last executing test programs:

19.06684327s ago: executing program 0 (id=1913):
socket$key(0xf, 0x3, 0x2)
socket$inet6(0xa, 0x6, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r0 = inotify_init1(0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
dup(r0)
socket$kcm(0x10, 0x2, 0x0)
pipe(&(0x7f0000000100))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x4c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x700}, 0x0)

16.494885313s ago: executing program 0 (id=1916):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x5a3200, 0x0)
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0x22a801, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000012c0)={0x2})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip_vs_stats\x00')
preadv(r2, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r5=>0x0})
r6 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r6, &(0x7f0000000000)={0x1d, r5}, 0x10)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1}}], 0x10)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20080000}, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x4d)
bind$alg(r1, 0x0, 0x0)
r7 = epoll_create1(0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000ac0)={0xa0000008})
socket$inet6_sctp(0xa, 0x5, 0x84)
io_uring_setup(0x63bc, &(0x7f0000000140)={0x0, 0x9997, 0xa51, 0xfffffffd, 0x29e})
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000001280)={0x4, 0x4, 0x81})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x40}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x1}, 0x0, 0x0)
r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a42, 0x0)
write$sequencer(r9, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x8)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000340), &(0x7f0000000380)=0x4)

7.724987554s ago: executing program 3 (id=1931):
syz_usb_connect(0x0, 0xa7, &(0x7f0000000640)=ANY=[@ANYBLOB="1201062592d7c610f00a31704378010203010902"], &(0x7f0000000e00)={0x0, 0x0, 0x17, 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="7b18000000000000631177000000000007000000000000009500230100000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r4 = dup(r2)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90424fc605800024004000400060082c137153e", 0x23}], 0x1}, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000d92a2733949d8371d7415ad36839f27865bda30ffb9f2ccd98fe2876c3e860d5282a1f20129ee22204face58290e6e0d076f742fa5d499d92a70eb89e26842bb48ded85414559e61be99b5078190381f99000a29e166eb0e3cf5b9fc803dfb8a95a68162fe13032ea23257f14116c5703a30aed0091b30a8299433931f713b0d0191933a8f6aaf5c8518c76308a3e7bde643c3b4676b8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000020000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000800000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a00000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000100), &(0x7f0000000140)=r8}, 0x20)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0", 0x1}], 0x1}, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r9, 0x84, 0x81, &(0x7f00000002c0), 0x0)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r9, 0x84, 0x16, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x100000)
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYBLOB="12010000e5c8cf40480b0d30a0ab00000001090212000100000000090400000001dd3900", @ANYRES64=r6, @ANYBLOB="8639a151c739f46464611447bb5f1db625b4c366ea35aea9e21c45f651f7d7b667db656228d1216844c3"], 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x8801, 0x0)
ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5100)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)

6.446677039s ago: executing program 2 (id=1894):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r5=>0x0})
r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f})
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
read$midi(r7, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r8, 0x5100)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000001100)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000040)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000000)={{@host}, @any, 0x0, 0x0, 0xffffffffffffffff})
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7916009875f37515e486dd6317ce62030800000000000000000000875a65969ff57b00000000000000000000000000ac1414aa04"], 0xfdef)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000080)=0xc)
r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$FUSE(r10, &(0x7f0000001ac0)={0x2020}, 0x2020)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d30006a6ee8d7d9f96e172203c11c8", @ANYRES32=r5, @ANYBLOB="00000000000000000c001a800400058004000480"], 0x2c}}, 0x0)
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0100deffffffe3001c0000000000000000000000070000004404730001000000"], 0x40}, 0x0)
munmap(&(0x7f0000005000/0x4000)=nil, 0x4000)

6.158156731s ago: executing program 1 (id=1932):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x30, 0x1405, 0x1, 0x0, 0x0, "", [{{0x8}, {0xfffffffffffffee5}}, {{0x8}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x7a}, 0x0)

6.157654537s ago: executing program 2 (id=1933):
getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0), 0x4903)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000780)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in6=@rand_addr=' \x01\x00'}}}, [@mark={0xc}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0xd8}}, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev, 'lo\x00'}}, 0x1e)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000300)={'xfrm0\x00', &(0x7f00000002c0)=@ethtool_dump={0x40, 0xfffffffe}})
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00))
sendto$inet(r0, &(0x7f0000000100)="a14ab4c0ef64c3184dc684ead2107a59be5aed1b44e3c0d44f1c2535604e39724235e29e1ffd82e36916ab6735ad069ba07b5df7b79d8421fe400be98e124f04b37f3a711cdd46668da2304c588fd834724789e3459768e03dd150174c81f722368a840ce42d1d5b0a08af9cf126ea46cef8b55efcbf85e8779e5201a64b2de662d2b426f4886a0f2c5a10d06bd1de9747ce30650ce837063c3d534d62fd189998c7591f425a31f2af1e935433ad6251954113ae8e153ecd26ad7f53de40a82a1aac175c818fe54b13ef3dd8", 0xcc, 0x4000, 0x0, 0x0)

6.003111136s ago: executing program 1 (id=1934):
syz_usb_connect(0x1, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0xa5, 0x3e}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0xf, &(0x7f0000000b80)=ANY=[@ANYBLOB="050f0f00010a1003000000000000f3"], 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x2, 0x66000)
ioctl$RTC_VL_CLR(r0, 0x7014)

4.349078357s ago: executing program 3 (id=1942):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r5=>0x0})
r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f})
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
read$midi(r7, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r8, 0x5100)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000001100)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000040)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000000)={{@host}, @any, 0x0, 0x0, 0xffffffffffffffff})
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7916009875f37515e486dd6317ce62030800000000000000000000875a65969ff57b00000000000000000000000000ac1414aa04"], 0xfdef)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000080)=0xc)
r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$FUSE(r10, &(0x7f0000001ac0)={0x2020}, 0x2020)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d30006a6ee8d7d9f96e172203c11c8", @ANYRES32=r5, @ANYBLOB="00000000000000000c001a800400058004000480"], 0x2c}}, 0x0)
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0100deffffffe3001c0000000000000000000000070000004404730001000000"], 0x40}, 0x0)
munmap(&(0x7f0000005000/0x4000)=nil, 0x4000)

4.139004547s ago: executing program 1 (id=1943):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0xc00)

4.128348579s ago: executing program 4 (id=1944):
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0xe, <r0=>0xffffffffffffffff, 0x2})
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000faa8f92c9079af93810a57e5fd000000000000000000fc974e43a08cd06b9e7eb724352ec5ddb59f6d2054b62893afc2dac6c4cdd84e7f59ec43e12058e6e665cd38781c306ca44fae8603e0c4973e195393b348542443412e5aff7662123afe2c1090a36ee32a6a623f309a4803bb68ce9d73be62185da9a316fc07fdc2e94318fe715d90cf345b0e048f3fb40d3065452c1d8a830829aca8c00a00438ce95da3607d2e4bfacb9d422486560a4af5480a8ae7d1ce348fe8ce57b37350558a2b51096ae277d84c9b84c1ee8e749b119f7717ae3dd4e2e3d940379fc94b65eb5ff87bef1bea482da6523c87dbedcc02e6ba05c807175aea1db5806de60ac7a75b7624586ecb05087ecd831d706c32908b6fe99d4ec97cababc81cc067fd752f38749a31b629f10571974943c59c3f850e84c28feac124aa016fedc259715f3a52a6c3075b21605f4024a863a437092945b081255e34884bb18b7976c2fc81c2628f905023df6c0d1591a2314afa3a16a43128b428e24f85ef6bfd6b59133fbe5260c96fa479f3c8b247f7c49d53f00730ce80f529ec1938fda67301215bd9f95f3418222e1c95e8e6809ef21d4408fafd5f21f7c92ff4befba2f48a0529407cfdd23fc558cf24a3f1b9dbf1918004551d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r5, &(0x7f0000001e40)={&(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44008}, 0x4000000)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x47, &(0x7f0000000740)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "01f5a0", 0x11, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @opaque="9cf45339bd639da3dc"}}}}}}, 0x0)
r6 = gettid()
process_vm_writev(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/175, 0xaf}], 0x1, &(0x7f0000003b40)=[{&(0x7f0000000680)=""/94, 0x5e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', <r8=>0x0})
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r8, @ANYBLOB="0a0002000180c201000000000a0001000d"], 0x54}}, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x81000)
write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\x00'}, {0x20, 'kmem_cache_free\x00'}, {0x20, '\x00'}, {0x20, 'kmem_cache_free\x00'}], 0xa, "b8108f228bc104b1f67221c36c903c9b73be7e695d76fa5ccb143a4d84ebf70f91dc36a9aa02f8f54c75d36b1591c94355de9f33cf50eb2023b16730614d7dd7c95b89925241c44254ac217243bd7c76cba7529270bbe770ecbe5ccb97fcaadc7312c3575f71f616498d3c284ba944f79a72788ecac770bc511deae930d54af3fc8055fd51d8bc5b1b643e53cde044639696790b9ea03f9c386cf12433d7aabc9c6728ad8d4b075873f05a9d6329e3dc832a6622be9b855e"}, 0xe9)

4.076357368s ago: executing program 3 (id=1945):
prlimit64(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0)
unshare(0x400)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = socket(0x0, 0x0, 0x0)
unshare(0x8040080)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x101}], 0x1c)
io_setup(0x0, &(0x7f0000001140)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_TUNER(r3, 0xc0405627, &(0x7f0000000040)={0x0, "f8f44fa604e0937938b160bc0f359ebf496ac2d64cd825060102dda9631d379f", 0x0, 0x0, 0x4, 0x0, 0x2, 0x2})
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffeb0, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r4, &(0x7f0000000580)=[{&(0x7f0000019940)=""/102397, 0x18ffd}, {&(0x7f0000019740)=""/242, 0xf2}], 0x2, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000000011000300686173683a69702c6d61726b00000000050001000700000005000500020000e90800020073797a300000000005000400030000009a93adbbc69618729563dc7cd7f9a20e18f22013fe"], 0x4c}}, 0x0)
r6 = fsopen(&(0x7f0000000040)='proc\x00', 0x0)
fsmount(r6, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000070601080000000000000000000005000100070040000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf2516000000340007800c00030004000000000000000c146bfb8b0900040000000000000000000c000400feffffffffffffff0c0003008802000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

3.934919938s ago: executing program 1 (id=1946):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e9321000301090222f2c3120001000000000904000000d2"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000240)={0x20, 0xd, 0x1, "8a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0)
add_key$keyring(&(0x7f00000002c0), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1)
syz_emit_vhci(0x0, 0x0)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0)
read$nci(r2, &(0x7f0000000100)=""/107, 0x6b)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000400), 0x4)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040f0004010b0842ebe0d830ab83660e748861e92ceaaac440c290188ec578870547968073d194cf4eeb0b8d120b46989afce9f1ae61301f27f609b1ff159882e32bd2feca9a57ee262166f475479aa34c4b416c9f4614391d0c0ac980c498386790a1d2ce240b77baacf84a9678c9b6ddb8be63f3701660d06f6ccc38a042a897ebd6719f657d5c5fd41b07cbcbe242dbe4e0c09b58feb856863fd83bdd78c2da5a941f417b7c573c2ba814d2be83d46355f93e98450197d66a63ab97f02bb758ed792698fa3f76fb4c95d25ad5e426f8c644b3e0"], 0x49)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)

3.817768821s ago: executing program 4 (id=1947):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010"], 0xec}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet(0x2, 0x4000000805, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r4, 0x3)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @loopback, 0x7}, 0x1c)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x8c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x58, 0xe, {{{}, {}, @device_a, @broadcast, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a, {0x20, 0x0, 0x1, 0x0, {0x2, 0x1, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}]}, 0x8c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x0}]}]}, 0x58}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000000300)={0x9d7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r11=>0x0}], 0x9, "ee447d983d126b"})
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001300)={{r11, 0x1, 0x12, 0x101, 0x7f, 0x8, 0x8000000000000001, 0x7, 0x5, 0x1ff, 0x7, 0x0, 0x4, 0x7ff, 0x81}})
connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
accept4(r4, 0x0, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0)

3.765207421s ago: executing program 0 (id=1917):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x5)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_triestat\x00')
unshare(0xc040400)
fcntl$notify(r3, 0x402, 0x8000003d)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
fsetxattr(r4, &(0x7f0000000000)=@random={'trusted.', '\x81_rUa7\b\xde\x8fKS\xbeM\xfbh^8\xac\xc0+\x80b0(\x9c\x0e\x8a\x88\xe3V\xedM\xfb\xd4\x1b\xec\n\xe0N6\xc9\xa8\x98=\x16\x12\xc17\x0e\xa5\xc4\x057\r\x8aI-\xd9!j\xb7\xf5H\x805\x95\"\xd9\x8f\x06\xf7\xde\xbbJ\xaf\xcf\xc2\xc3\xae\x8cDab\x86C\xd0 \xb1x{N\x06\xa64\x19)\xf1NX\xfd\xd1uI\xb7X#\xb4Et=\x9c\xa1\x05\xe4\r\x82R\xcf\x96\x8a\x90b\xf7^\x1a\x1d\x95\x7f\xa2\x9f\x10\xfb\x04\x16\x96\xa2\xbd5\xe7q\xa0\xda.-b%\xb3\xc6\x8c\x16c(\xcb\xa6\xae\'\x1a$\xf3\xe5U]\xd8\xf1\xdb\xed?\x10\xc6\x82@\xed\xf9\xb2{\xe4\x98zA\xd1\xcc\x864\x1eV&\xdd\x16\xacc@<j\xd8\xf7\xf5F\xa8o\xcb\f0C[\xf5\x12\xaf\xba\x80-\xccJ-(3;\x87e\x9a\xede@?\x8d\xae\x91\xdaQ\x1f\r\x10\xf3\xe2\xa6\x0eJ\xb6\x83\xb0\x7f\x04DP\xf5\xab\x06%X\x8ak\xb0\xae\xd9\xf1\xc5n\x8f\xf0\xac\x88\xf67=<\x00\x061\xbd\x1b\x9a\xa4\x9f\xb3\xbbq\x9a\xb49S\xb6Bu\xebD\xd7\xb2\x85\xec\x81\x18\xba\xf9S\xba\r\n\xf3\xb5\x85/\xf5\xe8\x87\xc5\xb9\xa1\xca\xe9\xbd\xdd\x9c\x06\xd4\xce\xfb\xe9\x10\x95\xb6\xde\xcc\xf3\x00\xb1\xd3\x1a\xa9\x86\xe2\xa4\xbe\xceYf\xfb\x06o\x80\xec\x8a1!\xaa\vr\xceG\xc1X\xc0U\xb8h\x9bjAp0o^\xcc\x8ac\x7f\xc6\xc6\xac\xd6\xcd7\xe7\x96\xaar\xed*w\xd6\x8aK\xdc\xe50\xaa\xf0\xa0>\xb2\xe9\x9eB\xf27\x02\xdf\x91;l\xb1`o\x1b\x82,\x11\xebL\xea\xefp\xca+\xff\x81\x80V?\v\x80\x9b\xb2\xd8!\xa25\x99\xe2M\xe6\x82O\xb4k\xd3\xde?\xc9\xd16hM\x8e\x8a\xdf\xa8\xe4]\xfb\xecC\\'}, 0x0, 0x0, 0x0)
fcntl$setown(r3, 0x8, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x20}}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000"], 0xb8}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xaa, 0xbe, 0x1f, 0x20, 0x4e2, 0x1403, 0x1cb2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x78, 0x39}}]}}]}}, 0x0)
r8 = signalfd4(r2, &(0x7f0000000040)={[0x4]}, 0x8, 0x80000)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)

3.263029064s ago: executing program 2 (id=1948):
socket$inet6_tcp(0xa, 0x1, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000110000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000000000d0001007564703a7379"], 0x54}}, 0x0)

2.968322062s ago: executing program 3 (id=1949):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b80)={0xfdc, r2, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x11}}}}, [@NL80211_PMSR_ATTR_PEERS={0x20, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}, @NL80211_PMSR_ATTR_PEERS={0xf9c, 0x5, 0x0, 0x1, [{0x544, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x74000}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x21c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x138, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc09}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc0}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffb}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x23}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfc00}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x65}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3c9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}]}]}, {0x37c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x310, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7e0}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x34}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x201}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xaf8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x8c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x76}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x317}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x5a0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x144, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xaf}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x31c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xfc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x5c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d7}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}]}, {0x4}]}]}, 0xfdc}, 0x1, 0x0, 0x0, 0x50}, 0x8000)

2.967804571s ago: executing program 2 (id=1950):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002a40)={@ifindex, 0xffffffffffffffff, 0x26, 0x2000, 0xffffffffffffffff, @value}, 0x20)
socket(0x2, 0x800, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$hiddev(0x0, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102379, 0x18feb}], 0x1, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4004, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r1, &(0x7f000001aa80)={0x2020, 0x0, <r3=>0x0}, 0x2020)
socket$igmp(0x2, 0x3, 0x2)
r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r4, 0x40000000af01, 0x0)
write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r3}, 0x50)
read$FUSE(r1, &(0x7f000001cac0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r5}, 0x10)
syz_fuse_handle_req(r1, &(0x7f0000004940)="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", 0x2000, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40086602, &(0x7f0000002740))

2.858979557s ago: executing program 4 (id=1951):
r0 = socket(0x18, 0x0, 0x0)
connect$pppoe(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x1}}, '\x00'})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8040, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/242)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCGFLAGS1(r2, 0x40047452, 0x0)
write$khugepaged_scan(r1, &(0x7f0000000000), 0x8)

2.732038944s ago: executing program 4 (id=1952):
r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x6e, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000100)={0x49, 0x2, 0x0, "d569e8000000fa44966262631e8ac11e00", 0x43564548})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r3=>0x0})
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000000)=0x800, 0x4)
bind$inet(r4, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10)
setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f00000000c0)={0x0, 0x4, 0x9, 0x27b, @vifc_lcl_ifindex=r3, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
recvmsg(r4, 0x0, 0x100)
bind(r0, &(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x1, 0x3, 0x40, 0xe, "2872494dc012f443bd337061a6beeb86fa293558f307763a8cc1aadedb2f1e5ed125780800d30412655d409ae00a8f2238be4e3aa6a3cc2cb5651d79a98ad8", 0x30}, 0x80)
r5 = memfd_secret(0x0)
fchmod(r5, 0x5ded3cbc6034e4ca)
r6 = fcntl$dupfd(r5, 0x0, r5)
fchown(r6, 0x0, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCSIFBR(r7, 0x8941, 0x0)

2.668586209s ago: executing program 2 (id=1953):
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_usb_connect(0x0, 0x463, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0xe4, 0x81, 0x2e, 0x40, 0x2109, 0x711, 0x568, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x451, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8e, 0x0, 0xf, 0x68, 0x4c, 0x71, 0x0, [], [{{0x9, 0x5, 0x3, 0x0, 0x20, 0x2, 0x3, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xc, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x628, 0x5, 0x5, 0xd8}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x3, 0xff, 0x40}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x4, 0xfa, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x1c, 0x5, 0x5}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x3, 0x7, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x526d}, @generic={0x73, 0x6, "10c8e612baee4508546f09443fe0912d0bc7c2d2a19c3b5a14a930c9799d5d534c1704d18c3e2080ad81cdbac4f8067519f2b3e5df564f291b038c79c9c27a0c04257e3fa5fcd65a8ab7c320a58d4b3ffd6ed8bc25b82b5031db34a537d666c32c974d106e71273e3a994c6780f8e71c97"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x1, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff}, @generic={0xb, 0x30, "6209d63a4c56412ed2"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x60, 0x3, 0x9, 0x6, [@generic={0xb0, 0x0, "f7cb3d6db47e3d5d72f05118c9bd22b6bdcebea1187560dea60e95c85ba0b45f4e1b66ae8f87d5722f4a89aaa777c7959caa874a6e29abaa75e719a2cee61d55f54972e3f59324a90832acfb4e391d8de5aa2162df2d9a62c765492976add54383dcf2fc6dd13ffc7419e349ad2584ad6e6cc7f25aaff22985b41efed66770135d43115d6e7e2184bd137371ef4c893ba4669e5c18f75cd235e9fe3b96c8f3c4fd6ec5cf728d5bf43fec7d593af5"}, @uac_iso={0x7, 0x25, 0x1, 0x2d38374af523bdfa, 0x8, 0x9}]}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x8, 0x7, 0x6, [@generic={0x9f, 0xc, "244bfc2215db71e1ad0a336b1389e91c175e34794b8c47d3187af96a095553963a974ead57b6204b0307aaefafd0a27e8d018178137b81896ae590e5ba11b15f9b8ee0e32a1ccd29e063731be9dda8f359d5e162bdc092ca2e7b97e023e34ffe7e9e28a0605ea19d134c7497a4e58988829c7cef00e69a87bc09bde7cc52a80263b6cbe76f2ced26a3276c3077e77e2e05c32c2f73cba0ae5e27da71a2"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x200, 0x3c, 0x6, 0x5, [@generic={0x58, 0x8, "df162d9d6cb973c27cfced8471f576fbf601fea22745a8c3adf706fe55ff36bfea44b7f306fd9eb6743a24c6fa9eb8586e339df4c4c7cf0828ec8aa31bb27a08494a7c05bc18b99e9f3d00f801e1d1133bba49e079ac"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x80}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x9, 0x7, 0x38}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x8, 0x8, 0x5, [@generic={0x6, 0x3, "d6fdc6c3"}]}}, {{0x9, 0x5, 0x5, 0x12, 0x40, 0xa5, 0x8, 0xdf, [@generic={0x7b, 0xf71ca6f2afcf96c9, "a2edb70312744b91cde6b091d8ac40d0c98b80f2051d0c1c0c5cb1e97cc606c72b538370a0a6cd94472c6d9b19c4197cae39e51b6525197399a61144638682ce7ac640431ee364124896225b2784d15624fa4cfd6693775840fd9fedab8c4a2d2eb231c744fcbd8bc64d040b471e52e168dae92b272cda8580"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0xf, 0x2, 0xe8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x1}, @generic={0x88, 0x6, "35d9c5afc29d90a5b18a40ce1b78322f3de45e120c533dca1e6b90c6b707ff70d538d950fa2ffb98879272a9c8ba5b64402defa6ebeeaf1f0a051eb60d3f0706fa0adf6509b564e6450cffafb8015a0d52b47090d517660e499fa9b77d994b55098d97fb9e0938dd9bedd161f2fd9e6383d51f4eb1ee2fb376f26ccf3c4e10e5e6d9888744bd"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x4, 0xf, 0x1, [@generic={0x59, 0x4, "94c2207c3e6f050586be2532763e5246c7ec69930e524fc6235204369015cdca3e9cba256d64bb86b0642c986d736a614fae28734822f4f823a2ca565b605175e9cba27fe6873a95beed229f5426d4d5b716a013a9a2b7"}]}}]}}]}}]}}, 0x0)
epoll_create1(0x0)
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x5, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', <r2=>0x0})
r3 = socket(0x1, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="6110bd000000000095", @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$NFT_BATCH(r5, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELTABLE={0x124, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xf5, 0x6, "bce3b27b27b5a38d3e6fdc6b4b5e3540ad59357e05e50a473c55ffe80c99108d303d69074296cc3b5c7bd1e9973334e5eaebdb15521d1840d7808cd0faa3330aa0b18fa0c1cfa171df5ba02a4700a36ebb7b8cef1812d24f48c78fc1fd21db0d44e07e885cfa2687f13dc47a8387ef1400bfe9469a7b90399359814100d3a0fa8b95b0ce64af26caf3b86e395de423133cafd93a4ebb9fae1d4e51302820e3013b0983c9923f6fb491ee2ca980130281bcee845540edfa8091fd1cc789eb888d8589efa4fb7a22a21e0157656a84d12f64c4ee2076fc44488bb7e532103e674f8b44687d652b9051308d8e30449bffe564"}]}, @NFT_MSG_DELSETELEM={0x6a8, 0xe, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x650, 0x3, 0x0, 0x1, [{0x64c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x224, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "bfafdad8bec0c7ae2e4fd53ef378a0aa1a4844557c76f1b48ec56196568232ebf14e12b0d535ef3c220165deac9c7e1fcb88ceba069a185b8ef198068c28136b2b5c94649374ceaa6614722e54054cf867400b34fd5a4e09de187ba700afa6607c231d537f8aa8d9ad7473260a128ffede"}, @NFTA_DATA_VALUE={0xf1, 0x1, "2a81ddc5af6970cf2e9a3535aaac2aba0a3f3b3c544b639f37c3506a07467f56053d50bef5c74273d4b934627642bc6e8381d6f61c61f8f06397b934d6f6d10e23e876cf96acebc2d294886b53738cab47e6483d71d65cedaf9a9ee0eea0567c35ac7e2505da940b6d5b9463edcb291ae548bb68abc0f641a8ff7415ae2fba952b7764945e7938ba2a7da3e92a0f76aa4e18163107b1e36524eb8a121abfcb18f5d96ad554be299e919463f27cf55ffea220efe11366e5671803b63e13a4cba86d5f9b1f5af6b49ed16ed90143ef17449a8ba893bc667d726df2609feff09f94fd47a7133ff0280dba5d2375d5"}, @NFTA_DATA_VALUE={0xb1, 0x1, "b1a06035003ef2bfc55ee64903f4741795c68d1ceef7dfc08567d45eebea4b5cea0990e7f82b28c1bc27e771a43d922f503c1335a93ab2548afe60c7c157d8dd4b4a8a7711d784e0fe562eb1f5cb67a5ea32cc3a323f1e3768522547013744cc780b9f30b55411043dfd429f352c5be9c9fa605ab22e9c951f72ecbc1d0520350caa8fc93907e87e3681ee228f856a1aebcc70af16b7a443bca16515eca56adfb31fa3e1b520560ef41ab89ea7"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_USERDATA={0x409, 0x6, 0x1, 0x0, "ed0cd9db0e777f92e040fc6936f882189bc10feed9333729cfa25c0f8055f08412d6f97e96fa74664cc30c7d30252c4d45b020679d1eef693c3b20b4e90b705210da9a668969a03b6e1331e48b528313eec8f5b49a084b69d321b313e558a4bdb1e65b9dc2635083f0d885fe75bb438c8fbc368ad24d85176ce7349d347b75b46eb0afd9073fe03cfed88cf1aa069b2f2b036aa72fdb2669f271b77a31aa0720743d44367c12728214097ce17b6e5e508a47aeea27fdaa7567973d145dff91757f079c65f143c15b56df2ad3ec039ef23b4af4793e5ca5115c60374cc46012ae71d91ab2727439d51c3975600b65b44aa9c26268a664e68d372789d2f12dfee04c8e57c81fb0d7e651aa489fc68dd679a650faa505295dc84d49ecbd5f77a1828cb06f3ea96e5faf8e6300d5483b7f6e28fb0109f541498c7c7dcbbe60964a18d858cae032b613c8d4118fdfdd889d05b602568fc5870bc12b502698c9f36b87c92ddb99804375aa04f27ba9c784291397b3294bb506fedb2c8494eb7ce82936ed2fab272a664bcdbf802624c54235d3d7e3858ab4e1189debaf78ed26aa458eeff06250f032d09a808738459620a1e6e1f9a4199468fdbedfff130cc9739a8712466f965bcc3b3ca4b8d3514a073944ca0a05fd2db29a9938a129b44bfedb22d339a0222a34280db646930386f7a031e6d92c40fa74ac7da294441590c1bac54ee6bfa408db9041770021e92da35b9b766b0043843db6f81c5d54d8690094bef7ddd2e8c894aec7e338155c6c762f45c54851d5549614c98e4183a3b7fd5cd67c1d15b9a79c3033a578120a0da644f8810021fe826c89990b9a421248fb9a8a128fde65074519ec0127b95c904c0b0648d81cb5cdb86c454d6002fbfeb7083be99032bf45296d4a9e3802c511a9356fe60d96484519d08708df35102f369446ae72490ef4551d87b01c94043faabd3356e4a5fd593c9ca4bc349b1e9e3bdd53cc3c97677ce5ecee9664fd88c70c002a4348d141e3e1e3a723d85508cdc0bba8f479e30d3d0eef9871c592d4bbe72d06263de0cffe509d1b7f6ec0c5ad8d17146f2b10a8536df7c0871e76bf84ef12440dfdd0e6a1b250f8d8b5157fe9bf19dba213d0f28646980cd8473141db07f3cf08eb5610456ea50b271a85dabd7f25a01fdffbc44a8d6c310304a28f096b470598de85bb1e8d2a675a2e4b04370c879086d8c941af5a53da435439089f1e7540db0c34e48f640d6736eee519d431ce97b7b717c5232c67faa84e364a377e253137ea9927018fb6e9c76af6625b5cc10dc7b1eec9fe59e1a59898be1298cc3b4a4804010f96001648d7d6b55ef7aa318661327d2540cfe7a19637de62a2c74e7406f5874c6e7bc018722b507a71f143ed59ef6ffca82eaea2274afc1a4a0394938c790498ee55abda48eab3b87e00751cf6888ed102"}]}]}]}], {0x14}}, 0x7f4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@bridge_getneigh={0x1bc, 0x1e, 0x20, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x80, 0x200}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xf}, @IFLA_TXQLEN={0x8, 0xd, 0x5}, @IFLA_CARRIER={0x5, 0x21, 0xf7}, @IFLA_VF_PORTS={0x170, 0x18, 0x0, 0x1, [{0x9c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x100007}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d7659c6e2adad2df3c71965f75efba03"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "86467af1de34daf555ade466536596d8"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "05b1545bd92a35ea31990d7a8fde10e1"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0xb83}, @IFLA_PORT_VF={0x8, 0x1, 0x7ffffffb}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c7ffa4b03269a2694e983086235c2cbd"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1f173014a1d51be73b1a823d06c6b990"}, @IFLA_PORT_INSTANCE_UUID={0x14}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x60a}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_PROFILE={0xe, 0x2, '/dev/fuse\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '#\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "fc36272b56817e885d1c8487ef4e00a6"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "18a6ef47dd40158cb3da0675012b382e"}, @IFLA_PORT_VF={0x8, 0x1, 0x7f}, @IFLA_PORT_PROFILE={0x6, 0x2, '\\\x00'}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "3fef9c45b01aeee5a34eca5a41c96780"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "21d30862904f4af8e26ef94c5be020f9"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "15c0a314433cda0e39e79dd0e0d7eae5"}, @IFLA_PORT_PROFILE={0xe, 0x2, '/dev/fuse\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "41f821a969bf6e695f73575cb8560c08"}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0x401}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x1bc}}, 0x0)
ioctl$SNDRV_PCM_IOCTL_DROP(r0, 0x4143, 0x0)

2.667621083s ago: executing program 4 (id=1954):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r5=>0x0})
r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f})
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
read$midi(r7, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r8, 0x5100)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000001100)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000040)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000000)={{@host}, @any, 0x0, 0x0, 0xffffffffffffffff})
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7916009875f37515e486dd6317ce62030800000000000000000000875a65969ff57b00000000000000000000000000ac1414aa04"], 0xfdef)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000080)=0xc)
r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$FUSE(r10, &(0x7f0000001ac0)={0x2020}, 0x2020)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d30006a6ee8d7d9f96e172203c11c8", @ANYRES32=r5, @ANYBLOB="00000000000000000c001a800400058004000480"], 0x2c}}, 0x0)
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0100deffffffe3001c0000000000000000000000070000004404730001000000"], 0x40}, 0x0)
munmap(&(0x7f0000005000/0x4000)=nil, 0x4000)

2.59163779s ago: executing program 4 (id=1955):
openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x801, 0x0)
pipe(&(0x7f0000000080))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_io_uring_setup(0x64ae, &(0x7f0000000140)={0x0, 0x86c3, 0x10, 0x2, 0x0, 0x0, r1}, 0x0, &(0x7f0000000380))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000200)=0xfffffffc, 0x0, 0x4)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f00000002c0)=[{0x91, 0x0, 0xfa}, {0x106, 0xa, 0x0, 0x2}]}, 0x10)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002a00), 0x428, 0x20000000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
r2 = socket(0x28, 0x5, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x28, 0x6, 0x0, 0x20000000)
syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x101301)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"})
r3 = mq_open(&(0x7f00000000c0)='!selin\x95}\x06a\x03\x00\x00\x00\x00\x00\x00\x00\xa8x\x00\xb97\xb7', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r3, &(0x7f0000000200))
r4 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x1})
syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0)
io_uring_setup(0x1f0c, &(0x7f0000000240)={0x0, 0xf926, 0x400, 0x1, 0x188, 0x0, r4})
close_range(r4, 0xffffffffffffffff, 0x0)
mq_notify(r3, 0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xd}]}, 0x30}, 0x1, 0x0, 0x0, 0x42844}, 0x4000000)

2.422903996s ago: executing program 2 (id=1956):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) (async)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', r5, 0x0, 0x0, 0x0, 0x1000, 0x6b, @empty, @mcast2, 0x0, 0x20, 0x10001, 0x20000005}})

2.038486338s ago: executing program 3 (id=1958):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_aout(r3, 0x0, 0x6a)
splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0)
readv(r2, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x94}], 0x1)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x800, 0x0)
write$binfmt_elf64(r1, 0x0, 0x0)
close(r3)
syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000000)=ANY=[@ANYBLOB="1201b0c63e0739086b1d01014000010203010902c80003010000730904000000010100000a24010000060201020c24020502020602060006ff090401000001020000097801010101020000072401090100000924020206000300060c240201270320cbb2bb9bcb0905010900021f0504071001000006000900020000040000000904020101ff"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008aec1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r6, 0x325}, 0x14}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
r7 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_connect(0x0, 0x4f, &(0x7f0000000040)=ANY=[], 0x0)

1.670282127s ago: executing program 0 (id=1959):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @local, 0x20}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}, 0xb00}], 0x3, 0x4001c40)

1.458717719s ago: executing program 0 (id=1960):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000004c0)={0x400, 0x300, 0x2000, 0xf0, 0x0, 0x0, 0x0, 0x2, {0x0, 0xfffffffc}, {}, {0x0, 0x4}, {0x0, 0xfffffffd, 0x20}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x1, 0x0, 0x5})

870.062607ms ago: executing program 0 (id=1961):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x640182, 0x5c)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
pipe(0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fadvise64(r1, 0x0, 0x0, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000180)=0x200000000)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r3, &(0x7f0000000300)='1\x00', 0xffffff4a)
write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2)
r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r5}, &(0x7f00000000c0)=""/83, 0x53, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, 0x0)
writev(r6, &(0x7f00000010c0), 0x0)
io_uring_setup(0x489e, &(0x7f0000000240)={0x0, 0x0, 0x800})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b8c07d40450c01800a9000000012090212000100000000090400000080829900"], 0x0)

714.747155ms ago: executing program 1 (id=1962):
r0 = socket(0x18, 0x0, 0x0)
connect$pppoe(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x1}}, '\x00'})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8040, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/242)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCGFLAGS1(r2, 0x40047452, 0x0)
write$khugepaged_scan(r1, &(0x7f0000000000), 0x8)

544.077717ms ago: executing program 1 (id=1963):
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x10103, 0x4, 0x10}, 0x18)
linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x1000)
r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000000)={0x9, {0x0, 0xbfffffff, 0xdcf, 0x3}})
r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r4=>0x0})
r5 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r5, &(0x7f0000000000)={0x1d, r4}, 0x10)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000040)=[{{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2}, {0x0, 0x0, 0x0, 0x1}}], 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$NS_GET_PARENT(r2, 0xb702, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r7=>0x0})
r8 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r8, &(0x7f0000000000)={0x1d, r7}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2}}}, 0x24}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000240)={{0x0, 0x1, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x401, 0x0, 0x4, 0x0, 'syz1\x00', &(0x7f0000000480)=['!\x00', '-\x00', 'syz1\x00', 'syzkaller\x00'], 0x13})
r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r9)
unlinkat(r0, &(0x7f0000000400)='./file0\x00', 0x0)
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
ioctl$EVIOCRMFF(r9, 0x5509, 0x0)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rt_cache\x00')
readahead(r10, 0x0, 0xfffffffffffffffe)
syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
pselect6(0x40, &(0x7f0000000080)={0x8, 0x2, 0x7, 0x8, 0x4, 0x4, 0x1, 0x80000001}, &(0x7f00000002c0)={0xaf7, 0x80000001, 0x6, 0xfff, 0x4, 0x1b5, 0x1000, 0x2}, &(0x7f0000000300)={0x4, 0x5, 0x8001, 0x97, 0x7, 0x3, 0x5, 0x51a86f7e}, &(0x7f0000000340), &(0x7f0000000440)={&(0x7f0000000380)={[0x3]}, 0x8})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

0s ago: executing program 3 (id=1964):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000100)=r2, 0x8)
setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000100)=r0, 0x4)
getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000640)=0x1)
ioctl$PPPIOCUNBRIDGECHAN(r5, 0x7434)
bind$rds(r3, &(0x7f0000000200)={0xa, 0x0, @private}, 0x1c)

kernel console output (not intermixed with test programs):

2a0
[  522.469697][T14218]  ? __virt_addr_valid+0x183/0x530
[  522.489176][T14218]  skb_clone+0x20c/0x390
[  522.493443][T14218]  pfkey_sendmsg+0x43d/0x1050
[  522.496656][ T5290] usb 4-1: config 0 descriptor??
[  522.498136][T14218]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  522.508170][T14218]  ? aa_sk_perm+0x96d/0xab0
[  522.512691][T14218]  ? __pfx_aa_sk_perm+0x10/0x10
[  522.517557][T14218]  ? __pfx_lock_release+0x10/0x10
[  522.522605][T14218]  ? aa_sock_msg_perm+0x91/0x160
[  522.527574][T14218]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  522.532697][T14218]  __sock_sendmsg+0x221/0x270
[  522.537393][T14218]  ____sys_sendmsg+0x52a/0x7e0
[  522.542178][T14218]  ? __pfx_____sys_sendmsg+0x10/0x10
[  522.547476][T14218]  ? rcu_is_watching+0x15/0xb0
[  522.552255][T14218]  ? __might_fault+0xaa/0x120
[  522.556949][T14218]  __sys_sendmmsg+0x3ab/0x730
[  522.561644][T14218]  ? __pfx___sys_sendmmsg+0x10/0x10
[  522.566864][T14218]  ? __pfx_lock_release+0x10/0x10
[  522.571901][T14218]  ? kstrtouint_from_user+0x128/0x190
[  522.577304][T14218]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  522.583217][T14218]  ? ksys_write+0x229/0x2b0
[  522.587742][T14218]  ? __pfx_lock_release+0x10/0x10
[  522.592797][T14218]  ? vfs_write+0x7bf/0xc90
[  522.597226][T14218]  ? kmem_cache_free+0x1a2/0x420
[  522.602182][T14218]  ? __mutex_unlock_slowpath+0x21d/0x750
[  522.607832][T14218]  ? __fget_files+0x3f3/0x470
[  522.612534][T14218]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  522.618539][T14218]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  522.624884][T14218]  ? do_syscall_64+0x100/0x230
[  522.629662][T14218]  __x64_sys_sendmmsg+0xa0/0xb0
[  522.634526][T14218]  do_syscall_64+0xf3/0x230
[  522.639054][T14218]  ? clear_bhb_loop+0x35/0x90
[  522.643756][T14218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.649674][T14218] RIP: 0033:0x7f66d057dff9
[  522.654190][T14218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  522.673812][T14218] RSP: 002b:00007f66d1403038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  522.682251][T14218] RAX: ffffffffffffffda RBX: 00007f66d0735f80 RCX: 00007f66d057dff9
[  522.690239][T14218] RDX: 00000000000003ef RSI: 0000000020000180 RDI: 0000000000000003
[  522.698328][T14218] RBP: 00007f66d1403090 R08: 0000000000000000 R09: 0000000000000000
[  522.706321][T14218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  522.714316][T14218] R13: 0000000000000000 R14: 00007f66d0735f80 R15: 00007f66d085fa28
[  522.722324][T14218]  </TASK>
[  522.747586][T14207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.776302][T14207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  523.328577][T14238] macvlan2: entered promiscuous mode
[  523.328604][T14238] macvlan2: entered allmulticast mode
[  523.494201][T14245] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  523.760925][T14248] binder: 14246:14248 unknown command 1953002597
[  523.806075][T14248] binder: 14246:14248 ioctl c0306201 20000080 returned -22
[  523.906237][ T9739] usb 5-1: new full-speed USB device number 79 using dummy_hcd
[  524.068226][ T9739] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  524.086635][ T9739] usb 5-1: config 0 has no interface number 0
[  524.109966][ T9739] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  524.165388][ T9739] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  524.209484][ T9739] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  524.233913][ T9739] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  524.266155][ T5309] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  524.274241][ T9739] usb 5-1: Product: syz
[  524.299866][ T9739] usb 5-1: SerialNumber: syz
[  524.331926][ T9739] usb 5-1: config 0 descriptor??
[  524.353508][ T9739] cm109 5-1:0.8: invalid payload size 0, expected 4
[  524.379361][ T9739] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input28
[  524.426253][ T5309] usb 2-1: Using ep0 maxpacket: 8
[  524.443706][ T5309] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  524.465533][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  524.506401][ T5309] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  524.565760][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  524.617422][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  524.668466][ T5290] usb 4-1: USB disconnect, device number 76
[  524.681213][ T5309] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  524.720971][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  524.745702][   T29] kauditd_printk_skb: 72 callbacks suppressed
[  524.745720][   T29] audit: type=1326 audit(1728112124.416:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d057dff9 code=0x7ffc0000
[  524.756320][ T5309] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  524.845634][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  524.866778][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  524.881700][   T29] audit: type=1326 audit(1728112124.416:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f66d057dff9 code=0x7ffc0000
[  524.907519][   T29] audit: type=1326 audit(1728112124.416:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d057dff9 code=0x7ffc0000
[  524.929836][    C1] vkms_vblank_simulate: vblank timer overrun
[  524.944257][ T5309] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  524.952105][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  524.963574][ T5309] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  525.013845][   T29] audit: type=1326 audit(1728112124.426:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66d057dff9 code=0x7ffc0000
[  525.057571][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  525.095046][ T5309] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  525.122987][   T29] audit: type=1326 audit(1728112124.426:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d057dff9 code=0x7ffc0000
[  525.145402][    C1] vkms_vblank_simulate: vblank timer overrun
[  525.154954][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  525.162429][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  525.171249][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  525.178547][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  525.185643][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  525.192760][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  525.199861][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  525.207203][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  525.214302][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  525.221394][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  525.263268][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  525.263274][ T5288] usb 5-1: USB disconnect, device number 79
[  525.280686][ T5309] usb 2-1: string descriptor 0 read error: -22
[  525.286931][ T5309] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  525.311144][ T5309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.338641][   T29] audit: type=1326 audit(1728112124.426:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f66d057dff9 code=0x7ffc0000
[  525.346435][ T9739] usb 3-1: USB disconnect, device number 61
[  525.373430][ T5309] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  525.406115][   T29] audit: type=1326 audit(1728112124.426:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14247 comm="syz.4.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66d057dff9 code=0x7ffc0000
[  525.450075][ T5288] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  525.616316][    T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  525.707435][ T5288] usb 2-1: USB disconnect, device number 47
[  525.781096][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  525.805209][    T9] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  525.820571][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.842730][    T9] usb 1-1: config 0 descriptor??
[  525.911732][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1796'.
[  526.098684][T14289] xt_TCPMSS: Only works on TCP SYN packets
[  526.276876][    T9] petalynx 0003:18B1:0037.0014: unknown main item tag 0xd
[  526.298758][    T9] petalynx 0003:18B1:0037.0014: unexpected long global item
[  526.307390][    T9] petalynx 0003:18B1:0037.0014: parse failed
[  526.313705][    T9] petalynx 0003:18B1:0037.0014: probe with driver petalynx failed with error -22
[  526.479779][T14264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  526.514521][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  526.525589][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  526.544273][T14264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  526.555198][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  526.558120][   T29] audit: type=1800 audit(1728112126.236:459): pid=14304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1804" name="/" dev="fuse" ino=1 res=0 errno=0
[  526.562714][    T9] usb 1-1: USB disconnect, device number 69
[  526.611440][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  526.619547][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  526.626689][T14303] ipvlan2: entered promiscuous mode
[  526.632940][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  526.951813][T14307] chnl_net:caif_netlink_parms(): no params data found
[  527.034227][T14307] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.041914][T14307] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.049536][T14307] bridge_slave_0: entered allmulticast mode
[  527.056743][T14307] bridge_slave_0: entered promiscuous mode
[  527.064937][T14307] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.072555][T14307] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.085678][T14307] bridge_slave_1: entered allmulticast mode
[  527.094348][T14307] bridge_slave_1: entered promiscuous mode
[  527.120531][T14307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  527.131527][T14307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  527.161057][T14307] team0: Port device team_slave_0 added
[  527.178947][T14307] team0: Port device team_slave_1 added
[  527.216266][   T46] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  527.216377][ T5290] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  527.225894][T14307] batman_adv: batadv0: Adding interface: batadv_slave_0
[  527.243433][T14307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.269317][    C1] vkms_vblank_simulate: vblank timer overrun
[  527.279079][T14307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  527.294124][T14307] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.301180][T14307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.327393][T14307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.366147][   T46] usb 4-1: Using ep0 maxpacket: 8
[  527.373667][T14307] hsr_slave_0: entered promiscuous mode
[  527.380658][   T46] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  527.390590][   T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  527.402429][   T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  527.420101][T14307] hsr_slave_1: entered promiscuous mode
[  527.426421][T14307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  527.430750][ T5290] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  527.434021][   T46] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  527.454811][ T5290] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  527.457454][T14307] Cannot create hsr debugfs directory
[  527.481677][ T5290] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  527.483073][   T46] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  527.505085][ T5290] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  527.506449][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.515015][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.570761][ T5290] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  527.587062][ T5290] usb 2-1: invalid MIDI out EP 0
[  527.674295][ T5246] udevd[5246]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory
[  527.712626][ T5246] udevd[5246]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory
[  527.715173][T14307] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.740434][ T5290] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[  527.777210][ T5290] usb 2-1: USB disconnect, device number 48
[  527.811842][   T46] usb 4-1: GET_CAPABILITIES returned 0
[  527.817464][   T46] usbtmc 4-1:16.0: can't read capabilities
[  527.881811][T14307] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.969034][T14307] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.018878][T14320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  528.035488][T14320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  528.063179][T14307] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.095483][   T46] usb 4-1: USB disconnect, device number 77
[  528.282771][T14307] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  528.309191][T14307] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  528.318803][T14307] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  528.342920][T14307] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  528.480762][T14307] 8021q: adding VLAN 0 to HW filter on device bond0
[  528.535800][T12331] bridge_slave_1: left allmulticast mode
[  528.559021][T12331] bridge_slave_1: left promiscuous mode
[  528.585004][T12331] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.604848][T12331] bridge_slave_0: left allmulticast mode
[  528.619818][T12331] bridge_slave_0: left promiscuous mode
[  528.646322][T12331] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.686429][ T5249] Bluetooth: hci3: command tx timeout
[  529.296126][    T9] usb 4-1: new full-speed USB device number 78 using dummy_hcd
[  529.492427][T14349] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.1816'.
[  529.502772][T14349] openvswitch: netlink: Key 6 has unexpected len 0 expected 2
[  529.512007][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  529.524669][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2048, setting to 64
[  529.560479][    T9] usb 4-1: New USB device found, idVendor=01ac, idProduct=0000, bcdDevice= 1.00
[  529.617885][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.637549][    T9] usb 4-1: config 0 descriptor??
[  529.845980][T14347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  529.857345][T14347] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  529.876616][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  529.882588][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  529.932464][    T9] usb 4-1: USB disconnect, device number 78
[  529.982056][T12331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  530.004974][T12331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  530.032096][T12331] bond0 (unregistering): Released all slaves
[  530.134860][T14351] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  530.192739][T14307] 8021q: adding VLAN 0 to HW filter on device team0
[  530.200963][T12331] tipc: Disabling bearer <udp:sy>
[  530.215224][T12337] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.222380][T12337] bridge0: port 1(bridge_slave_0) entered forwarding state
[  530.227785][T12331] tipc: Left network mode
[  530.290293][T12337] bridge0: port 2(bridge_slave_1) entered blocking state
[  530.297430][T12337] bridge0: port 2(bridge_slave_1) entered forwarding state
[  530.448270][    T9] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  530.626380][    T9] usb 4-1: Using ep0 maxpacket: 16
[  530.634452][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  530.663681][    T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[  530.699498][T14356] netlink: 'syz.0.1822': attribute type 4 has an invalid length.
[  530.716181][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.716236][T14356] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1822'.
[  530.746646][    T9] usb 4-1: config 0 descriptor??
[  530.766269][ T5249] Bluetooth: hci3: command tx timeout
[  530.829744][T14356] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  530.876143][    T9] rc_core: IR keymap rc-xbox-dvd not found
[  530.881982][    T9] Registered IR keymap rc-empty
[  530.909191][    T9] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  530.947831][    T9] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29
[  530.960871][T12331] hsr_slave_0: left promiscuous mode
[  530.979387][    T9] xbox_remote 4-1:0.0: xbox_remote_rc_open: usb_submit_urb failed!
[  531.016634][T12331] hsr_slave_1: left promiscuous mode
[  531.018066][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  531.040900][    T9] input: failed to attach handler kbd to device input29, error: -5
[  531.049752][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  531.057695][T12331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  531.065529][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  531.073039][T12331] batman_adv: batadv0: Removing interface: batadv_slave_0
[  531.074956][    T9] usb 4-1: USB disconnect, device number 79
[  531.098029][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  531.101710][ T5246] xbox_remote 4-1:0.0: xbox_remote_rc_open: usb_submit_urb failed!
[  531.117565][T12331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  531.124999][T12331] batman_adv: batadv0: Removing interface: batadv_slave_1
[  531.134849][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  531.156306][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  531.163398][    T8] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  531.178057][T12331] veth1_macvtap: left promiscuous mode
[  531.184319][T12331] veth0_macvtap: left promiscuous mode
[  531.192965][T12331] veth1_vlan: left promiscuous mode
[  531.198417][T12331] veth0_vlan: left promiscuous mode
[  531.348400][    T8] usb 1-1: Using ep0 maxpacket: 16
[  531.373641][    T8] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  531.387851][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.395873][    T8] usb 1-1: Product: syz
[  531.411415][    T8] usb 1-1: Manufacturer: syz
[  531.416141][    T8] usb 1-1: SerialNumber: syz
[  531.422771][    T8] usb 1-1: config 0 descriptor??
[  531.467038][ T5249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  531.478374][ T5249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  531.512284][ T5249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  531.552345][ T5249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  531.603375][ T5249] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  531.612376][ T5249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  531.945636][T12331] team0 (unregistering): Port device team_slave_1 removed
[  531.996398][T12331] team0 (unregistering): Port device team_slave_0 removed
[  532.495301][T14357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  532.502924][T14357] IPv6: NLM_F_CREATE should be set when creating new route
[  532.544463][T14365] hsr0: entered promiscuous mode
[  532.551850][T14365] macsec2: entered promiscuous mode
[  532.565375][    T8] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  532.566717][T14365] macsec2: entered allmulticast mode
[  532.573759][    T8] peak_usb 1-1:0.0: unable to read PCAN-Chip USB firmware info (err -71)
[  532.586110][T14365] hsr0: entered allmulticast mode
[  532.602978][T14365] hsr_slave_0: entered allmulticast mode
[  532.616945][T14365] hsr_slave_1: entered allmulticast mode
[  532.624812][T14365] hsr0: left allmulticast mode
[  532.629712][T14365] hsr_slave_0: left allmulticast mode
[  532.635088][T14365] hsr_slave_1: left allmulticast mode
[  532.785719][T14307] 8021q: adding VLAN 0 to HW filter on device batadv0
[  532.796472][    T8] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71
[  532.830751][    T8] usb 1-1: USB disconnect, device number 70
[  532.847087][ T5236] Bluetooth: hci3: command tx timeout
[  532.888623][T14307] veth0_vlan: entered promiscuous mode
[  532.900339][T14307] veth1_vlan: entered promiscuous mode
[  532.929622][T14307] veth0_macvtap: entered promiscuous mode
[  533.052352][T14307] veth1_macvtap: entered promiscuous mode
[  533.151157][T14367] chnl_net:caif_netlink_parms(): no params data found
[  533.215804][T14307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  533.237517][T14307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.247935][ T5236] Bluetooth: hci1: command tx timeout
[  533.249855][T14307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  533.306949][T14307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.340025][T14307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  533.361140][T14307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.371220][T14307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  533.381974][T14307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.391878][T14307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  533.402501][T14307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.418354][T14307] batman_adv: batadv0: Interface activated: batadv_slave_0
[  533.431899][T14362] chnl_net:caif_netlink_parms(): no params data found
[  533.457745][T14385] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  533.478828][T14307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  533.490511][T14307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.535846][T14307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  533.548490][T14307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.576654][T14307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 
[  533.585977][T14307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.596265][T14307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  533.610022][T14307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.626370][T14307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  533.637010][T14307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  533.656232][ T5236] Bluetooth: hci4: command tx timeout
[  533.657450][T14307] batman_adv: batadv0: Interface activated: batadv_slave_1
[  533.715804][T14391] netlink: 'syz.3.1831': attribute type 10 has an invalid length.
[  533.745010][T14391] bond0: (slave batadv0): Releasing backup interface
[  533.766690][T14391] 8021q: adding VLAN 0 to HW filter on device batadv0
[  533.785932][T14391] team0: Port device batadv0 added
[  533.794441][T14307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  533.827909][T14307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  533.836177][T14391] syz.3.1831 (14391) used greatest stack depth: 18288 bytes left
[  533.845732][T14307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  533.854743][T14307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  533.969344][T14367] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.986997][T14367] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.994736][T14367] bridge_slave_0: entered allmulticast mode
[  534.002632][T14367] bridge_slave_0: entered promiscuous mode
[  534.090024][T14367] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.110447][T14367] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.128098][T14367] bridge_slave_1: entered allmulticast mode
[  534.135601][T14367] bridge_slave_1: entered promiscuous mode
[  534.156187][    T9] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  534.300624][T12331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.372594][T14362] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.390201][T14362] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.400304][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  534.411351][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  534.421343][T14362] bridge_slave_0: entered allmulticast mode
[  534.431584][    T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  534.448017][T14362] bridge_slave_0: entered promiscuous mode
[  534.466244][    T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  534.488940][T14367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  534.505743][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  534.516770][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.527493][    T9] usb 4-1: Product: syz
[  534.531648][    T9] usb 4-1: Manufacturer: syz
[  534.546233][    T9] usb 4-1: SerialNumber: syz
[  534.560679][T12331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.590060][T14362] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.601642][T14362] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.624638][T14362] bridge_slave_1: entered allmulticast mode
[  534.635968][T14362] bridge_slave_1: entered promiscuous mode
[  534.689429][T14367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  534.770620][T12331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.789999][T14401] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  534.881730][T12337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  534.892840][T12337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  534.927080][ T5236] Bluetooth: hci3: command tx timeout
[  534.970673][T12331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.011709][T14362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  535.025468][T14362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  535.140141][T14367] team0: Port device team_slave_0 added
[  535.159133][T14362] team0: Port device team_slave_0 added
[  535.168648][T14367] team0: Port device team_slave_1 added
[  535.194904][T14362] team0: Port device team_slave_1 added
[  535.217707][T12332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  535.218087][T14367] batman_adv: batadv0: Adding interface: batadv_slave_0
[  535.227221][T12332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  535.237343][T14367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  535.241255][    T9] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS
[  535.265604][    C1] vkms_vblank_simulate: vblank timer overrun
[  535.279800][T14401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.290835][T14367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  535.305389][T14401] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.321884][    T9] cdc_ncm 4-1:1.0: bind() failure
[  535.328295][ T5236] Bluetooth: hci1: command tx timeout
[  535.338414][    T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  535.345356][    T9] cdc_ncm 4-1:1.1: bind() failure
[  535.366358][   T46] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  535.366509][    T9] usb 4-1: USB disconnect, device number 80
[  535.410485][T14367] batman_adv: batadv0: Adding interface: batadv_slave_1
[  535.420351][T14367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  535.448880][T14367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  535.524051][   T46] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  535.537993][   T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.546841][   T46] usb 1-1: Product: syz
[  535.551021][   T46] usb 1-1: Manufacturer: syz
[  535.555617][   T46] usb 1-1: SerialNumber: syz
[  535.587617][   T46] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  535.600886][T14362] batman_adv: batadv0: Adding interface: batadv_slave_0
[  535.613413][T14362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  535.642155][T14362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  535.658717][ T5235] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  535.726416][ T5236] Bluetooth: hci4: command tx timeout
[  535.779642][T12331] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.828447][T14367] hsr_slave_0: entered promiscuous mode
[  535.835448][T14367] hsr_slave_1: entered promiscuous mode
[  535.848441][T14367] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  535.866131][T14367] Cannot create hsr debugfs directory
[  535.969629][T14362] batman_adv: batadv0: Adding interface: batadv_slave_1
[  535.986233][T14362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.012227][    C1] vkms_vblank_simulate: vblank timer overrun
[  536.042763][T14362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  536.120808][T14430] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  536.139377][T12331] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.178508][T14427] tipc: Started in network mode
[  536.190120][T14427] tipc: Node identity ac1414aa, cluster identity 4711
[  536.212089][T14427] tipc: Enabled bearer <udp:sy>, priority 10
[  536.264838][T12331] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.472242][T12331] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.602831][T14362] hsr_slave_0: entered promiscuous mode
[  536.626887][T14362] hsr_slave_1: entered promiscuous mode
[  536.656534][T14362] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  536.675253][T14362] Cannot create hsr debugfs directory
[  536.716170][ T1846] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  536.866270][ T1846] usb 5-1: Using ep0 maxpacket: 16
[  536.909956][ T1846] usb 5-1: unable to get BOS descriptor or descriptor too short
[  536.926159][ T5235] usb 1-1: Service connection timeout for: 256
[  536.932367][ T5235] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[  536.950417][ T1846] usb 5-1: config 0 has no interfaces?
[  536.959976][ T1846] usb 5-1: New USB device found, idVendor=0af0, idProduct=7031, bcdDevice=78.43
[  536.983349][ T1846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.006564][ T1846] usb 5-1: Product: syz
[  537.027631][ T1846] usb 5-1: Manufacturer: syz
[  537.034643][ T5235] ath9k_htc: Failed to initialize the device
[  537.045273][ T5235] usb 1-1: ath9k_htc: USB layer deinitialized
[  537.052694][ T1846] usb 5-1: SerialNumber: syz
[  537.089997][ T1846] usb 5-1: config 0 descriptor??
[  537.291184][T12331] bridge_slave_1: left allmulticast mode
[  537.307119][T12331] bridge_slave_1: left promiscuous mode
[  537.316354][T12331] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.327034][T12378] tipc: Node number set to 2886997162
[  537.396939][T12331] bridge_slave_0: left allmulticast mode
[  537.402755][T12331] bridge_slave_0: left promiscuous mode
[  537.406551][   T46] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  537.409036][ T5236] Bluetooth: hci1: command tx timeout
[  537.428470][T12331] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.467368][T12331] bridge_slave_1: left allmulticast mode
[  537.473087][T12331] bridge_slave_1: left promiscuous mode
[  537.507460][T12331] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.562290][T12331] bridge_slave_0: left allmulticast mode
[  537.582783][T12331] bridge_slave_0: left promiscuous mode
[  537.596721][   T46] usb 4-1: Using ep0 maxpacket: 16
[  537.604649][   T46] usb 4-1: unable to get BOS descriptor or descriptor too short
[  537.609854][T12331] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.614510][   T46] usb 4-1: config 6 has an invalid interface number: 6 but max is 1
[  537.646271][   T46] usb 4-1: config 6 has an invalid interface number: 25 but max is 1
[  537.654418][   T46] usb 4-1: config 6 has no interface number 0
[  537.676131][   T46] usb 4-1: config 6 has no interface number 1
[  537.682636][   T46] usb 4-1: config 6 interface 6 has no altsetting 0
[  537.698137][   T46] usb 4-1: config 6 interface 25 has no altsetting 0
[  537.718774][   T46] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=ee.60
[  537.737733][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.756114][   T29] audit: type=1326 audit(1728112137.426:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.0.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220d7dff9 code=0x7ffc0000
[  537.756240][   T46] usb 4-1: Product: syz
[  537.818286][ T5236] Bluetooth: hci4: command tx timeout
[  537.826460][   T46] usb 4-1: Manufacturer: syz
[  537.831132][   T46] usb 4-1: SerialNumber: syz
[  537.846337][   T29] audit: type=1326 audit(1728112137.456:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.0.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff220d7dff9 code=0x7ffc0000
[  537.870551][   T29] audit: type=1326 audit(1728112137.456:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.0.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220d7dff9 code=0x7ffc0000
[  537.915012][   T29] audit: type=1326 audit(1728112137.476:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.0.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220d7dff9 code=0x7ffc0000
[  537.969203][   T29] audit: type=1326 audit(1728112137.476:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.0.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff220d7dff9 code=0x7ffc0000
[  538.014739][   T29] audit: type=1326 audit(1728112137.476:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.0.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220d7dff9 code=0x7ffc0000
[  538.026142][T14464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.054053][   T29] audit: type=1326 audit(1728112137.476:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.0.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220d7dff9 code=0x7ffc0000
[  538.120776][   T29] audit: type=1326 audit(1728112137.476:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.0.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff220d7dff9 code=0x7ffc0000
[  538.171871][   T29] audit: type=1326 audit(1728112137.476:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.0.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220d7dff9 code=0x7ffc0000
[  538.206691][T14464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.256236][   T29] audit: type=1326 audit(1728112137.476:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.0.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220d7dff9 code=0x7ffc0000
[  538.296100][T14474] fuse: Bad value for 'fd'
[  538.408435][T14464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.455814][T14469] could not allocate digest TFM handle mcryptd(mcryptd(wp512-generic))
[  538.466967][T14464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  539.486345][ T5236] Bluetooth: hci1: command tx timeout
[  539.886313][ T5236] Bluetooth: hci4: command tx timeout
[  540.116515][ T9739] usb 5-1: USB disconnect, device number 80
[  540.156821][T12331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  540.237869][T14482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  540.257082][T12331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  540.284679][T14482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.310610][T12331] bond0 (unregistering): Released all slaves
[  540.408363][T12378] usb 1-1: USB disconnect, device number 71
[  540.975205][T12331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  540.999511][T12331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  541.021327][T12331] bond0 (unregistering): Released all slaves
[  541.213997][   T46] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  541.248325][T14493] vlan3: entered promiscuous mode
[  541.255015][   T46] snd-usb-audio 4-1:6.6: probe with driver snd-usb-audio failed with error -2
[  541.284246][T14493] ip6gretap0: entered promiscuous mode
[  541.297384][   T46] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  541.306907][T14493] vlan3: entered allmulticast mode
[  541.306927][T14493] ip6gretap0: entered allmulticast mode
[  541.329566][T14493] ip6gretap0: left allmulticast mode
[  541.329590][T14493] ip6gretap0: left promiscuous mode
[  541.384011][   T46] snd-usb-audio 4-1:6.25: probe with driver snd-usb-audio failed with error -2
[  541.394107][   T46] usb 4-1: USB disconnect, device number 81
[  541.459027][ T5244] udevd[5244]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.25/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  541.696621][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'.
[  542.031314][T14367] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  542.056905][T14367] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  542.123020][T14367] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  542.126461][    T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  542.183293][T14367] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  542.207044][T12378] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  542.264829][T12331] hsr_slave_0: left promiscuous mode
[  542.273489][T12331] hsr_slave_1: left promiscuous mode
[  542.280867][T12331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  542.289332][T12331] batman_adv: batadv0: Removing interface: batadv_slave_0
[  542.300279][T12331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  542.312933][T12331] batman_adv: batadv0: Removing interface: batadv_slave_1
[  542.320312][    T9] usb 5-1: config 8 has an invalid interface number: 179 but max is 3
[  542.331301][    T9] usb 5-1: config 8 has an invalid interface number: 201 but max is 3
[  542.340893][    T9] usb 5-1: config 8 has an invalid interface number: 153 but max is 3
[  542.350260][    T9] usb 5-1: config 8 has an invalid interface number: 196 but max is 3
[  542.361282][    T9] usb 5-1: config 8 has an invalid interface number: 95 but max is 3
[  542.370189][T12331] hsr_slave_0: left promiscuous mode
[  542.376364][T12331] hsr_slave_1: left promiscuous mode
[  542.384818][    T9] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  542.393929][T12378] usb 4-1: Using ep0 maxpacket: 16
[  542.399231][T12331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  542.407801][T12331] batman_adv: batadv0: Removing interface: batadv_slave_0
[  542.415685][    T9] usb 5-1: config 8 has 6 interfaces, different from the descriptor's value: 4
[  542.416904][T12331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  542.433442][    T9] usb 5-1: config 8 has no interface number 0
[  542.439733][    T9] usb 5-1: config 8 has no interface number 2
[  542.446448][T12331] batman_adv: batadv0: Removing interface: batadv_slave_1
[  542.453637][    T9] usb 5-1: config 8 has no interface number 3
[  542.459907][    T9] usb 5-1: config 8 has no interface number 4
[  542.466076][    T9] usb 5-1: config 8 has no interface number 5
[  542.472220][    T9] usb 5-1: config 8 interface 179 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[  542.485399][    T9] usb 5-1: too many endpoints for config 8 interface 1 altsetting 9: 33, using maximum allowed: 30
[  542.496184][    T9] usb 5-1: config 8 interface 1 altsetting 9 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  542.507132][    T9] usb 5-1: config 8 interface 1 altsetting 9 endpoint 0x9 has invalid maxpacket 1037, setting to 1024
[  542.518167][    T9] usb 5-1: config 8 interface 1 altsetting 9 endpoint 0x6 has an invalid bInterval 229, changing to 11
[  542.529870][    T9] usb 5-1: config 8 interface 1 altsetting 9 has a duplicate endpoint with address 0x9, skipping
[  542.540539][    T9] usb 5-1: config 8 interface 1 altsetting 9 has a duplicate endpoint with address 0x89, skipping
[  542.551537][    T9] usb 5-1: config 8 interface 1 altsetting 9 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  542.562714][    T9] usb 5-1: config 8 interface 1 altsetting 9 endpoint 0xB has an invalid bInterval 247, changing to 7
[  542.573806][    T9] usb 5-1: config 8 interface 1 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[  542.584400][    T9] usb 5-1: config 8 interface 1 altsetting 9 has 9 endpoint descriptors, different from the interface descriptor's value: 33
[  542.597575][    T9] usb 5-1: config 8 interface 201 altsetting 77 has a duplicate endpoint with address 0x6, skipping
[  542.608780][    T9] usb 5-1: config 8 interface 201 altsetting 77 has a duplicate endpoint with address 0x5, skipping
[  542.619658][    T9] usb 5-1: config 8 interface 201 altsetting 77 has a duplicate endpoint with address 0x5, skipping
[  542.630552][    T9] usb 5-1: config 8 interface 201 altsetting 77 has 3 endpoint descriptors, different from the interface descriptor's value: 8
[  542.643832][    T9] usb 5-1: config 8 interface 196 altsetting 128 has a duplicate endpoint with address 0x7, skipping
[  542.655061][    T9] usb 5-1: config 8 interface 196 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  542.666517][    T9] usb 5-1: config 8 interface 95 altsetting 2 endpoint 0x3 has invalid maxpacket 528, setting to 64
[  542.673453][T12331] veth1_macvtap: left promiscuous mode
[  542.677348][    T9] usb 5-1: config 8 interface 95 altsetting 2 has a duplicate endpoint with address 0x5, skipping
[  542.693545][    T9] usb 5-1: config 8 interface 95 altsetting 2 has a duplicate endpoint with address 0xB, skipping
[  542.695261][T12331] veth0_macvtap: left promiscuous mode
[  542.704198][    T9] usb 5-1: config 8 interface 95 altsetting 2 has a duplicate endpoint with address 0xF, skipping
[  542.720383][    T9] usb 5-1: config 8 interface 95 altsetting 2 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  542.731360][    T9] usb 5-1: config 8 interface 95 altsetting 2 has a duplicate endpoint with address 0x9, skipping
[  542.742048][    T9] usb 5-1: config 8 interface 95 altsetting 2 has a duplicate endpoint with address 0xB, skipping
[  542.752997][    T9] usb 5-1: config 8 interface 95 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  542.764107][    T9] usb 5-1: config 8 interface 95 altsetting 2 has a duplicate endpoint with address 0x2, skipping
[  542.766263][T12331] veth1_vlan: left promiscuous mode
[  542.774831][    T9] usb 5-1: config 8 interface 95 altsetting 2 has a duplicate endpoint with address 0x2, skipping
[  542.790674][    T9] usb 5-1: config 8 interface 95 altsetting 2 has a duplicate endpoint with address 0x1, skipping
[  542.801346][    T9] usb 5-1: config 8 interface 95 altsetting 2 has a duplicate endpoint with address 0xB, skipping
[  542.812035][    T9] usb 5-1: config 8 interface 95 altsetting 2 has a duplicate endpoint with address 0x6, skipping
[  542.822694][    T9] usb 5-1: config 8 interface 179 has no altsetting 0
[  542.825046][T12331] veth0_vlan: left promiscuous mode
[  542.829571][    T9] usb 5-1: config 8 interface 1 has no altsetting 0
[  542.841358][    T9] usb 5-1: config 8 interface 201 has no altsetting 0
[  542.848343][    T9] usb 5-1: config 8 interface 153 has no altsetting 0
[  542.855212][    T9] usb 5-1: config 8 interface 196 has no altsetting 0
[  542.862329][    T9] usb 5-1: config 8 interface 95 has no altsetting 0
[  542.874330][T12378] usb 4-1: unable to get BOS descriptor or descriptor too short
[  542.884890][T12331] veth1_macvtap: left promiscuous mode
[  542.886054][    T9] usb 5-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=51.31
[  542.891565][T12331] veth0_macvtap: left promiscuous mode
[  542.899762][T12378] usb 4-1: config 0 has no interfaces?
[  542.910839][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.919488][    T9] usb 5-1: Product: ᠉
[  542.923021][T12331] veth1_vlan: left promiscuous mode
[  542.924033][    T9] usb 5-1: Manufacturer: ࡃ
[  542.934792][T12378] usb 4-1: New USB device found, idVendor=0af0, idProduct=7031, bcdDevice=78.43
[  542.946986][T12378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.955580][T12378] usb 4-1: Product: syz
[  542.960395][    T9] usb 5-1: SerialNumber: с
[  542.965652][T12378] usb 4-1: Manufacturer: syz
[  542.966836][T12331] veth0_vlan: left promiscuous mode
[  542.980156][T12378] usb 4-1: SerialNumber: syz
[  542.992452][T12378] usb 4-1: config 0 descriptor??
[  543.197991][    T9] mos7840 5-1:8.179: required endpoints missing
[  543.226693][    T9] mos7840 5-1:8.1: required endpoints missing
[  543.252751][    T9] mos7840 5-1:8.201: required endpoints missing
[  543.298844][    T9] mos7840 5-1:8.153: required endpoints missing
[  543.310575][T14541] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.1862'.
[  543.331604][    T9] mos7840 5-1:8.196: required endpoints missing
[  543.334881][T14541] openvswitch: netlink: Message has 8 unknown bytes.
[  543.355052][    T9] mos7840 5-1:8.95: required endpoints missing
[  543.396359][    T9] usb 5-1: USB disconnect, device number 81
[  543.847184][T14552] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1866'.
[  543.920616][T14552] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  543.994607][T14551] could not allocate digest TFM handle mcryptd(mcryptd(wp512-generic))
[  544.364644][T12331] team0 (unregistering): Port device team_slave_1 removed
[  544.423485][T12331] team0 (unregistering): Port device team_slave_0 removed
[  545.291701][ T5235] usb 4-1: USB disconnect, device number 82
[  546.012580][T12331] team0 (unregistering): Port device team_slave_1 removed
[  546.085939][T12331] team0 (unregistering): Port device team_slave_0 removed
[  546.951913][T14367] 8021q: adding VLAN 0 to HW filter on device bond0
[  547.133112][T14362] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  547.148602][T14362] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  547.178652][T14362] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  547.262810][T14367] 8021q: adding VLAN 0 to HW filter on device team0
[  547.296992][T14362] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  547.315531][ T2562] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.322717][ T2562] bridge0: port 1(bridge_slave_0) entered forwarding state
[  547.349193][T12333] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.356348][T12333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  547.484081][T14367] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  547.505848][T14367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  547.529401][T12378] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  547.548591][ T5249] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  547.571635][ T5249] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  547.586982][ T5288] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  547.596423][ T5249] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  547.627365][ T5249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  547.634978][ T5249] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  547.643391][ T5249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  547.662408][T14367] 8021q: adding VLAN 0 to HW filter on device batadv0
[  547.716163][ T5288] usb 5-1: device descriptor read/64, error -71
[  547.722548][T12378] usb 4-1: Using ep0 maxpacket: 32
[  547.737401][T12378] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  547.756282][T12378] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  547.769987][T12378] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  547.779414][T12378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.790119][T12378] usb 4-1: config 0 descriptor??
[  547.803260][T12378] hub 4-1:0.0: bad descriptor, ignoring hub
[  547.816692][T12378] hub 4-1:0.0: probe with driver hub failed with error -5
[  547.828425][T12378] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  547.923211][T14367] veth0_vlan: entered promiscuous mode
[  547.966957][ T5288] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  548.021377][T14590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  548.039712][T14362] 8021q: adding VLAN 0 to HW filter on device bond0
[  548.044855][T14590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  548.068924][T14367] veth1_vlan: entered promiscuous mode
[  548.129959][ T5288] usb 5-1: device descriptor read/64, error -71
[  548.169626][T14362] 8021q: adding VLAN 0 to HW filter on device team0
[  548.248622][ T5288] usb usb5-port1: attempt power cycle
[  548.249534][T12335] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.261192][T12335] bridge0: port 1(bridge_slave_0) entered forwarding state
[  548.270357][T12335] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.277555][T12335] bridge0: port 2(bridge_slave_1) entered forwarding state
[  548.307466][T14367] veth0_macvtap: entered promiscuous mode
[  548.317883][T14367] veth1_macvtap: entered promiscuous mode
[  548.344793][T14601] chnl_net:caif_netlink_parms(): no params data found
[  548.401764][T14367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  548.423680][T14367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.436115][T14367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  548.447042][T14367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.457304][T14367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  548.467941][T14367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.479074][T14367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  548.490807][T14367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.503262][T14367] batman_adv: batadv0: Interface activated: batadv_slave_0
[  548.570667][T12331] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.594655][T14367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  548.610058][T14367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.620020][ T5288] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  548.635849][T14367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 
[  548.645723][T14367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.656262][T14367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  548.667199][ T5288] usb 5-1: device descriptor read/8, error -71
[  548.673576][T14367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.684929][T14367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  548.697859][T14367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  548.709285][T14367] batman_adv: batadv0: Interface activated: batadv_slave_1
[  548.748490][T14367] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  548.759347][T14367] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  548.769680][T14367] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  548.779244][T14367] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  548.830610][T12331] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.871786][T14601] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.882523][T14601] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.890371][T14601] bridge_slave_0: entered allmulticast mode
[  548.898603][T14601] bridge_slave_0: entered promiscuous mode
[  548.906297][ T5288] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  548.940866][T12331] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.948457][ T5288] usb 5-1: device descriptor read/8, error -71
[  548.958125][T14601] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.965492][T14601] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.973224][T14601] bridge_slave_1: entered allmulticast mode
[  548.980634][T14601] bridge_slave_1: entered promiscuous mode
[  549.013159][T14601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  549.050007][T12331] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.066648][ T5288] usb usb5-port1: unable to enumerate USB device
[  549.069565][T14601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  549.121289][T14601] team0: Port device team_slave_0 added
[  549.132440][T14601] team0: Port device team_slave_1 added
[  549.190256][T14601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  549.207277][T14601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  549.234341][T14601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  549.254809][T14362] 8021q: adding VLAN 0 to HW filter on device batadv0
[  549.277971][T14601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  549.285035][T14601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  549.317691][T14601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  549.404147][T12333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  549.419173][T12333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  549.450095][T14601] hsr_slave_0: entered promiscuous mode
[  549.463792][T14601] hsr_slave_1: entered promiscuous mode
[  549.505525][T12331] bridge_slave_1: left allmulticast mode
[  549.517858][T12331] bridge_slave_1: left promiscuous mode
[  549.523633][T12331] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.533841][T12331] bridge_slave_0: left allmulticast mode
[  549.541423][T12331] bridge_slave_0: left promiscuous mode
[  549.547591][T12331] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.738071][ T5249] Bluetooth: hci2: command tx timeout
[  549.993451][T12331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  550.004414][T12331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  550.015228][T12331] bond0 (unregistering): Released all slaves
[  550.034009][ T5739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  550.044114][ T5739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  550.148336][T12331] tipc: Disabling bearer <udp:sy>
[  550.156460][T12331] tipc: Left network mode
[  550.365833][T14362] veth0_vlan: entered promiscuous mode
[  550.394666][T14362] veth1_vlan: entered promiscuous mode
[  550.451072][ T5286] usb 4-1: USB disconnect, device number 83
[  550.868023][T14640] syzkaller0: entered promiscuous mode
[  550.873590][T14640] syzkaller0: entered allmulticast mode
[  550.896165][   T46] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  550.992499][T14362] veth0_macvtap: entered promiscuous mode
[  551.022652][T12331] hsr_slave_0: left promiscuous mode
[  551.046964][   T46] usb 4-1: Using ep0 maxpacket: 16
[  551.059835][   T46] usb 4-1: unable to get BOS descriptor or descriptor too short
[  551.071226][   T46] usb 4-1: config 0 has no interfaces?
[  551.079026][   T46] usb 4-1: New USB device found, idVendor=0af0, idProduct=7031, bcdDevice=78.43
[  551.093599][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.122637][T12331] hsr_slave_1: left promiscuous mode
[  551.142145][T12331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  551.161905][   T46] usb 4-1: Product: syz
[  551.174740][T12331] batman_adv: batadv0: Removing interface: batadv_slave_0
[  551.184733][   T46] usb 4-1: Manufacturer: syz
[  551.199257][   T46] usb 4-1: SerialNumber: syz
[  551.218185][T12331] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  551.247329][   T46] usb 4-1: config 0 descriptor??
[  551.263283][T12331] batman_adv: batadv0: Removing interface: batadv_slave_1
[  551.331933][T14625] syz.1.1824 (14625): drop_caches: 2
[  551.342847][T12331] veth1_macvtap: left promiscuous mode
[  551.376437][T12331] veth0_macvtap: left promiscuous mode
[  551.382043][T12331] veth1_vlan: left promiscuous mode
[  551.430893][T12331] veth0_vlan: left promiscuous mode
[  551.817855][ T5249] Bluetooth: hci2: command tx timeout
[  552.197409][T12331] team0 (unregistering): Port device team_slave_1 removed
[  552.388124][T12331] team0 (unregistering): Port device team_slave_0 removed
[  552.455401][T14655] could not allocate digest TFM handle mcryptd(mcryptd(wp512-generic))
[  553.886504][ T5249] Bluetooth: hci2: command tx timeout
[  554.090028][    T9] usb 4-1: USB disconnect, device number 84
[  555.597239][T14654] vlan2: entered promiscuous mode
[  555.602313][T14654] ip6gretap0: entered promiscuous mode
[  555.608945][T14654] vlan2: entered allmulticast mode
[  555.614083][T14654] ip6gretap0: entered allmulticast mode
[  555.621746][T14654] ip6gretap0: left allmulticast mode
[  555.628975][T14654] ip6gretap0: left promiscuous mode
[  555.686836][T14362] veth1_macvtap: entered promiscuous mode
[  555.701749][T14362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.712445][T14362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.722304][T14362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.733727][T14362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.744013][T14362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.754654][T14362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.765713][T14362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  555.776845][T14362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.788467][T14362] batman_adv: batadv0: Interface activated: batadv_slave_0
[  555.798775][T14362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  555.809398][T14362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.819284][T14362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 
[  555.828625][T14362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.838615][T14362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  555.849098][T14362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.859632][T14362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  555.870602][T14362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  555.883414][T14362] batman_adv: batadv0: Interface activated: batadv_slave_1
[  555.893595][T14362] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  555.902388][T14362] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  555.911132][T14362] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  555.920007][T14362] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  555.966410][ T5249] Bluetooth: hci2: command tx timeout
[  556.196661][ T5739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  556.209275][ T5739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  556.246074][T14601] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  556.276883][    T8] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  556.281552][T14601] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  556.327512][T14601] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  556.356616][T12333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  556.365110][T12333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  556.366207][T14601] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  556.396328][ T5290] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  556.436592][    T8] usb 4-1: Using ep0 maxpacket: 32
[  556.466421][    T8] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  556.501004][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  556.532956][    T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  556.561986][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.592688][T14601] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.619356][    T8] usb 4-1: config 0 descriptor??
[  556.665360][    T8] hub 4-1:0.0: bad descriptor, ignoring hub
[  556.666576][T14601] 8021q: adding VLAN 0 to HW filter on device team0
[  556.689778][T12335] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.696952][T12335] bridge0: port 1(bridge_slave_0) entered forwarding state
[  556.706174][    T8] hub 4-1:0.0: probe with driver hub failed with error -5
[  556.740510][    T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  556.760466][T12331] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.767651][T12331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  556.869444][T14671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.909352][T14671] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.982020][T14601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  557.058649][T12337] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.176645][T12337] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.241406][T14601] veth0_vlan: entered promiscuous mode
[  557.333555][T12337] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.368145][T14601] veth1_vlan: entered promiscuous mode
[  557.432373][T12337] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.524378][T14601] veth0_macvtap: entered promiscuous mode
[  557.549961][T14601] veth1_macvtap: entered promiscuous mode
[  557.641444][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.679178][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.692531][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  557.702876][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  557.712550][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.713595][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  557.731618][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.745124][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  557.752728][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.764920][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  557.774599][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  557.779096][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.826135][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.837034][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.847295][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.857974][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.872952][T14601] batman_adv: batadv0: Interface activated: batadv_slave_0
[  557.904630][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  557.917446][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.936128][ T1846] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  557.937896][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 
[  557.953911][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.963934][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  557.975419][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.987426][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  557.998031][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.007946][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.020118][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.031904][T14601] batman_adv: batadv0: Interface activated: batadv_slave_1
[  558.051075][T12337] bridge_slave_1: left allmulticast mode
[  558.057520][T12337] bridge_slave_1: left promiscuous mode
[  558.063305][T12337] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.072878][T12337] bridge_slave_0: left allmulticast mode
[  558.079284][T12337] bridge_slave_0: left promiscuous mode
[  558.084994][T12337] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.109784][ T1846] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  558.128599][ T1846] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  558.146556][ T1846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.167519][ T1846] usb 3-1: config 0 descriptor??
[  558.591121][T12337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  558.614041][T12337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  558.627218][T12337] bond0 (unregistering): Released all slaves
[  558.659552][T14601] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  558.676556][T14601] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  558.686483][T14601] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  558.695610][T14601] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  558.910353][   T46] usb 3-1: USB disconnect, device number 62
[  559.149517][T12337] hsr_slave_0: left promiscuous mode
[  559.168086][T12337] hsr_slave_1: left promiscuous mode
[  559.200280][T12337] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  559.226235][T12337] batman_adv: batadv0: Removing interface: batadv_slave_0
[  559.265631][T12337] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  559.274109][T12337] batman_adv: batadv0: Removing interface: batadv_slave_1
[  559.344379][T12337] veth1_macvtap: left promiscuous mode
[  559.356930][   T46] usb 4-1: USB disconnect, device number 85
[  559.365682][T12337] veth0_macvtap: left promiscuous mode
[  559.375396][T12337] veth1_vlan: left promiscuous mode
[  559.385325][T12337] veth0_vlan: left promiscuous mode
[  559.891115][ T5236] Bluetooth: hci4: command tx timeout
[  559.973870][ T5249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  560.000289][ T5249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  560.019939][ T5249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  560.028810][ T5249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  560.037470][ T5249] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  560.056253][ T5249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  560.328267][T12337] team0 (unregistering): Port device team_slave_1 removed
[  560.385743][T12337] team0 (unregistering): Port device team_slave_0 removed
[  560.844500][T14721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1895'.
[  560.855176][T14721] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  560.882538][T14721] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1)
[  560.956998][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  560.964832][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  561.030266][   T29] kauditd_printk_skb: 49 callbacks suppressed
[  561.030285][   T29] audit: type=1326 audit(1728112160.706:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14734 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  561.135861][   T29] audit: type=1326 audit(1728112160.706:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14734 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  561.175366][   T29] audit: type=1326 audit(1728112160.746:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14734 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  561.200731][   T29] audit: type=1326 audit(1728112160.746:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14734 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  561.281796][   T29] audit: type=1326 audit(1728112160.746:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14734 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  561.283894][T12335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  561.305111][   T29] audit: type=1326 audit(1728112160.746:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14734 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  561.323854][T14704] chnl_net:caif_netlink_parms(): no params data found
[  561.335757][   T29] audit: type=1326 audit(1728112160.746:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14734 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  561.436348][   T29] audit: type=1326 audit(1728112160.746:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14734 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  561.450268][T12335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  561.497632][   T29] audit: type=1326 audit(1728112160.746:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14734 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  561.546184][   T29] audit: type=1326 audit(1728112160.746:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14734 comm="syz.3.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  561.586114][ T5290] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  561.756281][ T5290] usb 4-1: Using ep0 maxpacket: 8
[  561.772478][ T5290] usb 4-1: unable to get BOS descriptor or descriptor too short
[  561.809607][ T5290] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  561.819545][ T5249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  561.832248][ T5249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  561.841485][ T5249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  561.849534][ T5249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  561.859115][ T5249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  561.866485][ T5249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  561.876228][ T5290] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  561.878062][T14760] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  561.886632][ T5290] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  561.886659][ T5290] usb 4-1: config 1 has no interface number 1
[  561.886693][ T5290] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  561.886724][ T5290] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  561.886751][ T5290] usb 4-1: config 1 interface 2 has no altsetting 0
[  561.953150][ T5290] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  561.962498][ T5290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.973236][ T5290] usb 4-1: Product: syz
[  561.977543][ T5236] Bluetooth: hci4: command tx timeout
[  561.984392][ T5290] usb 4-1: Manufacturer: syz
[  561.989154][ T5290] usb 4-1: SerialNumber: syz
[  562.039802][T14732] chnl_net:caif_netlink_parms(): no params data found
[  562.072880][T14704] bridge0: port 1(bridge_slave_0) entered blocking state
[  562.090495][T14704] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.098557][T14704] bridge_slave_0: entered allmulticast mode
[  562.106885][T14704] bridge_slave_0: entered promiscuous mode
[  562.127404][ T5236] Bluetooth: hci1: command tx timeout
[  562.162565][T14704] bridge0: port 2(bridge_slave_1) entered blocking state
[  562.170324][T14766] Invalid logical block size (1)
[  562.174394][T14704] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.185898][T14704] bridge_slave_1: entered allmulticast mode
[  562.193775][T14704] bridge_slave_1: entered promiscuous mode
[  562.206876][T14766] loop7: detected capacity change from 2 to 1
[  562.265109][T14735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  562.282016][T14735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  562.372873][ T5290] usb 4-1: USB disconnect, device number 86
[  562.378926][T12337] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.415961][T14704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  562.486125][ T5235] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  562.495359][T14704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  562.526179][T12337] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.553982][T14732] bridge0: port 1(bridge_slave_0) entered blocking state
[  562.561382][T14732] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.572569][T14732] bridge_slave_0: entered allmulticast mode
[  562.579442][T14732] bridge_slave_0: entered promiscuous mode
[  562.604693][T14732] bridge0: port 2(bridge_slave_1) entered blocking state
[  562.622513][T14732] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.636553][ T5235] usb 1-1: Using ep0 maxpacket: 32
[  562.636577][T14732] bridge_slave_1: entered allmulticast mode
[  562.657029][ T5235] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  562.667265][T14732] bridge_slave_1: entered promiscuous mode
[  562.676132][ T5235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  562.698003][ T5235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  562.722884][ T5235] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  562.738801][T12337] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.742702][ T5235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.779554][ T5235] usb 1-1: config 0 descriptor??
[  562.797128][T14766] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  562.806933][ T5235] hub 1-1:0.0: USB hub found
[  562.828244][T14704] team0: Port device team_slave_0 added
[  562.840208][T14704] team0: Port device team_slave_1 added
[  562.927805][T12337] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  563.004786][T14732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  563.010716][ T5235] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[  563.078593][T14704] batman_adv: batadv0: Adding interface: batadv_slave_0
[  563.085589][T14704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  563.117568][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[  563.123978][ T1265] ieee802154 phy1 wpan1: encryption failed: -22
[  563.184866][T14704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  563.224773][T14766] misc userio: Can't change port type on an already running userio instance
[  563.233766][T14732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  563.316668][T14704] batman_adv: batadv0: Adding interface: batadv_slave_1
[  563.345174][T14704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  563.416450][T14704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  563.491051][ T5235] usbhid 1-1:0.0: can't add hid device: -71
[  563.507100][ T5235] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  563.507520][T14732] team0: Port device team_slave_0 added
[  563.525678][ T4685] Dev loop7: unable to read RDB block 1
[  563.532843][ T4685]  loop7: unable to read partition table
[  563.549826][ T5235] usb 1-1: USB disconnect, device number 72
[  563.556380][ T4685] loop7: partition table beyond EOD, truncated
[  563.619293][T14732] team0: Port device team_slave_1 added
[  563.758036][T14732] batman_adv: batadv0: Adding interface: batadv_slave_0
[  563.765289][T14732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  563.856753][T14732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  563.943092][T14704] hsr_slave_0: entered promiscuous mode
[  563.952093][T14704] hsr_slave_1: entered promiscuous mode
[  563.978561][T14704] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  563.996301][T14704] Cannot create hsr debugfs directory
[  564.010765][T14732] batman_adv: batadv0: Adding interface: batadv_slave_1
[  564.038221][T14732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  564.056403][ T5236] Bluetooth: hci3: command tx timeout
[  564.071793][ T5236] Bluetooth: hci4: command tx timeout
[  564.078032][T14732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  564.196454][T14764] chnl_net:caif_netlink_parms(): no params data found
[  564.206486][ T5236] Bluetooth: hci1: command tx timeout
[  564.351718][T12337] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.404100][T14732] hsr_slave_0: entered promiscuous mode
[  564.410607][T14732] hsr_slave_1: entered promiscuous mode
[  564.417064][T14732] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  564.424644][T14732] Cannot create hsr debugfs directory
[  564.606566][ T5235] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  564.635953][T12337] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.786177][ T5235] usb 4-1: config 4 has an invalid interface number: 235 but max is 0
[  564.795366][ T5235] usb 4-1: config 4 has no interface number 0
[  564.798358][T12337] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.802864][ T5235] usb 4-1: New USB device found, idVendor=04e8, idProduct=689a, bcdDevice=cc.58
[  564.821290][ T5235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.875272][T14801] ipvlan2: entered promiscuous mode
[  565.072334][T12337] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  565.091407][T14789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  565.113623][T14815] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.1906'.
[  565.136422][T14789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  565.158596][T14815] openvswitch: netlink: Message has 16 unknown bytes.
[  565.171086][T14764] bridge0: port 1(bridge_slave_0) entered blocking state
[  565.189675][T14764] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.212503][T14764] bridge_slave_0: entered allmulticast mode
[  565.230847][T14764] bridge_slave_0: entered promiscuous mode
[  565.248938][T14764] bridge0: port 2(bridge_slave_1) entered blocking state
[  565.265340][T14764] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.273395][T14764] bridge_slave_1: entered allmulticast mode
[  565.287534][T14764] bridge_slave_1: entered promiscuous mode
[  565.477803][T14764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  565.629068][T14764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  565.672637][T12337] bridge_slave_1: left allmulticast mode
[  565.680656][T12337] bridge_slave_1: left promiscuous mode
[  565.687924][T12337] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.721158][T12337] bridge_slave_0: left allmulticast mode
[  565.738603][T12337] bridge_slave_0: left promiscuous mode
[  565.745044][T12337] bridge0: port 1(bridge_slave_0) entered disabled state
[  565.764293][T12337] bridge_slave_1: left allmulticast mode
[  565.771244][T12337] bridge_slave_1: left promiscuous mode
[  565.777352][T12337] bridge0: port 2(bridge_slave_1) entered disabled state
[  565.811570][T12337] bridge_slave_0: left allmulticast mode
[  565.829203][T12337] bridge_slave_0: left promiscuous mode
[  565.849166][T12337] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.126547][ T5236] Bluetooth: hci3: command tx timeout
[  566.126694][ T5249] Bluetooth: hci4: command tx timeout
[  566.293780][   T46] usb 4-1: USB disconnect, device number 87
[  566.300276][ T5249] Bluetooth: hci1: command tx timeout
[  567.064640][T12337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  567.079835][T12337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  567.091406][T12337] bond0 (unregistering): Released all slaves
[  567.247593][T12337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  567.260387][T12337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  567.273553][T12337] bond0 (unregistering): Released all slaves
[  567.315923][T14764] team0: Port device team_slave_0 added
[  567.445782][T14764] team0: Port device team_slave_1 added
[  567.454707][T12337] tipc: Disabling bearer <udp:sy>
[  567.460044][T12337] tipc: Left network mode
[  567.695592][T14764] batman_adv: batadv0: Adding interface: batadv_slave_0
[  567.718668][T14764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  567.762364][T14764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  567.871277][T14764] batman_adv: batadv0: Adding interface: batadv_slave_1
[  567.886207][T14764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  567.933746][T14764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  567.977096][T14838] netlink: 'syz.3.1911': attribute type 11 has an invalid length.
[  568.051983][T14764] hsr_slave_0: entered promiscuous mode
[  568.058972][T14764] hsr_slave_1: entered promiscuous mode
[  568.065036][T14764] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  568.072700][T14764] Cannot create hsr debugfs directory
[  568.206866][ T5249] Bluetooth: hci3: command tx timeout
[  568.226572][    T8] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  568.347411][T12337] hsr_slave_0: left promiscuous mode
[  568.356720][T12337] hsr_slave_1: left promiscuous mode
[  568.364105][T12337] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  568.371635][ T5249] Bluetooth: hci1: command tx timeout
[  568.383396][T12337] batman_adv: batadv0: Removing interface: batadv_slave_0
[  568.392285][T12337] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  568.399833][T12337] batman_adv: batadv0: Removing interface: batadv_slave_1
[  568.406390][    T8] usb 4-1: Using ep0 maxpacket: 16
[  568.418539][    T8] usb 4-1: config index 0 descriptor too short (expected 1810, got 18)
[  568.427684][    T8] usb 4-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6
[  568.437535][T12337] hsr_slave_0: left promiscuous mode
[  568.438009][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.451814][T12337] hsr_slave_1: left promiscuous mode
[  568.467931][    T8] usb 4-1: config 0 descriptor??
[  568.473156][T12337] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  568.480981][T12337] batman_adv: batadv0: Removing interface: batadv_slave_0
[  568.489854][T12337] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  568.497393][T12337] batman_adv: batadv0: Removing interface: batadv_slave_1
[  568.533549][T12337] veth1_macvtap: left promiscuous mode
[  568.539241][T12337] veth0_macvtap: left promiscuous mode
[  568.544842][T12337] veth1_vlan: left promiscuous mode
[  568.550234][T12337] veth0_vlan: left promiscuous mode
[  568.560245][T12337] veth1_macvtap: left promiscuous mode
[  568.565786][T12337] veth0_macvtap: left promiscuous mode
[  568.571455][T12337] veth1_vlan: left promiscuous mode
[  568.576982][T12337] veth0_vlan: left promiscuous mode
[  568.682147][    T8] usb 4-1: string descriptor 0 read error: -71
[  568.690940][    T8] gspca_main: etoms-2.14.0 probing 102c:6151
[  568.757506][    T8] usb 4-1: USB disconnect, device number 88
[  569.277758][T12337] team0 (unregistering): Port device team_slave_1 removed
[  569.324456][T12337] team0 (unregistering): Port device team_slave_0 removed
[  569.716195][    T8] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  569.888802][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  569.900095][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  569.910368][    T8] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  569.919860][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.930132][    T8] usb 4-1: config 0 descriptor??
[  570.283627][T12337] team0 (unregistering): Port device team_slave_1 removed
[  570.286372][ T5249] Bluetooth: hci3: command tx timeout
[  570.343817][T12337] team0 (unregistering): Port device team_slave_0 removed
[  570.354550][    T8] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0
[  570.376479][    T8] hid-thrustmaster 0003:044F:B65D.0015: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0
[  570.389115][    T8] hid-thrustmaster 0003:044F:B65D.0015: Wrong number of endpoints?
[  570.557001][T14853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  570.568673][T14853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  570.584482][    C0] hid-thrustmaster 0003:044F:B65D.0015: Unknown packet type 0x0, unable to proceed further with wheel init
[  570.794952][    T8] usb 4-1: USB disconnect, device number 89
[  570.968137][T14704] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  571.003164][T14704] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  571.057274][T14704] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  571.073548][T14704] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  571.112807][T14732] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  571.246620][T14732] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  571.287110][T14732] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  571.365713][T14732] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  571.804186][T14704] 8021q: adding VLAN 0 to HW filter on device bond0
[  571.910103][T14704] 8021q: adding VLAN 0 to HW filter on device team0
[  571.996975][T12335] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.004092][T12335] bridge0: port 1(bridge_slave_0) entered forwarding state
[  572.020849][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  572.031561][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  572.043512][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  572.054184][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  572.064042][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  572.071533][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  572.109264][T12335] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.116432][T12335] bridge0: port 2(bridge_slave_1) entered forwarding state
[  572.172599][T14732] 8021q: adding VLAN 0 to HW filter on device bond0
[  572.184956][T14764] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  572.201991][T14764] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  572.216465][   T46] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  572.272858][T14764] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  572.283876][T14764] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  572.299087][T14732] 8021q: adding VLAN 0 to HW filter on device team0
[  572.352099][T12337] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.394512][T14704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  572.411823][T14704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  572.429223][   T46] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  572.439213][T12335] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.446326][T12335] bridge0: port 1(bridge_slave_0) entered forwarding state
[  572.459387][T12335] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.465200][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.466520][T12335] bridge0: port 2(bridge_slave_1) entered forwarding state
[  572.502575][   T46] usb 4-1: Product: syz
[  572.514325][   T46] usb 4-1: Manufacturer: syz
[  572.523035][   T46] usb 4-1: SerialNumber: syz
[  572.542739][   T46] usb 4-1: config 0 descriptor??
[  572.551325][T12337] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.659411][T12337] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.809283][T12337] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.867621][T14704] 8021q: adding VLAN 0 to HW filter on device batadv0
[  572.879078][T14878] chnl_net:caif_netlink_parms(): no params data found
[  572.893006][T12378] usb 4-1: USB disconnect, device number 90
[  572.964718][T14732] 8021q: adding VLAN 0 to HW filter on device batadv0
[  573.060466][T14764] 8021q: adding VLAN 0 to HW filter on device bond0
[  573.165567][T12337] bridge_slave_1: left allmulticast mode
[  573.177612][T12337] bridge_slave_1: left promiscuous mode
[  573.190498][T12337] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.207994][T12337] bridge_slave_0: left allmulticast mode
[  573.213664][T12337] bridge_slave_0: left promiscuous mode
[  573.220402][T12337] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.688882][T12337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  573.701209][T12337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  573.711712][T12337] bond0 (unregistering): Released all slaves
[  573.749685][T14906] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  573.758428][T14906] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  573.833933][T14878] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.841897][T14878] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.849989][T14878] bridge_slave_0: entered allmulticast mode
[  573.858224][T14878] bridge_slave_0: entered promiscuous mode
[  573.941323][T14878] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.949301][T14878] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.956602][T14878] bridge_slave_1: entered allmulticast mode
[  573.963763][T14878] bridge_slave_1: entered promiscuous mode
[  574.065358][T14878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  574.085311][T14878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  574.102982][T14732] veth0_vlan: entered promiscuous mode
[  574.114119][T14764] 8021q: adding VLAN 0 to HW filter on device team0
[  574.126431][ T5236] Bluetooth: hci2: command tx timeout
[  574.170801][ T2562] bridge0: port 1(bridge_slave_0) entered blocking state
[  574.177998][ T2562] bridge0: port 1(bridge_slave_0) entered forwarding state
[  574.185302][   T46] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  574.194239][T14704] veth0_vlan: entered promiscuous mode
[  574.214780][T12337] hsr_slave_0: left promiscuous mode
[  574.222950][T12337] hsr_slave_1: left promiscuous mode
[  574.237037][T12337] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  574.244490][T12337] batman_adv: batadv0: Removing interface: batadv_slave_0
[  574.253123][T12337] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  574.261034][T12337] batman_adv: batadv0: Removing interface: batadv_slave_1
[  574.281276][T12337] veth1_macvtap: left promiscuous mode
[  574.287037][T12337] veth0_macvtap: left promiscuous mode
[  574.293090][T12337] veth1_vlan: left promiscuous mode
[  574.304453][T12337] veth0_vlan: left promiscuous mode
[  574.384988][   T46] usb 4-1: unable to get BOS descriptor or descriptor too short
[  574.406079][   T46] usb 4-1: unable to read config index 0 descriptor/start: -71
[  574.418567][   T46] usb 4-1: can't read configurations, error -71
[  575.156989][T12337] team0 (unregistering): Port device team_slave_1 removed
[  575.207912][T12337] team0 (unregistering): Port device team_slave_0 removed
[  575.563005][T14878] team0: Port device team_slave_0 added
[  575.581267][T14938] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  575.595600][T14878] team0: Port device team_slave_1 added
[  575.620190][T14732] veth1_vlan: entered promiscuous mode
[  575.685484][T14878] batman_adv: batadv0: Adding interface: batadv_slave_0
[  575.706112][T14878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  575.738279][T14878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  575.750817][T14878] batman_adv: batadv0: Adding interface: batadv_slave_1
[  575.758036][T14878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  575.784547][T14878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  575.799676][T12333] bridge0: port 2(bridge_slave_1) entered blocking state
[  575.806832][T12333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  575.843600][T14704] veth1_vlan: entered promiscuous mode
[  575.941478][T14878] hsr_slave_0: entered promiscuous mode
[  575.954826][T14878] hsr_slave_1: entered promiscuous mode
[  576.062563][T14764] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  576.073413][T14764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  576.098354][T14732] veth0_macvtap: entered promiscuous mode
[  576.127682][T14946] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1929'.
[  576.167369][T14764] 8021q: adding VLAN 0 to HW filter on device batadv0
[  576.168461][T14946] x_tables: ip_tables: udp match: only valid for protocol 17
[  576.178558][T14704] veth0_macvtap: entered promiscuous mode
[  576.205262][T14732] veth1_macvtap: entered promiscuous mode
[  576.206372][ T5236] Bluetooth: hci2: command tx timeout
[  576.226853][T14704] veth1_macvtap: entered promiscuous mode
[  576.314817][T14704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.341623][T14704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.352369][T14704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.363236][T14704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.377476][T14704] batman_adv: batadv0: Interface activated: batadv_slave_0
[  576.458958][T14704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.492249][T14704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.536221][T14704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 
[  576.579311][T14704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.661614][T14704] batman_adv: batadv0: Interface activated: batadv_slave_1
[  576.691974][T14764] veth0_vlan: entered promiscuous mode
[  576.834787][T14967] syzkaller0: entered promiscuous mode
[  576.840418][T14967] syzkaller0: entered allmulticast mode
[  576.855390][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.866254][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.887288][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.902908][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.915745][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  576.933407][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.951421][T14732] batman_adv: batadv0: Interface activated: batadv_slave_0
[  576.963784][T14704] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  576.978866][T14704] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  576.992581][T14704] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  577.003336][T14704] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  577.052402][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  577.073154][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.087497][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 
[  577.101470][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.115188][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  577.155733][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.199439][T14732] batman_adv: batadv0: Interface activated: batadv_slave_1
[  577.225583][T14764] veth1_vlan: entered promiscuous mode
[  578.289358][ T5236] Bluetooth: hci2: command tx timeout
[  579.975270][T14732] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  580.006274][T14732] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  580.015015][T14732] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  580.043974][T14732] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  580.207158][T14764] veth0_macvtap: entered promiscuous mode
[  580.239315][T12332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  580.247861][T12332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  580.255865][T14764] veth1_macvtap: entered promiscuous mode
[  580.297932][   T46] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  580.335945][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.350906][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.367457][ T5249] Bluetooth: hci2: command tx timeout
[  580.376768][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.401659][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.412615][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.423414][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.446274][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  580.457423][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.470771][T14764] batman_adv: batadv0: Interface activated: batadv_slave_0
[  580.485422][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.498738][   T46] usb 4-1: Using ep0 maxpacket: 16
[  580.503973][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.515830][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 
[  580.526520][   T46] usb 4-1: unable to get BOS descriptor or descriptor too short
[  580.535313][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.547625][   T46] usb 4-1: config 0 has no interfaces?
[  580.554093][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.566910][   T46] usb 4-1: New USB device found, idVendor=0af0, idProduct=7031, bcdDevice=78.43
[  580.575962][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.588304][   T46] usb 4-1: Product: syz
[  580.592502][   T46] usb 4-1: Manufacturer: syz
[  580.597514][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.609585][   T46] usb 4-1: SerialNumber: syz
[  580.615225][T14764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  580.626999][   T46] usb 4-1: config 0 descriptor??
[  580.639792][T14764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  580.660988][T14764] batman_adv: batadv0: Interface activated: batadv_slave_1
[  580.711338][T12335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  580.734760][T12335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  580.770236][T14764] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  580.787076][T14764] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  580.795800][T14764] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  580.809784][T14764] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  580.901809][T14878] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  580.947207][T14878] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  580.954329][T15027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  580.990789][T12333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  580.999820][T15027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  581.017295][T12333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  581.040256][T14878] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  581.047228][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  581.065253][T14878] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  581.076200][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  581.211713][ T5739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  581.241255][ T5739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  581.314029][T12335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  581.391036][T12335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  581.428112][T14878] 8021q: adding VLAN 0 to HW filter on device bond0
[  581.507257][T14878] 8021q: adding VLAN 0 to HW filter on device team0
[  581.568304][T12335] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.575396][T12335] bridge0: port 1(bridge_slave_0) entered forwarding state
[  581.694893][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.702033][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  581.984577][T14878] 8021q: adding VLAN 0 to HW filter on device batadv0
[  582.186386][ T5290] usb 2-1: new low-speed USB device number 49 using dummy_hcd
[  582.224521][T14878] veth0_vlan: entered promiscuous mode
[  582.315395][T14878] veth1_vlan: entered promiscuous mode
[  582.372066][ T5290] usb 2-1: string descriptor 0 read error: -22
[  582.386268][ T5290] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d
[  582.443826][ T5290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.520853][ T5290] usb 2-1: config 0 descriptor??
[  582.532953][T14878] veth0_macvtap: entered promiscuous mode
[  582.550825][T14878] veth1_macvtap: entered promiscuous mode
[  582.591899][T14878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  582.686810][T14878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  582.722172][T14878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  582.751768][T14878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  582.766628][ T5290] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware
[  582.773015][T14878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  582.811958][ T5290] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  582.812283][T14878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  582.842844][T14878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  582.845644][ T5290] dib0700: firmware download failed at 7 with -22
[  582.862261][T14878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  582.879663][T14878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  582.904771][T14878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  582.923196][ T5290] usb 2-1: USB disconnect, device number 49
[  582.965225][T14878] batman_adv: batadv0: Interface activated: batadv_slave_0
[  583.018019][T14878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  583.040681][T14878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.081830][T14878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 
[  583.106227][T14878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.141634][T14878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  583.186824][T14878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.218920][T14878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  583.240037][T14878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.264252][T14878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  583.285297][T14878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.303714][T14878] batman_adv: batadv0: Interface activated: batadv_slave_1
[  583.312574][ T5290] usb 4-1: USB disconnect, device number 93
[  583.359240][T14878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  583.396071][T14878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  583.428809][T14878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  583.449626][T14878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  583.700336][ T5739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.721108][ T5739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.772713][T12331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.799432][T12331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.964233][   T29] kauditd_printk_skb: 81 callbacks suppressed
[  583.964250][   T29] audit: type=1326 audit(1728112183.636:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15105 comm="syz.4.1947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa78517dff9 code=0x0
[  584.096138][ T5235] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  584.273369][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1945'.
[  584.308406][ T5235] usb 2-1: config index 0 descriptor too short (expected 61986, got 18)
[  584.316904][ T5235] usb 2-1: config 18 has too many interfaces: 195, using maximum allowed: 32
[  584.339853][ T5235] usb 2-1: config 18 has an invalid descriptor of length 0, skipping remainder of the config
[  584.363264][ T5235] usb 2-1: config 18 has 0 interfaces, different from the descriptor's value: 195
[  584.399964][ T5235] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  584.415190][ T5235] usb 2-1: New USB device strings: Mfr=33, Product=0, SerialNumber=3
[  584.446239][ T9739] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  584.485238][ T5235] usb 2-1: Manufacturer: syz
[  584.492496][ T5235] usb 2-1: SerialNumber: syz
[  584.622307][T15116] tipc: Started in network mode
[  584.632098][T15116] tipc: Node identity ac1414aa, cluster identity 4711
[  584.651519][ T9739] usb 1-1: Using ep0 maxpacket: 8
[  584.666747][T15116] tipc: Enabled bearer <udp:sy>, priority 10
[  584.667737][ T9739] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  584.692804][ T9739] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  584.746516][ T9739] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  584.804691][ T9739] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  584.845554][ T9739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  584.887470][ T9739] usb 1-1: config 0 descriptor??
[  585.112976][T15109] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1917'.
[  585.138202][T15109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  585.155844][T15109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  585.329229][ T5739] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.508255][ T5739] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.618181][   T46] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  585.708855][ T5739] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.766097][   T29] audit: type=1326 audit(1728112185.436:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15140 comm="syz.3.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  585.774095][ T9739] usbhid 1-1:0.0: can't add hid device: -71
[  585.789363][ T5288] tipc: Node number set to 2886997162
[  585.806996][   T46] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  585.830122][T15142] PKCS8: Unsupported PKCS#8 version
[  585.846549][ T5249] Bluetooth: hci4: unexpected event 0x0f length: 70 > 4
[  585.894374][   T29] audit: type=1326 audit(1728112185.486:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15140 comm="syz.3.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  585.901635][ T9739] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  585.943484][   T46] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  585.960412][   T46] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  585.975093][ T5739] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.996212][   T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.041999][T15137] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  586.050289][ T9739] usb 1-1: USB disconnect, device number 73
[  586.059355][   T29] audit: type=1326 audit(1728112185.486:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15140 comm="syz.3.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  586.075702][   T46] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  586.163135][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  586.185644][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  586.195446][   T29] audit: type=1326 audit(1728112185.486:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15140 comm="syz.3.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  586.237209][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  586.246263][ T5286] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  586.329665][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  586.347452][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  586.348327][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  586.360573][   T29] audit: type=1326 audit(1728112185.486:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15140 comm="syz.3.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  586.360610][   T29] audit: type=1326 audit(1728112185.496:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15140 comm="syz.3.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  586.379558][   T29] audit: type=1326 audit(1728112185.496:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15140 comm="syz.3.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  586.379601][   T29] audit: type=1326 audit(1728112185.496:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15140 comm="syz.3.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  586.379635][   T29] audit: type=1326 audit(1728112185.496:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15140 comm="syz.3.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa1a437dff9 code=0x7ffc0000
[  586.417637][ T9739] usb 5-1: USB disconnect, device number 87
[  586.451357][ T5286] usb 4-1: Using ep0 maxpacket: 8
[  586.457217][ T5286] usb 4-1: unable to get BOS descriptor or descriptor too short
[  586.458927][ T5286] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  586.458951][ T5286] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  586.458971][ T5286] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  586.458991][ T5286] usb 4-1: config 1 has no interface number 1
[  586.459021][ T5286] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  586.459052][ T5286] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  586.459079][ T5286] usb 4-1: config 1 interface 2 has no altsetting 0
[  586.471204][ T5286] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  586.471236][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.471257][ T5286] usb 4-1: Product: syz
[  586.471274][ T5286] usb 4-1: Manufacturer: syz
[  586.471289][ T5286] usb 4-1: SerialNumber: syz
[  586.490848][ T5739] bridge_slave_1: left allmulticast mode
[  586.831059][ T5739] bridge_slave_1: left promiscuous mode
[  586.840299][T15141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  586.850304][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.922581][ T5288] usb 2-1: USB disconnect, device number 50
[  586.932285][T15141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  586.967692][ T5739] bridge_slave_0: left allmulticast mode
[  586.973445][ T5739] bridge_slave_0: left promiscuous mode
[  586.994603][ T5286] usb 4-1: USB disconnect, device number 94
[  587.022721][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state
[  587.074649][ T5246] udevd[5246]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  587.396626][    T8] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  587.576802][    T8] usb 1-1: too many configurations: 18, using maximum allowed: 8
[  587.633249][    T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  587.662921][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.711647][    T8] usb 1-1: config 0 descriptor??
[  587.739273][    T8] gspca_main: 0c45:8001 too many config
[  587.836739][T15178] RDS: rds_bind could not find a transport for 2ba8:cbc0:a5a5:f708:fd0a:58cc:75ed:aabc, load rds_tcp or rds_rdma?
[  587.871996][T15179] ==================================================================
[  587.880080][T15179] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1ad1/0x5af0
[  587.888669][T15179] Write of size 2560 at addr ffffc900040d1000 by task vivid-000-vid-c/15179
[  587.897337][T15179] 
[  587.899655][T15179] CPU: 1 UID: 0 PID: 15179 Comm: vivid-000-vid-c Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0
[  587.910840][T15179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  587.920898][T15179] Call Trace:
[  587.924165][T15179]  <TASK>
[  587.927088][T15179]  dump_stack_lvl+0x241/0x360
[  587.931762][T15179]  ? __pfx_dump_stack_lvl+0x10/0x10
[  587.936944][T15179]  ? __pfx__printk+0x10/0x10
[  587.941525][T15179]  ? _printk+0xd5/0x120
[  587.945671][T15179]  print_report+0x169/0x550
[  587.950163][T15179]  ? __virt_addr_valid+0xbd/0x530
[  587.955173][T15179]  ? tpg_fill_plane_buffer+0x1ad1/0x5af0
[  587.960798][T15179]  kasan_report+0x143/0x180
[  587.965289][T15179]  ? tpg_fill_plane_buffer+0x1ad1/0x5af0
[  587.970912][T15179]  kasan_check_range+0x282/0x290
[  587.975840][T15179]  ? tpg_fill_plane_buffer+0x1ad1/0x5af0
[  587.981480][T15179]  __asan_memcpy+0x40/0x70
[  587.985916][T15179]  tpg_fill_plane_buffer+0x1ad1/0x5af0
[  587.991406][T15179]  vivid_thread_vid_cap_tick+0xf8e/0x60d0
[  587.997140][T15179]  ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10
[  588.003290][T15179]  ? timekeeping_get_ns+0x2c0/0x420
[  588.008484][T15179]  vivid_thread_vid_cap+0x8aa/0xf30
[  588.013683][T15179]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  588.019402][T15179]  kthread+0x2f0/0x390
[  588.023465][T15179]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  588.029186][T15179]  ? __pfx_kthread+0x10/0x10
[  588.033768][T15179]  ret_from_fork+0x4b/0x80
[  588.038184][T15179]  ? __pfx_kthread+0x10/0x10
[  588.042765][T15179]  ret_from_fork_asm+0x1a/0x30
[  588.047687][T15179]  </TASK>
[  588.050707][T15179] 
[  588.053025][T15179] The buggy address belongs to the virtual mapping at
[  588.053025][T15179]  [ffffc900040a9000, ffffc900040d2000) created by:
[  588.053025][T15179]  vb2_vmalloc_alloc+0xf2/0x340
[  588.070912][T15179] 
[  588.073236][T15179] Memory state around the buggy address:
[  588.078961][T15179]  ffffc900040d0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  588.087008][T15179]  ffffc900040d0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  588.095055][T15179] >ffffc900040d1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  588.103096][T15179]                    ^
[  588.107147][T15179]  ffffc900040d1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  588.115191][T15179]  ffffc900040d1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  588.123235][T15179] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  588.152361][    T8] usb 1-1: USB disconnect, device number 74
[  588.270868][T15179] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  588.278096][T15179] CPU: 0 UID: 0 PID: 15179 Comm: vivid-000-vid-c Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0
[  588.289294][T15179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  588.299355][T15179] Call Trace:
[  588.302636][T15179]  <TASK>
[  588.305572][T15179]  dump_stack_lvl+0x241/0x360
[  588.310264][T15179]  ? __pfx_dump_stack_lvl+0x10/0x10
[  588.315474][T15179]  ? __pfx__printk+0x10/0x10
[  588.320079][T15179]  ? preempt_schedule+0xe1/0xf0
[  588.324941][T15179]  ? vscnprintf+0x5d/0x90
[  588.329268][T15179]  panic+0x349/0x880
[  588.333180][T15179]  ? check_panic_on_warn+0x21/0xb0
[  588.338300][T15179]  ? __pfx_panic+0x10/0x10
[  588.342729][T15179]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[  588.348717][T15179]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  588.355035][T15179]  ? print_report+0x502/0x550
[  588.359705][T15179]  check_panic_on_warn+0x86/0xb0
[  588.364627][T15179]  ? tpg_fill_plane_buffer+0x1ad1/0x5af0
[  588.370251][T15179]  end_report+0x77/0x160
[  588.374481][T15179]  kasan_report+0x154/0x180
[  588.378974][T15179]  ? tpg_fill_plane_buffer+0x1ad1/0x5af0
[  588.384603][T15179]  kasan_check_range+0x282/0x290
[  588.389530][T15179]  ? tpg_fill_plane_buffer+0x1ad1/0x5af0
[  588.395151][T15179]  __asan_memcpy+0x40/0x70
[  588.399552][T15179]  tpg_fill_plane_buffer+0x1ad1/0x5af0
[  588.405018][T15179]  vivid_thread_vid_cap_tick+0xf8e/0x60d0
[  588.410742][T15179]  ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10
[  588.416898][T15179]  ? timekeeping_get_ns+0x2c0/0x420
[  588.422092][T15179]  vivid_thread_vid_cap+0x8aa/0xf30
[  588.427292][T15179]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  588.433003][T15179]  kthread+0x2f0/0x390
[  588.437063][T15179]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  588.442773][T15179]  ? __pfx_kthread+0x10/0x10
[  588.447347][T15179]  ret_from_fork+0x4b/0x80
[  588.451753][T15179]  ? __pfx_kthread+0x10/0x10
[  588.456331][T15179]  ret_from_fork_asm+0x1a/0x30
[  588.461088][T15179]  </TASK>
[  588.464319][T15179] Kernel Offset: disabled
[  588.468629][T15179] Rebooting in 86400 seconds..