb637e6180 R15: 00007fff8257a938
[  661.141695][T15129]  </TASK>
[  661.486429][T15133] 
[  661.486644][T15133] kvm: user requested TSC rate below hardware speed
[  661.654633][   T30] audit: type=1326 audit(1760685719.428:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15135 comm="syz.8.2455" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8671f8eec9 code=0x0
[  661.800620][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2457'.
[  662.982093][T15153] tmpfs: Too small a size for current use
[  663.265303][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2461'.
[  663.274545][T15155] FAULT_INJECTION: forcing a failure.
[  663.274545][T15155] name failslab, interval 1, probability 0, space 0, times 0
[  663.287498][T15155] CPU: 1 UID: 0 PID: 15155 Comm: syz.7.2461 Not tainted syzkaller #0 PREEMPT(full) 
[  663.287527][T15155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  663.287539][T15155] Call Trace:
[  663.287548][T15155]  <TASK>
[  663.287556][T15155]  dump_stack_lvl+0x189/0x250
[  663.287581][T15155]  ? __pfx____ratelimit+0x10/0x10
[  663.287603][T15155]  ? __pfx_dump_stack_lvl+0x10/0x10
[  663.287624][T15155]  ? __pfx__printk+0x10/0x10
[  663.287650][T15155]  ? __pfx___might_resched+0x10/0x10
[  663.287677][T15155]  ? fs_reclaim_acquire+0x7d/0x100
[  663.287708][T15155]  should_fail_ex+0x414/0x560
[  663.287740][T15155]  should_failslab+0xa8/0x100
[  663.287814][T15155]  __kmalloc_noprof+0xdf/0x800
[  663.287836][T15155]  ? trace_kmalloc+0x1f/0xd0
[  663.287855][T15155]  ? nla_strdup+0x9d/0x140
[  663.287889][T15155]  nla_strdup+0x9d/0x140
[  663.287914][T15155]  ? nft_rhash_estimate+0x2f/0xa0
[  663.287936][T15155]  nf_tables_newset+0x136f/0x2540
[  663.287976][T15155]  ? __pfx_nf_tables_newset+0x10/0x10
[  663.288025][T15155]  ? __nla_parse+0x40/0x60
[  663.288060][T15155]  nfnetlink_rcv+0x11d9/0x2590
[  663.288131][T15155]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  663.288172][T15155]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  663.288198][T15155]  ? ref_tracker_free+0x63a/0x7d0
[  663.288224][T15155]  ? netlink_unicast+0x7fa/0x9e0
[  663.288250][T15155]  ? netlink_sendmsg+0x805/0xb30
[  663.288301][T15155]  ? __netlink_deliver_tap+0x866/0x8b0
[  663.288322][T15155]  ? netlink_deliver_tap+0x2e/0x1b0
[  663.288363][T15155]  netlink_unicast+0x82f/0x9e0
[  663.288400][T15155]  ? __pfx_netlink_unicast+0x10/0x10
[  663.288431][T15155]  ? netlink_sendmsg+0x642/0xb30
[  663.288449][T15155]  ? skb_put+0x11b/0x210
[  663.288475][T15155]  netlink_sendmsg+0x805/0xb30
[  663.288505][T15155]  ? __pfx_netlink_sendmsg+0x10/0x10
[  663.288529][T15155]  ? aa_sock_msg_perm+0xf1/0x1d0
[  663.288556][T15155]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  663.288582][T15155]  ? __pfx_netlink_sendmsg+0x10/0x10
[  663.288602][T15155]  __sock_sendmsg+0x21c/0x270
[  663.288633][T15155]  ____sys_sendmsg+0x505/0x830
[  663.288660][T15155]  ? __pfx_____sys_sendmsg+0x10/0x10
[  663.288694][T15155]  ? import_iovec+0x74/0xa0
[  663.288719][T15155]  ___sys_sendmsg+0x21f/0x2a0
[  663.288743][T15155]  ? __pfx____sys_sendmsg+0x10/0x10
[  663.288818][T15155]  ? __fget_files+0x2a/0x420
[  663.288844][T15155]  ? __fget_files+0x3a0/0x420
[  663.288882][T15155]  __x64_sys_sendmsg+0x19b/0x260
[  663.288908][T15155]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  663.288941][T15155]  ? __pfx_ksys_write+0x10/0x10
[  663.288969][T15155]  ? do_syscall_64+0xbe/0xfa0
[  663.288997][T15155]  do_syscall_64+0xfa/0xfa0
[  663.289019][T15155]  ? lockdep_hardirqs_on+0x9c/0x150
[  663.289043][T15155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.289063][T15155]  ? clear_bhb_loop+0x60/0xb0
[  663.289087][T15155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  663.289107][T15155] RIP: 0033:0x7f5915d8eec9
[  663.289127][T15155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  663.289145][T15155] RSP: 002b:00007f5916d0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  663.289168][T15155] RAX: ffffffffffffffda RBX: 00007f5915fe5fa0 RCX: 00007f5915d8eec9
[  663.289183][T15155] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  663.289197][T15155] RBP: 00007f5916d0a090 R08: 0000000000000000 R09: 0000000000000000
[  663.289211][T15155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  663.289223][T15155] R13: 00007f5915fe6038 R14: 00007f5915fe5fa0 R15: 00007ffd1161c608
[  663.289258][T15155]  </TASK>
[  663.725437][T15159] IPv6: NLM_F_CREATE should be specified when creating new route
[  663.737222][T15159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  663.745049][T15159] IPv6: NLM_F_CREATE should be set when creating new route
[  663.752492][T15159] IPv6: NLM_F_CREATE should be set when creating new route
[  663.770264][T15159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  663.962580][ T5923] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  664.112567][ T5923] usb 5-1: Using ep0 maxpacket: 16
[  664.120523][ T5923] usb 5-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config
[  664.131633][ T5923] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  664.140723][ T5923] usb 5-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00
[  664.149872][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  664.160244][ T5923] usb 5-1: config 0 descriptor??
[  664.371894][ T5923] usb 5-1: string descriptor 0 read error: -71
[  664.380310][ T5923] usb 5-1: USB disconnect, device number 8
[  664.958412][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2467'.
[  665.006199][T15171] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2468'.
[  665.259034][T15180] FAULT_INJECTION: forcing a failure.
[  665.259034][T15180] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  665.273683][T15180] CPU: 0 UID: 0 PID: 15180 Comm: syz.4.2470 Not tainted syzkaller #0 PREEMPT(full) 
[  665.273713][T15180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  665.273724][T15180] Call Trace:
[  665.273731][T15180]  <TASK>
[  665.273739][T15180]  dump_stack_lvl+0x189/0x250
[  665.273763][T15180]  ? __pfx____ratelimit+0x10/0x10
[  665.273782][T15180]  ? __pfx_dump_stack_lvl+0x10/0x10
[  665.273798][T15180]  ? __pfx__printk+0x10/0x10
[  665.273817][T15180]  ? get_sigframe+0x596/0x7d0
[  665.273841][T15180]  should_fail_ex+0x414/0x560
[  665.273866][T15180]  _copy_to_user+0x31/0xb0
[  665.273884][T15180]  copy_siginfo_to_user+0x22/0xc0
[  665.273908][T15180]  x64_setup_rt_frame+0x776/0xd40
[  665.273945][T15180]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  665.273974][T15180]  ? arch_do_signal_or_restart+0x385/0x790
[  665.273996][T15180]  arch_do_signal_or_restart+0x3f1/0x790
[  665.274037][T15180]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  665.274070][T15180]  ? exit_to_user_mode_loop+0x40/0x130
[  665.274093][T15180]  exit_to_user_mode_loop+0x72/0x130
[  665.274112][T15180]  do_syscall_64+0x2bd/0xfa0
[  665.274130][T15180]  ? lockdep_hardirqs_on+0x9c/0x150
[  665.274149][T15180]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.274165][T15180]  ? clear_bhb_loop+0x60/0xb0
[  665.274185][T15180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.274200][T15180] RIP: 0033:0x7ffb6358eec7
[  665.274215][T15180] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  665.274229][T15180] RSP: 002b:00007ffb64388038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  665.274249][T15180] RAX: 0000000000000001 RBX: 00007ffb637e6180 RCX: 00007ffb6358eec9
[  665.274261][T15180] RDX: 0000000000000098 RSI: 0000200000000880 RDI: 0000000000000003
[  665.274272][T15180] RBP: 00007ffb64388090 R08: 0000000000000000 R09: 0000000000000000
[  665.274282][T15180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  665.274292][T15180] R13: 00007ffb637e6218 R14: 00007ffb637e6180 R15: 00007fff8257a938
[  665.274319][T15180]  </TASK>
[  665.705860][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2472'.
[  665.718484][T15184] FAULT_INJECTION: forcing a failure.
[  665.718484][T15184] name failslab, interval 1, probability 0, space 0, times 0
[  665.733101][T15184] CPU: 0 UID: 0 PID: 15184 Comm: syz.1.2472 Not tainted syzkaller #0 PREEMPT(full) 
[  665.733138][T15184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  665.733150][T15184] Call Trace:
[  665.733159][T15184]  <TASK>
[  665.733167][T15184]  dump_stack_lvl+0x189/0x250
[  665.733195][T15184]  ? __pfx____ratelimit+0x10/0x10
[  665.733217][T15184]  ? __pfx_dump_stack_lvl+0x10/0x10
[  665.733236][T15184]  ? __pfx__printk+0x10/0x10
[  665.733256][T15184]  ? __pfx___might_resched+0x10/0x10
[  665.733276][T15184]  should_fail_ex+0x414/0x560
[  665.733295][T15184]  should_failslab+0xa8/0x100
[  665.733313][T15184]  __kmalloc_node_track_caller_noprof+0xe2/0x810
[  665.733329][T15184]  ? kasprintf+0xd4/0x120
[  665.733344][T15184]  kvasprintf+0xdc/0x190
[  665.733355][T15184]  ? nf_tables_newset+0x136f/0x2540
[  665.733370][T15184]  ? nfnetlink_rcv+0x11d9/0x2590
[  665.733386][T15184]  ? netlink_unicast+0x82f/0x9e0
[  665.733403][T15184]  ? __pfx_kvasprintf+0x10/0x10
[  665.733414][T15184]  ? __x64_sys_sendmsg+0x19b/0x260
[  665.733436][T15184]  kasprintf+0xd4/0x120
[  665.733452][T15184]  ? __pfx_kasprintf+0x10/0x10
[  665.733473][T15184]  nf_tables_set_alloc_name+0x109/0x720
[  665.733494][T15184]  ? rcu_is_watching+0x15/0xb0
[  665.733513][T15184]  ? trace_kmalloc+0x1f/0xd0
[  665.733525][T15184]  ? __pfx_nf_tables_set_alloc_name+0x10/0x10
[  665.733542][T15184]  ? nla_strdup+0xb8/0x140
[  665.733565][T15184]  nf_tables_newset+0x1390/0x2540
[  665.733588][T15184]  ? __pfx_nf_tables_newset+0x10/0x10
[  665.733616][T15184]  ? __nla_parse+0x40/0x60
[  665.733635][T15184]  nfnetlink_rcv+0x11d9/0x2590
[  665.733674][T15184]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  665.733699][T15184]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  665.733717][T15184]  ? ref_tracker_free+0x63a/0x7d0
[  665.733732][T15184]  ? netlink_unicast+0x7fa/0x9e0
[  665.733748][T15184]  ? netlink_sendmsg+0x805/0xb30
[  665.733777][T15184]  ? __netlink_deliver_tap+0x866/0x8b0
[  665.733789][T15184]  ? netlink_deliver_tap+0x2e/0x1b0
[  665.733812][T15184]  netlink_unicast+0x82f/0x9e0
[  665.733834][T15184]  ? __pfx_netlink_unicast+0x10/0x10
[  665.733853][T15184]  ? netlink_sendmsg+0x642/0xb30
[  665.733863][T15184]  ? skb_put+0x11b/0x210
[  665.733877][T15184]  netlink_sendmsg+0x805/0xb30
[  665.733895][T15184]  ? __pfx_netlink_sendmsg+0x10/0x10
[  665.733909][T15184]  ? aa_sock_msg_perm+0xf1/0x1d0
[  665.733926][T15184]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  665.733942][T15184]  ? __pfx_netlink_sendmsg+0x10/0x10
[  665.733954][T15184]  __sock_sendmsg+0x21c/0x270
[  665.733980][T15184]  ____sys_sendmsg+0x505/0x830
[  665.733997][T15184]  ? __pfx_____sys_sendmsg+0x10/0x10
[  665.734016][T15184]  ? import_iovec+0x74/0xa0
[  665.734031][T15184]  ___sys_sendmsg+0x21f/0x2a0
[  665.734053][T15184]  ? __pfx____sys_sendmsg+0x10/0x10
[  665.734112][T15184]  ? __fget_files+0x2a/0x420
[  665.734139][T15184]  ? __fget_files+0x3a0/0x420
[  665.734169][T15184]  __x64_sys_sendmsg+0x19b/0x260
[  665.734185][T15184]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  665.734204][T15184]  ? __pfx_ksys_write+0x10/0x10
[  665.734221][T15184]  ? do_syscall_64+0xbe/0xfa0
[  665.734237][T15184]  do_syscall_64+0xfa/0xfa0
[  665.734250][T15184]  ? lockdep_hardirqs_on+0x9c/0x150
[  665.734264][T15184]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.734276][T15184]  ? clear_bhb_loop+0x60/0xb0
[  665.734292][T15184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  665.734303][T15184] RIP: 0033:0x7f0bcd38eec9
[  665.734316][T15184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  665.734327][T15184] RSP: 002b:00007f0bce1e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  665.734342][T15184] RAX: ffffffffffffffda RBX: 00007f0bcd5e5fa0 RCX: 00007f0bcd38eec9
[  665.734351][T15184] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  665.734359][T15184] RBP: 00007f0bce1e7090 R08: 0000000000000000 R09: 0000000000000000
[  665.734367][T15184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  665.734375][T15184] R13: 00007f0bcd5e6038 R14: 00007f0bcd5e5fa0 R15: 00007ffdcc30a198
[  665.734395][T15184]  </TASK>
[  666.491876][T15189] netlink: 'syz.1.2474': attribute type 10 has an invalid length.
[  666.544243][T15192] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2475'.
[  666.594095][T15194] ieee802154 phy1 wpan1: encryption failed: -22
[  666.654215][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2477'.
[  668.382241][ T5933] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  668.560263][ T5933] usb 5-1: Using ep0 maxpacket: 32
[  668.567821][ T5933] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  668.577767][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.593329][ T5933] usb 5-1: config 0 descriptor??
[  668.615623][ T5933] gspca_main: nw80x-2.14.0 probing 055f:d001
[  668.815014][ T5933] gspca_nw80x: reg_w err -71
[  668.819790][ T5933] nw80x 5-1:0.0: probe with driver nw80x failed with error -71
[  668.852542][ T5933] usb 5-1: USB disconnect, device number 9
[  669.588162][T15203] Set syz1 is full, maxelem 65536 reached
[  669.805286][T15234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'.
[  670.071039][ T5923] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  670.087016][T15249] wireguard: wg1: Could not create IPv4 socket
[  670.179766][T15257] wireguard: wg1: Could not create IPv4 socket
[  670.231594][ T5923] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  670.231667][T15259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2492'.
[  670.254390][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.281040][ T5923] usb 5-1: config 0 descriptor??
[  670.309151][ T5923] cp210x 5-1:0.0: cp210x converter detected
[  670.523763][ T5923] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71
[  670.555124][ T5923] cp210x 5-1:0.0: querying part number failed
[  670.583935][ T5923] usb 5-1: cp210x converter now attached to ttyUSB0
[  670.605561][ T5923] usb 5-1: USB disconnect, device number 10
[  670.627460][ T5923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  670.648372][ T5923] cp210x 5-1:0.0: device disconnected
[  670.909561][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2497'.
[  671.281893][ T5896] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  671.420830][ T5896] usb 5-1: device descriptor read/64, error -71
[  671.688054][ T5896] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  671.829879][ T5896] usb 5-1: device descriptor read/64, error -71
[  671.957627][ T5896] usb usb5-port1: attempt power cycle
[  672.319726][ T5896] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  672.342085][ T5896] usb 5-1: device descriptor read/8, error -71
[  672.596596][ T5896] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  672.618359][ T5896] usb 5-1: device descriptor read/8, error -71
[  672.735876][ T5896] usb usb5-port1: unable to enumerate USB device
[  673.743637][T15300] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2503'.
[  673.882396][T15305] netlink: 'syz.1.2505': attribute type 83 has an invalid length.
[  673.891172][T15306] netlink: 'syz.1.2505': attribute type 83 has an invalid length.
[  674.111792][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2506'.
[  674.179752][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'.
[  674.191769][T15311] FAULT_INJECTION: forcing a failure.
[  674.191769][T15311] name failslab, interval 1, probability 0, space 0, times 0
[  674.207565][T15311] CPU: 1 UID: 0 PID: 15311 Comm: syz.1.2507 Not tainted syzkaller #0 PREEMPT(full) 
[  674.207595][T15311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  674.207609][T15311] Call Trace:
[  674.207618][T15311]  <TASK>
[  674.207628][T15311]  dump_stack_lvl+0x189/0x250
[  674.207655][T15311]  ? __pfx____ratelimit+0x10/0x10
[  674.207680][T15311]  ? __pfx_dump_stack_lvl+0x10/0x10
[  674.207701][T15311]  ? __pfx__printk+0x10/0x10
[  674.207725][T15311]  ? __pfx___might_resched+0x10/0x10
[  674.207754][T15311]  ? fs_reclaim_acquire+0x7d/0x100
[  674.207786][T15311]  should_fail_ex+0x414/0x560
[  674.207818][T15311]  should_failslab+0xa8/0x100
[  674.207848][T15311]  __kmalloc_cache_noprof+0x84/0x700
[  674.207870][T15311]  ? __asan_memcpy+0x40/0x70
[  674.207891][T15311]  ? nft_trans_elem_alloc+0x55/0x320
[  674.207921][T15311]  ? nft_set_elem_expr_setup+0xab/0x830
[  674.207965][T15311]  nft_trans_elem_alloc+0x55/0x320
[  674.207994][T15311]  ? nf_tables_newsetelem+0x24bc/0x4330
[  674.208023][T15311]  nf_tables_newsetelem+0x24db/0x4330
[  674.208096][T15311]  ? __pfx_nf_tables_newsetelem+0x10/0x10
[  674.208121][T15311]  ? __lock_acquire+0xab9/0xd20
[  674.208172][T15311]  ? nla_validate_array+0xfc/0x260
[  674.208237][T15311]  ? __pfx___nla_validate_parse+0x10/0x10
[  674.208283][T15311]  ? __lock_acquire+0xab9/0xd20
[  674.208321][T15311]  ? nfnl_pernet+0x23/0x240
[  674.208363][T15311]  ? __nla_parse+0x40/0x60
[  674.208396][T15311]  nfnetlink_rcv+0x11d9/0x2590
[  674.208465][T15311]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  674.208509][T15311]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  674.208535][T15311]  ? ref_tracker_free+0x63a/0x7d0
[  674.208561][T15311]  ? netlink_unicast+0x7fa/0x9e0
[  674.208587][T15311]  ? netlink_sendmsg+0x805/0xb30
[  674.208640][T15311]  ? __netlink_deliver_tap+0x866/0x8b0
[  674.208670][T15311]  ? netlink_deliver_tap+0x2e/0x1b0
[  674.208710][T15311]  netlink_unicast+0x82f/0x9e0
[  674.208750][T15311]  ? __pfx_netlink_unicast+0x10/0x10
[  674.208781][T15311]  ? netlink_sendmsg+0x642/0xb30
[  674.208800][T15311]  ? skb_put+0x11b/0x210
[  674.208824][T15311]  netlink_sendmsg+0x805/0xb30
[  674.208863][T15311]  ? __pfx_netlink_sendmsg+0x10/0x10
[  674.208889][T15311]  ? aa_sock_msg_perm+0xf1/0x1d0
[  674.208916][T15311]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  674.208943][T15311]  ? __pfx_netlink_sendmsg+0x10/0x10
[  674.208973][T15311]  __sock_sendmsg+0x21c/0x270
[  674.209004][T15311]  ____sys_sendmsg+0x505/0x830
[  674.209032][T15311]  ? __pfx_____sys_sendmsg+0x10/0x10
[  674.209067][T15311]  ? import_iovec+0x74/0xa0
[  674.209093][T15311]  ___sys_sendmsg+0x21f/0x2a0
[  674.209119][T15311]  ? __pfx____sys_sendmsg+0x10/0x10
[  674.209184][T15311]  ? __fget_files+0x2a/0x420
[  674.209211][T15311]  ? __fget_files+0x3a0/0x420
[  674.209250][T15311]  __x64_sys_sendmsg+0x19b/0x260
[  674.209277][T15311]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  674.209312][T15311]  ? __pfx_ksys_write+0x10/0x10
[  674.209349][T15311]  ? do_syscall_64+0xbe/0xfa0
[  674.209378][T15311]  do_syscall_64+0xfa/0xfa0
[  674.209401][T15311]  ? lockdep_hardirqs_on+0x9c/0x150
[  674.209424][T15311]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.209445][T15311]  ? clear_bhb_loop+0x60/0xb0
[  674.209470][T15311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.209490][T15311] RIP: 0033:0x7f0bcd38eec9
[  674.209510][T15311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  674.209530][T15311] RSP: 002b:00007f0bce1e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  674.209554][T15311] RAX: ffffffffffffffda RBX: 00007f0bcd5e5fa0 RCX: 00007f0bcd38eec9
[  674.209570][T15311] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  674.209583][T15311] RBP: 00007f0bce1e7090 R08: 0000000000000000 R09: 0000000000000000
[  674.209597][T15311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  674.209608][T15311] R13: 00007f0bcd5e6038 R14: 00007f0bcd5e5fa0 R15: 00007ffdcc30a198
[  674.209643][T15311]  </TASK>
[  674.834234][T15317] virt_wifi0 speed is unknown, defaulting to 1000
[  675.076152][ T5923] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  675.249978][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  675.261848][ T5923] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  675.271016][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.282498][ T5923] usb 5-1: config 0 descriptor??
[  675.727233][ T5923] keytouch 0003:0926:3333.003C: fixing up Keytouch IEC report descriptor
[  675.740408][ T5923] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.003C/input/input74
[  675.868199][ T5923] keytouch 0003:0926:3333.003C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  675.933481][ T5922] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  675.954847][ T5922] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -110
[  675.975777][ T5922] usb 2-1: USB disconnect, device number 58
[  676.722844][ T5896] usb 5-1: USB disconnect, device number 15
[  676.933279][T15327] overlayfs: failed to resolve './bus': -2
[  677.520719][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2516'.
[  677.896878][T15349] IPVS: Error connecting to the multicast addr
[  677.951323][ T5922] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  678.056149][T15353] netlink: 'syz.8.2521': attribute type 21 has an invalid length.
[  678.068032][T15353] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2521'.
[  678.111537][ T5922] usb 5-1: Using ep0 maxpacket: 8
[  678.122678][ T5922] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  678.134498][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  678.152431][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  678.163600][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  678.178762][ T5922] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  678.189685][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.207805][   T43] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  678.221623][ T5922] usb 5-1: config 0 descriptor??
[  678.389452][   T43] usb 2-1: Using ep0 maxpacket: 32
[  678.398556][   T43] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  678.408137][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.416719][   T43] usb 2-1: Product: syz
[  678.420964][   T43] usb 2-1: Manufacturer: syz
[  678.425970][   T43] usb 2-1: SerialNumber: syz
[  678.435662][   T43] usb 2-1: config 0 descriptor??
[  678.444418][   T43] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  678.674873][T15347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  678.685173][T15347] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  678.955248][ T5922] usbhid 5-1:0.0: can't add hid device: -71
[  678.961539][ T5922] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  678.972606][ T5922] usb 5-1: USB disconnect, device number 16
[  679.386742][   T43] gspca_stk1135: reg_w 0x5 err -71
[  679.393045][   T43] gspca_stk1135: serial bus timeout: status=0x00
[  679.399532][   T43] gspca_stk1135: Sensor write failed
[  679.404952][   T43] gspca_stk1135: serial bus timeout: status=0x00
[  679.411295][   T43] gspca_stk1135: Sensor write failed
[  679.416870][   T43] gspca_stk1135: serial bus timeout: status=0x00
[  679.423216][   T43] gspca_stk1135: Sensor read failed
[  679.428825][   T43] gspca_stk1135: serial bus timeout: status=0x00
[  679.436527][   T43] gspca_stk1135: Sensor read failed
[  679.441875][   T43] gspca_stk1135: Detected sensor type unknown (0x0)
[  679.449254][   T43] gspca_stk1135: serial bus timeout: status=0x00
[  679.455579][   T43] gspca_stk1135: Sensor read failed
[  679.460901][   T43] gspca_stk1135: serial bus timeout: status=0x00
[  679.467273][   T43] gspca_stk1135: Sensor read failed
[  679.472581][   T43] gspca_stk1135: serial bus timeout: status=0x00
[  679.479004][   T43] gspca_stk1135: Sensor write failed
[  679.484633][   T43] gspca_stk1135: serial bus timeout: status=0x00
[  679.491063][   T43] gspca_stk1135: Sensor write failed
[  679.496454][   T43] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71
[  679.518778][   T43] usb 2-1: USB disconnect, device number 59
[  679.854430][ T5896] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  680.003407][ T5896] usb 5-1: device descriptor read/64, error -71
[  680.217190][ T5933] usb 2-1: new full-speed USB device number 60 using dummy_hcd
[  680.259923][ T5896] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  680.367047][ T5933] usb 2-1: device descriptor read/64, error -71
[  680.398805][ T5896] usb 5-1: device descriptor read/64, error -71
[  680.516702][ T5896] usb usb5-port1: attempt power cycle
[  680.623446][ T5933] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[  680.772904][ T5933] usb 2-1: device descriptor read/64, error -71
[  680.879793][ T5896] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  680.890788][ T5933] usb usb2-port1: attempt power cycle
[  680.902507][ T5896] usb 5-1: device descriptor read/8, error -71
[  681.157743][ T5896] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  681.180713][ T5896] usb 5-1: device descriptor read/8, error -71
[  681.264588][ T5933] usb 2-1: new full-speed USB device number 62 using dummy_hcd
[  681.287507][ T5933] usb 2-1: device descriptor read/8, error -71
[  681.296955][ T5896] usb usb5-port1: unable to enumerate USB device
[  681.542511][ T5933] usb 2-1: new full-speed USB device number 63 using dummy_hcd
[  681.575984][ T5933] usb 2-1: device descriptor read/8, error -71
[  681.588725][T15373] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  681.714840][ T5933] usb usb2-port1: unable to enumerate USB device
[  682.672138][T15380] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  682.681967][T15380] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  682.813494][T15383] fuse: Unknown parameter ' *ÂfLlaÁ d'
[  682.830218][T15383] binder: 15382:15383 ioctl c0306201 0 returned -14
[  682.847058][T15383] binder: 15382:15383 ioctl c0306201 0 returned -14
[  682.883069][T15385] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  683.608429][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'.
[  683.769651][T15422] overlayfs: failed to resolve './file2': -2
[  684.332115][  T798] usb 5-1: new low-speed USB device number 21 using dummy_hcd
[  684.494629][  T798] usb 5-1: config 7 interface 0 has no altsetting 0
[  684.508289][  T798] usb 5-1: string descriptor 0 read error: -22
[  684.514934][  T798] usb 5-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44
[  684.524073][  T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.532240][   T43] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  684.549028][  T798] usb 5-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state
[  684.557977][  T798] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  684.568852][  T798] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design)
[  684.579339][  T798] usb 5-1: media controller created
[  684.605747][  T798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  684.696409][   T43] usb 2-1: Using ep0 maxpacket: 8
[  684.704824][   T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  684.739373][   T43] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  684.763016][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.780634][   T43] usb 2-1: Product: syz
[  684.785829][   T43] usb 2-1: Manufacturer: syz
[  684.790463][   T43] usb 2-1: SerialNumber: syz
[  684.811291][   T43] usb 2-1: config 0 descriptor??
[  684.834149][   T43] gspca_main: stk014-2.14.0 probing 05e1:0893
[  684.840992][   T43] usb 2-1: selecting invalid altsetting 1
[  684.889273][ T5896] usb 5-1: USB disconnect, device number 21
[  685.124161][T15458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  685.133180][T15458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  685.391440][   T43] gspca_stk014: reg_r err -110
[  685.396291][   T43] stk014 2-1:0.0: probe with driver stk014 failed with error -110
[  685.817760][   T43] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  686.001776][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  686.013011][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  686.024049][   T43] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  686.033348][   T43] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  686.041415][   T43] usb 5-1: Manufacturer: syz
[  686.048229][   T43] usb 5-1: config 0 descriptor??
[  686.493589][   T43] pyra 0003:1E7D:2CF6.003D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  686.706098][T15466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  686.715253][T15466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  686.874645][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  686.942582][   T43] pyra 0003:1E7D:2CF6.003D: couldn't init struct pyra_device
[  686.950363][   T43] pyra 0003:1E7D:2CF6.003D: couldn't install mouse
[  686.959841][   T43] pyra 0003:1E7D:2CF6.003D: probe with driver pyra failed with error -71
[  686.974963][   T43] usb 5-1: USB disconnect, device number 22
[  687.032049][T15467] fido_id[15467]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  687.473764][ T5923] usb 2-1: USB disconnect, device number 64
[  687.871287][ T5922] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  687.933911][ T5923] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[  688.029136][T15479] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  688.045200][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  688.055683][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  688.080640][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  688.094781][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  688.105512][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  688.122254][ T5923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  688.134288][ T5923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  688.145764][ T5923] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  688.162785][ T5923] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  688.175224][ T5922] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  688.184621][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  688.194423][ T5922] usb 5-1: Product: syz
[  688.199021][ T5922] usb 5-1: Manufacturer: syz
[  688.204010][ T5922] usb 5-1: SerialNumber: syz
[  688.210093][ T5923] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  688.223597][ T5922] usb 5-1: config 0 descriptor??
[  688.232642][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.249053][ T5923] usb 2-1: Product: syz
[  688.253898][ T5923] usb 2-1: Manufacturer: syz
[  688.258687][ T5923] usb 2-1: SerialNumber: syz
[  688.281566][T15475] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  688.291566][ T5923] cdc_mbim 2-1:1.0: skipping garbage
[  688.377592][T15486] openvswitch: netlink: Duplicate or invalid key (type 0).
[  688.385416][T15486] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  688.445454][T15488] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2558'.
[  688.464822][T15488] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  688.479809][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2558'.
[  688.497904][ T5922] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  688.511742][ T5922] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  688.527044][T15475] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  688.535287][T15475] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  688.713070][ T5922] radio-si470x 5-1:0.0: software version 0, hardware version 0
[  688.720661][T15495] netlink: 'syz.8.2560': attribute type 1 has an invalid length.
[  688.725135][ T5922] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  688.729919][T15495] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2560'.
[  688.742222][ T5922] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  688.929460][T15477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  688.938409][T15477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  688.965775][ T5922] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71
[  688.974541][ T5922] radio-si470x 5-1:0.0: submitting int urb failed (-90)
[  688.982565][ T5922] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71
[  688.991109][ T5922] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22
[  689.009112][ T5922] usb 5-1: USB disconnect, device number 23
[  689.088414][T11282] Bluetooth: hci3: command 0x0405 tx timeout
[  689.196593][T15475] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  689.204239][T15475] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  689.212500][ T5923] cdc_mbim 2-1:1.0: dwNtbInMaxSize=70 is too small. Using 2048
[  689.220372][ T5923] cdc_mbim 2-1:1.0: setting rx_max = 2048
[  689.432530][ T5923] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  689.447993][ T5923] wwan wwan0: port wwan0mbim0 attached
[  689.460900][ T5923] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 72:44:89:fe:65:5f
[  689.477596][ T5923] usb 2-1: USB disconnect, device number 65
[  689.489190][ T5923] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  689.581863][ T5923] wwan wwan0: port wwan0mbim0 disconnected
[  689.814995][ T5922] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  689.975415][ T5922] usb 5-1: Using ep0 maxpacket: 32
[  689.982624][ T5922] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  689.991010][ T5922] usb 5-1: config 0 has no interface number 0
[  689.997790][ T5922] usb 5-1: config 0 interface 12 has no altsetting 0
[  690.008016][ T5922] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  690.017412][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.025718][ T5922] usb 5-1: Product: syz
[  690.030406][ T5922] usb 5-1: Manufacturer: syz
[  690.035069][ T5922] usb 5-1: SerialNumber: syz
[  690.043060][ T5922] usb 5-1: config 0 descriptor??
[  690.244212][T15507] FAULT_INJECTION: forcing a failure.
[  690.244212][T15507] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  690.257657][T15507] CPU: 0 UID: 0 PID: 15507 Comm: syz.1.2564 Not tainted syzkaller #0 PREEMPT(full) 
[  690.257687][T15507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  690.257699][T15507] Call Trace:
[  690.257709][T15507]  <TASK>
[  690.257717][T15507]  dump_stack_lvl+0x189/0x250
[  690.257746][T15507]  ? __pfx____ratelimit+0x10/0x10
[  690.257774][T15507]  ? __pfx_dump_stack_lvl+0x10/0x10
[  690.257796][T15507]  ? __pfx__printk+0x10/0x10
[  690.257818][T15507]  ? get_sigframe+0x596/0x7d0
[  690.257850][T15507]  should_fail_ex+0x414/0x560
[  690.257881][T15507]  _copy_to_user+0x31/0xb0
[  690.257905][T15507]  copy_siginfo_to_user+0x22/0xc0
[  690.257935][T15507]  x64_setup_rt_frame+0x776/0xd40
[  690.257982][T15507]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  690.258011][T15507]  ? arch_do_signal_or_restart+0x385/0x790
[  690.258039][T15507]  arch_do_signal_or_restart+0x3f1/0x790
[  690.258066][T15507]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  690.258109][T15507]  ? exit_to_user_mode_loop+0x40/0x130
[  690.258138][T15507]  exit_to_user_mode_loop+0x72/0x130
[  690.258163][T15507]  do_syscall_64+0x2bd/0xfa0
[  690.258189][T15507]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.258208][T15507]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  690.258228][T15507]  ? clear_bhb_loop+0x60/0xb0
[  690.258253][T15507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.258273][T15507] RIP: 0033:0x7f0bcd38eec7
[  690.258292][T15507] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  690.258310][T15507] RSP: 002b:00007f0bce1a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  690.258333][T15507] RAX: 0000000000000001 RBX: 00007f0bcd5e6180 RCX: 00007f0bcd38eec9
[  690.258347][T15507] RDX: 0000000000000098 RSI: 0000200000000880 RDI: 0000000000000003
[  690.258361][T15507] RBP: 00007f0bce1a5090 R08: 0000000000000000 R09: 0000000000000000
[  690.258373][T15507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  690.258386][T15507] R13: 00007f0bcd5e6218 R14: 00007f0bcd5e6180 R15: 00007ffdcc30a198
[  690.258419][T15507]  </TASK>
[  690.673049][T15509] netlink: 'syz.7.2565': attribute type 11 has an invalid length.
[  690.684552][T15509] loop5: detected capacity change from 0 to 7
[  690.708910][T15509] Dev loop5: unable to read RDB block 7
[  690.714991][T15509]  loop5: unable to read partition table
[  690.720873][T15509] loop5: partition table beyond EOD, truncated
[  690.727261][T15509] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ	œëÜ%õ«`Éæ�˜Èµ4FLQkÝŠ5) failed (rc=-5)
[  690.891210][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2567'.
[  690.952321][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2568'.
[  690.962352][T15515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  690.973493][T15515] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2568'.
[  691.035287][T15517] genirq: Flags mismatch irq 7. 00200000 (das16m1) vs. 00200080 (ttyS3)
[  691.046484][T15517] syzkaller1: entered promiscuous mode
[  691.052034][T15517] syzkaller1: entered allmulticast mode
[  692.417220][T15503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  692.427779][T15503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  692.876187][ T5922] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  692.883917][ T5922] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  692.891483][ T5922] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  692.900520][ T5922] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  692.913442][ T5922] usb 5-1: USB disconnect, device number 24
[  693.523880][ T5922] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  693.705528][ T5922] usb 2-1: Using ep0 maxpacket: 32
[  693.710973][ T5923] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  693.723525][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  693.734707][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  693.744567][ T5922] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  693.754040][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.764616][ T5922] usb 2-1: config 0 descriptor??
[  693.779550][ T5922] hub 2-1:0.0: USB hub found
[  693.887164][ T5923] usb 5-1: Using ep0 maxpacket: 32
[  693.894450][ T5923] usb 5-1: config 0 has an invalid interface number: 230 but max is 0
[  693.902924][ T5923] usb 5-1: config 0 has no interface number 0
[  693.909161][ T5923] usb 5-1: config 0 interface 230 has no altsetting 0
[  693.918329][ T5923] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  693.927832][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.936024][ T5923] usb 5-1: Product: syz
[  693.940306][ T5923] usb 5-1: Manufacturer: syz
[  693.945040][ T5923] usb 5-1: SerialNumber: syz
[  693.952878][ T5923] usb 5-1: config 0 descriptor??
[  693.960221][ T5923] ums-usbat 5-1:0.230: USB Mass Storage device detected
[  693.970798][ T5923] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  693.992499][ T5922] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  694.506528][ T5922] hid-generic 0003:046D:C31C.003E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0
[  694.908490][  T798] usb 2-1: USB disconnect, device number 66
[  694.982772][T15546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2577'.
[  694.994683][T15546] Invalid source name
[  694.998780][T15546] UBIFS error (pid: 15546): cannot open "usrquota2MB.rsvd.max_usage_in_bytes", error -22
[  694.999590][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2577'.
[  695.789933][T15564] FAULT_INJECTION: forcing a failure.
[  695.789933][T15564] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  695.803319][T15564] CPU: 0 UID: 0 PID: 15564 Comm: syz.1.2583 Not tainted syzkaller #0 PREEMPT(full) 
[  695.803348][T15564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  695.803361][T15564] Call Trace:
[  695.803370][T15564]  <TASK>
[  695.803379][T15564]  dump_stack_lvl+0x189/0x250
[  695.803406][T15564]  ? __pfx____ratelimit+0x10/0x10
[  695.803428][T15564]  ? __pfx_dump_stack_lvl+0x10/0x10
[  695.803449][T15564]  ? __pfx__printk+0x10/0x10
[  695.803468][T15564]  ? __might_fault+0xb0/0x130
[  695.803502][T15564]  should_fail_ex+0x414/0x560
[  695.803533][T15564]  _copy_from_user+0x2d/0xb0
[  695.803554][T15564]  restore_altstack+0x9d/0x4b0
[  695.803575][T15564]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  695.803599][T15564]  ? __pfx_restore_altstack+0x10/0x10
[  695.803626][T15564]  ? _raw_spin_unlock_irq+0x23/0x50
[  695.803647][T15564]  ? lockdep_hardirqs_on+0x9c/0x150
[  695.803673][T15564]  __ia32_sys_rt_sigreturn+0x281/0x860
[  695.803702][T15564]  ? _raw_spin_unlock_irq+0x23/0x50
[  695.803726][T15564]  ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10
[  695.803748][T15564]  ? _raw_spin_unlock_irq+0x2e/0x50
[  695.803774][T15564]  ? __lock_acquire+0xab9/0xd20
[  695.803840][T15564]  ? __task_pid_nr_ns+0x28/0x490
[  695.803867][T15564]  ? do_syscall_64+0xbe/0xfa0
[  695.803895][T15564]  do_syscall_64+0xfa/0xfa0
[  695.803920][T15564]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.803940][T15564]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  695.803959][T15564]  ? clear_bhb_loop+0x60/0xb0
[  695.803984][T15564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.804003][T15564] RIP: 0033:0x7f0bcd32af79
[  695.804023][T15564] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  695.804041][T15564] RSP: 002b:00007f0bce1a4a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f
[  695.804064][T15564] RAX: ffffffffffffffda RBX: 00007f0bcd5e6180 RCX: 00007f0bcd32af79
[  695.804081][T15564] RDX: 00007f0bce1a4a80 RSI: 00007f0bce1a4bb0 RDI: 0000000000000021
[  695.804095][T15564] RBP: 00007f0bce1a5090 R08: 0000000000000000 R09: 0000000000000000
[  695.804109][T15564] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[  695.804122][T15564] R13: 00007f0bcd5e6218 R14: 00007f0bcd5e6180 R15: 00007ffdcc30a198
[  695.804157][T15564]  </TASK>
[  696.258081][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2586'.
[  696.331124][T15575] input: syz0 as /devices/virtual/input/input75
[  696.382730][T15575] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  696.399716][ T5923] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5
[  696.427549][ T5923] usb 5-1: USB disconnect, device number 25
[  696.901174][ T5923] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  697.040243][ T5923] usb 5-1: device descriptor read/64, error -71
[  697.297091][ T5923] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  697.446886][ T5923] usb 5-1: device descriptor read/64, error -71
[  697.575398][ T5923] usb usb5-port1: attempt power cycle
[  697.938125][ T5923] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  697.960246][ T5923] usb 5-1: device descriptor read/8, error -71
[  698.215944][ T5923] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  698.243570][ T5923] usb 5-1: device descriptor read/8, error -71
[  698.367285][ T5923] usb usb5-port1: unable to enumerate USB device
[  698.823958][T15590] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2591'.
[  699.327481][ T5923] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  699.466326][ T5923] usb 2-1: device descriptor read/64, error -71
[  699.734858][ T5923] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  699.831947][T15607] nbd: must specify at least one socket
[  699.883521][ T5923] usb 2-1: device descriptor read/64, error -71
[  699.924637][T15609] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2597'.
[  700.001570][ T5923] usb usb2-port1: attempt power cycle
[  700.337481][T15620] FAULT_INJECTION: forcing a failure.
[  700.337481][T15620] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  700.350923][T15620] CPU: 1 UID: 0 PID: 15620 Comm: syz.4.2599 Not tainted syzkaller #0 PREEMPT(full) 
[  700.350952][T15620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  700.350965][T15620] Call Trace:
[  700.350974][T15620]  <TASK>
[  700.350983][T15620]  dump_stack_lvl+0x189/0x250
[  700.351010][T15620]  ? __pfx____ratelimit+0x10/0x10
[  700.351034][T15620]  ? __pfx_dump_stack_lvl+0x10/0x10
[  700.351055][T15620]  ? __pfx__printk+0x10/0x10
[  700.351077][T15620]  ? __might_fault+0xb0/0x130
[  700.351110][T15620]  should_fail_ex+0x414/0x560
[  700.351141][T15620]  _copy_from_user+0x2d/0xb0
[  700.351164][T15620]  __ia32_sys_rt_sigreturn+0x314/0x860
[  700.351200][T15620]  ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10
[  700.351223][T15620]  ? _raw_spin_unlock_irq+0x2e/0x50
[  700.351271][T15620]  ? __task_pid_nr_ns+0x28/0x490
[  700.351288][T15620]  ? do_syscall_64+0xbe/0xfa0
[  700.351304][T15620]  do_syscall_64+0xfa/0xfa0
[  700.351316][T15620]  ? lockdep_hardirqs_on+0x9c/0x150
[  700.351330][T15620]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.351342][T15620]  ? clear_bhb_loop+0x60/0xb0
[  700.351356][T15620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.351368][T15620] RIP: 0033:0x7ffb6352af79
[  700.351380][T15620] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  700.351392][T15620] RSP: 002b:00007ffb64387a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f
[  700.351407][T15620] RAX: ffffffffffffffda RBX: 00007ffb637e6180 RCX: 00007ffb6352af79
[  700.351416][T15620] RDX: 00007ffb64387a80 RSI: 00007ffb64387bb0 RDI: 0000000000000021
[  700.351425][T15620] RBP: 00007ffb64388090 R08: 0000000000000000 R09: 0000000000000000
[  700.351432][T15620] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[  700.351440][T15620] R13: 00007ffb637e6218 R14: 00007ffb637e6180 R15: 00007fff8257a938
[  700.351459][T15620]  </TASK>
[  700.386642][ T5923] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  700.580542][ T5923] usb 2-1: device descriptor read/8, error -71
[  700.834415][ T5923] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  700.856572][ T5923] usb 2-1: device descriptor read/8, error -71
[  700.974987][ T5923] usb usb2-port1: unable to enumerate USB device
[  702.649445][T15633] tmpfs: Bad value for 'mpol'
[  702.714993][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2605'.
[  702.765840][T15637] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2606'.
[  703.314038][  T798] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  703.381146][T15661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2615'.
[  703.485233][  T798] usb 2-1: Using ep0 maxpacket: 8
[  703.492109][  T798] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  703.502725][  T798] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  703.515920][  T798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  703.527043][  T798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  703.536982][  T798] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  703.554841][  T798] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  703.564236][  T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  703.572784][  T798] usb 2-1: Product: syz
[  703.576972][  T798] usb 2-1: Manufacturer: syz
[  703.581834][  T798] usb 2-1: SerialNumber: syz
[  703.589261][  T798] usb 2-1: config 0 descriptor??
[  703.688193][ T5923] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  703.811762][  T798] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  703.820259][  T798] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  703.848602][ T5923] usb 5-1: Using ep0 maxpacket: 8
[  703.853700][T15665] zonefs (nullb0) ERROR: Not a zoned block device
[  703.864250][ T5923] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  703.883636][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.902084][ T5923] usb 5-1: config 0 descriptor??
[  704.026263][  T798] radio-si470x 2-1:0.0: software version 226, hardware version 8
[  704.036173][T15668] virtio-fs: tag </dev/md0> not found
[  704.036365][  T798] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  704.248892][  T798] radio-si470x 2-1:0.0: submitting int urb failed (-90)
[  704.344632][T15663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  704.355420][T15663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  704.368318][ T5923] usbhid 5-1:0.0: can't add hid device: -71
[  704.374994][ T5923] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  704.388845][ T5923] usb 5-1: USB disconnect, device number 30
[  705.009895][ T5896] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0
[  705.017868][ T5896] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0
[  705.026056][ T5896] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0
[  705.033673][ T5896] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0
[  705.043564][ T5896] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0
[  705.051255][ T5896] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0
[  705.060168][ T5896] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0
[  705.068606][ T5896] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0
[  705.076021][ T5896] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0
[  705.083634][ T5896] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0
[  705.097437][ T5896] hid-generic 0000:0000:0000.003F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  705.107324][  T798] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71
[  705.126452][  T798] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22
[  705.152168][  T798] usb 2-1: USB disconnect, device number 71
[  705.224521][T15675] fido_id[15675]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  705.490216][T15684] FAULT_INJECTION: forcing a failure.
[  705.490216][T15684] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  705.503522][T15684] CPU: 0 UID: 0 PID: 15684 Comm: syz.4.2623 Not tainted syzkaller #0 PREEMPT(full) 
[  705.503548][T15684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  705.503562][T15684] Call Trace:
[  705.503570][T15684]  <TASK>
[  705.503579][T15684]  dump_stack_lvl+0x189/0x250
[  705.503596][T15684]  ? __pfx____ratelimit+0x10/0x10
[  705.503610][T15684]  ? __pfx_dump_stack_lvl+0x10/0x10
[  705.503623][T15684]  ? __pfx__printk+0x10/0x10
[  705.503635][T15684]  ? __might_fault+0xb0/0x130
[  705.503654][T15684]  should_fail_ex+0x414/0x560
[  705.503672][T15684]  fpu__restore_sig+0x1bb/0x1100
[  705.503688][T15684]  ? __lock_acquire+0xab9/0xd20
[  705.503706][T15684]  ? __pfx_fpu__restore_sig+0x10/0x10
[  705.503743][T15684]  __ia32_sys_rt_sigreturn+0x704/0x860
[  705.503763][T15684]  ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10
[  705.503776][T15684]  ? _raw_spin_unlock_irq+0x2e/0x50
[  705.503804][T15684]  ? __task_pid_nr_ns+0x28/0x490
[  705.503820][T15684]  ? do_syscall_64+0xbe/0xfa0
[  705.503836][T15684]  do_syscall_64+0xfa/0xfa0
[  705.503849][T15684]  ? lockdep_hardirqs_on+0x9c/0x150
[  705.503863][T15684]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.503875][T15684]  ? clear_bhb_loop+0x60/0xb0
[  705.503889][T15684]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.503900][T15684] RIP: 0033:0x7ffb6358eec7
[  705.503912][T15684] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  705.503924][T15684] RSP: 002b:00007ffb64388038 EFLAGS: 00000246
[  705.503937][T15684] RAX: 0000000000000001 RBX: 00007ffb637e6180 RCX: 00007ffb6358eec9
[  705.503946][T15684] RDX: 0000000000000098 RSI: 0000200000000880 RDI: 0000000000000003
[  705.503954][T15684] RBP: 00007ffb64388090 R08: 0000000000000000 R09: 0000000000000000
[  705.503962][T15684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  705.503970][T15684] R13: 00007ffb637e6218 R14: 00007ffb637e6180 R15: 00007fff8257a938
[  705.503988][T15684]  </TASK>
[  705.788730][T15691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2625'.
[  705.870242][T15693] tmpfs: Group quota block hardlimit too large.
[  706.157149][  T798] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  706.317374][  T798] usb 2-1: Using ep0 maxpacket: 32
[  706.325020][  T798] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  706.337631][  T798] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2
[  706.346878][  T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.356614][  T798] usb 2-1: Product: syz
[  706.360978][  T798] usb 2-1: Manufacturer: syz
[  706.365714][  T798] usb 2-1: SerialNumber: syz
[  706.372706][  T798] usb 2-1: config 0 descriptor??
[  706.380085][  T798] keyspan 2-1:0.0: Keyspan 1 port adapter converter detected
[  706.387889][  T798] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87
[  706.395740][  T798] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7
[  706.404736][  T798] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[  706.412434][  T798] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[  706.424564][  T798] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[  706.432223][  T798] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85
[  706.439991][  T798] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5
[  706.448967][  T798] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  706.595539][  T797] usb 2-1: USB disconnect, device number 72
[  706.604096][  T797] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  706.614522][  T797] keyspan 2-1:0.0: device disconnected
[  707.418294][  T798] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  707.578606][  T798] usb 2-1: Using ep0 maxpacket: 32
[  707.585500][  T798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  707.596781][  T798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  707.606717][  T798] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  707.615982][  T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.632124][  T798] usb 2-1: config 0 descriptor??
[  707.641708][  T798] hub 2-1:0.0: USB hub found
[  707.853177][T15698] netlink: 'syz.1.2628': attribute type 1 has an invalid length.
[  707.861779][T15698] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2628'.
[  707.863905][  T798] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  707.871710][T15698] netlink: 'syz.1.2628': attribute type 1 has an invalid length.
[  707.888003][T15698] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2628'.
[  707.897826][T15698] netlink: 'syz.1.2628': attribute type 1 has an invalid length.
[  707.906232][T15698] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2628'.
[  707.915759][T15698] netlink: 'syz.1.2628': attribute type 1 has an invalid length.
[  707.923639][T15698] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2628'.
[  707.933299][T15698] netlink: 'syz.1.2628': attribute type 1 has an invalid length.
[  707.941218][T15698] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2628'.
[  707.950676][T15698] netlink: 'syz.1.2628': attribute type 1 has an invalid length.
[  707.958530][T15698] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2628'.
[  707.968608][T15698] netlink: 'syz.1.2628': attribute type 1 has an invalid length.
[  707.977141][T15698] netlink: 'syz.1.2628': attribute type 1 has an invalid length.
[  707.985659][T15698] netlink: 'syz.1.2628': attribute type 1 has an invalid length.
[  707.993757][T15698] netlink: 'syz.1.2628': attribute type 1 has an invalid length.
[  708.122309][  T798] usbhid 2-1:0.0: can't add hid device: -32
[  708.128528][  T798] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  708.377646][T15708] input: syz1 as /devices/virtual/input/input76
[  708.436111][   T43] usb 2-1: USB disconnect, device number 73
[  708.449810][T15709] __nla_validate_parse: 27 callbacks suppressed
[  708.449830][T15709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2630'.
[  708.466937][T15709] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2630'.
[  708.754902][    C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20470 ms
[  708.762994][    C1] sl0: transmit timed out, driver error?
[  708.957349][   T43] usb 5-1: new low-speed USB device number 31 using dummy_hcd
[  709.121054][   T43] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  709.129661][   T43] usb 5-1: config 0 has no interface number 0
[  709.135776][   T43] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  709.147319][   T43] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  709.158504][   T43] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  709.170625][   T43] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  709.182499][   T43] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  709.193567][   T43] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  709.208269][   T43] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  709.217561][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.227792][   T43] usb 5-1: config 0 descriptor??
[  709.234134][T15716] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  709.241908][T15716] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  709.262209][   T43] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  709.484169][  T797] usb 5-1: USB disconnect, device number 31
[  709.490178][    C0] ldusb 5-1:0.55: usb_submit_urb failed (-19)
[  709.521050][  T797] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  709.605442][T15721] infiniband syz1: set active
[  709.610704][T15721] infiniband syz1: added veth1_vlan
[  709.654533][T15721] RDS/IB: syz1: added
[  710.667934][ T5922] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  710.849149][ T5922] usb 5-1: Using ep0 maxpacket: 32
[  710.856278][ T5922] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  710.864911][ T5922] usb 5-1: config 0 has no interface number 0
[  710.872525][ T5922] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  710.883746][ T5922] usb 5-1: config 0 interface 85 has no altsetting 0
[  710.893080][ T5922] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  710.902333][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.910207][T15736] FAULT_INJECTION: forcing a failure.
[  710.910207][T15736] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  710.910951][ T5922] usb 5-1: Product: syz
[  710.924123][T15736] CPU: 1 UID: 0 PID: 15736 Comm: syz.8.2639 Not tainted syzkaller #0 PREEMPT(full) 
[  710.924150][T15736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  710.924163][T15736] Call Trace:
[  710.924171][T15736]  <TASK>
[  710.924180][T15736]  dump_stack_lvl+0x189/0x250
[  710.924204][T15736]  ? __pfx____ratelimit+0x10/0x10
[  710.924225][T15736]  ? __pfx_dump_stack_lvl+0x10/0x10
[  710.924244][T15736]  ? __pfx__printk+0x10/0x10
[  710.924263][T15736]  ? __might_fault+0xb0/0x130
[  710.924294][T15736]  should_fail_ex+0x414/0x560
[  710.924321][T15736]  copy_fpstate_to_sigframe+0xa8d/0xce0
[  710.924348][T15736]  ? copy_fpstate_to_sigframe+0x181/0xce0
[  710.924374][T15736]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  710.924410][T15736]  ? __lock_acquire+0xab9/0xd20
[  710.924440][T15736]  ? fpu__alloc_mathframe+0xad/0x130
[  710.924463][T15736]  get_sigframe+0x58d/0x7d0
[  710.924490][T15736]  ? __pfx_get_sigframe+0x10/0x10
[  710.924516][T15736]  ? posixtimer_deliver_signal+0x305/0x410
[  710.924542][T15736]  x64_setup_rt_frame+0x15b/0xd40
[  710.924568][T15736]  ? lockdep_hardirqs_on+0x9c/0x150
[  710.924591][T15736]  ? _raw_spin_unlock_irq+0x2e/0x50
[  710.924609][T15736]  ? get_signal+0x1150/0x1340
[  710.924649][T15736]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  710.924675][T15736]  ? arch_do_signal_or_restart+0x385/0x790
[  710.924700][T15736]  arch_do_signal_or_restart+0x3f1/0x790
[  710.924724][T15736]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  710.924762][T15736]  ? exit_to_user_mode_loop+0x40/0x130
[  710.924788][T15736]  exit_to_user_mode_loop+0x72/0x130
[  710.924811][T15736]  do_syscall_64+0x2bd/0xfa0
[  710.924832][T15736]  ? lockdep_hardirqs_on+0x9c/0x150
[  710.924852][T15736]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.924870][T15736]  ? clear_bhb_loop+0x60/0xb0
[  710.924892][T15736]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.924910][T15736] RIP: 0033:0x7f8671f8eec7
[  710.924927][T15736] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  710.924943][T15736] RSP: 002b:00007f86701b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  710.924964][T15736] RAX: 0000000000000001 RBX: 00007f86721e6180 RCX: 00007f8671f8eec9
[  710.924978][T15736] RDX: 0000000000000098 RSI: 0000200000000880 RDI: 0000000000000003
[  710.924989][T15736] RBP: 00007f86701b4090 R08: 0000000000000000 R09: 0000000000000000
[  710.925001][T15736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  710.925013][T15736] R13: 00007f86721e6218 R14: 00007f86721e6180 R15: 00007ffc1c602538
[  710.925043][T15736]  </TASK>
[  711.186759][ T5922] usb 5-1: Manufacturer: syz
[  711.191506][ T5922] usb 5-1: SerialNumber: syz
[  711.198431][ T5922] usb 5-1: config 0 descriptor??
[  711.287421][   T43] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  711.447901][   T43] usb 2-1: Using ep0 maxpacket: 8
[  711.456018][ T5922] appletouch 5-1:0.85: Failed to read mode from device.
[  711.470496][   T43] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  711.476958][ T5922] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[  711.482499][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.513828][   T43] usb 2-1: Product: syz
[  711.516165][ T5922] usb 5-1: USB disconnect, device number 32
[  711.519415][   T43] usb 2-1: Manufacturer: syz
[  711.533554][   T43] usb 2-1: SerialNumber: syz
[  711.549422][   T43] usb 2-1: config 0 descriptor??
[  711.777637][   T43] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  711.780610][T15738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  711.795336][T15738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  711.864550][ T5922] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  712.027073][ T5922] usb 5-1: Using ep0 maxpacket: 16
[  712.033776][ T5922] usb 5-1: config 1 has an invalid interface number: 214 but max is 0
[  712.042078][ T5922] usb 5-1: config 1 has no interface number 0
[  712.049376][ T5922] usb 5-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  712.059673][ T5922] usb 5-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64
[  712.069940][ T5922] usb 5-1: config 1 interface 214 has no altsetting 0
[  712.079096][ T5922] usb 5-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  712.088184][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.096390][ T5922] usb 5-1: Product: syz
[  712.100719][ T5922] usb 5-1: Manufacturer: syz
[  712.105376][ T5922] usb 5-1: SerialNumber: syz
[  712.114011][T15743] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  712.121733][T15743] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  712.130839][ T5922] ums-alauda 5-1:1.214: USB Mass Storage device detected
[  712.145706][ T5922] scsi host1: usb-storage 5-1:1.214
[  712.355028][T15743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  712.366797][T15743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  712.379891][  T798] usb 5-1: USB disconnect, device number 33
[  712.454460][   T43] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  712.477691][   T43] usb 2-1: USB disconnect, device number 74
[  713.114028][T15762] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  713.330330][  T798] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  713.501788][  T798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  713.513021][  T798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  713.523628][   T43] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  713.532803][  T798] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  713.541962][  T798] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  713.550074][  T798] usb 2-1: Manufacturer: syz
[  713.558035][  T798] usb 2-1: config 0 descriptor??
[  713.706179][   T43] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  713.717256][   T43] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024
[  713.728537][   T43] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  713.738816][   T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  713.748236][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.760593][T15767] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  713.772499][   T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  714.025377][ T5922] usb 5-1: USB disconnect, device number 34
[  714.232162][ T5869] dvb-usb: did not find the firmware file 'dvb-usb-p7500.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  714.255686][ T5869] dvb-usb: found a 'Prof 7500 USB DVB-S2' in cold state, will try to load a firmware
[  714.267635][ T5869] usb 9-1: Direct firmware load for dvb-usb-p7500.fw failed with error -2
[  714.276383][ T5869] usb 9-1: Falling back to sysfs fallback for: dvb-usb-p7500.fw
[  714.397681][ T5922] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  714.558172][ T5922] usb 5-1: Using ep0 maxpacket: 16
[  714.566947][ T5922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  714.577351][ T5922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  714.589436][ T5922] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  714.598582][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.606713][ T5922] usb 5-1: Product: syz
[  714.610927][ T5922] usb 5-1: Manufacturer: syz
[  714.615612][ T5922] usb 5-1: SerialNumber: syz
[  714.848571][ T5922] usb 5-1: 0:2 : does not exist
[  714.860140][ T5922] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  714.883096][ T5922] usb 5-1: USB disconnect, device number 35
[  714.923215][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  715.797768][   T43] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  715.958138][   T43] usb 5-1: Using ep0 maxpacket: 8
[  715.963771][   T43] usb 5-1: config 3 has an invalid interface number: 45 but max is 0
[  715.963802][   T43] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  715.963822][   T43] usb 5-1: config 3 has no interface number 0
[  715.963915][   T43] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  715.963945][   T43] usb 5-1: config 3 interface 45 has no altsetting 0
[  715.966660][   T43] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  716.035253][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.035286][   T43] usb 5-1: Product: syz
[  716.035303][   T43] usb 5-1: Manufacturer: syz
[  716.035328][   T43] usb 5-1: SerialNumber: syz
[  716.312883][   T43] usb 5-1: USB disconnect, device number 36
[  716.324415][  T798] uclogic 0003:256C:006D.0040: v1 frame probing failed: -71
[  716.331879][  T798] uclogic 0003:256C:006D.0040: failed probing parameters: -71
[  716.357524][  T798] uclogic 0003:256C:006D.0040: probe with driver uclogic failed with error -71
[  716.380306][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  716.384614][  T798] usb 2-1: USB disconnect, device number 75
[  717.093108][  T798] usb 5-1: new full-speed USB device number 37 using dummy_hcd
[  717.246387][   T30] audit: type=1326 audit(1760685772.022:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15787 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcd38eec9 code=0x7fc00000
[  717.269085][   T30] audit: type=1326 audit(1760685772.022:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15787 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0bcd38eec9 code=0x7fc00000
[  717.270605][T15794] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2658'.
[  717.292814][   T30] audit: type=1326 audit(1760685772.022:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15787 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcd38eec9 code=0x7fc00000
[  717.329600][   T30] audit: type=1326 audit(1760685772.022:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15787 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcd38eec9 code=0x7fc00000
[  717.337882][  T798] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  717.354543][   T30] audit: type=1326 audit(1760685772.022:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15787 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcd38eec9 code=0x7fc00000
[  717.376525][  T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.386313][   T30] audit: type=1326 audit(1760685772.022:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15787 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcd38eec9 code=0x7fc00000
[  717.397147][  T798] usb 5-1: config 0 descriptor??
[  717.418346][   T30] audit: type=1326 audit(1760685772.022:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15787 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcd38eec9 code=0x7fc00000
[  717.447060][   T30] audit: type=1326 audit(1760685772.022:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15787 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcd38eec9 code=0x7fc00000
[  717.472357][   T30] audit: type=1326 audit(1760685772.022:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15787 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcd38eec9 code=0x7fc00000
[  717.495713][   T30] audit: type=1326 audit(1760685772.022:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15787 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bcd38eec9 code=0x7fc00000
[  717.757914][T15802] vxcan1: tx drop: invalid sa for name 0x0000000000000003
[  717.761467][T15804] validate_nla: 23 callbacks suppressed
[  717.761484][T15804] netlink: 'syz.1.2662': attribute type 5 has an invalid length.
[  717.780718][T15804] netlink: 'syz.1.2662': attribute type 9 has an invalid length.
[  717.885074][T15808] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  718.352343][ T5923] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  718.491148][ T5923] usb 2-1: device descriptor read/64, error -71
[  718.727703][  T798] pegasus 5-1:0.0: can't reset MAC
[  718.733211][  T798] pegasus 5-1:0.0: probe with driver pegasus failed with error -5
[  718.747928][ T5923] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  718.756019][  T798] usb 5-1: USB disconnect, device number 37
[  718.897379][ T5923] usb 2-1: device descriptor read/64, error -71
[  719.017707][ T5923] usb usb2-port1: attempt power cycle
[  719.163629][T15815] 9pnet_fd: Insufficient options for proto=fd
[  719.378411][ T5923] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  719.401068][ T5923] usb 2-1: device descriptor read/8, error -71
[  719.656290][ T5923] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  719.678000][ T5923] usb 2-1: device descriptor read/8, error -71
[  719.752440][  T797] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  719.795809][ T5923] usb usb2-port1: unable to enumerate USB device
[  719.912647][  T797] usb 5-1: Using ep0 maxpacket: 32
[  719.919797][  T797] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  719.934216][  T797] usb 5-1: config 0 interface 0 has no altsetting 0
[  719.940872][  T797] usb 5-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[  719.949971][  T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.960119][  T797] usb 5-1: config 0 descriptor??
[  720.409330][  T797] input: HID 28bd:0933 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0933.0041/input/input79
[  720.499663][  T797] uclogic 0003:28BD:0933.0041: input,hidraw0: USB HID v4.06 Mouse [HID 28bd:0933] on usb-dummy_hcd.4-1/input0
[  720.679059][T15830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.688125][T15830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  721.180179][T15836] syzkaller1: entered promiscuous mode
[  721.186146][T15836] syzkaller1: entered allmulticast mode
[  721.740366][ T5922] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  721.900625][ T5922] usb 2-1: Using ep0 maxpacket: 32
[  721.908210][ T5922] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  721.916761][ T5922] usb 2-1: config 0 has no interface number 0
[  721.924078][ T5922] usb 2-1: config 0 interface 12 has no altsetting 0
[  721.933432][ T5922] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  721.942603][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.950791][ T5922] usb 2-1: Product: syz
[  721.955212][ T5922] usb 2-1: Manufacturer: syz
[  721.959956][ T5922] usb 2-1: SerialNumber: syz
[  721.967634][ T5922] usb 2-1: config 0 descriptor??
[  722.755769][  T797] usb 5-1: USB disconnect, device number 38
[  722.831610][  T798] Process accounting resumed
[  722.848595][ T5922] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  722.869306][ T5922] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  722.883694][ T5922] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  722.891706][ T5922] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  722.909832][ T5922] usb 2-1: USB disconnect, device number 80
[  723.322345][  T797] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  723.487795][  T797] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  723.497386][  T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.505874][  T797] usb 5-1: Product: syz
[  723.510073][  T797] usb 5-1: Manufacturer: syz
[  723.514816][  T797] usb 5-1: SerialNumber: syz
[  723.521391][  T797] usb 5-1: config 0 descriptor??
[  723.746003][  T797] hso 5-1:0.0: Failed to find BULK IN ep
[  723.754171][  T797] usb-storage 5-1:0.0: USB Mass Storage device detected
[  723.966274][ T5882] usb 5-1: USB disconnect, device number 39
[  724.519286][  T797] usb 2-1: new full-speed USB device number 81 using dummy_hcd
[  724.713482][  T797] usb 2-1: config 1 has an invalid interface number: 8 but max is 0
[  724.721777][  T797] usb 2-1: config 1 has no interface number 0
[  724.728203][  T797] usb 2-1: config 1 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  724.739253][  T797] usb 2-1: config 1 interface 8 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  724.751506][  T797] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  724.760808][  T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  724.768838][  T797] usb 2-1: SerialNumber: syz
[  724.782404][  T797] cdc_acm 2-1:1.8: probe with driver cdc_acm failed with error -12
[  725.075102][ T5882] usb 2-1: USB disconnect, device number 81
[  725.534812][   T43] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  725.706630][   T43] usb 5-1: Using ep0 maxpacket: 32
[  725.714901][   T43] usb 5-1: unable to get BOS descriptor or descriptor too short
[  725.725191][   T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  725.743377][   T43] usb 5-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  725.758222][   T43] usb 5-1: config 1 interface 0 has no altsetting 0
[  725.770774][   T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  725.780938][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.788980][   T43] usb 5-1: Product: syz
[  725.793744][   T43] usb 5-1: Manufacturer: syz
[  725.798386][   T43] usb 5-1: SerialNumber: syz
[  726.054348][   T43] usb 5-1: bad CDC descriptors
[  726.091066][   T43] usb 5-1: USB disconnect, device number 40
[  726.179860][T15901] netlink: 'syz.7.2694': attribute type 1 has an invalid length.
[  726.188118][T15901] netlink: 240 bytes leftover after parsing attributes in process `syz.7.2694'.
[  726.257776][T15906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  726.276631][T15906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  726.673290][   T43] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  726.696947][T15912] overlayfs: conflicting lowerdir path
[  726.780448][T15915] netlink: 'syz.4.2698': attribute type 4 has an invalid length.
[  726.839899][   T43] usb 2-1: Using ep0 maxpacket: 16
[  726.848196][   T43] usb 2-1: config 0 has an invalid interface number: 54 but max is 0
[  726.856931][   T43] usb 2-1: config 0 has no interface number 0
[  726.869613][   T43] usb 2-1: New USB device found, idVendor=03eb, idProduct=fd44, bcdDevice=f5.c3
[  726.879179][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.887481][   T43] usb 2-1: Product: syz
[  726.892147][   T43] usb 2-1: Manufacturer: syz
[  726.896775][   T43] usb 2-1: SerialNumber: syz
[  726.903901][   T43] usb 2-1: config 0 descriptor??
[  727.140359][   T43] usb 2-1: USB disconnect, device number 82
[  727.704383][   T43] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  727.712690][T15922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  727.723373][T15922] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  727.838551][T15928] overlayfs: failed to resolve './file1': -2
[  727.875423][   T43] usb 5-1: Using ep0 maxpacket: 32
[  727.888981][   T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  727.906712][   T43] usb 5-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice= f.b0
[  727.924050][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.932982][   T43] usb 5-1: Product: syz
[  727.937310][   T43] usb 5-1: Manufacturer: syz
[  727.944540][   T43] usb 5-1: SerialNumber: syz
[  727.954965][   T43] usb 5-1: config 0 descriptor??
[  727.963473][   T43] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e
[  728.179048][   T43] gspca_sn9c20x: Write register 1000 failed -71
[  728.191592][   T43] gspca_sn9c20x: Device initialization failed
[  728.199427][   T43] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -71
[  728.202428][T15949] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  728.215104][T15949] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  728.215583][   T43] usb 5-1: USB disconnect, device number 41
[  728.225463][T15949] vhci_hcd vhci_hcd.0: Device attached
[  728.247725][T15950] vhci_hcd: connection closed
[  728.251219][ T1094] vhci_hcd vhci_hcd.8: stop threads
[  728.261958][ T1094] vhci_hcd vhci_hcd.8: release socket
[  728.267562][ T1094] vhci_hcd vhci_hcd.8: disconnect device
[  728.377685][  T798] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  728.539829][  T798] usb 2-1: config 0 has an invalid interface number: 252 but max is 0
[  728.548081][  T798] usb 2-1: config 0 has no interface number 0
[  728.556635][  T798] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[  728.565914][  T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.575265][  T798] usb 2-1: Product: syz
[  728.579475][  T798] usb 2-1: Manufacturer: syz
[  728.584379][  T798] usb 2-1: SerialNumber: syz
[  728.592595][  T798] usb 2-1: config 0 descriptor??
[  728.600930][  T798] usb-storage 2-1:0.252: USB Mass Storage device detected
[  728.616481][  T798] usb-storage 2-1:0.252: device ignored
[  728.821922][  T798] usb 2-1: USB disconnect, device number 83
[  729.401416][   T30] kauditd_printk_skb: 57 callbacks suppressed
[  729.401436][   T30] audit: type=1326 audit(1760685783.390:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.4.2716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb6358eec9 code=0x0
[  730.267261][   T30] audit: type=1326 audit(1760685784.211:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15988 comm="syz.1.2722" exe="/root/syz-executor" sig=9 arch=c000003e syscall=317 compat=0 ip=0x7f0bcd38eec9 code=0x0
[  730.559628][T16002] netlink: 'syz.1.2726': attribute type 5 has an invalid length.
[  730.753627][   T43] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  730.921577][   T43] usb 5-1: Using ep0 maxpacket: 16
[  730.929267][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  730.941674][   T43] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  730.952088][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.965405][   T43] usb 5-1: config 0 descriptor??
[  731.049975][  T798] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  731.191440][T15999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  731.203484][T15999] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  731.210684][  T798] usb 2-1: Using ep0 maxpacket: 16
[  731.225889][  T798] usb 2-1: config 53 has an invalid interface number: 240 but max is 0
[  731.230248][T15999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  731.242706][  T798] usb 2-1: config 53 has no interface number 0
[  731.246326][T15999] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  731.252615][  T798] usb 2-1: config 53 interface 240 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82
[  731.270869][  T798] usb 2-1: config 53 interface 240 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024
[  731.275838][T15999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  731.283086][  T798] usb 2-1: config 53 interface 240 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  731.305359][  T798] usb 2-1: config 53 interface 240 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  731.314358][T15999] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  731.323640][  T798] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89
[  731.335580][T15999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  731.336634][  T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.355086][T15999] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  731.363580][  T798] usb 2-1: Product: syz
[  731.367874][  T798] usb 2-1: Manufacturer: syz
[  731.373340][  T798] usb 2-1: SerialNumber: syz
[  731.395726][T16006] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  731.445134][T16020] syzkaller1: left promiscuous mode
[  731.450558][T16020] syzkaller1: left allmulticast mode
[  731.457602][T16020] 8021q: VLANs not supported on syzkaller1
[  731.595623][   T43] usbhid 5-1:0.0: can't add hid device: -71
[  731.601927][   T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  731.613453][   T43] usb 5-1: USB disconnect, device number 42
[  731.629500][  T798] kvaser_usb 2-1:53.240: error -ENODEV: Cannot get usb endpoint(s)
[  731.651224][  T798] usb 2-1: USB disconnect, device number 84
[  732.213612][T16024] netlink: 'syz.1.2734': attribute type 7 has an invalid length.
[  732.420038][  T797] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[  732.504154][ T5922] usb 2-1: new full-speed USB device number 85 using dummy_hcd
[  732.567752][  T797] usb 5-1: device descriptor read/64, error -71
[  732.690327][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  732.706297][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10
[  732.721026][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  732.733945][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64
[  732.749882][ T5922] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  732.759557][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  732.773834][ T5922] usb 2-1: Product: syz
[  732.778140][ T5922] usb 2-1: Manufacturer: syz
[  732.791337][ T5922] usb 2-1: SerialNumber: syz
[  732.799886][ T5922] usb 2-1: config 0 descriptor??
[  732.835001][  T797] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  732.973996][  T797] usb 5-1: device descriptor read/64, error -71
[  733.092363][  T797] usb usb5-port1: attempt power cycle
[  733.123636][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.131022][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.141439][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.149742][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.158293][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.164874][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.174078][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.180917][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.187759][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.194767][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.202900][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.210133][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.216769][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.223748][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.230448][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.238471][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.245244][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.258000][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.267391][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.275630][ T5922] iforce 2-1:0.0: usb_submit_urb failed: -71
[  733.284152][ T5922] input input80: Timeout waiting for response from device.
[  733.299361][ T5922] usb 2-1: USB disconnect, device number 85
[  733.498744][  T797] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[  733.541643][  T797] usb 5-1: device descriptor read/8, error -71
[  733.808104][  T797] usb 5-1: new full-speed USB device number 46 using dummy_hcd
[  733.829756][  T797] usb 5-1: device descriptor read/8, error -71
[  733.948025][  T797] usb usb5-port1: unable to enumerate USB device
[  734.214023][   T43] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  734.387099][   T43] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[  734.396473][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.406902][   T43] usb 2-1: config 0 descriptor??
[  734.866046][   T43] kye 0003:0458:0153.0042: hidraw0: USB HID v1.01 Device [HID 0458:0153] on usb-dummy_hcd.1-1/input0
[  735.067908][  T797] usb 2-1: USB disconnect, device number 86
[  735.472149][T16071] loop4: detected capacity change from 0 to 2559
[  735.480090][T16071] buffer_io_error: 5 callbacks suppressed
[  735.480106][T16071] Buffer I/O error on dev loop4, logical block 0, async page read
[  735.494034][T16071] Buffer I/O error on dev loop4, logical block 0, async page read
[  735.502227][T16071] Buffer I/O error on dev loop4, logical block 0, async page read
[  735.510474][T16071] Buffer I/O error on dev loop4, logical block 0, async page read
[  735.518655][T16071] Buffer I/O error on dev loop4, logical block 0, async page read
[  735.526754][T16071] Buffer I/O error on dev loop4, logical block 0, async page read
[  735.535303][T16071] Buffer I/O error on dev loop4, logical block 0, async page read
[  735.546426][T16071]  loop4: unable to read partition table
[  735.552610][T16071] loop_reread_partitions: partition scan of loop4 (3Ÿ¾‚³˜) failed (rc=-5)
[  735.555316][T16072] Buffer I/O error on dev loop4, logical block 0, lost async page write
[  735.571303][T16072] Buffer I/O error on dev loop4, logical block 1, lost async page write
[  735.579732][ T5833] Buffer I/O error on dev loop4, logical block 319, async page read
[  735.849421][ T5896] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  735.895183][T16074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  736.013291][ T5896] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  736.028470][ T5896] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  736.038367][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.046522][ T5896] usb 5-1: Product: syz
[  736.050916][ T5896] usb 5-1: Manufacturer: syz
[  736.055773][ T5896] usb 5-1: SerialNumber: syz
[  736.507726][T16077] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  737.169836][T16083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2750'.
[  737.365526][ T5896] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[  737.372860][ T5896] cdc_ncm 5-1:1.0: dwNtbInMaxSize=6 is too small. Using 2048
[  737.380484][ T5896] cdc_ncm 5-1:1.0: setting rx_max = 2048
[  737.506352][   T43] usb 2-1: new low-speed USB device number 87 using dummy_hcd
[  737.677302][   T43] usb 2-1: Invalid ep0 maxpacket: 32
[  737.816485][   T43] usb 2-1: new low-speed USB device number 88 using dummy_hcd
[  737.976640][   T43] usb 2-1: Invalid ep0 maxpacket: 32
[  737.983144][   T43] usb usb2-port1: attempt power cycle
[  738.209122][T16093] netlink: 'syz.7.2753': attribute type 1 has an invalid length.
[  738.352157][   T43] usb 2-1: new low-speed USB device number 89 using dummy_hcd
[  738.366250][T16096] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  738.372956][   T43] usb 2-1: Invalid ep0 maxpacket: 32
[  738.481521][T16096] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  738.522313][   T43] usb 2-1: new low-speed USB device number 90 using dummy_hcd
[  738.544074][   T43] usb 2-1: Invalid ep0 maxpacket: 32
[  738.549977][   T43] usb usb2-port1: unable to enumerate USB device
[  738.593884][T16096] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  738.668165][T16096] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  738.790813][T13221] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  738.811867][T13221] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  738.832767][T13221] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  738.857051][   T49] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  738.917683][ T5896] cdc_ncm 5-1:1.0: setting tx_max = 184
[  738.952425][ T5896] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  739.015414][ T5896] usb 5-1: USB disconnect, device number 47
[  739.044584][ T5896] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP)
[  739.622836][ T5923] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[  739.798041][ T5923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  739.808274][ T5923] usb 5-1: config 0 has no interfaces?
[  739.817964][ T5923] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d
[  739.827488][ T5923] usb 5-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146
[  739.836137][ T5923] usb 5-1: Product: syz
[  739.840585][ T5923] usb 5-1: Manufacturer: syz
[  739.845218][ T5923] usb 5-1: SerialNumber: syz
[  739.852939][ T5923] usb 5-1: config 0 descriptor??
[  740.004275][T16124] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2764'.
[  740.198991][T16131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  740.504324][  T797] usb 5-1: USB disconnect, device number 48
[  740.637657][T16154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  740.654657][T16154] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  740.795912][T16161] tmpfs: Unknown parameter 'noinode32'
[  740.980907][T11769] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  741.151382][T11769] usb 2-1: Using ep0 maxpacket: 8
[  741.157954][T11769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  741.168634][T11769] usb 2-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00
[  741.177861][T11769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.188940][T11769] usb 2-1: config 0 descriptor??
[  741.279702][  T797] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  741.441896][  T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  741.453309][  T797] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  741.462657][  T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.475693][  T797] usb 5-1: config 0 descriptor??
[  741.839634][T16151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  741.849205][T16173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  741.849339][T16151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  741.858181][T16173] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  741.918448][  T797] keytouch 0003:0926:3333.0043: fixing up Keytouch IEC report descriptor
[  741.938848][  T797] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0043/input/input82
[  741.979980][T11769] usbhid 2-1:0.0: can't add hid device: -71
[  741.987421][T11769] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  741.999466][T11769] usb 2-1: USB disconnect, device number 91
[  742.052715][  T797] keytouch 0003:0926:3333.0043: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  742.341271][T16172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  742.351473][T16172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  742.760115][ T5896] usb 5-1: USB disconnect, device number 49
[  742.883526][ T5922] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  743.065575][ T5922] usb 2-1: Using ep0 maxpacket: 8
[  743.096579][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  743.118223][ T5922] usb 2-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00
[  743.127500][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.150683][ T5922] usb 2-1: config 0 descriptor??
[  743.163607][T16194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  743.608316][ T5922] usbhid 2-1:0.0: can't add hid device: -71
[  743.618953][ T5922] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  743.654147][ T5922] usb 2-1: USB disconnect, device number 92
[  744.775155][   T43] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  745.077167][T16238] fuseblk: Bad value for 'fd'
[  745.150753][   T43] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  745.171904][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.179958][   T43] usb 5-1: Product: syz
[  745.202639][   T43] usb 5-1: Manufacturer: syz
[  745.207831][   T43] usb 5-1: SerialNumber: syz
[  745.240139][   T43] usb 5-1: config 0 descriptor??
[  745.262192][   T43] gspca_main: sunplus-2.14.0 probing 055f:c230
[  745.714779][T16226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  745.749138][T16226] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  745.861731][T16226] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  746.365143][T16226] fuse: Bad value for 'fd'
[  746.402245][T16265] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  746.473426][T16265] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  746.494382][T16265] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[  746.554676][T16265] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[  746.587184][T16265] kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[  746.598948][   T43] gspca_sunplus: reg_r err -71
[  746.606469][T16265] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  746.616397][   T43] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  746.646938][   T43] usb 5-1: USB disconnect, device number 50
[  746.649265][T16265] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[  746.701760][T16265] kvm: requested 170133 ns i8254 timer period limited to 200000 ns
[  746.722396][T16265] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  746.741594][T16265] kvm: requested 3352 ns i8254 timer period limited to 200000 ns
[  746.933738][T16284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2796'.
[  747.008334][T16286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2796'.
[  747.044008][T16286] nbd: device at index 64 is going down
[  747.829017][T16313] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  747.885122][T16313] loop2: detected capacity change from 0 to 7
[  747.893223][T16315] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  747.907377][T16313] Dev loop2: unable to read RDB block 7
[  747.917778][T16313]  loop2: AHDI p1 p2 p3
[  747.922201][T16315] overlayfs: failed to set xattr on upper
[  747.927983][T16315] overlayfs: ...falling back to redirect_dir=nofollow.
[  747.942482][T16313] loop2: partition table partially beyond EOD, truncated
[  747.992084][T16315] overlayfs: ...falling back to index=off.
[  747.994895][T16313] loop2: p1 start 1601398130 is beyond EOD, truncated
[  748.014770][T16315] overlayfs: ...falling back to uuid=null.
[  748.036032][T16313] loop2: p2 start 1702059890 is beyond EOD, truncated
[  748.259926][ T5922] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  748.353204][T16323] QAT: failed to copy from user.
[  748.444755][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  748.477633][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  748.517031][ T5922] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  748.543899][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  748.574215][ T5922] usb 5-1: config 0 descriptor??
[  749.049312][ T5922] hid-retrode 0003:0403:97C1.0044: global environment stack underflow
[  749.064523][ T5922] hid-retrode 0003:0403:97C1.0044: item 0 0 1 11 parsing failed
[  749.079903][ T5922] hid-retrode 0003:0403:97C1.0044: probe with driver hid-retrode failed with error -22
[  749.147116][  T797] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  749.245733][ T5922] usb 5-1: USB disconnect, device number 51
[  749.320133][  T797] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  749.329610][  T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.340756][  T797] usb 2-1: config 0 descriptor??
[  749.349521][  T797] gspca_main: spca508-2.14.0 probing 8086:0110
[  749.562439][  T797] gspca_spca508: reg_read err -32
[  749.568947][  T797] gspca_spca508: reg_read err -32
[  749.574763][  T797] gspca_spca508: reg_read err -32
[  749.580313][  T797] gspca_spca508: reg_read err -32
[  749.585994][  T797] gspca_spca508: reg_read err -32
[  749.866426][  T797] gspca_spca508: reg write: error -71
[  749.871953][  T797] spca508 2-1:0.0: probe with driver spca508 failed with error -71
[  749.882176][  T797] usb 2-1: USB disconnect, device number 93
[  750.018075][T16354] syzkaller1: entered promiscuous mode
[  750.028044][T16354] syzkaller1: entered allmulticast mode
[  750.072019][T16361] netlink: 'syz.7.2812': attribute type 4 has an invalid length.
[  750.081186][T16361] netlink: 'syz.7.2812': attribute type 4 has an invalid length.
[  750.280284][ T5922] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  750.440544][ T5922] usb 5-1: Using ep0 maxpacket: 32
[  750.446472][ T5922] usb 5-1: too many configurations: 17, using maximum allowed: 8
[  750.455495][ T5922] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  750.463978][ T5922] usb 5-1: config 0 has no interface number 0
[  750.475107][ T5922] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  750.489607][ T5922] usb 5-1: config 0 has no interface number 0
[  750.505638][ T5922] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  750.513792][ T5922] usb 5-1: config 0 has no interface number 0
[  750.533978][ T5922] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  750.542981][T16370] batadv_slave_1: entered promiscuous mode
[  750.548137][ T5922] usb 5-1: config 0 has no interface number 0
[  750.568584][ T5922] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  750.577470][T16369] batadv_slave_1: left promiscuous mode
[  750.593785][ T5922] usb 5-1: config 0 has no interface number 0
[  750.613261][ T5922] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  750.634061][ T5922] usb 5-1: config 0 has no interface number 0
[  750.641729][ T5922] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  750.654508][ T5922] usb 5-1: config 0 has no interface number 0
[  750.663584][ T5922] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  750.672970][ T5922] usb 5-1: config 0 has no interface number 0
[  750.699483][ T5922] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  750.709074][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.717254][ T5922] usb 5-1: Product: syz
[  750.721761][ T5922] usb 5-1: Manufacturer: syz
[  750.726576][ T5922] usb 5-1: SerialNumber: syz
[  750.737483][ T5922] usb 5-1: config 0 descriptor??
[  750.752726][ T5922] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz)
[  750.962442][ T5922] etas_es58x 5-1:0.2: could not parse product info: '424242424242'
[  751.718462][ T5195] udevd[5195]: could not touch /run/udev/queue: Read-only file system
Connection to 10.128.1.148 closed by remote host.
[  752.542750][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  752.580858][T13338] bond0: (slave syz_tun): Releasing backup interface
[  752.726400][   T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  752.874719][   T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  753.022400][   T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  753.137364][   T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  753.449525][   T36] bridge_slave_1: left allmulticast mode
[  753.465987][   T36] bridge_slave_1: left promiscuous mode
[  753.471893][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  753.492943][   T36] bridge_slave_0: left allmulticast mode
[  753.498935][   T36] bridge_slave_0: left promiscuous mode
[  753.504775][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  753.968440][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  753.979561][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  753.989798][   T36] bond0 (unregistering): Released all slaves
[  754.369879][   T36] hsr_slave_0: left promiscuous mode
[  754.382516][   T36] hsr_slave_1: left promiscuous mode
[  754.396688][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  754.404221][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  754.414748][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  754.422476][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  754.446484][   T36] veth1_macvtap: left promiscuous mode
[  754.452687][   T36] veth0_macvtap: left promiscuous mode
[  754.458418][   T36] veth1_vlan: left promiscuous mode
[  754.463978][   T36] veth0_vlan: left promiscuous mode
[  754.994787][   T36] team0 (unregistering): Port device team_slave_1 removed
[  755.051789][   T36] team0 (unregistering): Port device team_slave_0 removed
[  755.393378][ T5869] dvb-usb: did not find the firmware file 'dvb-usb-p7500.fw' (status -2). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  755.412745][ T5869] usbhid 9-1:255.94: couldn't find an input interrupt endpoint
[  755.439347][ T5869] dvb-usb: found a 'Prof 7500 USB DVB-S2' in cold state, will try to load a firmware
[  755.457985][ T5869] usb 9-1: Direct firmware load for dvb-usb-p7500.fw failed with error -2
[  755.467194][ T5869] usb 9-1: Falling back to sysfs fallback for: dvb-usb-p7500.fw
[  755.475811][ T5869] ------------[ cut here ]------------
[  755.481343][ T5869] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0x9b0, CPU#0: kworker/0:4/5869
[  755.494255][ T5869] Modules linked in:
[  755.498710][ T5869] CPU: 0 UID: 0 PID: 5869 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) 
[  755.508852][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  755.519656][ T5869] Workqueue: usb_hub_wq hub_event
[  755.524742][ T5869] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0
[  755.531278][ T5869] Code: ea fb e9 5d fc ff ff e8 f8 91 ea fb c6 05 35 27 b2 09 01 48 c7 c7 40 cc e8 8b e8 25 c3 51 fb e9 85 fc ff ff e8 db 91 ea fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 20 cd e8 8b 4c 89 e2 e8 75 6f 56 fb e9
[  755.551204][ T5869] RSP: 0018:ffffc9000422e870 EFLAGS: 00010283
[  755.557746][ T5869] RAX: ffffffff85d5cad5 RBX: dffffc0000000000 RCX: 0000000000100000
[  755.565810][ T5869] RDX: ffffc9001612c000 RSI: 00000000000daaad RDI: 00000000000daaae
[  755.573834][ T5869] RBP: 0000000000000001 R08: ffffffff8f9dd677 R09: 1ffffffff1f3bace
[  755.581834][ T5869] R10: dffffc0000000000 R11: fffffbfff1f3bacf R12: ffffffff8c330680
[  755.590048][ T5869] R13: 0000000000001770 R14: ffff88805ade70b0 R15: 00000000fffffff5
[  755.598165][ T5869] FS:  0000000000000000(0000) GS:ffff888125d22000(0000) knlGS:0000000000000000
[  755.607235][ T5869] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  755.614942][ T5869] CR2: 00007ffe5d371ef4 CR3: 000000000df38000 CR4: 00000000003526f0
[  755.623089][ T5869] Call Trace:
[  755.626929][ T5869]  <TASK>
[  755.629974][ T5869]  ? kmem_cache_free+0x19b/0x690
[  755.634930][ T5869]  ? _request_firmware+0x6be/0x15b0
[  755.640164][ T5869]  _request_firmware+0xf83/0x15b0
[  755.645452][ T5869]  ? preempt_schedule_thunk+0x16/0x30
[  755.650972][ T5869]  ? __pfx__request_firmware+0x10/0x10
[  755.656532][ T5869]  ? __lruvec_stat_mod_folio+0x6f/0x2e0
[  755.662156][ T5869]  request_firmware+0x36/0x50
[  755.666839][ T5869]  dvb_usb_download_firmware+0xaf/0x260
[  755.672770][ T5869]  ? __pfx__printk+0x10/0x10
[  755.677357][ T5869]  ? __pfx_dvb_usb_download_firmware+0x10/0x10
[  755.683585][ T5869]  ? dvb_usb_device_init+0x14c/0x2580
[  755.689118][ T5869]  dvb_usb_device_init+0xdd2/0x2580
[  755.694336][ T5869]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  755.700393][ T5869]  ? lockdep_hardirqs_on+0x9c/0x150
[  755.705589][ T5869]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  755.711525][ T5869]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  755.717904][ T5869]  ? __pfx_dvb_usb_device_init+0x10/0x10
[  755.724455][ T5869]  ? __update_runtime_status+0x1b3/0x390
[  755.730161][ T5869]  ? __pm_runtime_set_status+0x785/0xa50
[  755.736246][ T5869]  dw2102_probe+0x146/0x270
[  755.740783][ T5869]  usb_probe_interface+0x668/0xc30
[  755.745953][ T5869]  ? __pfx_usb_probe_interface+0x10/0x10
[  755.751585][ T5869]  really_probe+0x26d/0x9e0
[  755.756140][ T5869]  __driver_probe_device+0x18c/0x2f0
[  755.761444][ T5869]  driver_probe_device+0x4f/0x430
[  755.766514][ T5869]  __device_attach_driver+0x2ce/0x530
[  755.771894][ T5869]  bus_for_each_drv+0x251/0x2e0
[  755.776957][ T5869]  ? __pfx___device_attach_driver+0x10/0x10
[  755.782938][ T5869]  ? __pfx_bus_for_each_drv+0x10/0x10
[  755.788533][ T5869]  __device_attach+0x2b8/0x400
[  755.793298][ T5869]  ? __pfx___device_attach+0x10/0x10
[  755.798795][ T5869]  ? do_raw_spin_unlock+0x122/0x240
[  755.803991][ T5869]  bus_probe_device+0x185/0x260
[  755.808868][ T5869]  device_add+0x7b6/0xb50
[  755.813198][ T5869]  usb_set_configuration+0x1a87/0x20e0
[  755.818694][ T5869]  usb_generic_driver_probe+0x8d/0x150
[  755.824164][ T5869]  usb_probe_device+0x1c4/0x390
[  755.829590][ T5869]  ? __pfx_usb_probe_device+0x10/0x10
[  755.835063][ T5869]  really_probe+0x26d/0x9e0
[  755.840178][ T5869]  __driver_probe_device+0x18c/0x2f0
[  755.845503][ T5869]  driver_probe_device+0x4f/0x430
[  755.850623][ T5869]  __device_attach_driver+0x2ce/0x530
[  755.856049][ T5869]  bus_for_each_drv+0x251/0x2e0
[  755.861006][ T5869]  ? __pfx___device_attach_driver+0x10/0x10
[  755.866985][ T5869]  ? __pfx_bus_for_each_drv+0x10/0x10
[  755.872508][ T5869]  __device_attach+0x2b8/0x400
[  755.877468][ T5869]  ? __pfx___device_attach+0x10/0x10
[  755.882872][ T5869]  ? do_raw_spin_unlock+0x122/0x240
[  755.888281][ T5869]  bus_probe_device+0x185/0x260
[  755.893210][ T5869]  device_add+0x7b6/0xb50
[  755.897571][ T5869]  usb_new_device+0xa39/0x16f0
[  755.902437][ T5869]  ? __pfx_usb_new_device+0x10/0x10
[  755.907684][ T5869]  ? _raw_spin_unlock_irq+0x23/0x50
[  755.912888][ T5869]  ? lockdep_hardirqs_on+0x9c/0x150
[  755.918214][ T5869]  hub_event+0x2958/0x4a20
[  755.922681][ T5869]  ? __pfx_hub_event+0x10/0x10
[  755.927597][ T5869]  ? process_scheduled_works+0x9ef/0x17b0
[  755.933346][ T5869]  ? _raw_spin_unlock_irq+0x23/0x50
[  755.939113][ T5869]  ? process_scheduled_works+0x9ef/0x17b0
[  755.944845][ T5869]  ? process_scheduled_works+0x9ef/0x17b0
[  755.951063][ T5869]  process_scheduled_works+0xae1/0x17b0
[  755.956990][ T5869]  ? __pfx_process_scheduled_works+0x10/0x10
[  755.963116][ T5869]  worker_thread+0x8a0/0xda0
[  755.967814][ T5869]  ? __kthread_parkme+0x7b/0x200
[  755.972821][ T5869]  kthread+0x711/0x8a0
[  755.976947][ T5869]  ? __pfx_worker_thread+0x10/0x10
[  755.982141][ T5869]  ? __pfx_kthread+0x10/0x10
[  755.986769][ T5869]  ? _raw_spin_unlock_irq+0x23/0x50
[  755.992029][ T5869]  ? lockdep_hardirqs_on+0x9c/0x150
[  755.997260][ T5869]  ? __pfx_kthread+0x10/0x10
[  756.001969][ T5869]  ret_from_fork+0x4bc/0x870
[  756.006610][ T5869]  ? __pfx_ret_from_fork+0x10/0x10
[  756.011834][ T5869]  ? __switch_to_asm+0x39/0x70
[  756.016630][ T5869]  ? __switch_to_asm+0x33/0x70
[  756.021446][ T5869]  ? __pfx_kthread+0x10/0x10
[  756.026058][ T5869]  ret_from_fork_asm+0x1a/0x30
[  756.030840][ T5869]  </TASK>
[  756.033947][ T5869] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  756.041224][ T5869] CPU: 0 UID: 0 PID: 5869 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) 
[  756.050595][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  756.060854][ T5869] Workqueue: usb_hub_wq hub_event
[  756.065890][ T5869] Call Trace:
[  756.069169][ T5869]  <TASK>
[  756.072094][ T5869]  dump_stack_lvl+0x99/0x250
[  756.076683][ T5869]  ? __asan_memcpy+0x40/0x70
[  756.081270][ T5869]  ? __pfx_dump_stack_lvl+0x10/0x10
[  756.086480][ T5869]  ? __pfx__printk+0x10/0x10
[  756.091097][ T5869]  vpanic+0x237/0x6d0
[  756.095107][ T5869]  ? __pfx_vpanic+0x10/0x10
[  756.099644][ T5869]  ? is_bpf_text_address+0x26/0x2b0
[  756.104885][ T5869]  panic+0xb9/0xc0
[  756.108610][ T5869]  ? __pfx_panic+0x10/0x10
[  756.113036][ T5869]  __warn+0x334/0x4c0
[  756.117019][ T5869]  ? firmware_fallback_sysfs+0x746/0x9b0
[  756.122649][ T5869]  ? firmware_fallback_sysfs+0x746/0x9b0
[  756.128281][ T5869]  report_bug+0x2be/0x4f0
[  756.132612][ T5869]  ? firmware_fallback_sysfs+0x746/0x9b0
[  756.138249][ T5869]  ? firmware_fallback_sysfs+0x746/0x9b0
[  756.143912][ T5869]  ? firmware_fallback_sysfs+0x748/0x9b0
[  756.149639][ T5869]  handle_bug+0x84/0x160
[  756.153917][ T5869]  exc_invalid_op+0x1a/0x50
[  756.158502][ T5869]  asm_exc_invalid_op+0x1a/0x20
[  756.163371][ T5869] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0
[  756.169629][ T5869] Code: ea fb e9 5d fc ff ff e8 f8 91 ea fb c6 05 35 27 b2 09 01 48 c7 c7 40 cc e8 8b e8 25 c3 51 fb e9 85 fc ff ff e8 db 91 ea fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 20 cd e8 8b 4c 89 e2 e8 75 6f 56 fb e9
[  756.189242][ T5869] RSP: 0018:ffffc9000422e870 EFLAGS: 00010283
[  756.195321][ T5869] RAX: ffffffff85d5cad5 RBX: dffffc0000000000 RCX: 0000000000100000
[  756.203473][ T5869] RDX: ffffc9001612c000 RSI: 00000000000daaad RDI: 00000000000daaae
[  756.211452][ T5869] RBP: 0000000000000001 R08: ffffffff8f9dd677 R09: 1ffffffff1f3bace
[  756.219513][ T5869] R10: dffffc0000000000 R11: fffffbfff1f3bacf R12: ffffffff8c330680
[  756.227503][ T5869] R13: 0000000000001770 R14: ffff88805ade70b0 R15: 00000000fffffff5
[  756.235509][ T5869]  ? firmware_fallback_sysfs+0x745/0x9b0
[  756.241264][ T5869]  ? kmem_cache_free+0x19b/0x690
[  756.246214][ T5869]  ? _request_firmware+0x6be/0x15b0
[  756.251435][ T5869]  _request_firmware+0xf83/0x15b0
[  756.256470][ T5869]  ? preempt_schedule_thunk+0x16/0x30
[  756.261876][ T5869]  ? __pfx__request_firmware+0x10/0x10
[  756.267350][ T5869]  ? __lruvec_stat_mod_folio+0x6f/0x2e0
[  756.272923][ T5869]  request_firmware+0x36/0x50
[  756.277622][ T5869]  dvb_usb_download_firmware+0xaf/0x260
[  756.283175][ T5869]  ? __pfx__printk+0x10/0x10
[  756.287771][ T5869]  ? __pfx_dvb_usb_download_firmware+0x10/0x10
[  756.293933][ T5869]  ? dvb_usb_device_init+0x14c/0x2580
[  756.299327][ T5869]  dvb_usb_device_init+0xdd2/0x2580
[  756.304654][ T5869]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  756.310558][ T5869]  ? lockdep_hardirqs_on+0x9c/0x150
[  756.315770][ T5869]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  756.321667][ T5869]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  756.328006][ T5869]  ? __pfx_dvb_usb_device_init+0x10/0x10
[  756.333842][ T5869]  ? __update_runtime_status+0x1b3/0x390
[  756.339520][ T5869]  ? __pm_runtime_set_status+0x785/0xa50
[  756.345192][ T5869]  dw2102_probe+0x146/0x270
[  756.349718][ T5869]  usb_probe_interface+0x668/0xc30
[  756.354870][ T5869]  ? __pfx_usb_probe_interface+0x10/0x10
[  756.360546][ T5869]  really_probe+0x26d/0x9e0
[  756.365225][ T5869]  __driver_probe_device+0x18c/0x2f0
[  756.370634][ T5869]  driver_probe_device+0x4f/0x430
[  756.375680][ T5869]  __device_attach_driver+0x2ce/0x530
[  756.381069][ T5869]  bus_for_each_drv+0x251/0x2e0
[  756.385937][ T5869]  ? __pfx___device_attach_driver+0x10/0x10
[  756.391841][ T5869]  ? __pfx_bus_for_each_drv+0x10/0x10
[  756.397235][ T5869]  __device_attach+0x2b8/0x400
[  756.402009][ T5869]  ? __pfx___device_attach+0x10/0x10
[  756.407307][ T5869]  ? do_raw_spin_unlock+0x122/0x240
[  756.412512][ T5869]  bus_probe_device+0x185/0x260
[  756.417385][ T5869]  device_add+0x7b6/0xb50
[  756.421900][ T5869]  usb_set_configuration+0x1a87/0x20e0
[  756.427394][ T5869]  usb_generic_driver_probe+0x8d/0x150
[  756.433043][ T5869]  usb_probe_device+0x1c4/0x390
[  756.437993][ T5869]  ? __pfx_usb_probe_device+0x10/0x10
[  756.443466][ T5869]  really_probe+0x26d/0x9e0
[  756.447992][ T5869]  __driver_probe_device+0x18c/0x2f0
[  756.453382][ T5869]  driver_probe_device+0x4f/0x430
[  756.458420][ T5869]  __device_attach_driver+0x2ce/0x530
[  756.463806][ T5869]  bus_for_each_drv+0x251/0x2e0
[  756.468677][ T5869]  ? __pfx___device_attach_driver+0x10/0x10
[  756.474578][ T5869]  ? __pfx_bus_for_each_drv+0x10/0x10
[  756.480061][ T5869]  __device_attach+0x2b8/0x400
[  756.484856][ T5869]  ? __pfx___device_attach+0x10/0x10
[  756.490162][ T5869]  ? do_raw_spin_unlock+0x122/0x240
[  756.495377][ T5869]  bus_probe_device+0x185/0x260
[  756.500250][ T5869]  device_add+0x7b6/0xb50
[  756.504620][ T5869]  usb_new_device+0xa39/0x16f0
[  756.509422][ T5869]  ? __pfx_usb_new_device+0x10/0x10
[  756.514638][ T5869]  ? _raw_spin_unlock_irq+0x23/0x50
[  756.519841][ T5869]  ? lockdep_hardirqs_on+0x9c/0x150
[  756.525052][ T5869]  hub_event+0x2958/0x4a20
[  756.529519][ T5869]  ? __pfx_hub_event+0x10/0x10
[  756.534294][ T5869]  ? process_scheduled_works+0x9ef/0x17b0
[  756.540149][ T5869]  ? _raw_spin_unlock_irq+0x23/0x50
[  756.545360][ T5869]  ? process_scheduled_works+0x9ef/0x17b0
[  756.551091][ T5869]  ? process_scheduled_works+0x9ef/0x17b0
[  756.556825][ T5869]  process_scheduled_works+0xae1/0x17b0
[  756.562406][ T5869]  ? __pfx_process_scheduled_works+0x10/0x10
[  756.568409][ T5869]  worker_thread+0x8a0/0xda0
[  756.573030][ T5869]  ? __kthread_parkme+0x7b/0x200
[  756.577991][ T5869]  kthread+0x711/0x8a0
[  756.582118][ T5869]  ? __pfx_worker_thread+0x10/0x10
[  756.587244][ T5869]  ? __pfx_kthread+0x10/0x10
[  756.591842][ T5869]  ? _raw_spin_unlock_irq+0x23/0x50
[  756.597101][ T5869]  ? lockdep_hardirqs_on+0x9c/0x150
[  756.602304][ T5869]  ? __pfx_kthread+0x10/0x10
[  756.606907][ T5869]  ret_from_fork+0x4bc/0x870
[  756.611509][ T5869]  ? __pfx_ret_from_fork+0x10/0x10
[  756.616641][ T5869]  ? __switch_to_asm+0x39/0x70
[  756.621413][ T5869]  ? __switch_to_asm+0x33/0x70
[  756.626269][ T5869]  ? __pfx_kthread+0x10/0x10
[  756.630867][ T5869]  ret_from_fork_asm+0x1a/0x30
[  756.635653][ T5869]  </TASK>
[  756.638946][ T5869] Kernel Offset: disabled
[  756.643273][ T5869] Rebooting in 86400 seconds..