last executing test programs:

1m11.764763256s ago: executing program 3 (id=98):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c)
ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0xd) (async, rerun: 64)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) (rerun: 64)
r2 = accept$nfc_llcp(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x60)
close_range(r2, r0, 0x2)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x8800) (async, rerun: 64)
r4 = dup(r2) (rerun: 64)
r5 = eventfd2(0x3, 0x801) (async, rerun: 32)
ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x80000000) (async, rerun: 32)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x1}) (async)
getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000280)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000002c0)=0x28) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000300)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r6=>0x0}], 0x2, "97dbebd77e6eeb"})
ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000001300)={r6, 0x7fff}) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000002400)={'tunl0\x00', &(0x7f0000002300)={'tunl0\x00', <r7=>0x0, 0x40, 0x1, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x7, 0xbc, 0x67, 0x0, 0x7, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xf, 0x3a, [@multicast1, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1]}, @rr={0x7, 0x17, 0xa1, [@private=0xa010100, @multicast2, @loopback, @multicast2, @loopback]}, @generic={0x83, 0x7, "4e488e1e58"}, @timestamp_prespec={0x44, 0x34, 0x87, 0x3, 0x6, [{@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x7}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff20}, {@local, 0x40}, {@multicast1, 0xb6}]}, @timestamp_prespec={0x44, 0x44, 0x42, 0x3, 0xa, [{@local, 0xc}, {@remote, 0x9}, {@broadcast, 0x2}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x10}, 0xfffffffc}, {@multicast2, 0x750d}, {@loopback, 0x80000001}, {@rand_addr=0x64010102, 0x9638}]}]}}}}}) (rerun: 32)
bind$can_j1939(r4, &(0x7f0000002440)={0x1d, r7, 0x2, {0x1, 0xf0, 0x1}, 0x1}, 0x18) (async, rerun: 64)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x1d) (rerun: 64)
sendmsg$inet(r1, &(0x7f0000002780)={&(0x7f0000002480)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000026c0)=[{&(0x7f00000024c0)="180f1a2b11cc15b11f79ac7ac822ce25af986e3cbd41c41f41dc787a45fb8f", 0x1f}, {&(0x7f0000002500)="74d139f63767f34fe68fc1beeb2e4d37869f40ffd10046e0c1dc86b1211868a2aef8d60026865d99569657b4ee18caf5254c601050ad80969b7db6c57d2dc43440fb14dedaf41de866093b42a464dcd24f32f25fc23708669daa594ba7af7027f59bfc249075d8ae71c547ef144a94fc31fbc95ec1a71158a01e5326ec7388e0e29cdfb370fb3a51971cb8ec85d74cb5d9e95e9960646bbd8590fa6a065f7d6bd1ee98b226ef195e9673284782080575bdf9581dd3786eb595e65611b9f2e0fe3b2826fe0bcd7232cf7bfa019dfedb650b976bde1b64e231b7c70cc0c3ceb9071e3332f6d25c7d9b4c23d7b25b69340abb", 0xf1}, {&(0x7f0000002600)="a39e740e8a7c9f0b93dde138c5ea3872e68c81d1937a992a80cf6cbfd53cde745e3c9d615497f210b5e10cd428efa466c3d4aa1195c18f51b4789794f1f787f55985ad4aa8534f733141dfee3714cb888be3185ab79e326649f9a593adb73a29b04ecd03f000926a871c6dcedeabbbe4c033750cf0994c54e2296d1d4178f89f508da844be00c1e7975fbbc0cd3cc6bfe952", 0x92}], 0x3, &(0x7f0000002700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x50}, 0x20000000) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r1)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x20, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x881}, 0x800) (async, rerun: 64)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f00000029c0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x38, r8, 0x8, 0x70bd25, 0x6, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xe9}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000002a00)={0x1}, 0x4) (async)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000003880)={&(0x7f0000002a40), 0xc, &(0x7f0000003840)={&(0x7f0000002a80)={0xdc0, r8, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x64}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0xda0, 0x111, 0x0, 0x1, {0xd9c, 0x5, 0x0, 0x1, [{0x558, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2f8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x42}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7e}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x146}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x252}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc77}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x381}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x614, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1aa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x42}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x248, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xcf}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x2b4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb6}]}, @NL80211_PMSR_TYPE_FTM={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x215}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}]}, {0x1d8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x194, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x168, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xaa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}]}, 0xdc0}, 0x1, 0x0, 0x0, 0x40000}, 0x110) (async)
ioctl$DVB_DEMUX_DMX_EXPBUF(r4, 0xc00c6f3e, &(0x7f00000038c0)={0x4, 0x0, <r10=>r0})
sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f00000039c0)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x28, r8, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x5}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000001) (async)
fstatfs(r9, &(0x7f0000003a00)=""/4096) (async)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, r2, 0x3f8f6000) (async, rerun: 32)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$NL80211_CMD_ABORT_SCAN(r11, &(0x7f0000004b00)={&(0x7f0000004a00)={0x10, 0x0, 0x0, 0x80200008}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004a80)={0x1c, r8, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000)

1m11.430447218s ago: executing program 3 (id=102):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x84, 0x4a00)
r1 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0xc, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})
ioctl$LOOP_CHANGE_FD(r1, 0x4c07, r0)

1m11.319524505s ago: executing program 3 (id=103):
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0604250c"], 0x9)
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)

1m11.237311244s ago: executing program 3 (id=104):
mount$tmpfs(0x0, 0x0, 0x0, 0x880409, &(0x7f00000000c0)=ANY=[@ANYRESHEX])
syz_emit_vhci(0x0, 0x7)

1m11.090872213s ago: executing program 3 (id=105):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x1) (async)
r2 = fsmount(r1, 0x0, 0x1)
fchdir(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) (async)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r5, 0x107, 0x14, 0x0, &(0x7f0000000400))
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r7) (async)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r7)
sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r8, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x410)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async)
r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, 0x0) (async)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) (async)
r10 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0)
r13 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r14=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r14, 0x1, 0x9}, 0xc) (async)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r14, 0x1, 0x9}, 0xc)
cachestat(r12, &(0x7f0000000000)={0xa78, 0xcf2c}, &(0x7f0000000040), 0x0)
ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000800)={r11, 0x0, {0x2a00, 0x80010000, 0x0, 0x10000000000002, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d8a000100", "2809e8030000008948224ad54afac171ec0000bdb22d0000b420a1a93c5240f45f819e01177d3d078dd4992861ac00", "f4fec4000000020000d800000000020000000000004e00", [0x0, 0x2000000000001]}})
ioctl$LOOP_GET_STATUS(r10, 0x4c03, &(0x7f0000000640))
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, 0x0)
r15 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01090050000f804c00248045002c802cd00b29a0cf37847597780a5a323c11703c85210bfb54a5f579eeab7aa5c2a99f7fde2a0900000000000000220ffd5cd1d1a8c126e6aae344fb97b080dcfd0e96"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)

1m10.641262819s ago: executing program 3 (id=111):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x84, 0x4a00)
r1 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0xc, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})
ioctl$LOOP_CHANGE_FD(r1, 0x4c07, r0)

55.515988135s ago: executing program 32 (id=111):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x84, 0x4a00)
r1 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={0xffffffffffffffff, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0xc, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})
ioctl$LOOP_CHANGE_FD(r1, 0x4c07, r0)

4.598925191s ago: executing program 1 (id=379):
socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, 0x0, 0x88)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7ffe, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x30})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
sendfile(r5, r5, 0x0, 0x10000000009)
timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000080))

4.001582342s ago: executing program 4 (id=381):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f00000001c0))
ioctl$KVM_RUN(r2, 0xae80, 0x40000)

3.422196804s ago: executing program 4 (id=384):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0xae03, 0x16)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0)
fremovexattr(r3, &(0x7f0000000280)=@known='system.posix_acl_access\x00')
getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000240)=0x4)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={<r4=>0x0, 0x6, 0x10}, &(0x7f0000000180)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={r4}, &(0x7f0000000200)=0x8)

2.994230141s ago: executing program 4 (id=386):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}, 0xe6c}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f0000001e40)=""/232, 0xe8}, {&(0x7f0000001700)=""/161, 0xa1}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000001840)=""/165, 0xa5}, {&(0x7f0000001b00)=""/227, 0xe3}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f0000001d40)=""/249, 0xf9}, {&(0x7f0000001680)=""/107, 0x6b}, {&(0x7f0000001a80)=""/85, 0x55}, {&(0x7f00000000c0)=""/82, 0x52}], 0x9}, 0x7f}], 0x4, 0x40012032, 0x0)

2.610845349s ago: executing program 4 (id=387):
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00', {0xfd, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x8, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff0, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x7, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x5, 0x9, 0x11, 0x1000000b, 0x10, 0x80000000, 0x9, 0xb50, 0x4, 0x800, 0x3, 0x2, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x80, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x4b1a3e4b, 0xfffffff9, 0x4, 0x3, 0x8e, 0xd0f, 0x2e, 0x9, 0x6, 0x2, 0x0, 0x3, 0x6, 0x7, 0x9, 0x0, 0x2, 0x7, 0x40, 0x7ff, 0x7ff, 0x7, 0x7, 0xc00, 0x89, 0x800, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d28, 0x10000, 0x8, 0x80, 0x6, 0x0, 0x4, 0x4c, 0x8000, 0x8, 0x5, 0xe66, 0x9, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x8, 0x1, 0x8d1, 0x3, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x3, 0x9], [0x2, 0x7, 0x6, 0x9, 0x8000, 0x1, 0xa, 0x7, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8001, 0x7, 0x3, 0x3, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1a, 0x2, 0x800, 0x8, 0x9, 0x4, 0x243f, 0xfffffff7, 0x4, 0xe, 0x6, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x4, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x7, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x5, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0xfffffffd, 0xe, 0x2, 0x10000004, 0x5, 0x7, 0x0, 0x1, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xfffffff7, 0x6, 0x4, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xd, 0x40, 0x9, 0x0, 0x9, 0x1, 0x3, 0x7, 0x6, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) (async)
move_pages(0x0, 0x3, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000000200), 0x2) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x240, 0x0) (async)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) (async)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x1, 0x10000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
pwritev(r1, 0x0, 0x0, 0x739, 0x1) (async)
preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1, 0x6, 0x1) (async, rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f0000001bc0))
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022220000009601000601008e000000002ac2048538b3"], 0x0}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0}, 0x0)

2.586452955s ago: executing program 2 (id=388):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x40, 0xfffff038}, {0x30, 0x0, 0x0, 0xffffb024}, {0x6, 0x0, 0x4}]}, 0x10)
sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)={0x30, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x20044010)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe9)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x7, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f00000004c0)={0x0, 0x1, 0x7f})
ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x6, 0x202, &(0x7f0000000880)="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"})

2.28049778s ago: executing program 2 (id=389):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x8, 0x7f0dbe3ac64a03d0}, 0x9c)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)

2.083432859s ago: executing program 1 (id=390):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa1, 0xfcffffff, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b68c1772f1c9b9320d88426bc8f139429054c85b62f2a1dfc705453bea4cabf1f5eee5a0d301fb7c62e"})

1.740259589s ago: executing program 4 (id=391):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000844}, 0x24000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES16=r2, @ANYRES64], 0xa8}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000090)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80)
sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48)
connect$netrom(r5, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r10 = dup(r9)
mmap(&(0x7f0000097000/0x1000)=nil, 0x1000, 0x4, 0x28011, r10, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r11=>0x0})
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000540), &(0x7f0000000580)=0x4)
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000100", @ANYRES32=r7, @ANYRESHEX=r2, @ANYRES32=r11, @ANYBLOB="0800050009000000", @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x24004040}, 0x0)
sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0xda, r8, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x52, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x0, 0x7, 0x9, 0x7}}, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x40, 0xd, 0x40}}, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}]}, 0x88}}, 0x20000014)

1.569441627s ago: executing program 0 (id=392):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x1e, 0x4, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x80, 0x0}, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x9)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x0)

1.392152089s ago: executing program 2 (id=393):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xe4100, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000520001000000000000000000020000001eaa508bae055b8e487c0925d819eb88d957c300009fa2093d9109dc0471c236d7d8d065898b9a81611fcd625e9fe777bedc0a00003ad8aa34a65dce3bbd6eea83db517e7c7356b86f1c730eaf03d358e40c52f12afe8d"], 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b"], 0xfc)
fchdir(r0)

1.338274357s ago: executing program 0 (id=394):
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x2000)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
r1 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_current(r1, &(0x7f0000000440)=@hat={'changehat '}, 0x1d)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, <r2=>0xffffffffffffffff})
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="66b9370200000f32f30fc2d9513e64f36d0f381d79e60fc72c66b93008000066b80010000066ba000000000f3066670f00900f00000066b80500000066b9050000000f01c166b9800000c00f326635001000000f300fc7af2800", 0x5a}], 0x1, 0x44, &(0x7f0000000200)=[@cstype3, @cr4={0x1, 0x104400}], 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x976ac43becae565f, 0x5, {}, {0x1, 0x8, 0x8, 0x4, 0x29, 0x6, "0adb3ff8"}, 0x1000003, 0x1, {}, 0x0, 0x0, r2})

1.26592774s ago: executing program 2 (id=395):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=prefe\x00:0,\x00'])
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=prefe\x00:0,\x00']) (async)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) (async)

1.146158025s ago: executing program 1 (id=396):
r0 = getpid()
socket$nl_generic(0x10, 0x3, 0x10)
waitid(0x1, r0, 0x0, 0x2000000c, 0x0)

1.003003028s ago: executing program 0 (id=397):
setresuid(0x0, 0xee00, 0x0)
r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x13)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x84, 0x4a00)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1f, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108000000005397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000100000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4]}})

1.002524043s ago: executing program 2 (id=398):
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) (async)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010100}, 0xb}}, 0x26) (async, rerun: 32)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0) (async)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r3, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) (async)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d8000000100081", 0x7}], 0x1}, 0x20000880) (async, rerun: 32)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) (async, rerun: 32)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x4008af04, 0x0) (async)
openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x244001, 0x0) (async, rerun: 64)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) (rerun: 64)
syz_usb_control_io$cdc_ecm(r4, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) (async)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r5, 0x29, 0x4e, 0x0, 0x47) (async, rerun: 64)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (rerun: 64)

942.513687ms ago: executing program 1 (id=399):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x2000000000000000)

755.489451ms ago: executing program 0 (id=400):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10003, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x340209c, 0x10, 0x6, 0xfffffffd, 0x2, 0x0, 0x0, 0xf, 0x1}}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'})
ioctl$TIOCGPTPEER(r2, 0x4004092b, 0x200000000005)

538.884388ms ago: executing program 2 (id=401):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504", @ANYRESDEC], 0x0)
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x5)
fchdir(r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r1)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x48, r7, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000004)
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, 0x0)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x39, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x2000001, 0x7, 0x4, 0x5, 0x80004, 0x8], 0xd000, 0x304})
r9 = accept4$rose(r4, &(0x7f00000004c0)=@short={0xb, @remote, @remote, 0x1, @rose}, &(0x7f0000000500)=0x1c, 0x80800)
ioctl$FS_IOC_SETVERSION(r9, 0x40087602, &(0x7f0000000540)=0x8)
fcntl$dupfd(r1, 0x406, r9)

530.291673ms ago: executing program 1 (id=402):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, &(0x7f0000000140)=0x98)
r1 = socket(0x10, 0x803, 0x0)
write(r1, &(0x7f00000003c0)="2600000022e80100000000000000000078cc6f920a97c99f494e07000000f84fcfb550af0bf9", 0x26)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="f80000002100010000000000fefffffffc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b66b6e000000000050001100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aaff0000000200000002000a00240009000d00000000000000040000000000000008000000000000000500000000000000200017000100000027bd70002dbd70002dbd700028bd700003000000ff0100000c001c"], 0xf8}}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc)=0x61, 0x4)
sendto(r1, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', r4, 0x10, 0x8, 0x22a, 0x5, {{0x2b, 0x4, 0x2, 0x2, 0xac, 0x67, 0x0, 0x4, 0x29, 0x0, @remote, @multicast1, {[@noop, @ra={0x94, 0x4}, @generic={0x86, 0x5, "0e04b6"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x54, 0x75, 0x3, 0x3, [{@multicast2, 0x8}, {@multicast2, 0x7}, {@broadcast, 0x100}, {@remote, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x76}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x400}, {@broadcast, 0x7}]}, @noop, @lsrr={0x83, 0x1b, 0x5c, [@local, @multicast1, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback, @empty, @local]}, @timestamp={0x44, 0x14, 0x8c, 0x0, 0x7, [0x6, 0xa39, 0x1, 0x30000000]}]}}}}})
recvmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x10120, 0x0)

417.36667ms ago: executing program 0 (id=403):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xe4100, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000520001000000000000000000020000001eaa508bae055b8e487c0925d819eb88d957c300009fa2093d9109dc0471c236d7d8d065898b9a81611fcd625e9fe777bedc0a00003ad8aa34a65dce3bbd6eea83db517e7c7356b86f1c730eaf03d358e40c52f12afe8d"], 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b"], 0xfc)
fchdir(r0)

279.090568ms ago: executing program 1 (id=404):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa1, 0xfcffffff, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b68c1772f1c9b9320d88426bc8f139429054c85b62f2a1dfc705453bea4cabf1f5eee5a0d301fb7c62e"})

168.25676ms ago: executing program 0 (id=405):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
migrate_pages(0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x140)
open$dir(&(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x8000, 0x160)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/devices.allow\x00', 0xac400, 0x68)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000400), 0x8)
r3 = epoll_create1(0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x2, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
mount$afs(&(0x7f0000000440)=ANY=[@ANYBLOB="2373791e053a68c80bff88b7ac56646f6e6c7900"], &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0xc01, &(0x7f0000000540)={[{}, {@flock_strict}, {@flock_strict}, {@dyn}], [{@pcr={'pcr', 0x3d, 0x18}}, {@dont_appraise}, {@euid_eq}, {@subj_user={'subj_user', 0x3d, '/dev/video2\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/video2\x00'}}, {@pcr={'pcr', 0x3d, 0x34}}, {@hash}, {@dont_measure}]})
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', 0x0})
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x401, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xe000202b})
r6 = openat$vimc2(0xffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000007840)={0x5})
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4)
openat(r1, &(0x7f00000001c0)='./file0\x00', 0x250942, 0x43)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3)

0s ago: executing program 4 (id=406):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x34, r3, 0x303, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r1, @ANYBLOB="020029bd7000fcdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d7526af6912ed7417e1819fb06c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69737ecb6f2c84a018168ad89225f3290f7c8eb50e4f1451b5f8d252ef4b5032ae339fc4890eb8d6dfc2b04f0c5356c1109dcc5e1aef89d26823f7715d07bd81f18a4d6ef6250517f6e5d48652ccc4b2c7b6af978e66616b4b3eee1ec9d629e3c29e7ad4ad8d601e37360ab2baf4"], 0x13c}}, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f00000009c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x210, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x1b8, 0x2a, [@perr={0x84, 0xa2, {0x6, 0xa, [{{0x0, 0x1}, @broadcast, 0xffffff7f, @value=@device_b, 0x34}, {{}, @broadcast, 0x400, @void, 0x1f}, {{}, @device_a, 0x9}, {{}, @broadcast, 0xc8, @void, 0x38}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x24}, {{}, @device_b, 0x2, @void, 0x6}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x23}, {{0x0, 0x1}, @device_a, 0x10000, @value=@device_b, 0x7}, {{0x0, 0x1}, @broadcast, 0x706, @value=@broadcast, 0x3}, {{}, @device_a, 0x101, @void, 0x22}]}}, @random={0x2, 0xd7, "ad63fedae9b452a8a2781e9c5913fa99dd9cf3b25a53248e725c6f0ca8139f38dc7aa6b7dad8366d285e2746d20f5b0d24468f9c6ea0172285ad736eaf65571a79edff838c0fd57ea615c7117650fef8edfd990609ccf16f81d1314153e777ca3780e327078278cf6d0e008915e54b992b7f9b64c9197e13c8630534c92552c2f903e4d7ae1d04a57754bf556b262779f042260398217e62a53120329542b7da43c68167e04e3aeb5976dd8c11c4901380ccc905ca5fb1d494a4deeb5472448c3e45b20105d944b8c843e288998fb695f3791bd2e7230c"}, @dsss={0x3, 0x1, 0x80}, @mic={0x8c, 0x10, {0xdc1, "2a0e2d3ddb10", @short="660bebaf480d37a7"}}, @mic={0x8c, 0x18, {0x4fc, "f85578bbdb91", @long="33689cb697b60ca2bdb50ae4dc6be1c6"}}, @cf={0x4, 0x6, {0x0, 0x40, 0xfff8, 0x8}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_IE={0x27, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xe, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x240008cc}, 0x10)
r7 = fanotify_init(0x81, 0x40000)
fanotify_mark(r7, 0x105, 0x40001032, r5, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
read$FUSE(r7, &(0x7f0000002300)={0x2020}, 0x2020)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r10=>0x0})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
splice(r11, &(0x7f0000000100)=0x7c, r11, &(0x7f0000000140)=0x20000000000000, 0x8, 0x2)
ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r9)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000e552b33200dc5c8ffce986fca7fc5266888919f7e5b64aca28d605efb5cdfc99dfc1c4edf42bb4d8c64e29b654de5d111d882763189d96ca55831065d1d905513596a34d4e88fabdad98188ce8c69cc26e43197a022affcae674878b5f76fbc0443c84b21af3ef505cfc4e72680b96b330410cd15c86d2b089f09350be04", @ANYRES16=r4, @ANYBLOB="010007bd7000fddbdf2555000000080001006400000008000300", @ANYRES32=r10, @ANYBLOB="0c0099000b0000003f000040", @ANYRESOCT=r12], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x4044010)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts.
[   87.165330][   T10] cfg80211: failed to load regulatory.db
[   88.448912][ T5815] cgroup: Unknown subsys name 'net'
[   88.689937][ T5815] cgroup: Unknown subsys name 'cpuset'
[   88.745642][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   90.740513][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   93.393761][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   93.402669][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   93.427774][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   93.428721][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   93.432131][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   93.432895][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   93.441368][   T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   93.455051][   T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   93.459019][   T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   93.460339][   T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   93.461661][   T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   93.489442][   T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   93.497187][   T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   93.509084][   T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   93.513314][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   93.516642][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   93.517501][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   93.517650][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   93.555628][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   93.573363][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.521025][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   94.611321][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   94.663850][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   94.674571][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   94.904144][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.904340][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.908067][ T5831] bridge_slave_0: entered allmulticast mode
[   94.913086][ T5831] bridge_slave_0: entered promiscuous mode
[   94.963500][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.963690][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.963976][ T5831] bridge_slave_1: entered allmulticast mode
[   94.969658][ T5831] bridge_slave_1: entered promiscuous mode
[   95.043286][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.043476][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.043634][ T5829] bridge_slave_0: entered allmulticast mode
[   95.047273][ T5829] bridge_slave_0: entered promiscuous mode
[   95.116564][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.117011][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.117253][ T5829] bridge_slave_1: entered allmulticast mode
[   95.119325][ T5829] bridge_slave_1: entered promiscuous mode
[   95.121042][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.121234][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.121422][ T5830] bridge_slave_0: entered allmulticast mode
[   95.123437][ T5830] bridge_slave_0: entered promiscuous mode
[   95.181584][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.181913][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.182218][ T5827] bridge_slave_0: entered allmulticast mode
[   95.184368][ T5827] bridge_slave_0: entered promiscuous mode
[   95.203610][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.228721][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.229041][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.229242][ T5830] bridge_slave_1: entered allmulticast mode
[   95.231450][ T5830] bridge_slave_1: entered promiscuous mode
[   95.232662][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.232850][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.233014][ T5827] bridge_slave_1: entered allmulticast mode
[   95.239710][ T5827] bridge_slave_1: entered promiscuous mode
[   95.251691][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.342231][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.400276][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.405991][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.413574][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.546311][ T5842] Bluetooth: hci1: command tx timeout
[   95.548145][ T5837] Bluetooth: hci3: command tx timeout
[   95.551335][ T5831] team0: Port device team_slave_0 added
[   95.578957][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.582495][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.586990][ T5831] team0: Port device team_slave_1 added
[   95.627014][ T5837] Bluetooth: hci2: command tx timeout
[   95.627052][ T5842] Bluetooth: hci0: command tx timeout
[   95.663819][ T5829] team0: Port device team_slave_0 added
[   95.742050][ T5829] team0: Port device team_slave_1 added
[   95.751103][ T5830] team0: Port device team_slave_0 added
[   95.755512][ T5827] team0: Port device team_slave_0 added
[   95.757937][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.757954][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.757978][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.803402][ T5830] team0: Port device team_slave_1 added
[   95.808933][ T5827] team0: Port device team_slave_1 added
[   95.811164][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.811177][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.811200][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.892272][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.892285][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.892299][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.946043][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.946055][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.946070][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.948280][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.948291][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.948306][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.950287][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.950296][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.950310][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.976360][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.976376][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.976400][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.979054][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.979066][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.979088][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.089610][ T5831] hsr_slave_0: entered promiscuous mode
[   96.092052][ T5831] hsr_slave_1: entered promiscuous mode
[   96.213071][ T5829] hsr_slave_0: entered promiscuous mode
[   96.214407][ T5829] hsr_slave_1: entered promiscuous mode
[   96.219355][ T5829] debugfs: 'hsr0' already exists in 'hsr'
[   96.219429][ T5829] Cannot create hsr debugfs directory
[   96.288878][ T5830] hsr_slave_0: entered promiscuous mode
[   96.290271][ T5830] hsr_slave_1: entered promiscuous mode
[   96.291363][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   96.291388][ T5830] Cannot create hsr debugfs directory
[   96.302562][ T5827] hsr_slave_0: entered promiscuous mode
[   96.304720][ T5827] hsr_slave_1: entered promiscuous mode
[   96.307013][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   96.307038][ T5827] Cannot create hsr debugfs directory
[   97.373410][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   97.439138][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   97.455463][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   97.493820][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   97.523604][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   97.551789][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   97.559744][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   97.591811][ T5831] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   97.624996][ T5842] Bluetooth: hci1: command tx timeout
[   97.625353][ T5837] Bluetooth: hci3: command tx timeout
[   97.704991][ T5842] Bluetooth: hci0: command tx timeout
[   97.705027][ T5842] Bluetooth: hci2: command tx timeout
[   97.710203][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   97.755019][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   97.767966][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   97.813282][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   97.821437][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   97.859046][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   97.887090][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   97.920993][ T5830] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   98.120083][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   98.158829][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   98.185330][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   98.219309][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   98.236722][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   98.272580][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   98.301876][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   98.341454][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   98.529174][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   98.567919][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   98.578303][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   98.611492][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   98.626654][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   98.671763][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   98.686626][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   98.729965][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   98.796117][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.918689][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   98.970270][ T2199] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.971503][ T2199] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.992725][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.057030][ T2199] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.058859][ T2199] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.149781][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   99.194143][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.207925][ T3079] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.208524][ T3079] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.272001][ T3079] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.272134][ T3079] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.357146][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   99.401333][ T2199] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.401476][ T2199] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.431555][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.514027][ T2199] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.514215][ T2199] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.661057][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   99.709090][ T5842] Bluetooth: hci3: command tx timeout
[   99.709130][ T5842] Bluetooth: hci1: command tx timeout
[   99.751160][ T2199] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.751314][ T2199] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.787095][ T5837] Bluetooth: hci2: command tx timeout
[   99.787133][ T5837] Bluetooth: hci0: command tx timeout
[   99.839849][  T827] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.840109][  T827] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.030200][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.383563][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.533861][ T5831] veth0_vlan: entered promiscuous mode
[  100.605287][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.633137][ T5831] veth1_vlan: entered promiscuous mode
[  100.760272][ T5830] veth0_vlan: entered promiscuous mode
[  100.783372][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.836709][ T5830] veth1_vlan: entered promiscuous mode
[  100.857645][ T5831] veth0_macvtap: entered promiscuous mode
[  100.888624][ T5829] veth0_vlan: entered promiscuous mode
[  100.898319][ T5831] veth1_macvtap: entered promiscuous mode
[  100.958440][ T5829] veth1_vlan: entered promiscuous mode
[  101.000453][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.053518][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.079521][ T5830] veth0_macvtap: entered promiscuous mode
[  101.113901][ T5827] veth0_vlan: entered promiscuous mode
[  101.118668][ T5830] veth1_macvtap: entered promiscuous mode
[  101.133050][  T827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.158668][  T827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.181017][  T827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.200799][  T827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.315541][ T5827] veth1_vlan: entered promiscuous mode
[  101.331165][ T5829] veth0_macvtap: entered promiscuous mode
[  101.400455][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.470647][ T5829] veth1_macvtap: entered promiscuous mode
[  101.568367][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.680869][ T2199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.684223][ T2199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.711376][ T2199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.742751][ T2199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.785030][ T5842] Bluetooth: hci1: command tx timeout
[  101.785064][ T5842] Bluetooth: hci3: command tx timeout
[  101.860688][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.865612][ T5842] Bluetooth: hci2: command tx timeout
[  101.865660][ T5837] Bluetooth: hci0: command tx timeout
[  101.961907][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.016627][ T1470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.016649][ T1470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.068640][ T5827] veth0_macvtap: entered promiscuous mode
[  102.235048][ T5827] veth1_macvtap: entered promiscuous mode
[  102.288636][ T1470] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.320191][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.331857][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.363314][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.391316][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.391338][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.530908][ T3079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.530932][ T3079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.639100][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.882041][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.927681][  T827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.927700][  T827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.970460][  T827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.061280][  T827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.069442][  T827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.117476][ T1470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.117498][ T1470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.119171][  T827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.374366][ T5920] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  103.613303][ T3079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.613325][ T3079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.238946][ T3079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.238967][ T3079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.627739][  T182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.627762][  T182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.519123][ T5952] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1'.
[  107.418222][   T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  107.786045][   T32] usb 1-1: Using ep0 maxpacket: 32
[  107.798444][ T5902] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  107.856262][   T32] usb 1-1: config 10 has an invalid interface number: 251 but max is 0
[  107.856282][   T32] usb 1-1: config 10 has no interface number 0
[  107.856303][   T32] usb 1-1: config 10 interface 251 has no altsetting 0
[  107.858898][   T32] usb 1-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= 5.ff
[  107.858923][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.858940][   T32] usb 1-1: Product: syz
[  107.858952][   T32] usb 1-1: Manufacturer: syz
[  107.858964][   T32] usb 1-1: SerialNumber: syz
[  108.114504][ T5902] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  108.114533][ T5902] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  108.114556][ T5902] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  108.138474][ T5902] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  108.138503][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.138522][ T5902] usb 2-1: Product: syz
[  108.138534][ T5902] usb 2-1: Manufacturer: syz
[  108.138548][ T5902] usb 2-1: SerialNumber: syz
[  108.808758][ T5902] hub 2-1:1.0: bad descriptor, ignoring hub
[  108.808799][ T5902] hub 2-1:1.0: probe with driver hub failed with error -5
[  108.838213][ T5973] overlayfs: invalid origin (0000)
[  108.883859][   T32] gspca_main: sunplus-2.14.0 probing 052b:1803
[  108.948850][   T32] gspca_sunplus: reg_r err -71
[  108.948953][   T32] sunplus 1-1:10.251: probe with driver sunplus failed with error -71
[  109.297716][   T32] usb 1-1: USB disconnect, device number 2
[  109.347593][ T5902] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  109.631390][ T5902] usb 2-1: USB disconnect, device number 2
[  110.221796][ T5902] usblp0: removed
[  110.406591][ T5997] netlink: zone id is out of range
[  110.406611][ T5997] netlink: zone id is out of range
[  110.406621][ T5997] netlink: zone id is out of range
[  110.406659][ T5997] netlink: zone id is out of range
[  110.406672][ T5997] netlink: zone id is out of range
[  110.406692][ T5997] netlink: zone id is out of range
[  110.406715][ T5997] netlink: zone id is out of range
[  110.406749][ T5997] netlink: zone id is out of range
[  110.406772][ T5997] netlink: zone id is out of range
[  110.406815][ T5997] netlink: zone id is out of range
[  110.787058][ T6001] FAULT_INJECTION: forcing a failure.
[  110.787058][ T6001] name failslab, interval 1, probability 0, space 0, times 1
[  110.787098][ T6001] CPU: 0 UID: 0 PID: 6001 Comm: syz.1.23 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  110.787127][ T6001] Tainted: [L]=SOFTLOCKUP
[  110.787134][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  110.787146][ T6001] Call Trace:
[  110.787154][ T6001]  <TASK>
[  110.787163][ T6001]  dump_stack_lvl+0xe8/0x150
[  110.787193][ T6001]  should_fail_ex+0x46b/0x600
[  110.787228][ T6001]  should_failslab+0xa8/0x100
[  110.787267][ T6001]  __kmalloc_node_noprof+0xe7/0x7f0
[  110.787299][ T6001]  ? alloc_slab_obj_exts+0xbf/0x250
[  110.787332][ T6001]  alloc_slab_obj_exts+0xbf/0x250
[  110.787362][ T6001]  __memcg_slab_post_alloc_hook+0x5e5/0xed0
[  110.787413][ T6001]  kmem_cache_alloc_noprof+0x3f4/0x680
[  110.787443][ T6001]  ? alloc_empty_file+0x5b/0x1d0
[  110.787472][ T6001]  alloc_empty_file+0x5b/0x1d0
[  110.787496][ T6001]  path_openat+0x11b/0x38a0
[  110.787535][ T6001]  ? try_to_take_rt_mutex+0x840/0xb00
[  110.787554][ T6001]  ? arch_stack_walk+0xfb/0x150
[  110.787592][ T6001]  ? __lock_acquire+0x6b5/0x2cf0
[  110.787626][ T6001]  ? __pfx_path_openat+0x10/0x10
[  110.787659][ T6001]  ? kasan_save_track+0x4f/0x80
[  110.787685][ T6001]  ? kasan_save_track+0x3e/0x80
[  110.787710][ T6001]  ? __kasan_slab_alloc+0x6c/0x80
[  110.787736][ T6001]  ? kmem_cache_alloc_noprof+0x33b/0x680
[  110.787771][ T6001]  ? do_raw_spin_lock+0x12b/0x2f0
[  110.787803][ T6001]  do_file_open+0x23e/0x4a0
[  110.787845][ T6001]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  110.787875][ T6001]  ? __pfx_do_file_open+0x10/0x10
[  110.787899][ T6001]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  110.787944][ T6001]  ? alloc_fd+0x64e/0x6c0
[  110.787980][ T6001]  do_sys_openat2+0x113/0x200
[  110.788009][ T6001]  ? __pfx_do_sys_openat2+0x10/0x10
[  110.788035][ T6001]  ? ksys_write+0x248/0x270
[  110.788076][ T6001]  ? __pfx_ksys_write+0x10/0x10
[  110.788109][ T6001]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.788132][ T6001]  __x64_sys_creat+0x8f/0xc0
[  110.788161][ T6001]  do_syscall_64+0x15f/0xf80
[  110.788185][ T6001]  ? trace_irq_disable+0x3b/0x140
[  110.788210][ T6001]  ? clear_bhb_loop+0x40/0x90
[  110.788236][ T6001]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.788257][ T6001] RIP: 0033:0x7f571865c819
[  110.788278][ T6001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.788294][ T6001] RSP: 002b:00007f571688d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  110.788317][ T6001] RAX: ffffffffffffffda RBX: 00007f57188d6090 RCX: 00007f571865c819
[  110.788333][ T6001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[  110.788346][ T6001] RBP: 00007f571688d090 R08: 0000000000000000 R09: 0000000000000000
[  110.788359][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.788372][ T6001] R13: 00007f57188d6128 R14: 00007f57188d6090 R15: 00007ffee7b87a28
[  110.788406][ T6001]  </TASK>
[  111.463537][   T38] audit: type=1800 audit(1776930512.833:2): pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.26" name="file1" dev="tmpfs" ino=50 res=0 errno=0
[  111.494081][ T6017] 9pnet_fd: Insufficient options for proto=fd
[  111.961706][ T6024] netlink: 128 bytes leftover after parsing attributes in process `syz.0.30'.
[  112.146004][ T5902] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  112.383473][ T5902] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  112.383509][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.383529][ T5902] usb 4-1: Product: syz
[  112.383544][ T5902] usb 4-1: Manufacturer: syz
[  112.383558][ T5902] usb 4-1: SerialNumber: syz
[  112.675514][ T6032] syz.1.34 (6032) used greatest stack depth: 16504 bytes left
[  112.959102][ T6038] netlink: 'syz.1.36': attribute type 2 has an invalid length.
[  113.125118][ T5902] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  113.158097][ T5902] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  113.205718][ T5902] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  113.247574][ T5895] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  113.324919][ T5902] usb 4-1: USB disconnect, device number 2
[  113.414934][ T5895] usb 2-1: Using ep0 maxpacket: 32
[  113.418953][ T5895] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  113.418988][ T5895] usb 2-1: config 0 interface 0 has no altsetting 0
[  113.419024][ T5895] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00
[  113.419048][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.437799][ T5895] usb 2-1: config 0 descriptor??
[  113.655191][   T37] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  113.684480][ T5895] usbhid 2-1:0.0: can't add hid device: -71
[  113.684606][ T5895] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  113.720905][ T5895] usb 2-1: USB disconnect, device number 3
[  113.827081][   T37] usb 1-1: Using ep0 maxpacket: 32
[  113.839538][   T37] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  113.839570][   T37] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[  113.839591][   T37] usb 1-1: config 0 interface 0 has no altsetting 0
[  113.839626][   T37] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  113.839646][   T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.877360][   T37] usb 1-1: config 0 descriptor??
[  114.065002][   T32] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  114.274078][   T32] usb 3-1: Using ep0 maxpacket: 16
[  114.277617][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.277646][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.277738][   T32] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  114.277759][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.337497][   T32] usb 3-1: config 0 descriptor??
[  114.389491][ T5895] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  114.580577][ T6046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.581209][ T6046] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.617299][ T5895] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  114.617393][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.617415][ T5895] usb 2-1: Product: syz
[  114.617430][ T5895] usb 2-1: Manufacturer: syz
[  114.617445][ T5895] usb 2-1: SerialNumber: syz
[  114.829954][ T5895] usb 2-1: config 0 descriptor??
[  115.053270][   T32] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0
[  115.053317][   T32] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x4
[  115.053344][   T32] hid-multitouch 0003:1FD2:6007.0002: item fetching failed at offset 4/5
[  115.069292][ T5895] usb 2-1: f81604_read: reg: 105 failed: -EPROTO
[  115.069320][ T5895] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO
[  115.069358][ T5895] f81604 2-1:0.0: probe with driver f81604 failed with error -71
[  115.082280][   T32] hid-multitouch 0003:1FD2:6007.0002: probe with driver hid-multitouch failed with error -22
[  115.171668][ T5895] usb 2-1: USB disconnect, device number 4
[  115.293720][ T6061] netlink: 128 bytes leftover after parsing attributes in process `syz.3.43'.
[  115.330979][   T32] usb 3-1: USB disconnect, device number 2
[  115.385751][   T37] corsair-psu 0003:1B1C:1C09.0001: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0
[  115.567176][   T37] corsair-psu 0003:1B1C:1C09.0001: unable to initialize device (-90)
[  115.853546][   T37] corsair-psu 0003:1B1C:1C09.0001: probe with driver corsair-psu failed with error -90
[  115.959126][   T37] usb 1-1: USB disconnect, device number 3
[  116.567016][ T6084] net_ratelimit: 258 callbacks suppressed
[  116.567036][ T6084] netlink: zone id is out of range
[  116.567047][ T6084] netlink: zone id is out of range
[  116.567056][ T6084] netlink: zone id is out of range
[  116.567090][ T6084] netlink: zone id is out of range
[  116.567100][ T6084] netlink: zone id is out of range
[  116.567118][ T6084] netlink: zone id is out of range
[  116.567139][ T6084] netlink: zone id is out of range
[  116.567170][ T6084] netlink: zone id is out of range
[  116.567191][ T6084] netlink: zone id is out of range
[  116.567230][ T6084] netlink: zone id is out of range
[  116.618445][ T5895] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  116.789393][ T5895] usb 1-1: config 7 has an invalid descriptor of length 198, skipping remainder of the config
[  116.789425][ T5895] usb 1-1: config 7 has 0 interfaces, different from the descriptor's value: 1
[  116.842937][ T5895] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=75.8f
[  116.842971][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.842990][ T5895] usb 1-1: Product: syz
[  116.843005][ T5895] usb 1-1: Manufacturer: syz
[  116.843019][ T5895] usb 1-1: SerialNumber: syz
[  116.991597][ T6092] mmap: syz.3.55 (6092) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  117.263045][ T5895] usb 1-1: USB disconnect, device number 4
[  117.373477][ T6099] netlink: 128 bytes leftover after parsing attributes in process `syz.1.53'.
[  118.425015][ T5838] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  118.556481][ T5838] usb 4-1: device descriptor read/64, error -71
[  118.865601][ T5838] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  118.997713][ T5838] usb 4-1: device descriptor read/64, error -71
[  119.107914][ T5838] usb usb4-port1: attempt power cycle
[  119.277474][ T5837] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  119.417212][ T6150] syz.0.64 uses obsolete (PF_INET,SOCK_PACKET)
[  119.417506][ T6150] Zero length message leads to an empty skb
[  119.494936][ T5838] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  119.518906][ T5838] usb 4-1: device descriptor read/8, error -71
[  119.565731][   T32] IPVS: starting estimator thread 0...
[  119.691666][ T6154] IPVS: using max 8 ests per chain, 19200 per kthread
[  119.759032][ T5838] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  119.778120][ T5838] usb 4-1: device descriptor read/8, error -71
[  119.891765][ T5838] usb usb4-port1: unable to enumerate USB device
[  120.585172][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  120.745237][    T9] usb 2-1: Using ep0 maxpacket: 16
[  120.746326][    T9] usb 2-1: no configurations
[  120.746346][    T9] usb 2-1: can't read configurations, error -22
[  120.874853][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  121.055452][    T9] usb 2-1: Using ep0 maxpacket: 16
[  121.057152][    T9] usb 2-1: no configurations
[  121.057170][    T9] usb 2-1: can't read configurations, error -22
[  121.128857][    T9] usb usb2-port1: attempt power cycle
[  121.509085][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  121.528926][    T9] usb 2-1: Using ep0 maxpacket: 16
[  121.529989][    T9] usb 2-1: no configurations
[  121.530007][    T9] usb 2-1: can't read configurations, error -22
[  121.628123][ T5895] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  121.654965][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  121.679452][    T9] usb 2-1: Using ep0 maxpacket: 16
[  121.680356][    T9] usb 2-1: no configurations
[  121.680373][    T9] usb 2-1: can't read configurations, error -22
[  121.680872][    T9] usb usb2-port1: unable to enumerate USB device
[  121.931353][ T5895] usb 3-1: unable to get BOS descriptor or descriptor too short
[  121.931985][ T5895] usb 3-1: not running at top speed; connect to a high speed hub
[  121.943371][ T5895] usb 3-1: config 0 has an invalid interface number: 175 but max is 0
[  121.943397][ T5895] usb 3-1: config 0 has no interface number 0
[  121.943428][ T5895] usb 3-1: config 0 interface 175 has no altsetting 0
[  121.969183][ T5895] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  121.969214][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.969232][ T5895] usb 3-1: Product: syz
[  121.969245][ T5895] usb 3-1: Manufacturer: syz
[  121.969258][ T5895] usb 3-1: SerialNumber: syz
[  122.040511][ T5895] usb 3-1: config 0 descriptor??
[  122.049628][ T6205] Invalid logical block size (1540)
[  122.076246][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  122.260465][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  122.260535][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.295598][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  122.295630][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.295650][    T9] usb 4-1: Product: syz
[  122.295664][    T9] usb 4-1: Manufacturer: syz
[  122.295679][    T9] usb 4-1: SerialNumber: syz
[  122.369111][    T9] cdc_mbim 4-1:1.0: skipping garbage
[  122.657999][ T5895] ums-alauda 3-1:0.175: USB Mass Storage device detected
[  122.688061][ T5895] ums-alauda 3-1:0.175: This device (07b4,010a,0102 S 06 P 01) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  122.688061][ T5895]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  122.917385][ T5895] usb 3-1: USB disconnect, device number 3
[  123.014851][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  123.034795][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  123.044792][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  123.054790][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  123.064789][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  123.074804][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  123.084794][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  123.094813][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  123.104948][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  123.114807][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  123.927882][ T6202] net_ratelimit: 257 callbacks suppressed
[  123.927902][ T6202] veth0_virt_wifi: mtu less than device minimum
[  124.939654][    T9] cdc_mbim 4-1:1.0: bind() failure
[  125.014711][    T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  125.018740][    T9] cdc_ncm 4-1:1.1: bind() failure
[  125.099660][    T9] usb 4-1: USB disconnect, device number 7
[  125.926618][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  126.074908][    T9] usb 1-1: Using ep0 maxpacket: 16
[  126.078597][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  126.081199][    T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  126.130354][    T9] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  126.130386][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.130405][    T9] usb 1-1: Product: syz
[  126.130420][    T9] usb 1-1: Manufacturer: 榽桩煮ퟙ匨ᬗ즀쇳኎냹퀳痷돫樄뷠꟡۩왓뜆膅轣뽎꟒浦♪퉤έ䲬䕴ቺ帇ෑ厼폇蠅孡㹏⩿惌ᚫ䟺ኢ࿠⤂撨묻蝛斝쓇⹷䶏Ɑᓓਵ뀬핈⌨ㅳ坷饞蝂緅係꧅긫蕢蹟偪廣髜榹Ǎ쓄匿몪ꥀ
[  126.130447][    T9] usb 1-1: SerialNumber: syz
[  126.533738][    T9] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  126.554249][    T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  126.679254][ T6246] netlink: 332 bytes leftover after parsing attributes in process `syz.0.87'.
[  126.866205][ T5902] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  127.029752][ T5902] usb 4-1: config 0 has an invalid interface number: 244 but max is 0
[  127.029784][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.029812][ T5902] usb 4-1: config 0 has no interface number 0
[  127.029862][ T5902] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32
[  127.029886][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.037573][ T6267] FAULT_INJECTION: forcing a failure.
[  127.037573][ T6267] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  127.037613][ T6267] CPU: 1 UID: 0 PID: 6267 Comm: syz.2.91 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  127.037642][ T6267] Tainted: [L]=SOFTLOCKUP
[  127.037649][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  127.037659][ T6267] Call Trace:
[  127.037667][ T6267]  <TASK>
[  127.037674][ T6267]  dump_stack_lvl+0xe8/0x150
[  127.037700][ T6267]  should_fail_ex+0x46b/0x600
[  127.037732][ T6267]  _copy_from_user+0x2d/0xb0
[  127.037763][ T6267]  sk_setsockopt+0x2b3/0x2a90
[  127.037798][ T6267]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  127.037828][ T6267]  ? get_pid_task+0x20/0x1f0
[  127.037852][ T6267]  ? __pfx_sk_setsockopt+0x10/0x10
[  127.037881][ T6267]  ? __lock_acquire+0x6b5/0x2cf0
[  127.037923][ T6267]  ? aa_sk_perm+0x703/0x950
[  127.037953][ T6267]  udp_lib_setsockopt+0xbc/0x6b0
[  127.037980][ T6267]  ? __pfx_udp_lib_setsockopt+0x10/0x10
[  127.038003][ T6267]  ? aa_sock_opt_perm+0x131/0x1f0
[  127.038032][ T6267]  udpv6_setsockopt+0x67/0xb0
[  127.038058][ T6267]  ? __pfx_udp_v6_push_pending_frames+0x10/0x10
[  127.038083][ T6267]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  127.038109][ T6267]  do_sock_setsockopt+0x17c/0x1b0
[  127.038142][ T6267]  __x64_sys_setsockopt+0x143/0x1b0
[  127.038169][ T6267]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.038190][ T6267]  do_syscall_64+0x15f/0xf80
[  127.038211][ T6267]  ? trace_irq_disable+0x3b/0x140
[  127.038232][ T6267]  ? clear_bhb_loop+0x40/0x90
[  127.038256][ T6267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.038277][ T6267] RIP: 0033:0x7efe317bc819
[  127.038297][ T6267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  127.038312][ T6267] RSP: 002b:00007efe2fa16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  127.038333][ T6267] RAX: ffffffffffffffda RBX: 00007efe31a35fa0 RCX: 00007efe317bc819
[  127.038347][ T6267] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000003
[  127.038357][ T6267] RBP: 00007efe2fa16090 R08: 0000000000000004 R09: 0000000000000000
[  127.038369][ T6267] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.038380][ T6267] R13: 00007efe31a36038 R14: 00007efe31a35fa0 R15: 00007ffdf2e996c8
[  127.038409][ T6267]  </TASK>
[  127.161710][ T5902] usb 4-1: config 0 descriptor??
[  127.395042][ T5902] usb 4-1: string descriptor 0 read error: -71
[  127.408433][ T5902] cypress_m8 4-1:0.244: DeLorme Earthmate USB converter detected
[  127.549510][ T5902] earthmate ttyUSB0: required endpoint is missing
[  127.616854][ T5902] usb 4-1: USB disconnect, device number 8
[  127.669723][ T5902] cypress_m8 4-1:0.244: device disconnected
[  128.697872][ T6281] =======================================================
[  128.697872][ T6281] WARNING: The mand mount option has been deprecated and
[  128.697872][ T6281]          and is ignored by this kernel. Remove the mand
[  128.697872][ T6281]          option from the mount to silence this warning.
[  128.697872][ T6281] =======================================================
[  128.697940][ T6281] cgroup: Invalid name
[  128.837087][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'.
[  128.884608][    T9] usb 1-1: USB disconnect, device number 5
[  129.108391][ T6289] capability: warning: `syz.1.99' uses 32-bit capabilities (legacy support in use)
[  129.209014][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  129.975571][ T6316] dvmrp1: entered allmulticast mode
[  129.994578][ T6316] IPVS: length: 69 != 8
[  130.256313][ T5895] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  130.409954][ T5895] usb 3-1: Using ep0 maxpacket: 16
[  130.428428][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.428481][ T5895] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  130.428506][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.454274][ T5895] usb 3-1: config 0 descriptor??
[  131.095677][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.097658][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.150682][ T5895] usbhid 3-1:0.0: can't add hid device: -71
[  131.150811][ T5895] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  131.174009][ T5895] usb 3-1: USB disconnect, device number 4
[  131.244876][ T6112] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  131.341548][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'.
[  131.437618][ T6112] usb 2-1: too many configurations: 36, using maximum allowed: 8
[  131.439510][ T6112] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  131.439551][ T6112] usb 2-1: can't read configurations, error -22
[  131.604958][ T6112] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  131.765160][ T6112] usb 2-1: too many configurations: 36, using maximum allowed: 8
[  131.792004][ T6112] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  131.792046][ T6112] usb 2-1: can't read configurations, error -22
[  131.819564][ T6112] usb usb2-port1: attempt power cycle
[  131.865079][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  132.014915][    T9] usb 1-1: Using ep0 maxpacket: 8
[  132.017955][    T9] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.017991][    T9] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.018012][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  132.018046][    T9] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  132.018068][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.108422][    T9] usb 1-1: config 0 descriptor??
[  132.165306][ T6112] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  132.190192][ T6112] usb 2-1: too many configurations: 36, using maximum allowed: 8
[  132.193948][ T6112] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  132.193988][ T6112] usb 2-1: can't read configurations, error -22
[  132.375347][ T6112] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  132.403572][ T6112] usb 2-1: too many configurations: 36, using maximum allowed: 8
[  132.421057][ T6112] usb 2-1: config index 0 descriptor too short (expected 9, got 0)
[  132.421100][ T6112] usb 2-1: can't read configurations, error -22
[  132.446859][ T6112] usb usb2-port1: unable to enumerate USB device
[  133.278970][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  133.280711][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  134.744345][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  134.744474][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  134.789519][    T9] usb 1-1: USB disconnect, device number 6
[  134.883983][ T6360] netlink: 84 bytes leftover after parsing attributes in process `syz.2.127'.
[  135.053030][ T6365] netlink: 'syz.1.125': attribute type 10 has an invalid length.
[  135.053053][ T6365] netlink: 40 bytes leftover after parsing attributes in process `syz.1.125'.
[  135.054025][ T6365] bridge0: port 3(dummy0) entered blocking state
[  135.062490][ T6365] bridge0: port 3(dummy0) entered disabled state
[  135.062805][ T6365] dummy0: entered allmulticast mode
[  135.088396][ T6365] dummy0: entered promiscuous mode
[  135.139932][ T6365] bridge0: port 3(dummy0) entered blocking state
[  135.140477][ T6365] bridge0: port 3(dummy0) entered forwarding state
[  135.747899][ T6376] capability: warning: `syz.1.130' uses deprecated v2 capabilities in a way that may be insecure
[  135.748871][ T6376] program syz.1.130 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  136.096442][ T6384] Bluetooth: MGMT ver 1.23
[  136.546469][  T820] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  136.701650][  T820] usb 1-1: unable to get BOS descriptor or descriptor too short
[  136.713213][  T820] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  136.713245][  T820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.713266][  T820] usb 1-1: Product: syz
[  136.713280][  T820] usb 1-1: Manufacturer: syz
[  136.713295][  T820] usb 1-1: SerialNumber: syz
[  137.006567][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.031075][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.111506][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.219664][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.250214][  T820] usb 1-1: failed waiting for Axe-Fx III to boot: -71
[  137.250265][  T820] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71
[  137.264361][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  137.297281][  T820] usb 1-1: USB disconnect, device number 7
[  137.426946][   T10] usb 3-1: Using ep0 maxpacket: 8
[  137.432310][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  137.433571][   T10] usb 3-1: config 4 interface 0 has no altsetting 0
[  137.457615][   T10] usb 3-1: string descriptor 0 read error: -22
[  137.457727][   T10] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  137.457752][   T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  137.504220][   T10] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  137.558157][   T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  137.561044][   T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  137.561152][   T10] usb 3-1: media controller created
[  137.608650][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  138.298372][ T6401] overlay: Unknown parameter 'euid<00000000000000000000'
[  138.640171][ T6405] warning: `syz.1.141' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  138.814890][  T820] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  139.000552][  T820] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  139.000585][  T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.038747][  T820] usb 1-1: config 0 descriptor??
[  139.057479][  T820] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  139.266000][  T820] gp8psk: usb in 128 operation failed.
[  139.268046][  T820] gp8psk: usb in 137 operation failed.
[  139.268067][  T820] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  139.269642][  T820] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[  139.269703][  T820] usb 1-1: media controller created
[  139.430181][  T820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  139.588041][  T820] gp8psk_fe: Frontend attached
[  139.599678][  T820] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  139.623849][ T6419] syzkaller0: entered promiscuous mode
[  139.623876][ T6419] syzkaller0: entered allmulticast mode
[  139.688954][  T820] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  140.231136][  T820] gp8psk: usb in 137 operation failed.
[  140.231156][  T820] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[  140.231168][  T820] gp8psk: found Genpix USB device pID = 203 (hex)
[  140.304035][  T820] usb 1-1: USB disconnect, device number 8
[  140.775012][ T5895] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  140.922750][  T820] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[  140.925512][ T5895] usb 2-1: Using ep0 maxpacket: 32
[  140.930927][ T5895] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  140.930955][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.930974][ T5895] usb 2-1: Product: syz
[  140.930987][ T5895] usb 2-1: Manufacturer: syz
[  140.931000][ T5895] usb 2-1: SerialNumber: syz
[  141.002572][ T5895] usb 2-1: config 0 descriptor??
[  141.218780][ T5895] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 013
[  141.851707][ T6434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.150'.
[  141.860031][ T6434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.150'.
[  143.485897][ T6424] i2c i2c-1: failure writing data
[  143.617095][ T5895] usb 2-1: USB disconnect, device number 13
[  143.715897][ T6112] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  143.885888][ T6112] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  143.886021][ T6112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.886044][ T6112] usb 1-1: Product: syz
[  143.886059][ T6112] usb 1-1: Manufacturer: syz
[  143.886074][ T6112] usb 1-1: SerialNumber: syz
[  143.944566][ T6112] usb 1-1: config 0 descriptor??
[  143.968104][ T6112] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  145.812137][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.812740][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.818818][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.821586][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.823265][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.852894][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.940325][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  145.998566][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  146.001746][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  146.009396][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  146.025781][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  147.034089][ T6112] gspca_stk1135: reg_w 0x350 err -110
[  147.063490][ T6112] gspca_stk1135: serial bus timeout: status=0x00
[  147.063509][ T6112] gspca_stk1135: Sensor write failed
[  147.063537][ T6112] gspca_stk1135: serial bus timeout: status=0x00
[  147.063546][ T6112] gspca_stk1135: Sensor write failed
[  147.063575][ T6112] gspca_stk1135: serial bus timeout: status=0x00
[  147.063595][ T6112] gspca_stk1135: Sensor read failed
[  147.063622][ T6112] gspca_stk1135: serial bus timeout: status=0x00
[  147.063631][ T6112] gspca_stk1135: Sensor read failed
[  147.063638][ T6112] gspca_stk1135: Detected sensor type unknown (0x0)
[  147.063671][ T6112] gspca_stk1135: serial bus timeout: status=0x00
[  147.063680][ T6112] gspca_stk1135: Sensor read failed
[  147.063706][ T6112] gspca_stk1135: serial bus timeout: status=0x00
[  147.063715][ T6112] gspca_stk1135: Sensor read failed
[  147.063743][ T6112] gspca_stk1135: serial bus timeout: status=0x00
[  147.063751][ T6112] gspca_stk1135: Sensor write failed
[  147.063778][ T6112] gspca_stk1135: serial bus timeout: status=0x00
[  147.063786][ T6112] gspca_stk1135: Sensor write failed
[  147.063881][ T6112] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110
[  147.843739][ T6112] usb 1-1: USB disconnect, device number 9
[  148.295433][ T5837] Bluetooth: hci4: command tx timeout
[  148.690938][ T1818] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.815125][ T6112] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  148.830017][ T6512] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size.
[  148.928645][ T6500] syzkaller0: entered promiscuous mode
[  148.928673][ T6500] syzkaller0: entered allmulticast mode
[  148.975502][ T6112] usb 2-1: Using ep0 maxpacket: 32
[  148.981734][ T6112] usb 2-1: unable to read config index 0 descriptor/start: -61
[  148.981773][ T6112] usb 2-1: can't read configurations, error -61
[  149.104899][ T6112] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  149.267534][ T6112] usb 2-1: Using ep0 maxpacket: 32
[  149.272939][ T6112] usb 2-1: unable to read config index 0 descriptor/start: -61
[  149.272965][ T6112] usb 2-1: can't read configurations, error -61
[  149.273312][ T6112] usb usb2-port1: attempt power cycle
[  149.567916][ T1818] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.585875][   T32] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  149.617109][ T6112] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  149.641407][ T6112] usb 2-1: Using ep0 maxpacket: 32
[  149.648750][ T6112] usb 2-1: unable to read config index 0 descriptor/start: -61
[  149.648787][ T6112] usb 2-1: can't read configurations, error -61
[  149.765116][   T32] usb 1-1: Using ep0 maxpacket: 32
[  149.767165][   T32] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  149.769678][   T32] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  149.769705][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.769725][   T32] usb 1-1: Product: syz
[  149.769739][   T32] usb 1-1: Manufacturer: syz
[  149.769754][   T32] usb 1-1: SerialNumber: syz
[  149.775872][ T6112] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  149.796422][ T6112] usb 2-1: Using ep0 maxpacket: 32
[  149.800775][ T6112] usb 2-1: unable to read config index 0 descriptor/start: -61
[  149.800817][ T6112] usb 2-1: can't read configurations, error -61
[  149.801401][ T6112] usb usb2-port1: unable to enumerate USB device
[  149.872565][   T32] usb 1-1: config 0 descriptor??
[  149.993949][ T1818] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.061211][ T6464] chnl_net:caif_netlink_parms(): no params data found
[  150.319762][ T1818] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.348404][ T5837] Bluetooth: hci4: command tx timeout
[  150.430471][ T6464] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.432157][ T6464] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.432432][ T6464] bridge_slave_0: entered allmulticast mode
[  150.455668][ T6464] bridge_slave_0: entered promiscuous mode
[  150.462756][ T6464] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.463072][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.463345][ T6464] bridge_slave_1: entered allmulticast mode
[  150.467831][ T6464] bridge_slave_1: entered promiscuous mode
[  150.537076][ T6464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.544487][ T6464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.663652][ T6528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.664273][ T6528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.722581][ T6464] team0: Port device team_slave_0 added
[  150.730971][ T6464] team0: Port device team_slave_1 added
[  150.864647][ T6464] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.864666][ T6464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  150.864690][ T6464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.898977][ T6464] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.898994][ T6464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  150.899018][ T6464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.062310][ T6464] hsr_slave_0: entered promiscuous mode
[  151.063753][ T6464] hsr_slave_1: entered promiscuous mode
[  151.065453][ T6464] debugfs: 'hsr0' already exists in 'hsr'
[  151.065477][ T6464] Cannot create hsr debugfs directory
[  151.289909][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.290752][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.528199][ T1818] bridge_slave_1: left allmulticast mode
[  151.528325][ T1818] bridge_slave_1: left promiscuous mode
[  151.538877][ T1818] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.743396][ T1818] bridge_slave_0: left allmulticast mode
[  151.743437][ T1818] bridge_slave_0: left promiscuous mode
[  151.743748][ T1818] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.830695][   T32] usb 1-1: USB disconnect, device number 10
[  152.002073][ T6538] FAULT_INJECTION: forcing a failure.
[  152.002073][ T6538] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  152.002103][ T6538] CPU: 1 UID: 0 PID: 6538 Comm: syz.0.184 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  152.002120][ T6538] Tainted: [L]=SOFTLOCKUP
[  152.002125][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  152.002132][ T6538] Call Trace:
[  152.002137][ T6538]  <TASK>
[  152.002143][ T6538]  dump_stack_lvl+0xe8/0x150
[  152.002163][ T6538]  should_fail_ex+0x46b/0x600
[  152.002185][ T6538]  _copy_to_iter+0x404/0x17d0
[  152.002212][ T6538]  ? __pfx__copy_to_iter+0x10/0x10
[  152.002228][ T6538]  ? established_get_first+0x22c/0x610
[  152.002253][ T6538]  seq_read_iter+0xbf6/0xe20
[  152.002276][ T6538]  seq_read+0x36a/0x490
[  152.002293][ T6538]  ? get_pid_task+0x20/0x1f0
[  152.002314][ T6538]  ? __pfx_seq_read+0x10/0x10
[  152.002337][ T6538]  ? apparmor_file_permission+0x1f4/0x300
[  152.002355][ T6538]  ? __pfx_seq_read+0x10/0x10
[  152.002372][ T6538]  proc_reg_read+0x1f6/0x2f0
[  152.002388][ T6538]  ? __pfx_proc_reg_read+0x10/0x10
[  152.002415][ T6538]  vfs_read+0x212/0xa80
[  152.002453][ T6538]  ? __pfx_vfs_read+0x10/0x10
[  152.002485][ T6538]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  152.002510][ T6538]  ? lockdep_hardirqs_on+0x7a/0x110
[  152.002525][ T6538]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  152.002539][ T6538]  ? mutex_lock_nested+0x152/0x1d0
[  152.002556][ T6538]  ? fdget_pos+0x252/0x320
[  152.002575][ T6538]  ksys_read+0x156/0x270
[  152.002596][ T6538]  ? __pfx_ksys_read+0x10/0x10
[  152.002618][ T6538]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.002631][ T6538]  do_syscall_64+0x15f/0xf80
[  152.002644][ T6538]  ? trace_irq_disable+0x3b/0x140
[  152.002658][ T6538]  ? clear_bhb_loop+0x40/0x90
[  152.002673][ T6538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.002685][ T6538] RIP: 0033:0x7fd9dba5c819
[  152.002697][ T6538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  152.002708][ T6538] RSP: 002b:00007fd9d9cae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  152.002722][ T6538] RAX: ffffffffffffffda RBX: 00007fd9dbcd5fa0 RCX: 00007fd9dba5c819
[  152.002730][ T6538] RDX: 0000000000002020 RSI: 0000200000012400 RDI: 0000000000000005
[  152.002737][ T6538] RBP: 00007fd9d9cae090 R08: 0000000000000000 R09: 0000000000000000
[  152.002744][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  152.002751][ T6538] R13: 00007fd9dbcd6038 R14: 00007fd9dbcd5fa0 R15: 00007ffc4f2503b8
[  152.002769][ T6538]  </TASK>
[  152.026918][ T6112] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  152.313000][ T6112] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  152.313033][ T6112] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  152.313052][ T6112] usb 2-1: Product: syz
[  152.353517][ T6112] usb 2-1: config 0 descriptor??
[  152.363656][ T6112] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  152.379371][ T6112] usb 2-1: Detected FT232H
[  152.427229][ T5837] Bluetooth: hci4: command tx timeout
[  152.543475][ T6540] netlink: 'syz.0.185': attribute type 16 has an invalid length.
[  152.564928][ T6112] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  152.771006][ T6536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.771696][ T6536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.773657][ T6112] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5
[  152.838736][ T6112] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  152.981850][ T6536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.982544][ T6536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.043065][   T32] usb 2-1: USB disconnect, device number 18
[  153.090722][   T32] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  153.105576][   T32] ftdi_sio 2-1:0.0: device disconnected
[  153.425617][ T1818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.495804][ T1818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.537302][ T1818] bond0 (unregistering): Released all slaves
[  154.040047][ T6548] netlink: 393 bytes leftover after parsing attributes in process `syz.0.188'.
[  154.504914][ T5837] Bluetooth: hci4: command tx timeout
[  155.432868][ T6572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.443946][ T6572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.873554][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1
[  156.165049][ T1818] hsr_slave_0: left promiscuous mode
[  156.209710][ T1818] hsr_slave_1: left promiscuous mode
[  156.211121][ T1818] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.250161][ T1818] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.312310][ T1818] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.312340][ T1818] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.463328][ T5895] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  156.480224][ T1818] veth1_macvtap: left promiscuous mode
[  156.480512][ T1818] veth0_macvtap: left promiscuous mode
[  156.480859][ T1818] veth1_vlan: left promiscuous mode
[  156.506465][ T1818] veth0_vlan: left promiscuous mode
[  156.554127][ T6594] netlink: 48 bytes leftover after parsing attributes in process `syz.0.201'.
[  156.625649][ T5895] usb 2-1: Using ep0 maxpacket: 8
[  156.630118][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  156.630152][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  156.630165][ T5895] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  156.630178][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  156.630193][ T5895] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  156.630218][ T5895] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  156.630230][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.649142][ T5895] usb 2-1: config 0 descriptor??
[  156.689254][ T6585] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  156.965238][  T820] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  157.116546][  T820] usb 1-1: device descriptor read/64, error -71
[  157.164343][ T6597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.196'.
[  157.404913][  T820] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  157.607019][  T820] usb 1-1: device descriptor read/64, error -71
[  157.723897][  T820] usb usb1-port1: attempt power cycle
[  158.066067][  T820] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  158.088344][  T820] usb 1-1: device descriptor read/8, error -71
[  158.222943][ T1818] team0 (unregistering): Port device team_slave_1 removed
[  158.304525][ T1818] team0 (unregistering): Port device team_slave_0 removed
[  158.336510][  T820] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  158.376442][  T820] usb 1-1: device descriptor read/8, error -71
[  158.485247][  T820] usb usb1-port1: unable to enumerate USB device
[  159.146668][ T5837] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  159.288000][    T9] usb 2-1: USB disconnect, device number 19
[  161.074053][ T6464] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  161.155974][ T6464] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  161.182316][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2
[  161.182915][ T6464] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  161.249903][ T6464] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  161.265572][ T6464] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  161.367603][ T6464] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  161.420034][ T6464] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  161.462539][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'.
[  161.640527][ T6464] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  162.647539][ T6464] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.775629][ T6464] 8021q: adding VLAN 0 to HW filter on device team0
[  162.840930][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.853353][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.896361][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.896482][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.098932][   T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  163.269401][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  163.269436][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  163.269462][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  163.320069][   T10] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  163.320102][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.320122][   T10] usb 2-1: Product: syz
[  163.320136][   T10] usb 2-1: Manufacturer: syz
[  163.320150][   T10] usb 2-1: SerialNumber: syz
[  163.322461][ T5491] 8021q: adding VLAN 0 to HW filter on device eth3
[  163.398702][   T10] usb 2-1: config 0 descriptor??
[  163.399700][ T6682] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  163.399917][ T6682] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  163.437694][   T10] usb 2-1: ucan: probing device on interface #0
[  163.833847][   T10] usb 2-1: ucan: failed to retrieve device info
[  163.833871][   T10] usb 2-1: ucan: probe failed; try to update the device firmware
[  163.877520][   T10] usb 2-1: USB disconnect, device number 20
[  163.933613][ T6464] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.629471][ T6694] binder: 6692:6694 ioctl c0306201 2000000002c0 returned -14
[  164.705282][ T6464] veth0_vlan: entered promiscuous mode
[  164.818459][ T6464] veth1_vlan: entered promiscuous mode
[  165.158681][ T6464] veth0_macvtap: entered promiscuous mode
[  165.189055][ T6464] veth1_macvtap: entered promiscuous mode
[  165.218129][ T5491] 8021q: adding VLAN 0 to HW filter on device eth4
[  165.456074][ T6464] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.494263][ T6727] loop6: detected capacity change from 0 to 7
[  165.537445][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.539067][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.567756][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.567807][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.719909][ T6464] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.746055][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.746095][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.841556][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.842055][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.842100][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.842138][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.921582][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.921622][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.944857][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.944895][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.956422][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.956459][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.979002][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.979039][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.979239][ T6727] ldm_validate_partition_table(): Disk read failed.
[  165.979318][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.979342][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.979563][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.979587][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.979831][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  165.979883][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  165.980572][ T6727] Dev loop6: unable to read RDB block 0
[  165.981693][ T6727]  loop6: unable to read partition table
[  165.981929][ T6727] loop6: partition table beyond EOD, truncated
[  165.981961][ T6727] loop_reread_partitions: partition scan of loop6 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[  167.558176][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.558198][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.939701][ T1298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.939724][ T1298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.114073][ T6770] netlink: 92 bytes leftover after parsing attributes in process `syz.1.238'.
[  168.652371][ T6780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.654432][ T6778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.663297][ T6778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.690219][ T6780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.798493][ T6783] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  168.798513][ T6783] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  168.846862][ T6783] vhci_hcd vhci_hcd.0: Device attached
[  169.074933][    T9] usb 33-1: new high-speed USB device number 2 using vhci_hcd
[  169.105271][ T5833] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  169.266641][ T5833] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  169.266684][ T5833] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  169.266697][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.280355][ T5833] usb 1-1: config 0 descriptor??
[  169.371027][ T5833] pwc: Askey VC010 type 2 USB webcam detected.
[  169.388064][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'.
[  169.388089][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'.
[  169.484863][  T820] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  169.625461][  T820] usb 5-1: Using ep0 maxpacket: 8
[  169.647301][  T820] usb 5-1: config 0 has an invalid interface number: 240 but max is 0
[  169.647331][  T820] usb 5-1: config 0 has no interface number 0
[  169.647364][  T820] usb 5-1: too many endpoints for config 0 interface 240 altsetting 25: 230, using maximum allowed: 30
[  169.647467][  T820] usb 5-1: config 0 interface 240 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 230
[  169.647496][  T820] usb 5-1: config 0 interface 240 has no altsetting 0
[  169.651941][  T820] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  169.651970][  T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.651991][  T820] usb 5-1: Product: syz
[  169.652005][  T820] usb 5-1: Manufacturer: syz
[  169.652018][  T820] usb 5-1: SerialNumber: syz
[  169.742002][  T820] usb 5-1: config 0 descriptor??
[  169.749678][ T5833] pwc: recv_control_msg error -32 req 02 val 2b00
[  169.756611][ T5833] pwc: recv_control_msg error -32 req 02 val 2700
[  169.760634][ T5833] pwc: recv_control_msg error -32 req 02 val 2c00
[  169.762282][ T5833] pwc: recv_control_msg error -32 req 04 val 1000
[  169.763740][ T5833] pwc: recv_control_msg error -32 req 04 val 1300
[  169.765986][ T5833] pwc: recv_control_msg error -32 req 04 val 1400
[  169.767061][ T5833] pwc: recv_control_msg error -32 req 02 val 2000
[  169.773847][ T5833] pwc: recv_control_msg error -32 req 02 val 2100
[  169.776060][ T5833] pwc: recv_control_msg error -32 req 04 val 1500
[  169.776882][ T5833] pwc: recv_control_msg error -32 req 02 val 2500
[  170.047696][ T5833] pwc: recv_control_msg error -71 req 02 val 2600
[  170.048061][ T5833] pwc: recv_control_msg error -71 req 02 val 2900
[  170.048528][ T5833] pwc: recv_control_msg error -71 req 02 val 2800
[  170.048989][ T5833] pwc: recv_control_msg error -71 req 04 val 1100
[  170.049384][ T5833] pwc: recv_control_msg error -71 req 04 val 1200
[  170.071665][ T6786] vhci_hcd: connection reset by peer
[  170.160177][   T44] vhci_hcd vhci_hcd.0: stop threads
[  170.163538][   T44] vhci_hcd vhci_hcd.0: release socket
[  170.188102][ T6798] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma?
[  170.207524][   T44] vhci_hcd vhci_hcd.0: disconnect device
[  170.244677][ T5833] pwc: Registered as video103.
[  170.276319][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.276962][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.353798][ T5833] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5
[  170.565244][ T5833] usb 1-1: USB disconnect, device number 15
[  171.454171][ T6822] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  172.046975][ T6832] netlink: 'syz.0.256': attribute type 10 has an invalid length.
[  172.046998][ T6832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.256'.
[  172.048278][ T6832] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  172.955524][ T6851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.956210][ T6851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.988416][ T6851] process 'syz.2.262' launched '/dev/fd/6' with NULL argv: empty string added
[  173.649589][ T6855] ucma_write: process 227 (syz.2.263) changed security contexts after opening file descriptor, this is not allowed.
[  173.711076][ T6855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.711761][ T6855] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.175042][    T9] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  174.243520][ T6818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  174.335616][   T10] usb 5-1: USB disconnect, device number 2
[  174.955352][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  175.106071][   T10] usb 5-1: Using ep0 maxpacket: 32
[  175.112358][   T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  175.112387][   T10] usb 5-1: config 0 has no interface number 0
[  175.112440][   T10] usb 5-1: config 0 interface 184 has no altsetting 0
[  175.120717][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  175.120746][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.120765][   T10] usb 5-1: Product: syz
[  175.120777][   T10] usb 5-1: Manufacturer: syz
[  175.120790][   T10] usb 5-1: SerialNumber: syz
[  175.150120][   T10] usb 5-1: config 0 descriptor??
[  175.407490][ T6862] Bluetooth: MGMT ver 1.23
[  175.475376][ T5902] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  175.483737][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  175.483764][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  175.483783][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  175.484004][   T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32
[  175.604889][ T5902] usb 1-1: device descriptor read/64, error -71
[  175.727232][ T6112] usb 5-1: USB disconnect, device number 3
[  175.845636][ T5902] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  175.986124][ T5902] usb 1-1: device descriptor read/64, error -71
[  176.096380][ T5902] usb usb1-port1: attempt power cycle
[  176.454866][ T5902] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  176.485808][ T5902] usb 1-1: device descriptor read/8, error -71
[  176.725028][ T5902] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  176.752702][ T5902] usb 1-1: device descriptor read/8, error -71
[  176.856463][ T5902] usb usb1-port1: unable to enumerate USB device
[  177.153443][ T6917] tmpfs: Bad value for 'nr_inodes'
[  177.405192][  T820] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  177.555286][  T820] usb 5-1: Using ep0 maxpacket: 32
[  177.560389][  T820] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8
[  177.560487][  T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.560499][  T820] usb 5-1: Product: syz
[  177.560507][  T820] usb 5-1: Manufacturer: syz
[  177.560515][  T820] usb 5-1: SerialNumber: syz
[  177.575064][  T820] empeg 5-1:1.0: empeg converter detected
[  177.822872][ T6918] netlink: 256 bytes leftover after parsing attributes in process `syz.4.286'.
[  177.847653][  T820] usb 5-1: empeg converter now attached to ttyUSB0
[  178.054114][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.286'.
[  178.095637][ T6112] usb 5-1: USB disconnect, device number 4
[  178.114438][ T6112] empeg ttyUSB0: empeg converter now disconnected from ttyUSB0
[  178.130619][ T6112] empeg 5-1:1.0: device disconnected
[  179.177740][ T5902] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  179.343880][ T5902] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  179.343912][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.343930][ T5902] usb 2-1: Product: syz
[  179.343944][ T5902] usb 2-1: Manufacturer: syz
[  179.343957][ T5902] usb 2-1: SerialNumber: syz
[  179.418271][ T5902] usb 2-1: config 0 descriptor??
[  179.480002][ T5902] gspca_main: sq905c-2.14.0 probing 2770:9052
[  179.635263][ T6952] binder: 6949:6952 ioctl c0306201 2000000002c0 returned -14
[  179.765077][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.798251][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.855088][ T6975] netlink: 'syz.4.300': attribute type 21 has an invalid length.
[  180.309774][ T5902] gspca_sq905c: sq905c_read: usb_control_msg failed (-110)
[  180.309795][ T5902] sq905c 2-1:0.0: Reading version command failed
[  180.309884][ T5902] sq905c 2-1:0.0: probe with driver sq905c failed with error -110
[  180.355064][  T820] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  180.448313][ T6992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.448959][ T6992] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.532900][  T820] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  180.532933][  T820] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253
[  180.539197][  T820] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  180.539228][  T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.539246][  T820] usb 5-1: Product: syz
[  180.539258][  T820] usb 5-1: Manufacturer: syz
[  180.539271][  T820] usb 5-1: SerialNumber: syz
[  180.555825][  T820] usb 5-1: config 0 descriptor??
[  180.638314][  T820] gspca_main: sunplus-2.14.0 probing 055f:c630
[  180.693330][ T6975] netlink: 164 bytes leftover after parsing attributes in process `syz.4.300'.
[  181.419671][ T7008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.303'.
[  181.504489][  T820] gspca_sunplus: reg_r err -71
[  181.504592][  T820] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  181.546880][  T820] usb 5-1: USB disconnect, device number 5
[  181.778790][   T32] usb 2-1: USB disconnect, device number 21
[  181.983339][ T7016] tipc: Started in network mode
[  181.983351][ T7016] tipc: Node identity , cluster identity 4711
[  182.384393][ T6112] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  182.534883][ T6112] usb 2-1: Using ep0 maxpacket: 8
[  182.581013][ T6112] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  182.581047][ T6112] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.581068][ T6112] usb 2-1: Product: syz
[  182.581083][ T6112] usb 2-1: Manufacturer: syz
[  182.581097][ T6112] usb 2-1: SerialNumber: syz
[  182.659047][ T6112] usb 2-1: config 0 descriptor??
[  182.697702][ T6112] gspca_main: se401-2.14.0 probing 047d:5003
[  182.844393][ T7038] openvswitch: netlink: Tunnel attr 336 out of range max 16
[  182.862385][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'.
[  183.142538][ T6112] gspca_se401: ExtraFeatures: 48
[  183.142560][ T6112] gspca_se401: Frame size: 0x0 1/16th janggu
[  183.142574][ T6112] gspca_se401: Frame size: 0x0 1/16th janggu
[  183.142587][ T6112] gspca_se401: Frame size: 0x0 1/16th janggu
[  183.142600][ T6112] gspca_se401: Frame size: 0x0 1/16th janggu
[  183.142613][ T6112] gspca_se401: Frame size: 0x0 1/16th janggu
[  183.142624][ T6112] gspca_se401: Frame size: 0x0 1/16th janggu
[  183.142637][ T6112] gspca_se401: Frame size: 0x0 1/16th janggu
[  183.142648][ T6112] gspca_se401: Frame size: 0x0 1/16th janggu
[  183.142660][ T6112] gspca_se401: Frame size: 0x0 1/16th janggu
[  183.142671][ T6112] gspca_se401: Frame size: 0x0 1/16th janggu
[  183.352307][ T6112] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6
[  183.894023][ T5902] usb 2-1: USB disconnect, device number 22
[  184.764155][ T7060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.779378][ T7060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.781841][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'.
[  185.942455][ T7082] fuse: Bad value for 'fd'
[  185.990104][ T7085] tmpfs: Bad value for 'mpol'
[  186.048428][ T7081] dvmrp12: entered allmulticast mode
[  186.182029][ T7095] netlink: 60 bytes leftover after parsing attributes in process `syz.1.324'.
[  186.200420][ T7081] netlink: 60 bytes leftover after parsing attributes in process `syz.1.324'.
[  186.385040][ T5895] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  186.561092][ T5895] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  186.562406][ T5895] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  186.562513][ T5895] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  186.562536][ T5895] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  186.562549][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0
[  186.563974][ T5895] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  186.564073][ T5895] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  186.564091][ T5895] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  186.564104][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0
[  186.604519][ T5895] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  186.604559][ T5895] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  186.604574][ T5895] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  186.604587][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0
[  186.614951][ T5895] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  186.615016][ T5895] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  186.615044][ T5895] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  186.615067][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0
[  186.644534][ T5895] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  186.644573][ T5895] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  186.644589][ T5895] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  186.644601][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0
[  186.665047][ T5895] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  186.665113][ T5895] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  186.665140][ T5895] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  186.665164][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0
[  186.694342][ T5895] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  186.694385][ T5895] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  186.694442][ T5895] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  186.694455][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0
[  186.731643][ T5895] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  186.792458][ T5895] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  186.792494][ T5895] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  186.792517][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0
[  186.875651][ T5895] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  186.875682][ T5895] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  186.875703][ T5895] usb 5-1: Product: syz
[  186.875717][ T5895] usb 5-1: Manufacturer: syz
[  186.875731][ T5895] usb 5-1: SerialNumber: syz
[  186.881678][ T5895] usb 5-1: config 0 descriptor??
[  186.926694][ T5895] yurex 5-1:0.0: Could not submitting URB
[  186.926914][ T5895] yurex 5-1:0.0: probe with driver yurex failed with error -5
[  187.120397][ T7093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.121054][ T7093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.126118][ T6112] usb 5-1: USB disconnect, device number 6
[  187.477800][ T7109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.479515][ T7109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.812678][ T7101] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  187.812835][ T7101] block device autoloading is deprecated and will be removed.
[  188.022411][ T7119] netlink: 220 bytes leftover after parsing attributes in process `syz.1.333'.
[  188.022427][ T7119] netlink: 'syz.1.333': attribute type 2 has an invalid length.
[  188.051686][ T7120] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  188.224945][ T5902] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  188.378752][ T5902] usb 1-1: config 1 interface 0 has no altsetting 0
[  188.393002][ T5902] usb 1-1: string descriptor 0 read error: -22
[  188.402942][ T5902] usb 1-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40
[  188.402975][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.571105][ T7115] binder: 7114:7115 ioctl c0306201 2000000002c0 returned -14
[  188.581894][ T5895] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  188.735974][ T5895] usb 2-1: device descriptor read/64, error -71
[  188.893429][ T5902] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0
[  188.893472][ T5902] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0
[  188.893577][ T5902] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0
[  188.893604][ T5902] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0
[  188.893628][ T5902] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0
[  188.893662][ T5902] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0
[  188.893686][ T5902] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0
[  188.893710][ T5902] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0
[  188.893736][ T5902] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0
[  188.893760][ T5902] hid_mf 0003:0079:1801.0003: unknown main item tag 0x0
[  189.028601][ T5895] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  189.060646][ T5902] hid_mf 0003:0079:1801.0003: hidraw0: USB HID vf.ff Device [HID 0079:1801] on usb-dummy_hcd.0-1/input0
[  189.060681][ T5902] hid_mf 0003:0079:1801.0003: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler <mahasler@gmail.com>
[  189.108332][ T7117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.112967][ T7117] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.136851][ T6112] usb 1-1: USB disconnect, device number 20
[  189.185625][ T5895] usb 2-1: device descriptor read/64, error -71
[  189.260461][ T7143] fido_id[7143]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  189.295323][ T5895] usb usb2-port1: attempt power cycle
[  189.546737][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  189.600612][ T7148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.601230][ T7148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.644918][ T5895] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  189.676522][ T5895] usb 2-1: device descriptor read/8, error -71
[  189.727226][    T9] usb 5-1: too many configurations: 127, using maximum allowed: 8
[  189.731437][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  189.731478][    T9] usb 5-1: can't read configurations, error -61
[  189.856694][    T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  189.925880][ T5895] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  189.949484][ T5895] usb 2-1: device descriptor read/8, error -71
[  190.011151][    T9] usb 5-1: too many configurations: 127, using maximum allowed: 8
[  190.023002][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  190.023043][    T9] usb 5-1: can't read configurations, error -61
[  190.028626][    T9] usb usb5-port1: attempt power cycle
[  190.065436][ T5895] usb usb2-port1: unable to enumerate USB device
[  190.234899][ T6112] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  190.368408][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  190.386845][    T9] usb 5-1: too many configurations: 127, using maximum allowed: 8
[  190.388658][ T6112] usb 1-1: unable to get BOS descriptor or descriptor too short
[  190.391008][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  190.391047][    T9] usb 5-1: can't read configurations, error -61
[  190.407985][ T6112] usb 1-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40
[  190.408013][ T6112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.408031][ T6112] usb 1-1: Product: 瞧ﾗ㞯㾥᫙ᘬᄥ澮む油叿᭑陖ᶮ앪廵䲜뛫໱貸狷឵豕祡䌹⃞䛡蠔፣莒ᝬ䉙槎२凊眡詀졑햹➍ਥ䛍쿛伾跺醃恗痰㾳ⲻ兴沴蕂晡鑧ꎲ㮢ꦰ謥ⷰꎼ歹⛘ㅚ긙컑䋐㜏엚䊕뜿晭ὡ亿场큮뾅ᇖ榎
[  190.408120][ T6112] usb 1-1: SerialNumber: 랙䪅鵟氆䨏練ꆣ䆝纴Ꮼ濙맮淕飵촃篓
[  190.452210][ T6112] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  190.524979][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  190.551810][    T9] usb 5-1: too many configurations: 127, using maximum allowed: 8
[  190.553878][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  190.553917][    T9] usb 5-1: can't read configurations, error -61
[  190.554474][    T9] usb usb5-port1: unable to enumerate USB device
[  190.651029][ T6112] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  190.663134][ T6112] usb 1-1: unable to issue vendor read request (ret = -71)
[  190.663723][ T6112] usb 1-1: unable to issue vendor read request (ret = -71)
[  190.664419][ T6112] usb 1-1: unable to issue vendor read request (ret = -71)
[  190.671925][ T6112] usb 1-1: unable to issue vendor read request (ret = -71)
[  190.672867][ T6112] usb 1-1: unable to issue vendor read request (ret = -71)
[  190.673527][ T6112] usb 1-1: unable to issue vendor read request (ret = -71)
[  190.674216][ T6112] usb 1-1: unable to issue vendor read request (ret = -71)
[  190.675956][ T6112] usb 1-1: unable to issue vendor read request (ret = -71)
[  190.786870][ T6112] usb 1-1: USB disconnect, device number 21
[  190.877755][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  191.389740][ T7168] FAULT_INJECTION: forcing a failure.
[  191.389740][ T7168] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  191.389779][ T7168] CPU: 1 UID: 0 PID: 7168 Comm: syz.1.349 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  191.389808][ T7168] Tainted: [L]=SOFTLOCKUP
[  191.389815][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  191.389827][ T7168] Call Trace:
[  191.389835][ T7168]  <TASK>
[  191.389844][ T7168]  dump_stack_lvl+0xe8/0x150
[  191.389872][ T7168]  should_fail_ex+0x46b/0x600
[  191.389908][ T7168]  _copy_from_user+0x2d/0xb0
[  191.389942][ T7168]  kstrtouint_from_user+0xd6/0x180
[  191.389970][ T7168]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  191.390014][ T7168]  proc_fail_nth_write+0x8e/0x210
[  191.390039][ T7168]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  191.390071][ T7168]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  191.390097][ T7168]  vfs_write+0x2a3/0xba0
[  191.390136][ T7168]  ? __pfx_vfs_write+0x10/0x10
[  191.390168][ T7168]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  191.390195][ T7168]  ? lockdep_hardirqs_on+0x7a/0x110
[  191.390220][ T7168]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  191.390245][ T7168]  ? mutex_lock_nested+0x152/0x1d0
[  191.390276][ T7168]  ? fdget_pos+0x252/0x320
[  191.390312][ T7168]  ksys_write+0x156/0x270
[  191.390366][ T7168]  ? __pfx_ksys_write+0x10/0x10
[  191.390403][ T7168]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.390432][ T7168]  do_syscall_64+0x15f/0xf80
[  191.390455][ T7168]  ? trace_irq_disable+0x3b/0x140
[  191.390479][ T7168]  ? clear_bhb_loop+0x40/0x90
[  191.390506][ T7168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.390527][ T7168] RIP: 0033:0x7f571861d04e
[  191.390547][ T7168] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  191.390563][ T7168] RSP: 002b:00007f57168adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  191.390585][ T7168] RAX: ffffffffffffffda RBX: 00007f57168ae6c0 RCX: 00007f571861d04e
[  191.390600][ T7168] RDX: 0000000000000001 RSI: 00007f57168ae0a0 RDI: 0000000000000004
[  191.390612][ T7168] RBP: 00007f57168ae090 R08: 0000000000000000 R09: 0000000000000000
[  191.390623][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.390634][ T7168] R13: 00007f57188d6038 R14: 00007f57188d5fa0 R15: 00007ffee7b87a28
[  191.390665][ T7168]  </TASK>
[  191.851020][    T9] IPVS: starting estimator thread 0...
[  191.955108][ T7177] IPVS: using max 7 ests per chain, 16800 per kthread
[  192.195299][   T32] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  192.372234][   T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  192.372264][   T32] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  192.412906][   T32] usb 2-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40
[  192.412939][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.412960][   T32] usb 2-1: Product: syz
[  192.412975][   T32] usb 2-1: Manufacturer: syz
[  192.412990][   T32] usb 2-1: SerialNumber: syz
[  192.686816][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.691949][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.735036][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.735619][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.737217][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.737864][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.739114][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.739675][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.740964][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.741523][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.898687][ T5833] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  192.959401][   T32] usb 2-1: 0:1 : does not exist
[  192.959496][   T32] usb 2-1: unit 6 not found!
[  192.959512][   T32] usb 2-1: unit 2 not found!
[  193.040649][ T7195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.041328][ T7195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.042699][ T7195] netlink: 'syz.2.360': attribute type 21 has an invalid length.
[  193.042795][ T7195] netlink: 164 bytes leftover after parsing attributes in process `syz.2.360'.
[  193.082351][ T5833] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  193.082411][ T5833] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  193.082436][ T5833] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  193.082455][ T5833] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  193.082495][ T5833] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  193.082516][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.166118][ T5837] Bluetooth: hci2: unknown advertising packet type: 0x70
[  193.248574][   T32] usb 2-1: USB disconnect, device number 27
[  193.259220][ T5833] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  193.260351][ T5833] usb 5-1: invalid MIDI out EP 0
[  193.944551][ T7210] binder: 7209:7210 ioctl c0306201 0 returned -14
[  194.284398][ T5833] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[  194.298936][ T5833] usb 5-1: USB disconnect, device number 11
[  194.544256][ T7218] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0)
[  194.629227][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  194.680809][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  194.680928][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  194.896575][ T7226] fuse: blksize only supported for fuseblk
[  195.098534][ T7229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.099243][ T7229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.134931][ T7232] �x9�: renamed from bridge_slave_0 (while UP)
[  195.379818][ T7234] can0: slcan on ttyS3.
[  195.740091][ T7248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.376'.
[  195.886590][ T7248] netlink: 252 bytes leftover after parsing attributes in process `syz.1.376'.
[  195.991808][ T7253] binder: 7252:7253 ioctl c0306201 0 returned -14
[  196.155515][ T7233] can0 (unregistered): slcan off ttyS3.
[  196.236709][ T5833] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  196.413739][ T5833] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  196.413773][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.413794][ T5833] usb 1-1: Product: syz
[  196.413809][ T5833] usb 1-1: Manufacturer: syz
[  196.413824][ T5833] usb 1-1: SerialNumber: syz
[  196.430542][ T5833] usb 1-1: config 0 descriptor??
[  196.461158][ T7262] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  196.461176][ T7262] overlayfs: missing 'lowerdir'
[  196.668134][ T5833] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  197.726205][ T5833] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  197.768736][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.385'.
[  197.768766][ T7280] netlink: 88 bytes leftover after parsing attributes in process `syz.2.385'.
[  197.850730][ T7283] binder: 7278:7283 ioctl 4602 200000000440 returned -22
[  198.354900][ T5895] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  198.486903][ T7302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.487627][ T7302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.519315][ T5895] usb 5-1: Using ep0 maxpacket: 16
[  198.533290][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.533519][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.533547][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  198.533625][ T5895] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  198.533650][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.606681][ T5895] usb 5-1: config 0 descriptor??
[  198.647536][ T7304] binder: 7303:7304 ioctl c0306201 0 returned -14
[  198.939533][ T5895] usbhid 5-1:0.0: can't add hid device: -71
[  198.939662][ T5895] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  199.010411][ T5895] usb 5-1: USB disconnect, device number 12
[  199.057466][   T32] usb 1-1: USB disconnect, device number 22
[  199.471709][ T7321] tmpfs: Bad value for 'mpol'
[  199.472250][ T7322] AppArmor: change_hat: Invalid input, NULL hat and NULL magic
[  199.488356][ T7323] tmpfs: Bad value for 'mpol'
[  200.230714][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'.
[  200.239632][ T7342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.260799][ T7342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.814806][   T21] ------------[ cut here ]------------
[  200.814821][   T21] ODEBUG: activate active (active state 0) object: ffff88803303b458 object type: rcu_head hint: 0x0
[  200.814852][   T21] WARNING: lib/debugobjects.c:632 at debug_object_activate+0x32f/0x520, CPU#0: rcuc/0/21
[  200.814890][   T21] Modules linked in:
[  200.814912][   T21] CPU: 0 UID: 0 PID: 21 Comm: rcuc/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  200.814940][   T21] Tainted: [L]=SOFTLOCKUP
[  200.814948][   T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  200.814959][   T21] RIP: 0010:debug_object_activate+0x390/0x520
[  200.814987][   T21] Code: 30 00 74 08 4c 89 ef e8 5e 03 6f fd 4d 8b 4d 00 4c 89 e7 48 c7 c6 c0 6c ca 8b 4c 89 fa 8b 4c 24 04 4c 8b 44 24 10 ff 74 24 08 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 7c 24 18 ff 05 48 f7 0f 0b b8 ea
[  200.815004][   T21] RSP: 0018:ffffc900001a79f0 EFLAGS: 00010246
[  200.815020][   T21] RAX: 1ffffffff16dc2b4 RBX: ffff88803303b458 RCX: 0000000000000000
[  200.815035][   T21] RDX: ffffffff8bca72a0 RSI: ffffffff8bca6cc0 RDI: ffffffff8fd9edd0
[  200.815049][   T21] RBP: 0000000000000003 R08: ffff88803303b458 R09: ffffffff8b6e1600
[  200.815062][   T21] R10: dffffc0000000000 R11: 0000000000000000 R12: ffffffff8fd9edd0
[  200.815076][   T21] R13: ffffffff8b6e15a0 R14: dffffc0000000000 R15: ffffffff8bca72a0
[  200.815091][   T21] FS:  0000000000000000(0000) GS:ffff888125a5e000(0000) knlGS:0000000000000000
[  200.815108][   T21] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  200.815122][   T21] CR2: 00007f168299cfa8 CR3: 000000003a0e8000 CR4: 00000000003526f0
[  200.815140][   T21] Call Trace:
[  200.815149][   T21]  <TASK>
[  200.815164][   T21]  ? __pfx_radix_tree_node_rcu_free+0x10/0x10
[  200.815198][   T21]  call_rcu+0x43/0x890
[  200.815223][   T21]  ? do_raw_spin_lock+0x12b/0x2f0
[  200.815235][   T21]  ? kvfree_call_rcu+0xd4/0x3c0
[  200.815255][   T21]  delete_node+0x1bc/0xa60
[  200.815271][   T21]  radix_tree_delete_item+0x2ef/0x400
[  200.815287][   T21]  afs_cell_destroy+0x16f/0x2c0
[  200.815301][   T21]  ? __pfx_afs_cell_destroy+0x10/0x10
[  200.815315][   T21]  rcu_cpu_kthread+0x99e/0x1470
[  200.815336][   T21]  ? rcu_cpu_kthread+0x205/0x1470
[  200.815360][   T21]  ? __pfx_rcu_cpu_kthread+0x10/0x10
[  200.815377][   T21]  ? schedule+0x90/0x360
[  200.815394][   T21]  ? smpboot_thread_fn+0x4d/0xa50
[  200.815407][   T21]  smpboot_thread_fn+0x541/0xa50
[  200.815422][   T21]  ? smpboot_thread_fn+0x4d/0xa50
[  200.815440][   T21]  kthread+0x388/0x470
[  200.815456][   T21]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  200.815468][   T21]  ? __pfx_kthread+0x10/0x10
[  200.815484][   T21]  ret_from_fork+0x514/0xb70
[  200.815499][   T21]  ? __pfx_ret_from_fork+0x10/0x10
[  200.815511][   T21]  ? __switch_to+0xc79/0x1410
[  200.815530][   T21]  ? __pfx_kthread+0x10/0x10
[  200.815546][   T21]  ret_from_fork_asm+0x1a/0x30
[  200.815570][   T21]  </TASK>
[  200.815576][   T21] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  200.815587][   T21] CPU: 0 UID: 0 PID: 21 Comm: rcuc/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  200.815610][   T21] Tainted: [L]=SOFTLOCKUP
[  200.815614][   T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  200.815621][   T21] Call Trace:
[  200.815625][   T21]  <TASK>
[  200.815630][   T21]  vpanic+0x56c/0xa60
[  200.815645][   T21]  ? __pfx__printk+0x10/0x10
[  200.815662][   T21]  ? __pfx_vpanic+0x10/0x10
[  200.815676][   T21]  ? is_bpf_text_address+0x292/0x2b0
[  200.815691][   T21]  ? is_bpf_text_address+0x26/0x2b0
[  200.815711][   T21]  panic+0xc5/0xd0
[  200.815725][   T21]  ? __pfx_panic+0x10/0x10
[  200.815744][   T21]  ? ret_from_fork_asm+0x1a/0x30
[  200.815761][   T21]  __warn+0x315/0x4c0
[  200.815775][   T21]  ? debug_object_activate+0x32f/0x520
[  200.815791][   T21]  ? debug_object_activate+0x32f/0x520
[  200.815812][   T21]  __report_bug+0x29a/0x540
[  200.815829][   T21]  ? debug_object_activate+0x32f/0x520
[  200.815845][   T21]  ? __pfx___report_bug+0x10/0x10
[  200.815857][   T21]  ? __pv_queued_spin_lock_slowpath+0x2e3/0xbc0
[  200.815878][   T21]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[  200.815898][   T21]  report_bug_entry+0x19a/0x290
[  200.815912][   T21]  ? debug_object_activate+0x390/0x520
[  200.815926][   T21]  ? debug_object_activate+0x395/0x520
[  200.815941][   T21]  handle_bug+0xce/0x200
[  200.815958][   T21]  exc_invalid_op+0x1a/0x50
[  200.815975][   T21]  asm_exc_invalid_op+0x1a/0x20
[  200.815987][   T21] RIP: 0010:debug_object_activate+0x390/0x520
[  200.816002][   T21] Code: 30 00 74 08 4c 89 ef e8 5e 03 6f fd 4d 8b 4d 00 4c 89 e7 48 c7 c6 c0 6c ca 8b 4c 89 fa 8b 4c 24 04 4c 8b 44 24 10 ff 74 24 08 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 7c 24 18 ff 05 48 f7 0f 0b b8 ea
[  200.816012][   T21] RSP: 0018:ffffc900001a79f0 EFLAGS: 00010246
[  200.816022][   T21] RAX: 1ffffffff16dc2b4 RBX: ffff88803303b458 RCX: 0000000000000000
[  200.816030][   T21] RDX: ffffffff8bca72a0 RSI: ffffffff8bca6cc0 RDI: ffffffff8fd9edd0
[  200.816038][   T21] RBP: 0000000000000003 R08: ffff88803303b458 R09: ffffffff8b6e1600
[  200.816046][   T21] R10: dffffc0000000000 R11: 0000000000000000 R12: ffffffff8fd9edd0
[  200.816054][   T21] R13: ffffffff8b6e15a0 R14: dffffc0000000000 R15: ffffffff8bca72a0
[  200.816075][   T21]  ? __pfx_radix_tree_node_rcu_free+0x10/0x10
[  200.816094][   T21]  call_rcu+0x43/0x890
[  200.816113][   T21]  ? do_raw_spin_lock+0x12b/0x2f0
[  200.816125][   T21]  ? kvfree_call_rcu+0xd4/0x3c0
[  200.816144][   T21]  delete_node+0x1bc/0xa60
[  200.816159][   T21]  radix_tree_delete_item+0x2ef/0x400
[  200.816176][   T21]  afs_cell_destroy+0x16f/0x2c0
[  200.816190][   T21]  ? __pfx_afs_cell_destroy+0x10/0x10
[  200.816215][   T21]  rcu_cpu_kthread+0x99e/0x1470
[  200.816251][   T21]  ? rcu_cpu_kthread+0x205/0x1470
[  200.816289][   T21]  ? __pfx_rcu_cpu_kthread+0x10/0x10
[  200.816315][   T21]  ? schedule+0x90/0x360
[  200.816331][   T21]  ? smpboot_thread_fn+0x4d/0xa50
[  200.816345][   T21]  smpboot_thread_fn+0x541/0xa50
[  200.816362][   T21]  ? smpboot_thread_fn+0x4d/0xa50
[  200.816380][   T21]  kthread+0x388/0x470
[  200.816395][   T21]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  200.816408][   T21]  ? __pfx_kthread+0x10/0x10
[  200.816424][   T21]  ret_from_fork+0x514/0xb70
[  200.816438][   T21]  ? __pfx_ret_from_fork+0x10/0x10
[  200.816451][   T21]  ? __switch_to+0xc79/0x1410
[  200.816469][   T21]  ? __pfx_kthread+0x10/0x10
[  200.816485][   T21]  ret_from_fork_asm+0x1a/0x30
[  200.816508][   T21]  </TASK>
[  200.816770][   T21] Kernel Offset: disabled