last executing test programs:

7.524143591s ago: executing program 2 (id=587):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000040c50f80b00000000000010902240001000000000904000001030000000921000000012203000905810300"], 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8, 0xa, 0x7ffffffe}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async, rerun: 64)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async, rerun: 64)
syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) (async)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
dup(r2) (async, rerun: 64)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40043, 0x1fe) (async, rerun: 64)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
mq_open(&(0x7f0000000100)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7-\xeb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00AWK\n\x8b!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3g:', 0x41, 0x80, 0x0) (async, rerun: 64)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
socket$kcm(0xa, 0x1, 0x106)
r4 = syz_io_uring_setup(0x2de0, &(0x7f0000000200)={0x0, 0x0, 0x40, 0x0, 0x1000224}, 0x0, 0x0)
r5 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0xac7c, 0x10100, 0x2002, 0x4000000, 0x0, r4}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0) (async, rerun: 32)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (rerun: 32)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x60, 0x11, r3, 0x0, 0x0, 0x0, 0x61, 0x1, {0x1}}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async)
write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[], 0x118) (async, rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) (rerun: 64)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async)
io_uring_enter(r5, 0x7330, 0x0, 0x0, 0x0, 0x0)

7.343976324s ago: executing program 2 (id=590):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x3b, 0x800, 0xdf5, 0x2, 0x8000})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x100)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x18000}, 0x20040004)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x21)
r6 = open$dir(&(0x7f0000000400)='./file0\x00', 0x800, 0x101)
mkdirat(r6, &(0x7f0000000440)='./file0\x00', 0x82)
r7 = creat(&(0x7f0000000480)='./file0\x00', 0x20)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000d)
ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f00000004c0)={0x0, 0x5, 0xa, 0x9}, 0x10)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r9, 0x6, 0x8, &(0x7f0000000500), &(0x7f0000000540)=0x4)
ioctl$DRM_IOCTL_AGP_RELEASE(r7, 0x6431)
r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x18)
ioctl$KVM_XEN_HVM_CONFIG(r10, 0x4038ae7a, &(0x7f0000001600)={0xff, 0x2b8, &(0x7f0000000580)="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", &(0x7f0000001580)="dd11068f61f17ea8651c239daf77f91b8d2d55a52d93ba12c9b368c5153946562ff2336fabd46a9896412405b0da3d309c6be3b384d38682048b96d92cc93177caf674c5a117555da496d791eb83bfd476fe0013a9960fea0ba6d0f418d235b671dbbfcea0d6557a8b0514e3ea311278295388", 0x1000, 0x73})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000001640)={{0x1, 0x1, 0x18, <r11=>0xffffffffffffffff, {0x10001}}, './file0\x00'})
mount$bind(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700), 0x20080, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r10, 0x0, 0x485, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1)
ioctl$DRM_IOCTL_GET_CLIENT(r11, 0xc0286405, &(0x7f0000001740)={0x4, 0x9, {<r12=>0x0}, {0xffffffffffffffff}, 0x8000000000000000, 0x80000001})
prlimit64(r12, 0x5, &(0x7f0000001780)={0x800, 0x9}, &(0x7f00000017c0))
write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000003840)={0x60, 0x0, 0x0, {{0xfffffffffffffff7, 0x6, 0x5ff, 0x9, 0x402c, 0x6, 0x7fff, 0x4}}}, 0x60)

6.952974718s ago: executing program 2 (id=592):
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x6, 0xa0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0xfa, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xdd9, 0xfff8, 0x8000, 0x2}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x60, 0xe, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xff, 0x6, 0xf6}}}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x10, 0x0}, {0x30, &(0x7f00000002c0)=@string={0x30, 0x3, "d86c782bd03797c4be88d5dd87d8e678d34459aca8bafcdfa883c3eeface1087c4c019360ae4c6772844922ce462"}}, {0x0, 0x0}]}) (async)
syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x6, 0xa0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0xfa, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xdd9, 0xfff8, 0x8000, 0x2}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x60, 0xe, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xff, 0x6, 0xf6}}}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x10, 0x0}, {0x30, &(0x7f00000002c0)=@string={0x30, 0x3, "d86c782bd03797c4be88d5dd87d8e678d34459aca8bafcdfa883c3eeface1087c4c019360ae4c6772844922ce462"}}, {0x0, 0x0}]})
syz_usb_connect$cdc_ncm(0x5, 0x70, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x2, 0x20, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "7ec2"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x8, 0x10}, {0x6, 0x24, 0x1a, 0x562, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x98, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x40, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x4, 0x9}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xd, 0x6, 0xc, 0x40}, 0x24, &(0x7f00000000c0)={0x5, 0xf, 0x24, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0xf, 0xc}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0xa5, 0x5, 0x24, 0x7f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x6, 0xffff}]}, 0x2, [{0x8f, &(0x7f0000000200)=@string={0x8f, 0x3, "a2eb65ba81fd4f803591ea1f256b117bfad3b9995385a154d2c26ae5f56fb5edc569c67149c861bb049451791a147d6860ad177d3da40fdd64094b39f6cd445ee48f43e4a5cfd0acf9aba0a781475b43678834212931699577189c81c55ed6fe56682031b57063490b10b5941ffb02c064401d8a14e5081e554463d63454b01fde2c8c0196ece68d6fd47b9655"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x43f}}]})

5.739487277s ago: executing program 4 (id=599):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10})
futex(0x0, 0x0, 0x10000004, 0x0, &(0x7f0000048000), 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

5.35670318s ago: executing program 4 (id=602):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) (async)
r1 = socket$inet6(0xa, 0x802, 0x0)
bind$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0xd8a, @mcast2, 0x4, 0x3}, 0x20) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f000000d040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)={0x1694, r2, 0x8de13c6b70ae92c3, 0x41003, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xe0, 0x11d, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x6c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x7}, {0x6, 0x1}, {0x0, 0x3}, {0x6, 0x8}, {0x2, 0x6}, {0x1}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x2, 0x2}, {0x1, 0x7}, {0x2, 0x9}, {0x4, 0xa}, {0x3, 0x1}, {0x0, 0x6}, {0x2, 0x6}, {0x3, 0xa}, {0x6, 0x6}, {0x4, 0x3}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x9}, {0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x69d, 0x409, 0xa, 0x5, 0x46c, 0x1, 0x6b6d, 0x9]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x5, 0x8}, {0x5, 0xa}, {0x6, 0x4}, {0x2}, {0x7, 0x1}, {0x4, 0x5}, {0x7, 0x6}, {0x1, 0x8}, {0x3, 0x1}, {0x5, 0xa}, {0x5, 0x3}, {0x5, 0xa}, {0x0, 0x4}, {0x2, 0x2}, {0x2, 0x1}, {0x5, 0x9}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x1, 0x5, 0x7, 0x7, 0x7, 0x945e, 0x5]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x37}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8001}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x530, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x26c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x52}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xff, 0x4, 0xe, 0x9, 0x5, 0xc, 0xf]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x1b, 0xb, 0x24, 0x9d9a285e62fe0f36, 0x1, 0x4, 0x30, 0x1, 0x48, 0x2, 0x4, 0x9, 0x60, 0x24, 0x6c, 0x4, 0x5a, 0x60, 0x6c, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x5, 0x4}, {0x0, 0x2}, {0x2}, {0x4, 0x5}, {0x4, 0x1}, {0x5, 0xa}, {0x7, 0x2}, {0x4}, {0x5, 0x9}, {0x0, 0x1}, {0x3, 0x5}, {0x3, 0x7}, {0x4, 0x4}, {0x4, 0x9}, {0x2}, {0x0, 0x8}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x5}, {0x1}, {0x7, 0x5}, {0x3, 0x5}, {0x5, 0x3}, {0x0, 0x6}, {0x7, 0x6}, {0x4, 0x3}, {0x0, 0x4}, {0x3, 0x6}, {0x0, 0x8}, {0x4, 0x1}, {0x2, 0x7}, {0x1, 0x4}, {0x6, 0x8}, {0x6, 0x2}, {0x5, 0x1}, {0x4, 0x3}, {0x7, 0x9}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x2, 0xa}, {0x1, 0x6}, {0x2, 0x7}, {0x0, 0x6}, {0x5, 0x6}, {0x3, 0x7}, {0x1, 0x4}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x5}, {0x5, 0x7}, {0x1, 0x1}, {0x3, 0x9}, {0x4, 0x3}, {0x4, 0xa}, {0x4, 0x4}, {0x5, 0x1}, {0x1, 0x4}, {0x4, 0x5}, {0x3, 0x1}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x5}, {0x7, 0x3}, {0x6, 0x4}, {0x0, 0x6}, {0x7, 0x7}, {0x4}, {0x7, 0x6}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x5, 0xa, 0xff, 0x327, 0x2, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x592, 0x7, 0xeb, 0x8, 0x7, 0x1, 0x8, 0x3]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xc, 0x18, 0xc, 0x6, 0x5, 0x30, 0x1, 0x2, 0x30, 0x12, 0x18, 0x36, 0xc, 0x1, 0x6c, 0x24, 0x16, 0x36, 0x6c, 0x24, 0x60, 0x1, 0x3, 0x6, 0x9, 0x6c, 0x12, 0x18]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x164, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x3}, {0x7, 0x1}, {0x1, 0xa}, {0x6, 0x3}, {0x3, 0x7}, {0x7, 0x3}, {0x4, 0x6}, {0x5, 0x3}, {0x0, 0x3}, {0x1, 0x9}, {0x7, 0x6}, {0x6, 0x7}, {}, {0x6, 0x3}, {0x1, 0x9}, {0x1, 0xa}, {0x2, 0x1}, {0x7, 0x8}, {0x3, 0x9}, {0x3, 0x9}, {0x3, 0x7}, {0x6, 0x4}, {0x6}, {0x7, 0x3}, {0x6, 0x1}, {0x0, 0x3}, {0x3, 0xa}, {0x3, 0x5}, {0x2, 0x6}, {0x7, 0x4}, {0x2}, {0x1, 0x1}, {0x1, 0xa}, {0x6, 0x6}, {0x1, 0x4}, {0x6, 0x9}, {0x6, 0xa}, {0x7, 0x6}, {0x3}, {}, {0x0, 0x6}, {0x5, 0x5}, {0x4, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x5, 0x2}, {0x6, 0x1}, {0x6, 0x5}, {0x1, 0x6}, {0x2, 0x8}, {0x0, 0x6}, {0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x16, 0xc, 0x0, 0x16, 0x6, 0x60, 0xc, 0x12, 0x6c, 0x0, 0x48, 0x36, 0x36, 0x60, 0xb, 0x30, 0x1b, 0x6, 0x1, 0x0, 0x6, 0x16, 0xb, 0x1]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x3, 0x60, 0x3, 0x30, 0x2, 0x6, 0x30, 0x30, 0x1b, 0x2, 0x1b, 0x12, 0x1, 0x1, 0x36, 0x30, 0x12, 0x3, 0x12, 0x36, 0xb, 0xb, 0x1, 0x36, 0x60, 0x60, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5b, 0x8, 0x5c, 0x6, 0x47e, 0x2, 0x1]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x9, 0x9, 0x6c, 0x3, 0x3, 0xc, 0x1, 0x60, 0x5, 0x0]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xa, 0x7, 0x5, 0x3, 0x5, 0x101, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7d0, 0xcca, 0x3, 0x3, 0x58, 0x7, 0x7fff, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x9, 0x2, 0x2, 0x7, 0x43, 0x7]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff2, 0x86a3, 0x2, 0x4, 0x1, 0xad90, 0xcf6, 0x7fff]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x743b, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x1}, {0x6}, {0x4, 0x9}, {0x0, 0x6}, {0x0, 0x7}, {0x0, 0xa}, {0x6}, {0x6, 0x4}, {0x7, 0x2}, {0x3, 0x3}, {0x5, 0x4}, {0x4, 0x6}, {0x0, 0x2}, {0x6, 0x3}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xf, 0x1c0, 0x331, 0x5, 0x6, 0x21f, 0x9]}}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x270, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1b}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x42}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x48, 0x24, 0x24, 0x4, 0x1b, 0x30, 0x4, 0x6c, 0x6, 0x3, 0x3, 0x6, 0x60, 0x4, 0x4, 0x60, 0x2, 0x2, 0x36, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x1, 0xf, 0x75, 0x3, 0x829d, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x98, 0xc, 0x3ff, 0x7960, 0x2, 0x9b1, 0x5296]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x33, 0x7, 0x6c, 0x7fff, 0x9, 0x41, 0x200, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x194, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc50, 0xfb4, 0x4, 0x7, 0x10, 0x8001, 0x65f, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x0, 0x2}, {0x0, 0x1}, {0x4, 0x2}, {0x1, 0xa}, {0x5, 0x6}, {0x7, 0x9}, {0x4}, {0x2, 0x7}, {0x1, 0x8}, {0x2, 0x8}, {0x7, 0xa}, {0x5, 0x1}, {0x0, 0x4}, {0x5, 0x9}, {0x1, 0xa}, {0x2, 0x2}, {0x4, 0x5}, {0x7, 0x1}, {0x3, 0xa}, {0x6, 0x5}, {0x7, 0x6}, {0x1, 0x3}, {0x4, 0x4}, {0x7, 0x1}, {0x2, 0x7}, {0x7, 0x1}, {0x7, 0x9}, {0x7, 0x9}, {0x0, 0x7}, {0x0, 0xa}, {0x0, 0x9}, {0x6, 0x2}, {0x4, 0xa}, {0x3, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x4, 0x4}, {0x1, 0x3}, {0x0, 0x7}, {0x5, 0x2}, {0x4, 0x7}, {0x1, 0xa}, {0x6, 0x6}, {0x5, 0x9}, {0x2, 0x2}, {0x3, 0x2}, {0x5, 0xa}, {0x1, 0xa}, {0x2}, {0x4}, {0x3, 0x4}, {0x5, 0x9}, {0x1, 0x5}, {0x2, 0x4}, {0x5, 0x6}, {0x1, 0x8}, {0x3, 0x6}, {0x6, 0x1}, {0x6, 0x2}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x3, 0x12, 0x60, 0x1b, 0xc, 0x18, 0x1b, 0x36, 0xc, 0x12, 0x3, 0x59c2eaadfebcf71e, 0x4, 0x2, 0x9, 0x18, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0xf, 0xa, 0x8, 0x380, 0x7ff, 0x3, 0x1]}}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1, 0x13, 0x36, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x6, 0x30, 0x60, 0x2, 0x3, 0x1b, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x5, 0x1ff, 0x4, 0x0, 0x3, 0x1, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x8b04be1e03e62095}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x12, 0x0, 0x9, 0x9, 0x1, 0x24, 0x1, 0x24, 0x36, 0xb, 0x48, 0xb, 0x2, 0x9, 0x1b, 0x3, 0x12, 0x6, 0x30, 0x24, 0x60, 0x2, 0xb, 0x3, 0x48, 0x12, 0x34, 0x18, 0x5, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xf7, 0x3ff, 0xfde9, 0xd6, 0x1, 0x2, 0x4]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x1}, {0x4, 0x3}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0x7}, {0x2, 0x6}, {0x1, 0x4}, {0x4, 0x8}, {0x6, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x6, 0x8}, {0x6, 0xa}, {0x4, 0x8}, {0x4, 0xa}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x9}, {0x7, 0x8}, {0x3, 0x2}, {0x7, 0x5}, {0x0, 0x8}, {0x2, 0x2}, {0x1, 0x4}, {0x4, 0x1}, {0x4, 0x6}, {0x0, 0x8}, {0x7, 0x4}, {0x4, 0x6}, {0x4, 0x2}, {0x7, 0xa}, {0x3}, {0x5, 0x1}, {0x2, 0x5}, {0x0, 0x5}, {0x2, 0x1}, {0x2, 0xa}, {0x0, 0x3}, {0x1, 0x2}, {0x0, 0x7}, {0x1, 0x3}, {0x5, 0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x6}, {0x0, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xfff, 0x8, 0x6, 0x98, 0x400, 0x8, 0x1]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x140, 0x11d, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xba}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xbb57}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x80}]}, {0xe4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x36, 0x36, 0x6c, 0x9, 0x60, 0x24, 0x30, 0x16, 0x2, 0x48, 0x0, 0x68, 0x16, 0x18, 0x4, 0x9, 0x1]}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1b, 0x3, 0xc, 0x4, 0x6c, 0x30, 0x60, 0x24, 0x2, 0x6c, 0x1b, 0x30, 0x6c, 0xaac268f38f3338c3, 0x36, 0x60, 0x3, 0x9, 0x3, 0x1b, 0x60, 0x12, 0x30, 0x9, 0x48, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x800, 0x9a62, 0x6, 0x7, 0x4, 0x800]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x7}, {0x2, 0x8}, {0x1, 0x3}, {0x1, 0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x1}, {0x5, 0x8}, {0x4, 0x7}, {0x4, 0xa}, {0x3, 0x6}, {0x0, 0x6}, {0x5, 0x3}, {0x0, 0x6}, {0x2, 0xa}, {0x2, 0x3}, {0x3, 0x4}, {0x7, 0x4}, {0x1, 0x6}, {0x7, 0x9}, {0x6, 0x9}, {0x0, 0x7}, {0x3, 0x6}, {0x2, 0x9}, {0x1, 0x2}, {0x2, 0xa}, {0x7, 0x1}, {0x3}, {0x7}, {0x5, 0x3}, {0x4, 0x1}, {0x2, 0x8}, {0x1}, {0x6, 0x6}, {0x2, 0x6}, {0x1, 0x2}, {0x5, 0x3}, {0x3, 0x8}, {0x5, 0x2}, {0x6, 0x2}, {0x3, 0x1}, {0x7, 0x4}, {0x5, 0x2}, {0x3, 0x4}, {0x3, 0x3}, {0x1, 0x1}, {0x6, 0x4}, {0x3}, {0x1, 0x7}, {0x4, 0x6}, {0x7}, {0x3, 0xa}, {0x5}, {0x1, 0x5}, {0x2, 0x3}, {0x3, 0x7}, {0x3, 0x6}, {0x0, 0x4}, {0x5, 0x7}, {0x6, 0x9}, {0x1, 0x7}, {0x1}, {0x0, 0xa}, {0x5}, {0x2, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x6, 0x9, 0x0, 0x433, 0x2, 0xfff, 0x8]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x9c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6f}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5e}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x44, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x9ad8, 0x2, 0x1, 0x9, 0x7, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x800, 0x3, 0x2, 0x6, 0x6ed, 0x6, 0x1]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb2}]}]}, @NL80211_ATTR_TID_CONFIG={0x84, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffff3ef8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdf}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}]}]}, @NL80211_ATTR_TID_CONFIG={0x1b0, 0x11d, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x78}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x178, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1e, 0x8, 0x8f3b, 0xb, 0x71f0, 0x3, 0x0, 0x400]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x9, 0x5, 0xf, 0x0, 0x0, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x12, 0xc, 0x60, 0x9, 0x6c, 0x30, 0x18, 0x6, 0x4, 0x1, 0xc, 0x2, 0x16, 0x36, 0x18, 0x18, 0x2, 0x60, 0x9, 0x1b, 0x36, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xd2ef, 0x1, 0xfff, 0x1, 0x8, 0x10, 0x97]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2000, 0x6, 0x1, 0x8e, 0x7fff, 0x7b, 0xffff]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2bd2, 0x6, 0x2, 0x6, 0x1, 0x3, 0xfff4]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1, 0x12, 0x5, 0x36, 0x20, 0x3, 0x5, 0x18, 0xe, 0x1b, 0xb, 0xb, 0x48, 0x6, 0x5, 0x30, 0x3, 0xc, 0x62, 0x16, 0x6c, 0x60, 0x12, 0x12]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x891, 0x3, 0x7ff, 0xa, 0x6, 0x7, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x1, 0x4, 0xff, 0xff, 0xe, 0xfff7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x9, 0x6, 0x1, 0x9, 0x9, 0x6e8]}}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7f, 0x7fff, 0xf000, 0x800, 0x9, 0x47e9, 0x2]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x6}, {0x6, 0x1}, {0x0, 0x8}, {0x3, 0x8}, {0x2, 0x7}, {0x4, 0x8}, {0x2, 0x2}, {0x3, 0x1}, {0x4, 0x6}, {0x4, 0x6}, {0x1, 0x9}, {0x1, 0x9}, {0x2, 0x9}, {0x1, 0x3}, {0x1, 0x2}, {0x1, 0x1}, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x7}, {0x1, 0x5}, {0x1, 0x8}, {0x2, 0x5}, {0x6, 0x1}, {0x0, 0x2}, {0x7, 0x1}, {0x2, 0xa}, {0x1, 0x2}, {0x5, 0xa}, {0x4, 0x5}, {0x1, 0x3}, {0x1, 0xa}, {0x3, 0x6}, {0x3, 0x8}, {0x5, 0x8}, {0x5, 0x17}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0x7}, {0x3, 0x2}, {0x4, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x4}, {0x3, 0x4}, {0x2, 0x9}, {0x4, 0x4}, {0x0, 0x2}, {0x1, 0x6}, {0x1, 0x4}, {0x5, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x6e5c, 0x8, 0x21f, 0x1, 0x7, 0x64c, 0x4]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffff0001}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}]}, @NL80211_ATTR_TID_CONFIG={0x390, 0x11d, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x42}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x84}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x0, 0x1}, {0x5, 0x6}, {0x0, 0x4}, {0x3, 0x7}, {0x4, 0x3}, {0x3, 0x2}, {0x4, 0xa}, {0x1, 0x1}, {0x7}, {0x5, 0x5}, {0x4, 0x7}, {0x7, 0xa}, {0x4, 0x9}, {0x0, 0x9}, {0x0, 0x7}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x401, 0x2, 0xd8, 0x7, 0x2, 0x1, 0xfff8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7fff, 0xfa5, 0x1, 0xcac, 0x8, 0x8001, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x81}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x75}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcd}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7f}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xaf1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x48}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x85}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x85}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf9}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa5e0, 0x1000, 0x2, 0xffff, 0x4, 0xfff8, 0x9, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x2, 0x6}, {0x6, 0x7}, {0x3, 0x3}, {0x5, 0x8}, {0x1, 0x6}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x6}, {0x3}, {0x4, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x5, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x3, 0x8}, {0x2, 0x7}, {0x6, 0x9}, {0x5, 0xa}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x4, 0x5}, {0x1, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x5, 0xa, 0x7, 0xe, 0xfff4, 0x0, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x9f}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x7}, {0x4, 0x5}, {0x0, 0x2}, {0x1, 0x8}, {0x0, 0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x4}, {0x2}, {0x6}, {0x0, 0x1e}, {0x0, 0x7}, {0x3, 0x1}, {0x1, 0x9}, {0x6, 0x6}, {0x0, 0x5}, {0x6, 0x5}, {0x4, 0x5}, {}, {0x7, 0x4}, {0x0, 0x1}, {0x6, 0x3}, {0x5, 0xa}, {0x0, 0x2}, {0x7, 0x5}, {0x1, 0x2}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0xa}, {0x2, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x7, 0x9, 0x6, 0x6, 0x0, 0x400, 0x1]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3, 0x3, 0x60, 0x3, 0x16, 0x12, 0x16, 0x30, 0x2d, 0x6c, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x9, 0x4, 0x0, 0x8, 0x1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x0, 0x2, 0x8, 0x401, 0x1, 0xfffe]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x2, 0x2}, {0x5, 0x2}, {0x7, 0x8}, {0x5}, {0x5, 0x9}, {0x1, 0xa}, {0x7, 0x5}, {0x2, 0x1}, {0x7, 0x4}, {0x7, 0x2}, {0x4, 0x3}, {0x4, 0x5}, {0x3}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0x4}, {0x6, 0x1}, {0x2, 0x4}, {0x1, 0x5}, {0x5, 0x7}, {0x7, 0x8}, {0x1, 0xa}, {0x3}, {0x7, 0x8}, {0x5, 0xa}, {0x4, 0x2}, {0x0, 0x8}, {0x2}, {0x0, 0x6}, {}, {0x4, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x7, 0x5}, {0x2, 0x2}, {0x5, 0x8}, {0x4, 0x3}, {0x1, 0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x5, 0x1}, {0x4, 0x7}, {0x1, 0x9}, {0x3, 0x3}, {0x4, 0xa}, {0x0, 0x6}]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0xb, 0x6, 0x5, 0xb, 0x3, 0x18, 0x16, 0x16, 0x30, 0xd, 0x9, 0x0, 0x0, 0x3, 0x16, 0xa, 0x9, 0x18, 0x9, 0xc, 0x60, 0x3, 0x30, 0x2, 0x30, 0x30, 0x9, 0x48, 0x18, 0x6, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x3}, {0x5, 0x3}, {0x3, 0x9}, {0x4, 0x9}, {0x7, 0x6}, {0x2, 0x6}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x2}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0x9}, {0x6, 0x7}, {0x6, 0x2}, {0x2, 0x1}, {0x0, 0xa}, {0x2, 0x4}, {0x2, 0x8}, {0x4, 0x8}, {0x6, 0x5}, {0x6, 0x2}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0x1}, {0x0, 0x8}, {0x6, 0x7}, {0x6, 0x7}, {0x0, 0x7}, {0x3, 0x8}, {0x5, 0x2}, {0x1, 0x1}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x6, 0x9}, {0x6, 0x9}, {0x3, 0x3}, {0x3, 0x2}, {0x2, 0x5}, {0x7, 0x2}, {0x3, 0x1}, {0x6, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xd, 0x8, 0x5, 0x3, 0x2, 0x0, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4f0, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x4d8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8c}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x160, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x0, 0x4}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x4}, {0x7}, {0x5, 0x7}, {0x1, 0x5}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x1}, {0x3, 0x2}, {0x1, 0x7}, {0x3, 0x6}, {0x1, 0x3}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x8}, {0x0, 0x1}, {0x7, 0x8}, {0x5}, {0x4, 0x3}, {0x1, 0x8}, {0x3}, {0x0, 0x9}, {0x1, 0x5}, {0x6, 0x2}, {0x0, 0x3}, {0x1, 0x6}, {0x5, 0x8}, {0x6, 0xa}, {0x2, 0x8}, {0x5, 0x2}, {0x3, 0x9}, {0x6, 0x2}, {0x1, 0x3}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x2}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x3, 0x7}, {0x5, 0x2}, {0x1}, {0x1, 0x3}, {0x2, 0x5}, {0x6, 0x1}, {0x4, 0x6}, {0x4, 0x7}, {0x7, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x0, 0x8}, {0x1}, {0x1, 0x6}, {0x1, 0x9}, {0x2, 0x5}, {0x4, 0x6}, {0x7, 0x3}, {0x7, 0x1}, {0x6, 0x3}, {0x4, 0x8}, {0x5, 0x3}, {0x0, 0x2}, {0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x9}, {0x2, 0x5}, {0x0, 0x9}, {0x2, 0x1}, {0x3}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x17, 0x0, 0x7f, 0x500, 0x4, 0x4, 0x24f8]}}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xffff, 0x5c3f, 0x8, 0x800, 0x5, 0x8000, 0xfb3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x8}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x97ed, 0x5, 0x1, 0x788e, 0xae, 0x8, 0x200]}}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0xc, 0x4, 0x7, 0xfffd, 0x1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xe, 0x3, 0x6, 0x7, 0x8, 0x81, 0x8]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x3, 0x3}, {0x3, 0x4}, {0x2, 0x4}, {0x1, 0x5}, {0x0, 0x1}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0x9}, {0x6, 0x2}, {0x2, 0x2}, {0x2, 0x9}, {0x1, 0x8}, {0x5, 0x8}, {0x6, 0x9}, {0x5, 0x8}, {0x0, 0x9}, {0x0, 0x5}, {0x3}, {0x1, 0x2}, {0x4, 0x3}, {0x3, 0x2}, {}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0xa}, {0x6, 0x2}, {0x0, 0x5}, {0x3, 0x9}, {0x3, 0x8}, {0x5, 0x3}, {0x5, 0x5}, {0x4, 0x4}, {0x1, 0x3}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0xa}, {0x0, 0x9}, {0x7, 0x7}, {0x7, 0x5}, {0x3, 0x3}, {0x0, 0x5}, {0x6, 0x4}, {0x1}, {0x7, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x6, 0x2}, {0x0, 0x9}, {0x6}, {0x3, 0x8}, {0x1, 0x3}, {0x6, 0x9}, {0x5, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x6}, {0x5, 0x1}, {0x5, 0x5}, {0x1}, {0x3, 0x7}, {0x1, 0x7}, {0x1, 0x8}, {0x7, 0x4}, {0x5}, {0x4, 0x6}, {0x1, 0x4}, {0x5}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x18, 0x48, 0x1, 0x1b, 0x12, 0x64, 0x60, 0x22885fc073425ee, 0x4, 0x48, 0x30, 0x16, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x89, 0xeb, 0xfffb, 0x1, 0x1, 0xded, 0xb5c5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x358, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x1, 0x5, 0x2, 0x2, 0xc, 0x1, 0xc, 0x6, 0x36, 0xc, 0x5, 0x30, 0x6c, 0x60, 0x48, 0x60, 0x3, 0x6, 0x3, 0x2, 0x36, 0x60, 0x48, 0x36, 0x6, 0xd7694027ff5a53a8, 0x3, 0x60, 0x1b, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0xa}, {0x1}, {0x2, 0x6}, {0x0, 0xa}, {0x1, 0x8}, {0x1, 0x2}, {0x7, 0x7}, {0x1, 0x8}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0xa}, {0x3, 0x8}, {0x5, 0x2}, {0x6, 0x9}, {0x5, 0x6}, {0x2}, {0x3, 0x7}, {0x1, 0x2}, {0x6, 0x4}, {0x4, 0xa}, {0x2}, {0x1, 0x9}, {0x1, 0x5}, {0x1, 0xa}, {0x3, 0x2}, {0x7, 0x5}, {0x0, 0x7}, {0x6, 0xa}, {0x1, 0x5}, {0x2}, {0x1, 0x5}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0x4}, {0x3, 0xa}, {0x2, 0x9}, {0x6, 0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0x8}, {0x4}, {0x3, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x6a2c, 0x5, 0xa91a, 0x4, 0xff09, 0xfffb, 0x1]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x2, 0x7, 0x2, 0x7, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x60, 0x3, 0x9, 0x1, 0x4, 0x5, 0x5, 0x4, 0x5, 0x18, 0x30, 0x1, 0x18, 0x12, 0x36, 0x60, 0x12, 0x5, 0x12, 0x48, 0x16, 0x4, 0x36, 0x6, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x3, 0x60, 0xc, 0x16, 0x3e, 0xc, 0xc, 0xc, 0x2, 0x1b, 0x16]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0xa}, {}, {0x5, 0x9}, {0x0, 0x8}, {0x0, 0x6}, {0x7, 0x5}, {0x7, 0x5}, {0x7, 0x4}, {0x1}, {0x1, 0x2}, {0x3, 0x3}, {0x1, 0x4}, {0x5}, {0x2, 0x6}, {0x3}, {0x4, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x0, 0x6}, {0x3, 0x6}, {0x5, 0x5}, {0x5, 0xa}, {0x3}, {0x6, 0x6}, {0x4, 0x3}, {0x5, 0x1}, {}, {0x5, 0x4}, {0x0, 0x8}, {0x4, 0x5}, {0x3, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x7, 0x7, 0x40ac, 0x6, 0x4, 0xd945, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x2}, {0x6}, {0x6, 0x9}, {0x0, 0x2}, {0x4, 0x3}, {0x2, 0x7}, {0x4, 0x8}, {0x4, 0xa}, {0x0, 0x4}]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x63bb, 0x6, 0x6, 0x5, 0x100, 0xfffe, 0x6, 0x40]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x6, 0x5}, {0x2, 0xa}, {0x7, 0x2}, {0x4, 0x1}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x7}, {0x6}, {0x3, 0x8}, {0x7, 0x6}, {0x2, 0x3}, {0x7, 0x9}, {0x6, 0xa}, {0x0, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x0, 0x5}, {0x7, 0xa}, {0x3, 0x7}, {0x7, 0x7}, {0x0, 0x5}, {0x0, 0x2}, {0x3, 0x3}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0x2}, {0x6, 0x6}, {0x2, 0x3}, {0x4, 0x6}, {0x2, 0x7}, {0x3, 0x2}, {0x4, 0x6}, {0x1, 0x4}, {0x3, 0x7}, {0x2, 0x9}, {0x1, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x4, 0x6}, {0x4}, {0x7}, {0x2, 0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x6, 0xa}, {0x1, 0x9}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x5, 0x3}, {0x7, 0xa}, {0x1, 0x1}, {0x6}, {0x0, 0x1}, {0x6}, {0x3, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x4, 0x4}, {0x2, 0x6}, {0x6, 0x8}, {0x5, 0x9}, {0x6, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x531d, 0x3ff, 0xc, 0xfff0, 0x100, 0x6, 0x2]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x7b83, 0x8, 0x3, 0xfffa, 0x60, 0x58f2, 0xff]}}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0xe74, 0x4, 0x5, 0x7, 0x3ff, 0x8ff8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xf921, 0xd02, 0x5, 0x4, 0x40, 0x3, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6c, 0x12, 0x1139e63c62a5131e, 0x4a, 0x41, 0x4, 0x2, 0x30, 0x9, 0x12, 0x36, 0x24, 0x1b, 0x48, 0x9, 0xb, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x100, 0x8ba0, 0x5, 0x1ff, 0x200, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xc103, 0xfffa, 0x1, 0x1, 0x3, 0x9, 0x7]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x2, 0xa}, {0x0, 0xa}, {0x0, 0x1}, {0x2, 0x4}, {0x7, 0xa}, {0x1, 0x9}, {0x2, 0x3}, {0x6, 0x8}, {0x5, 0xa}, {0x1, 0x3}, {0x7}, {0x6, 0x7}, {0x5, 0x6}, {0x1, 0x4}, {0x0, 0x9}]}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x6, 0x6}, {0x6, 0xa}, {0x0, 0x7}, {0x2, 0x6}, {0x3, 0x9}, {0x5, 0x4}, {0x2, 0x4}, {0x3, 0x5}, {0x2, 0xa}, {0x5, 0x8}, {0x1, 0x2}, {0x3, 0x5}, {0x7, 0x4}, {0x2, 0x6}, {0x7, 0x6}, {0x2, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfb6a, 0x4, 0x0, 0x5, 0x7377, 0xb00, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x89, 0x7, 0x4, 0x4, 0x7, 0x6, 0xc71]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x6, 0x5}, {0x1, 0x3}, {0x7, 0x2}, {0x3, 0x2}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0x3}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x2}, {0x7, 0x5}, {0x4}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0x3}, {0x7, 0x1}, {0x2, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x3, 0x3}, {0x6, 0x8}, {0x1, 0x7}, {0x7, 0x2}, {}, {0x7, 0x4}, {0x5, 0x2}, {0x0, 0x8}, {0x7, 0xa}, {0x6, 0x2}, {0x0, 0x7}, {0x0, 0x2}, {0x5, 0x7}, {0x1, 0xa}, {0x3, 0x5}, {0x3, 0x6}, {0x2, 0x4}, {0x0, 0x6}, {0x1, 0x5}, {0x4}, {0x3, 0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x5}, {0x7, 0x1}, {0x5, 0xa}, {0x5}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x1}, {0x2, 0x5}, {0x6, 0x9}, {0x7, 0x2}, {0x6, 0x8}, {0x2}, {0x3, 0x7}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x2}, {0x6, 0xa}, {0x4, 0x8}, {0x1}, {0x7, 0xa}, {0x7, 0x9}, {0x1, 0x2}, {}, {0x5, 0x6}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0x2}, {0x1, 0x2}, {}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x1, 0x6}, {0x3, 0x5}, {0x5, 0x1}, {0x3, 0x5}, {0x3, 0x5}, {0x1, 0x5}, {}, {0x2, 0x5}, {0x4, 0xa}, {0x6, 0x2}, {0x1, 0xa}, {0x3, 0x4}, {0x2, 0x9}, {0x2, 0x5}, {0x2, 0x7}, {0x5}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x3, 0xe, 0xcea8, 0x9c4, 0x8001, 0x90c, 0x7ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x3d8, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x55}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9a}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x49}]}, {0x344, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x47}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x308, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x30, 0xc, 0x12, 0x37, 0x36, 0x16, 0x18, 0x2, 0x6c, 0x60, 0x2, 0xc, 0xb, 0x24, 0x3e, 0x48, 0x3, 0x16, 0x48, 0x16, 0x1, 0x3, 0x60, 0x3, 0x36, 0xb, 0x13, 0x24, 0x6c, 0x16, 0xb0ddce4335e56dd8, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x8f, 0xe6e, 0x6, 0x0, 0x51, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8e2, 0x1, 0x6, 0x3, 0xfff, 0x7, 0xc]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xf277, 0x9, 0x0, 0xe, 0x6, 0x1, 0x23e7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x3, 0x0, 0x0, 0x5, 0x7f, 0x6b6, 0x7]}}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x5, 0x9, 0x9, 0xddde, 0x9, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x36, 0x24, 0x5, 0x0, 0x9, 0x9, 0x7e, 0x2, 0x1b, 0x0, 0xe, 0x16, 0x12, 0x30, 0x9, 0xc, 0x6c, 0x5, 0xb, 0x7f, 0x2, 0x1e, 0x16, 0x24, 0x12, 0xb, 0xc, 0x9, 0x3, 0x1, 0x2]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x8}, {0x0, 0x8}, {0x2, 0x5}, {0x7, 0x6}, {0x5, 0x7}, {0x3, 0x5}, {0x0, 0x7}, {0x7, 0x9}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0x1}, {0x2, 0x1}, {0x6, 0x8}, {0x0, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x12, 0x18, 0x16, 0x16, 0x1, 0x6, 0x4, 0x6c, 0x24, 0x1, 0x1, 0x18, 0x9]}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x0, 0x2, 0x51, 0x36, 0xc, 0x3, 0x6]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x6, 0xa}, {0x7, 0x6}, {0x3, 0x8}, {0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x5}, {0x0, 0x3}, {0x0, 0x1}, {0x6, 0x7}, {0x3}, {0x3, 0x4}, {0x5, 0x9}]}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x6, 0x3}, {0x6, 0xa}, {0x1, 0x8}, {0x7, 0x4}, {0x0, 0x7}, {0x1, 0x2}, {0x7, 0xa}, {0x5, 0xa}, {0x3, 0xa}, {0x1, 0x5}, {0x4}, {0x3, 0x2}, {0x6, 0x8}, {0x3}, {0x3, 0x1}, {0x5, 0x3}, {0x1, 0x6}, {0x4, 0x9}, {0x2, 0x3}, {0x3, 0x4}, {0x3, 0x1}, {0x3, 0x4}, {0x1, 0x6}, {0x4, 0x5}, {0x1, 0x7}, {0x2, 0xa}, {0x2, 0x5}, {0x2, 0x4}, {0x3, 0x9}, {0x0, 0x7}, {0x4, 0x8}, {0x1, 0x1}, {0x1, 0x1f}, {0x7, 0x4}, {0x5, 0x3}, {0x7, 0x6}, {0x7, 0x1}, {0x2, 0x6}, {0x7, 0x6}, {0x4, 0x3}, {0x5, 0xa}, {0x5, 0xa}, {0x6, 0x5}, {0x1, 0x4}, {0x0, 0x3}, {0x2, 0x3}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x0, 0xb, 0x69, 0x16, 0x12, 0x1, 0x6, 0x5, 0x6c, 0x6, 0x12, 0x18, 0x9, 0x5, 0x1b, 0x6c, 0x1, 0x1b, 0xc, 0x2, 0x5, 0x3, 0x6, 0xc, 0x48, 0x24, 0x2, 0x30, 0x2, 0x24, 0x30, 0x16]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5, 0x1}, {0x3, 0x5}, {0x4, 0x3}, {0x7, 0x4}, {0x4, 0x7}, {0x0, 0x7}, {0x0, 0x3}, {0x5, 0xa}, {0x3, 0x3}, {0x6, 0x9}, {0x1, 0x8}, {0x6, 0x7}, {0x0, 0x8}, {0x6, 0x7}, {0x6, 0xa}, {0x1, 0xa}, {}, {0x1, 0x3}, {0x6, 0x2}, {0x5, 0x7}, {0x5}, {0x4, 0x3}, {0x7, 0xa}, {0x5, 0x4}, {}, {0x5, 0x9}, {0x6, 0xa}, {0x3, 0x3}, {0x6, 0x6}, {0x3, 0x8}, {0x2, 0x7}, {0x0, 0x9}, {}, {0x4, 0x5}, {0x0, 0x5}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0x4}, {0x4, 0x7}, {0x7, 0x7}, {0x3, 0x6}, {0x1, 0x7}, {0x6, 0x5}, {0x7, 0x4}, {0x1, 0x5}, {0x4, 0x9}, {0x4, 0x1}, {0x5, 0x2}, {0x3, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x3, 0x6]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x18, 0x2, [{0x3, 0x1}, {0x1, 0x8}, {0x5, 0x5}, {0x0, 0x9}, {0x4, 0x9}, {0x7, 0x4}, {0x0, 0xa}, {0x7, 0x7}, {0x0, 0x4}, {0x2, 0x7}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x6}, {0x6, 0x9}, {0x7, 0x8}, {0x1, 0xa}, {0x0, 0x7}, {0x4}, {0x6, 0xa}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0xa}, {0x2}, {0x2, 0x9}, {0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x3, 0x1}, {0x7, 0x8}, {0x1, 0x2}, {0x4}, {0x2, 0x2}, {0x0, 0x7}, {0x4, 0x5}, {0x2, 0x3}, {0x2, 0x4}, {0x0, 0x2}, {0x6, 0x6}, {0x2, 0x2}, {0x6, 0x1}, {0x0, 0x7}, {0x2}, {0x0, 0x4}, {0x7, 0x1}, {0x1, 0xa}, {0x4, 0x8}, {0x7, 0x8}, {0x2, 0x4}, {0x6, 0x8}, {0x2, 0x9}, {0x1, 0x1}, {0x0, 0x6}, {0x3, 0x8}, {0x4}, {0x2, 0x3}, {0x6, 0x7}, {0x7, 0x4}, {0x6}, {}, {0x1}, {0x0, 0x16}, {0x0, 0x5}, {0x5, 0x4}, {0x6, 0x2}, {0x3, 0x7}, {0x1, 0x7}, {0x5, 0x3}, {0x0, 0x7}, {0x6, 0xe}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0x1}]}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x42ec, 0xb3, 0x6, 0x8001, 0xfff, 0x6, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x27, 0x3, 0x7ff, 0x0, 0x8, 0x5, 0x9d, 0x6]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x0, 0x2, 0x24, 0x36, 0x24, 0x3, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa, 0x6, 0x7aa, 0x10, 0x1, 0x1, 0xb]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x3, 0x4}, {0x0, 0x7}, {0x6, 0x1}, {0x4}, {0x4, 0x6}, {0x5, 0x6}, {0x2, 0x9}, {0x0, 0x4}, {0x2, 0x5}, {0x4, 0x6}, {0x2, 0x9}, {0x2, 0x8}, {0x7, 0x1}, {}, {0x3, 0x3}, {0x1, 0x7}, {0x2, 0x6}, {0x0, 0x2}, {0x7, 0x8}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x8}, {0x4, 0x6}, {0x0, 0xa}, {0x6, 0x8}, {0x0, 0x7}, {0x6, 0xa}, {0x5, 0x1}, {0x6, 0x4}, {0x6, 0xa}, {0x5, 0x9}, {0x2, 0x8}, {0x4, 0x4}, {0x1, 0x2}, {0x4, 0x6}, {0x3, 0x3}, {0x6, 0xa}, {0x3, 0xa}, {0x3, 0x1}, {}, {0x3, 0x2}, {0x5, 0x7}, {0x6}, {0x5}, {0x6, 0x4}]}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10000}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x35}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x1694}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async)
r5 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x70, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcfa}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) (async)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000000)=""/82, 0x52}], 0x2}, 0x0) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000003d80)=@broute={'broute\x00', 0x20, 0x2, 0x14e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000003780], 0x0, 0x0, &(0x7f0000003780)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0xd9878f71ca44b750, 0x18, 0x892f, 'pimreg\x00', 'veth0_to_bond\x00', 'vlan0\x00', 'ip6tnl0\x00', @broadcast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x8, 'syz0\x00', {0xfff}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x1c6)

5.012262408s ago: executing program 4 (id=606):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0xdbfa, 0x80}, 0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3})
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000100)=0x7, 0x4)
setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f00000003c0), 0x4)
write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[], 0x9)
recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x12}, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)

4.967722501s ago: executing program 3 (id=607):
mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="66643d193c15304ccf8d9675ac16501f5a4d3fba2f113da01cd18e531fbc2176e4ae400123b602670d7fc41e89f796eb5caa186da237ee4ecc81a7265fa8287e30acf47c7057a8e7c88131cace036909eaa62f65802f8ee6f9e2386c284d97bcf50dceedd87ee667e6888df340a7855172a94fdb31a788485c8ca1526c1afda3fcf8f603f4c6cbbcaa4c75901d4cbbb11109ae061fc350e40cbd", @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
faccessat2(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0, 0x1000)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
close(r0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000003c0)}, 0x20)
umount2(&(0x7f0000001540)='./file0\x00', 0x2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x3c5a, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x1, 0x839}, 0x0, &(0x7f0000000080))
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x92700, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000540)=0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x4, 0x27, 0x1f, @empty, @private2, 0x1, 0x7, 0xffff, 0x1000}})
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x3, 0x28, 0x66, 0x0, 0x0, 0x11, 0x0, @empty=0xe0, @multicast1, {[@cipso={0x86, 0xb, 0x3, [{0x1, 0x5, "35fa15"}]}]}}, {0x4e20, 0x4e20, 0x8}}}}}, 0x0)

4.612833337s ago: executing program 3 (id=608):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xa, 0x3})
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}}, 0x0)

4.376147441s ago: executing program 3 (id=609):
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{}, 0x2, 0x8, 0x800})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
fcntl$setlease(r0, 0x400, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x2)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e24, 0x2, @mcast1, 0x6}, 0x1c)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x2, 0x358}, &(0x7f00000002c0), &(0x7f0000ff4000))
close_range(r3, r3, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)

4.209806517s ago: executing program 0 (id=611):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00', <r2=>0x0})
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000006d80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000006d40)={&(0x7f0000005980)={0x1398, 0x12, 0x400, 0x70bd29, 0x25dfdbff, {0x3f, 0x7, 0x3, 0x5, {0x4e20, 0x4e23, [0xfffffffe, 0x7ff, 0x8, 0x5], [0x2, 0x6, 0xe, 0x6], r2, [0x5, 0x6]}, 0xf39, 0xff800000}, [@INET_DIAG_REQ_BYTECODE={0x66, 0x1, "13671876935939050c7240089e0a8f4d89feee7c028be9f73c76346b67c1c08d03c0f45e7ebd88a507cf95bfb533467e8d84c74e2d1ff43b3867e820185f9d461e689b2586d08905c6dfead7123a6bc85afc5b7ae2190241984602b8cb605f37905d"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "15f188bfadae55e04bb4a1d65e51d88377882eb6b74cb7e04a3fca6c99b1f10c6bbdb86cf2ac0beebc02d0258cf96dea84d70b7591b8976ddf1017e32df301eeb4a94fd9f3189e59ddc66ec739f67e889a1308679ed9b0e42572b6c77b6e39116184fb5561d182673824de2bece64b67004caf8591efd91d5012defdcd380f27dd305ae8749001ce33f0da900867decc7c0331dfd3da13827245d97d78d14c5f6a0216"}, @INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "557e5dc92ed2005e69bc494156bfc6b07379e7a49e9512dda9746372473913507b473a2d58604016b5fddcca30eca1da83b3b40e239c612f3e8cd77540956190677b0352c19314e328535cb9dd97c22a6f89d30bed9eff44656caccc4ed8aadbd41c00d0a8c1ad613cf67f04bc7573575dc6bfe8db4b9d504e1f8d4fe18e6618190602df80a54d0df5a4ebb2c49767304b6f9e0f0c90e4a125fa1d968cb98066701db9cd1f7fd9170ff27cf2de7c064dbe0898be76213791c085598d6bf069d0eb7252acfed4deb9b65333418ada9bce1471"}, @INET_DIAG_REQ_BYTECODE={0x1e, 0x1, "9f098ada7cf2de6a21ee5a1130964562960a013f86aefd16de20"}, @INET_DIAG_REQ_BYTECODE={0xb6, 0x1, "7c2aabcd65bcd2018d4e17aa041c7554749e375d4a8baba97a32c0afc17185d9c5ccac52681dee31a87468099b920c233247d58c856e6793390335122eafceed55068ead109566ddbe4252e266a67fd9f7a875e741170ab2b113ed2d0b3a09cf5df43eb29b7beb0b57cf7d0955f2caf742ed1789f25b5e14a47c43943c6143f0382e5ba518c7229ba05b88b98bb8934cf80fc80b5c3d41fea4e5d397d8b6c778201d6f1576ccd30addc143b1adf052901014"}, @INET_DIAG_REQ_BYTECODE={0x11, 0x1, "5f6323dc5ac394cba0cfa02b48"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "e997f998bfbf763da6444b3aa99b570b039e0a409c722345e04d79979d9f3afdd27201ae8026159a4372ead1ef81041b4d121e4beeb26ffe19dddf8cc385a65aa6b9ff6dbfbae3c9857d4ae244b854ca85e3167dfa50caff08e0b2c3cf88a51fa7fb2972d2884a"}, @INET_DIAG_REQ_BYTECODE={0x5, 0x1, "10"}]}, 0x1398}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000006e00), r1)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000006ec0)={&(0x7f0000006dc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000006e80)={&(0x7f0000006e40)={0x2c, r4, 0x604, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24000004)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r11 = inotify_init()
inotify_rm_watch(r11, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'veth1_to_bond\x00', {0x2, 0x4e20, @empty=0xfdfdffff}})
ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="e1ffffff00"})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x20a1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xa8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
r12 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
mount_setattr(0xffffffffffffff9c, 0x0, 0x1100, &(0x7f0000000280)={0x100080, 0x2, 0x20000, {r12}}, 0x20)
ioctl$COMEDI_CHANINFO(r12, 0x80306403, &(0x7f0000005940)={0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000006f00), &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

3.920160539s ago: executing program 3 (id=612):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a8000000010902"], 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000780))
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2})
openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000140)={0x0, 0x86f7, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000002000)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file1\x00', 0x4, 0x200000, 0x12345, {0x0, r6}})
io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x2000c8c0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000380)={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6f7}, 0x1c, 0x0, 0x0, &(0x7f0000000c00)=ANY=[], 0x3b0}}], 0x1, 0x10008850)
r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x1, 0x83}, &(0x7f0000000dc0)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
r10 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r11, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000440)="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")
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0x3, 0x0, 0x4)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x7, 0x0, 0x0})
io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0)

3.248454868s ago: executing program 0 (id=613):
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd62}, 0x94)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x101a02, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x138)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x2140, 0x8)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000004b00), 0x4)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002240))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
r4 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0xc0984124, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r5 = gettid()
process_vm_writev(r5, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4, 0x50, 0xffffffffffffffff, 0x0)

3.233719735s ago: executing program 2 (id=614):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10})
futex(0x0, 0x0, 0x10000004, 0x0, &(0x7f0000048000), 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

3.024868498s ago: executing program 2 (id=616):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe3}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r3 = openat$vcsa(0xffffff9c, 0x0, 0x400, 0x0) (async)
sched_setaffinity(0x0, 0x2e, &(0x7f0000000240)=0x802)
write$tun(0xffffffffffffffff, 0x0, 0x2a) (async)
unshare(0x400) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
syz_clone(0x10002000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F', 0x1)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) (async)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, 0x0, 0x40) (async)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) (async)
fremovexattr(0xffffffffffffffff, &(0x7f0000000180)=@known='security.apparmor\x00')
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x42, 0x0)
write$dsp(r6, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), 0x0, 0x841, 0x0)

2.514623907s ago: executing program 0 (id=618):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x0)

2.096210628s ago: executing program 0 (id=619):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4)
socket$inet6(0xa, 0x3, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x14, 0x2000c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10)
connect$vsock_stream(r5, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.004429501s ago: executing program 2 (id=620):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xcf, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0x7, 0x6}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x2, 0x4, 0x8, 0x8, 0x6}, 0x59, &(0x7f00000000c0)={0x5, 0xf, 0x59, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0xdc, 0x8}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x101, 0xf00f, 0x9}, @generic={0x2a, 0x10, 0x4, "3f830f15f1e2d0d40cc66938bbffc522e5464b8979857bb6e37e6085a4137b3e4d4cb542473bfb"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x1, 0x58, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x6, 0x8, 0x4}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41c}}]}) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0xffffff68, 0x81000)
fcntl$dupfd(r3, 0x406, r1) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc000)

1.86421545s ago: executing program 4 (id=621):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r2)
syz_open_dev$dri(0x0, 0x7, 0x58d083)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, 0x0, &(0x7f0000000100))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0x0, 0x0}, 0x10)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]})
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)

1.668125125s ago: executing program 1 (id=622):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x100000, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@uuid_auto}, {@verity_off}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00') (async)
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async)
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
link(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./file0\x00')

1.480225344s ago: executing program 1 (id=623):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000bc0)={{@local}, {@my=0x1, 0x4000}, 0x400, "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"}, 0x418})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000000)={0x3, 0x4, 0x1a, 0x9, 0x198, 0x0})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000019da2cc7"], 0x18}}], 0x1, 0x40084)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', <r3=>0x0, 0x4, 0x20, 0x7, 0x81, 0x22, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x10, 0x5}})
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r3, @fallback=0x20, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmsg$sock(r4, &(0x7f0000000640)={&(0x7f00000002c0)=@rc={0x1f, @none, 0x4}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)}, {&(0x7f0000000540)="03b9d4a4e56a110b5824bcccb70a3af712dd38252f73a06900f33bdcbf1a8f803790af851588482ae4ef7a61d5ef84ece1921ce1099b56b9c6ff1e2a3a6b0453f284e85be32666e8786a2a87fb9dc5db109e323d09bf240fabddfee5887ff64f710fee", 0x63}, {&(0x7f00000007c0)="a46c19f56c4f8a21e8068c6321387f24cd64e0033d354a3ad77b959b6c9ec188b030e82549fd347d6f75b4f6367b391d3b4f4e793639cec69bd182a1bce37cb7e65f2a6054c10433a515bad93b2c8c77304a068535e722206ba8e6aa6fafb5f4dad1379af983edb195bd25b112a6a2dd73a551ee40d3c38b19d9f5be464435eaef871c46ab6c85f58e91ec5d2e330b61e429ae434a72fdb365bfd96007528fb67386722fb09ecc76", 0xa8}], 0x3, &(0x7f0000000bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x2f7}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}], 0x90}, 0x1)
getsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000780), &(0x7f0000000880)=0x4)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="070000000400000008000000051000000000000025c2c0ba993308cd8be5860d13f74ee2a6e097473b10b91de4fba678d31ddb978af957c956275b97d394246fd0a76bb40ad6c6bd892423188a0c6ccecc884705e035dc079d3b59dff7c41e5ad610614caec3bb7946bd555c187fce2db91420a760318339a047248df4f4ec810f47d0b3af1ca754c616ed2c68de628ac860c1b156199ab800"/163, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r9, &(0x7f0000000140), 0x0}, 0x20)

903.179652ms ago: executing program 4 (id=624):
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)

848.203303ms ago: executing program 1 (id=625):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d030000000000000000130000001c0009"], 0x30}}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x0, 0x5001) (async)
socket$kcm(0x10, 0x2, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) (async)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
lseek(r6, 0x10000000005, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) (async)
sendto$inet6(r7, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="10000000ad63000073a5a57d0900000010000000", @ANYRES32=r6, @ANYBLOB="0400"/20, @ANYRES32, @ANYRES32=r6, @ANYBLOB="010000000200000001000000000000000000000000000000000000000796088b930821e9d38d84812855067c9c96d6141d2edb547b55d470c48ef934696a714d81d8912b664a3bae717100b1e757d65085458b6f76798636a00dbf5b0503aa084cbfd04b70f8f7ac11a992bab4c74deffffd8431ee36742652a31a7475bff3266768e9dee24e07feff40e565a1b34040e6ba59ef20d1946210db66a00f05137bc64c704d539dd7add4bd5a0c549f98995626187de782ef7a12aae359a21350"], 0x50) (async)
shutdown(r7, 0x1) (async)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) (async)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, 0x0, &(0x7f0000000140)) (async)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18)

577.120003ms ago: executing program 4 (id=626):
syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000004180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x2, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xc}, [@processing_unit={0x7, 0x24, 0x7, 0x3, 0x2, 0x53}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0xb8, 0x2, "7f4fcbb0"}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0x5, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x4, 0x9, 0x4, 0x4e, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x3, 0x4, {0x7, 0x25, 0x1, 0x0, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xbb, 0x5, 0x7}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xff, 0x2, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x58, 0xb, 0xfa, {0x7, 0x25, 0x1, 0x81, 0xff, 0xd85}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x200a}}, {0x1a, &(0x7f00000002c0)=@string={0x1a, 0x3, "26d00eb848101dbfabfc27aa5e6dc37df73ff9daf11a9c8c"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1007}}]})
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000300)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000000280)=@canfd={{0x2, 0x0, 0x1, 0x1}, 0x3b, 0x2, 0x0, 0x0, "a6fd090f9ca7c0b3723a37b42f0cba593d7faa5033ca4e5aad408f6e536df0a0da5b6d020a51c34b43be62eb7996006ab9d0cc217d0c0853bfc296929b62e5b5"}, 0x48}, 0x2}, 0x810)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000080)='>', 0x1)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aae", 0xb)
r5 = accept$alg(r4, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000000)="ef7791000dc777", 0x7}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
syz_usb_connect$uac1(0x0, 0xb7, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x8, 0x0, 0x2e, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xb}, [@feature_unit={0xd, 0x24, 0x6, 0x3, 0x5, 0x3, [0x4, 0x1b, 0x2], 0x6}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0x5, '\x00'}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x306, 0x3, 0x3, 0x7}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x136, 0x81, "db3f71"}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x0, 0x0, "ffada8301102"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x3, 0x7f, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x5, 0x0, 0x2, {0x7, 0x25, 0x1, 0x80, 0x16, 0x6c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xed, 0x3, 0x0, 0x4, "", "d838e3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x4, 0x7, {0x7, 0x25, 0x1, 0x1, 0xff, 0x763b}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0xfe, 0xd, 0x3, 0x40, 0x2}, 0x42, &(0x7f00000003c0)={0x5, 0xf, 0x42, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "f1809f224f51c74c74c59460fb26c24b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0xd, 0x7e}, @ssp_cap={0x14, 0x10, 0xa, 0xf9, 0x2, 0x5, 0x0, 0x6, [0x0, 0xffc03f]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2a, 0x3, 0xff, 0x2, 0x3}]}, 0x1, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x448}}]})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_COMMENT={0xe, 0x1a, '%-}/%/^*%\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000047}, 0x40000c4)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="db1cf45e", 0x4}], 0x1}, 0x40004854)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0xe, @void}, 0x10)

437.720938ms ago: executing program 1 (id=627):
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x188, &(0x7f0000000080)={0x0, 0x816f, 0x13100, 0xffffffff, 0x1e3}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4})
io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x10, {0x3, 0x207}, 0xcc}, 0x1)

308.464571ms ago: executing program 1 (id=628):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x100, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1d3, 0x0, 0xfffffffffffffffd, 0x3})
mkdir(&(0x7f00000003c0)='./file0\x00', 0x83)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0x2, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

274.979084ms ago: executing program 3 (id=629):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x200000})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x891b, &(0x7f00000001c0))
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x9ea, 0x0, {<r1=>0x0}, {0xee00}, 0xd9, 0x7})
prlimit64(r1, 0x1, 0x0, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
msync(&(0x7f0000003000/0x1000)=nil, 0xffffffffdfffcfff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000040005"], 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a60fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

263.815067ms ago: executing program 0 (id=630):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x0)

166.852303ms ago: executing program 3 (id=631):
r0 = userfaultfd(0x80001)
pipe2$watch_queue(&(0x7f0000001180)={<r1=>0xffffffffffffffff}, 0x80)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
link(0x0, 0x0)
r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8a, 0x3, &(0x7f0000000040))
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0)
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x6d)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x6d42, &(0x7f0000000280)={0x0, 0x32c8, 0x1000}, &(0x7f0000c57000), 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}})

135.70411ms ago: executing program 0 (id=632):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x5)
r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x0, 0x0})
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2)
openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r5)
syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f0000000240)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r5, 0x4004550f, 0x0)
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
socket(0x1e, 0x4, 0x0)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000)

0s ago: executing program 1 (id=633):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000180)=@x86={0x7c, 0x3, 0xd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x0, 0x8, 0xc, '\x00', 0x1, 0x2})
ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000000)={0x2, 0x2, 0x8001})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x1}, 0x2b1})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4f549b, 0x0, [0xffffffffffffffff, 0x47, 0x5, 0x0, 0x5, 0x7, 0x4, 0x7]})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1a, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

evice detected
[  113.248987][ T5930] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  113.345755][   T43] usb 5-1: USB disconnect, device number 6
[  113.409734][ T5930] usb 2-1: config 0 has an invalid interface number: 95 but max is 0
[  113.428350][ T5930] usb 2-1: config 0 has no interface number 0
[  113.447846][ T5930] usb 2-1: config 0 interface 95 altsetting 0 endpoint 0x5 has an invalid bInterval 191, changing to 11
[  113.471740][ T5930] usb 2-1: config 0 interface 95 altsetting 0 endpoint 0x5 has invalid maxpacket 34313, setting to 1024
[  113.497890][ T5930] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[  113.531668][ T5930] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[  113.548004][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.558188][ T5930] usb 2-1: Product: syz
[  113.562389][ T5930] usb 2-1: Manufacturer: syz
[  113.567004][ T5930] usb 2-1: SerialNumber: syz
[  113.591880][ T5930] usb 2-1: config 0 descriptor??
[  113.598025][ T6304] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  113.612877][ T6304] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  113.986225][   T24] usb 1-1: USB disconnect, device number 4
[  114.256435][ T6304] netlink: 'syz.1.95': attribute type 2 has an invalid length.
[  114.283206][ T6304] Illegal XDP return value 2586317966 on prog  (id 23) dev syz_tun, expect packet loss!
[  114.293905][ T6304] warning: `syz.1.95' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  114.366693][ T5930] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  114.396061][ T5930] usb 2-1: MIDIStreaming interface descriptor not found
[  114.548159][ T5930] usb 2-1: USB disconnect, device number 3
[  114.637280][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  115.008328][ T5917] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  115.378219][ T5917] usb 3-1: Using ep0 maxpacket: 32
[  115.462727][ T5917] usb 3-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59
[  115.512302][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.554545][ T5917] usb 3-1: Product: syz
[  115.587798][ T5917] usb 3-1: Manufacturer: syz
[  115.599770][ T5917] usb 3-1: SerialNumber: syz
[  115.653730][ T5917] usb 3-1: config 0 descriptor??
[  115.748009][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  115.824212][ T6354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.981188][    T9] usb 2-1: device descriptor read/64, error -71
[  116.000246][ T5917] pegasus 3-1:0.0: probe with driver pegasus failed with error -71
[  116.018281][ T5917] usb 3-1: USB disconnect, device number 6
[  117.228667][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  117.236728][ T5930] IPVS: starting estimator thread 0...
[  118.238768][ T6366] IPVS: using max 48 ests per chain, 115200 per kthread
[  118.243083][    T9] usb 2-1: device descriptor read/64, error -71
[  118.429748][    T9] usb usb2-port1: attempt power cycle
[  118.550098][ T6378] autofs: Unknown parameter '鲢��B�b_k� ��^�T�;b�Q�^⢞��D�+
[  118.550098][ T6378] ��9יbuy�T�e^�k7��*�U���+�]~C��}V���!����o6R��+d�Xxä��'
[  118.648709][ T5930] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  119.124888][ T5930] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  119.171345][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.271028][ T5930] usb 1-1: Product: syz
[  119.290721][ T5930] usb 1-1: Manufacturer: syz
[  119.300758][ T5930] usb 1-1: SerialNumber: syz
[  119.392686][ T5930] usb 1-1: config 0 descriptor??
[  119.427284][ T5930] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  119.576563][ T6388] loop6: detected capacity change from 0 to 524287999
[  119.596799][ T6021] Buffer I/O error on dev loop6, logical block 0, async page read
[  119.606808][ T6021] Buffer I/O error on dev loop6, logical block 0, async page read
[  119.615092][ T6021] Buffer I/O error on dev loop6, logical block 0, async page read
[  119.624572][ T6021] Buffer I/O error on dev loop6, logical block 0, async page read
[  119.657570][ T6021] Buffer I/O error on dev loop6, logical block 0, async page read
[  119.677556][ T6021] Buffer I/O error on dev loop6, logical block 0, async page read
[  119.686812][ T6021] Buffer I/O error on dev loop6, logical block 0, async page read
[  119.695080][ T6021] Buffer I/O error on dev loop6, logical block 0, async page read
[  119.703281][ T6021] ldm_validate_partition_table(): Disk read failed.
[  119.710265][ T6021] Buffer I/O error on dev loop6, logical block 0, async page read
[  119.719263][ T6021] Buffer I/O error on dev loop6, logical block 0, async page read
[  119.727477][ T6021] Dev loop6: unable to read RDB block 0
[  119.733915][ T6021]  loop6: unable to read partition table
[  119.899079][ T6388] ldm_validate_partition_table(): Disk read failed.
[  120.256637][ T6388] Dev loop6: unable to read RDB block 0
[  120.415975][   T24] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  120.432555][ T6388]  loop6: unable to read partition table
[  120.458166][ T6388] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  120.627683][   T24] usb 4-1: device descriptor read/64, error -71
[  120.652230][    T9] usb 1-1: USB disconnect, device number 5
[  120.712498][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'.
[  120.890796][   T24] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  120.951505][   T30] audit: type=1326 audit(1754810095.559:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6408 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f114038ebe9 code=0x7ffc0000
[  121.008668][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'.
[  121.048006][   T24] usb 4-1: device descriptor read/64, error -71
[  121.048901][   T30] audit: type=1326 audit(1754810095.579:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6408 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f114038ebe9 code=0x7ffc0000
[  121.136234][   T30] audit: type=1326 audit(1754810095.579:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6408 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f114038ebe9 code=0x7ffc0000
[  121.196014][   T30] audit: type=1326 audit(1754810095.579:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6408 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f114038ebe9 code=0x7ffc0000
[  121.202742][   T24] usb usb4-port1: attempt power cycle
[  121.271607][   T30] audit: type=1326 audit(1754810095.579:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6408 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f114038ebe9 code=0x7ffc0000
[  121.363377][   T30] audit: type=1326 audit(1754810095.589:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6408 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f114038ebe9 code=0x7ffc0000
[  121.441153][   T30] audit: type=1326 audit(1754810095.589:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6408 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f114038ebe9 code=0x7ffc0000
[  121.463207][   T30] audit: type=1326 audit(1754810095.589:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6408 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f114038ebe9 code=0x7ffc0000
[  121.468335][ T5974] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  121.491299][   T30] audit: type=1326 audit(1754810095.589:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6408 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f114038ebe9 code=0x7ffc0000
[  121.931981][   T30] audit: type=1326 audit(1754810095.589:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6408 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f114038ebe9 code=0x7ffc0000
[  121.987915][   T24] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  122.034330][   T24] usb 4-1: device descriptor read/8, error -71
[  122.113335][ T5974] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  122.122614][ T5974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.165014][ T5974] usb 2-1: config 0 descriptor??
[  122.292151][   T24] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  122.358836][   T24] usb 4-1: device descriptor read/8, error -71
[  122.379013][ T5974] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  122.428326][ T5974] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  122.471850][   T24] usb usb4-port1: unable to enumerate USB device
[  122.485201][ T5974] dvb-usb: Elgato EyeTV Sat error while loading driver (-19)
[  122.621288][   T24] usb 2-1: USB disconnect, device number 7
[  122.919284][ T6438] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.697983][    T9] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[  123.907912][    T9] usb 5-1: Invalid ep0 maxpacket: 32
[  124.118264][    T9] usb 5-1: new low-speed USB device number 8 using dummy_hcd
[  124.313670][    T9] usb 5-1: Invalid ep0 maxpacket: 32
[  124.327551][    T9] usb usb5-port1: attempt power cycle
[  124.341767][ T6463] bio_check_eod: 14 callbacks suppressed
[  124.341784][ T6463] syz.2.133: attempt to access beyond end of device
[  124.341784][ T6463] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  124.675202][ T6469] netlink: 'syz.0.134': attribute type 10 has an invalid length.
[  124.685123][ T6474] tmpfs: Unknown parameter ''
[  124.688286][    T9] usb 5-1: new low-speed USB device number 9 using dummy_hcd
[  124.718288][ T6469] syz_tun: entered promiscuous mode
[  124.740600][    T9] usb 5-1: Invalid ep0 maxpacket: 32
[  124.755152][ T6469] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  124.890495][    T9] usb 5-1: new low-speed USB device number 10 using dummy_hcd
[  124.941826][    T9] usb 5-1: Invalid ep0 maxpacket: 32
[  124.948706][    T9] usb usb5-port1: unable to enumerate USB device
[  125.728826][ T5944] usb 4-1: new low-speed USB device number 12 using dummy_hcd
[  125.919502][ T5944] usb 4-1: Invalid ep0 maxpacket: 16
[  125.973069][ T6515] xt_hashlimit: size too large, truncated to 1048576
[  126.028339][ T6516] dvmrp1: entered allmulticast mode
[  126.177896][ T5944] usb 4-1: new low-speed USB device number 13 using dummy_hcd
[  126.328992][ T5944] usb 4-1: Invalid ep0 maxpacket: 16
[  126.399584][ T5944] usb usb4-port1: attempt power cycle
[  126.504360][ T6521] netlink: 'syz.4.145': attribute type 10 has an invalid length.
[  126.515990][ T6521] batman_adv: batadv0: Adding interface: wlan0
[  126.527335][ T6521] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.593397][ T6521] batman_adv: batadv0: Interface activated: wlan0
[  126.780692][ T5944] usb 4-1: new low-speed USB device number 14 using dummy_hcd
[  126.830215][ T5944] usb 4-1: Invalid ep0 maxpacket: 16
[  126.967860][ T5944] usb 4-1: new low-speed USB device number 15 using dummy_hcd
[  127.009594][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.021868][ T5944] usb 4-1: Invalid ep0 maxpacket: 16
[  127.024715][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.034465][ T5944] usb usb4-port1: unable to enumerate USB device
[  127.042263][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.053472][ T6542] FAULT_INJECTION: forcing a failure.
[  127.053472][ T6542] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  127.066928][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: syz.4.146 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  127.066953][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  127.066968][ T6542] Call Trace:
[  127.066979][ T6542]  <TASK>
[  127.066987][ T6542]  dump_stack_lvl+0x189/0x250
[  127.067014][ T6542]  ? irqentry_exit+0x74/0x90
[  127.067037][ T6542]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.067075][ T6542]  should_fail_ex+0x414/0x560
[  127.067097][ T6542]  _copy_from_user+0x2d/0xb0
[  127.067122][ T6542]  do_ip6t_set_ctl+0x69f/0xce0
[  127.067153][ T6542]  ? rcu_is_watching+0x15/0xb0
[  127.067171][ T6542]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  127.067210][ T6542]  ? __pfx___mutex_lock+0x10/0x10
[  127.067229][ T6542]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  127.067246][ T6542]  ? irqentry_exit+0x74/0x90
[  127.067277][ T6542]  nf_setsockopt+0x26c/0x290
[  127.067306][ T6542]  rawv6_setsockopt+0x23b/0x5b0
[  127.067325][ T6542]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  127.067343][ T6542]  ? sock_common_setsockopt+0x36/0xc0
[  127.067363][ T6542]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  127.067385][ T6542]  do_sock_setsockopt+0x179/0x1b0
[  127.067413][ T6542]  __x64_sys_setsockopt+0x13f/0x1b0
[  127.067441][ T6542]  do_syscall_64+0xfa/0x3b0
[  127.067458][ T6542]  ? lockdep_hardirqs_on+0x9c/0x150
[  127.067474][ T6542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.067490][ T6542]  ? clear_bhb_loop+0x60/0xb0
[  127.067510][ T6542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.067525][ T6542] RIP: 0033:0x7fde4478ebe9
[  127.067543][ T6542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.067560][ T6542] RSP: 002b:00007fde455bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  127.067583][ T6542] RAX: ffffffffffffffda RBX: 00007fde449b6180 RCX: 00007fde4478ebe9
[  127.067595][ T6542] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008
[  127.067623][ T6542] RBP: 00007fde455bc090 R08: 00000000000005c0 R09: 0000000000000000
[  127.067633][ T6542] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001
[  127.067643][ T6542] R13: 00007fde449b6218 R14: 00007fde449b6180 R15: 00007ffc287d7048
[  127.067669][ T6542]  </TASK>
[  127.294504][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.302709][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.310211][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.317406][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.324671][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.331919][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.339174][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.346369][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.355329][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.362570][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.369842][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.377036][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.384313][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.391546][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.398930][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.406229][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.413510][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.420780][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.428100][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.435301][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.442559][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.449823][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.457549][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.464843][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.472035][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.479213][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.486402][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.493548][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.500758][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.509397][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.542365][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.567876][ T5974] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  127.687675][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.698440][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.718871][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.750836][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.751028][ T5974] usb 1-1: Using ep0 maxpacket: 16
[  127.785348][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.789392][ T5974] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  127.809419][ T5974] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  127.818444][ T6543] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  127.828227][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.846913][ T5974] usb 1-1: Product: syz
[  127.857788][ T5974] usb 1-1: Manufacturer: syz
[  127.862659][ T5974] usb 1-1: SerialNumber: syz
[  127.908474][ T5974] usb 1-1: config 0 descriptor??
[  127.921617][ T5974] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  127.958859][ T5974] usb 1-1: Detected FT232R
[  128.045090][ T6555] ieee802154 phy0 wpan0: encryption failed: -22
[  128.196557][ T5974] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  128.410695][ T5974] ftdi_sio 1-1:0.0: GPIO initialisation failed: -5
[  128.422884][ T5974] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  128.498240][ T5930] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  128.518256][   T43] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  128.632732][ T5974] usb 1-1: USB disconnect, device number 6
[  128.642198][ T5974] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  128.652537][ T5974] ftdi_sio 1-1:0.0: device disconnected
[  128.680021][ T5930] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  128.703286][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.703407][   T43] usb 3-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config
[  128.712306][ T5930] usb 2-1: Product: syz
[  128.734280][ T5930] usb 2-1: Manufacturer: syz
[  128.747975][ T5930] usb 2-1: SerialNumber: syz
[  128.768830][ T5930] usb 2-1: config 0 descriptor??
[  128.771504][   T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  128.806029][   T43] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  128.840130][   T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  128.851229][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.870594][   T43] usb 3-1: Product: syz
[  128.875117][   T43] usb 3-1: Manufacturer: syz
[  128.879926][   T43] usb 3-1: SerialNumber: syz
[  129.361034][ T5930] usb 2-1: ignoring: probably an ADSL modem
[  129.551767][ T5930] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[  129.583315][   T43] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  129.597429][   T43] cdc_ncm 3-1:1.0: bind() failure
[  129.648651][   T43] usb 3-1: USB disconnect, device number 7
[  129.766177][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'.
[  130.249347][ T6586] xt_hashlimit: size too large, truncated to 1048576
[  130.295871][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  130.295888][   T30] audit: type=1400 audit(1754810104.899:80): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6584 comm="syz.0.159" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=gre0
[  131.377881][ T5930] usb 2-1: USB disconnect, device number 8
[  132.403869][ T6605] FAULT_INJECTION: forcing a failure.
[  132.403869][ T6605] name failslab, interval 1, probability 0, space 0, times 1
[  132.418335][ T6605] CPU: 0 UID: 0 PID: 6605 Comm: syz.1.163 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  132.418358][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  132.418369][ T6605] Call Trace:
[  132.418377][ T6605]  <TASK>
[  132.418386][ T6605]  dump_stack_lvl+0x189/0x250
[  132.418413][ T6605]  ? __pfx____ratelimit+0x10/0x10
[  132.418434][ T6605]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.418456][ T6605]  ? __pfx__printk+0x10/0x10
[  132.418487][ T6605]  ? __pfx___might_resched+0x10/0x10
[  132.418505][ T6605]  ? fs_reclaim_acquire+0x7d/0x100
[  132.418533][ T6605]  should_fail_ex+0x414/0x560
[  132.418558][ T6605]  ? xt_alloc_table_info+0x3b/0xa0
[  132.418576][ T6605]  should_failslab+0xa8/0x100
[  132.418606][ T6605]  __kvmalloc_node_noprof+0x161/0x5f0
[  132.418626][ T6605]  ? xt_alloc_table_info+0x3b/0xa0
[  132.418649][ T6605]  xt_alloc_table_info+0x3b/0xa0
[  132.418667][ T6605]  do_ip6t_set_ctl+0x88a/0xce0
[  132.418696][ T6605]  ? get_pid_task+0x20/0x1f0
[  132.418720][ T6605]  ? rcu_is_watching+0x15/0xb0
[  132.418738][ T6605]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  132.418777][ T6605]  ? __pfx___mutex_lock+0x10/0x10
[  132.418796][ T6605]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  132.418823][ T6605]  ? __lock_acquire+0xab9/0xd20
[  132.418844][ T6605]  nf_setsockopt+0x26c/0x290
[  132.418874][ T6605]  rawv6_setsockopt+0x23b/0x5b0
[  132.418893][ T6605]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  132.418911][ T6605]  ? sock_common_setsockopt+0x36/0xc0
[  132.418931][ T6605]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  132.418953][ T6605]  do_sock_setsockopt+0x179/0x1b0
[  132.418981][ T6605]  __x64_sys_setsockopt+0x13f/0x1b0
[  132.419009][ T6605]  do_syscall_64+0xfa/0x3b0
[  132.419025][ T6605]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.419042][ T6605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.419058][ T6605]  ? clear_bhb_loop+0x60/0xb0
[  132.419077][ T6605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.419093][ T6605] RIP: 0033:0x7f08f858ebe9
[  132.419108][ T6605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.419121][ T6605] RSP: 002b:00007f08f67d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  132.419138][ T6605] RAX: ffffffffffffffda RBX: 00007f08f87b6180 RCX: 00007f08f858ebe9
[  132.419151][ T6605] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008
[  132.419160][ T6605] RBP: 00007f08f67d5090 R08: 00000000000005c0 R09: 0000000000000000
[  132.419170][ T6605] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001
[  132.419180][ T6605] R13: 00007f08f87b6218 R14: 00007f08f87b6180 R15: 00007ffee363bb98
[  132.419207][ T6605]  </TASK>
[  133.005013][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  133.011399][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  134.123212][ T6624] input: syz1 as /devices/virtual/input/input6
[  135.787969][ T5917] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  135.967920][ T5917] usb 4-1: Using ep0 maxpacket: 8
[  135.989447][ T5917] usb 4-1: config 126 has an invalid interface number: 10 but max is 0
[  136.047911][ T5917] usb 4-1: config 126 has no interface number 0
[  136.270609][ T5917] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=10.22
[  136.270642][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.270663][ T5917] usb 4-1: Product: syz
[  136.270679][ T5917] usb 4-1: Manufacturer: syz
[  136.270694][ T5917] usb 4-1: SerialNumber: syz
[  136.276371][ T5917] usb 4-1: Expected 3 endpoints, found: 0
[  137.020366][ T5944] usb 4-1: USB disconnect, device number 16
[  138.432256][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'.
[  138.441306][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'.
[  138.475445][ T6670] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  138.484626][ T6670] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  138.493495][ T6670] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  138.502296][ T6670] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  138.972783][ T5917] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  139.417941][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  139.456237][ T5917] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  139.475861][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.509384][ T5917] usb 1-1: config 0 descriptor??
[  139.568356][ T5917] pwc: Askey VC010 type 2 USB webcam detected.
[  139.688070][ T6686] syz.3.187 uses obsolete (PF_INET,SOCK_PACKET)
[  139.737870][   T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  140.741880][   T24] usb 2-1: Using ep0 maxpacket: 16
[  140.777710][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  140.842435][ T5917] pwc: recv_control_msg error -32 req 02 val 2b00
[  140.892994][   T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 88, changing to 7
[  140.931924][ T5917] pwc: recv_control_msg error -32 req 02 val 2700
[  140.957206][   T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  140.966574][ T5917] pwc: recv_control_msg error -32 req 02 val 2c00
[  140.982477][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.996249][ T5917] pwc: recv_control_msg error -32 req 04 val 1000
[  141.002992][   T24] usb 2-1: Product: 퀦렎၈뼝ﲫꨧ浞緃㿷᫱貜
[  141.020053][ T5917] pwc: recv_control_msg error -32 req 04 val 1300
[  141.039006][   T24] usb 2-1: Manufacturer:  
[  141.054577][   T24] usb 2-1: SerialNumber: ဇ
[  141.060897][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.070675][ T5917] pwc: recv_control_msg error -32 req 04 val 1400
[  141.108397][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.147183][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.166249][ T6708] GUP no longer grows the stack in syz.4.191 (6708): 200000004000-20000000a000 (200000002000)
[  141.167134][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.188544][ T6708] CPU: 1 UID: 0 PID: 6708 Comm: syz.4.191 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  141.188570][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  141.188582][ T6708] Call Trace:
[  141.188592][ T6708]  <TASK>
[  141.188601][ T6708]  dump_stack_lvl+0x189/0x250
[  141.188633][ T6708]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.188654][ T6708]  ? __pfx__printk+0x10/0x10
[  141.188676][ T6708]  ? find_vma+0xe7/0x160
[  141.188721][ T6708]  __get_user_pages+0x2a60/0x30b0
[  141.188789][ T6708]  ? __pfx___get_user_pages+0x10/0x10
[  141.188826][ T6708]  get_user_pages_remote+0x2f9/0xaa0
[  141.188853][ T6708]  ? __pfx_mtree_load+0x10/0x10
[  141.188880][ T6708]  ? __pfx_get_user_pages_remote+0x10/0x10
[  141.188920][ T6708]  __access_remote_vm+0x215/0x5f0
[  141.188947][ T6708]  ? __pfx___access_remote_vm+0x10/0x10
[  141.188968][ T6708]  ? alloc_pages_noprof+0xbe/0x190
[  141.188991][ T6708]  proc_pid_cmdline_read+0x440/0x840
[  141.189008][ T6708]  ? __asan_memset+0x22/0x50
[  141.189040][ T6708]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  141.189063][ T6708]  ? rw_verify_area+0x258/0x650
[  141.189096][ T6708]  vfs_readv+0x5aa/0x850
[  141.189120][ T6708]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  141.189143][ T6708]  ? __pfx_vfs_readv+0x10/0x10
[  141.189184][ T6708]  ? __fget_files+0x2a/0x420
[  141.189212][ T6708]  ? __fget_files+0x3a0/0x420
[  141.189233][ T6708]  ? __fget_files+0x2a/0x420
[  141.189265][ T6708]  __x64_sys_preadv+0x197/0x2a0
[  141.189290][ T6708]  ? __pfx___x64_sys_preadv+0x10/0x10
[  141.189308][ T6708]  ? rcu_is_watching+0x15/0xb0
[  141.189337][ T6708]  ? do_syscall_64+0xbe/0x3b0
[  141.189364][ T6708]  do_syscall_64+0xfa/0x3b0
[  141.189384][ T6708]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.189405][ T6708]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.189426][ T6708]  ? clear_bhb_loop+0x60/0xb0
[  141.189450][ T6708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.189468][ T6708] RIP: 0033:0x7fde4478ebe9
[  141.189485][ T6708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.189502][ T6708] RSP: 002b:00007fde455fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  141.189523][ T6708] RAX: ffffffffffffffda RBX: 00007fde449b5fa0 RCX: 00007fde4478ebe9
[  141.189538][ T6708] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003
[  141.189550][ T6708] RBP: 00007fde44811e19 R08: 0000000021000008 R09: 0000000000000000
[  141.189563][ T6708] R10: 0000000000000304 R11: 0000000000000246 R12: 0000000000000000
[  141.189576][ T6708] R13: 00007fde449b6038 R14: 00007fde449b5fa0 R15: 00007ffc287d7048
[  141.189609][ T6708]  </TASK>
[  141.446830][    C1] vkms_vblank_simulate: vblank timer overrun
[  141.497184][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.506618][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.605079][   T24] usb 2-1: 2:1 : unsupported format bits 0x80
[  141.638775][   T24] usb 2-1: USB disconnect, device number 9
[  141.669082][ T6708] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  141.955666][ T6021] udevd[6021]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  142.303965][ T6721] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  142.333569][ T6718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.194'.
[  142.432073][ T6720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.195'.
[  142.446950][ T5917] pwc: recv_control_msg error -32 req 02 val 2000
[  142.468662][ T6720] netlink: 'syz.1.195': attribute type 7 has an invalid length.
[  142.498671][ T6720] netlink: 'syz.1.195': attribute type 8 has an invalid length.
[  142.498671][ T5917] pwc: recv_control_msg error -32 req 02 val 2100
[  142.522798][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'.
[  142.542895][ T5917] pwc: recv_control_msg error -32 req 04 val 1500
[  142.783579][ T5917] pwc: recv_control_msg error -71 req 02 val 2400
[  142.811108][ T5917] pwc: recv_control_msg error -71 req 02 val 2600
[  142.831509][ T5917] pwc: recv_control_msg error -71 req 02 val 2900
[  142.849532][ T5917] pwc: recv_control_msg error -71 req 02 val 2800
[  142.858819][ T5909] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  142.866915][ T5917] pwc: recv_control_msg error -71 req 04 val 1100
[  143.050617][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  143.096053][ T6727] trusted_key: encrypted_key: insufficient parameters specified
[  143.117964][ T5909] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  143.124186][ T5917] pwc: recv_control_msg error -71 req 04 val 1200
[  143.148571][ T5917] pwc: Registered as video103.
[  143.156036][ T5917] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7
[  143.194212][ T5917] usb 1-1: USB disconnect, device number 7
[  143.267838][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.322238][ T5909] usb 5-1: config 0 descriptor??
[  143.351360][ T6736] random: crng reseeded on system resumption
[  143.558810][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'.
[  143.768720][ T6745] netlink: 'syz.2.201': attribute type 1 has an invalid length.
[  143.786791][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'.
[  143.863721][ T6746] tipc: MTU too low for tipc bearer
[  143.986204][ T6725] netlink: 'syz.4.196': attribute type 21 has an invalid length.
[  143.994403][ T6725] netlink: 132 bytes leftover after parsing attributes in process `syz.4.196'.
[  144.106361][ T5909] usbhid 5-1:0.0: can't add hid device: -71
[  144.116628][ T5909] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  144.169936][ T5909] usb 5-1: USB disconnect, device number 11
[  144.189431][ T5974] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  144.373316][ T5974] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad
[  144.384204][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.396256][ T5974] usb 3-1: config 0 descriptor??
[  144.698013][   T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  144.891674][   T24] usb 1-1: Using ep0 maxpacket: 16
[  144.921852][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  144.954194][   T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 88, changing to 7
[  144.979544][ T6768] sctp: failed to load transform for md5: -2
[  145.078497][   T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  145.179952][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.199070][ T6776] sctp: [Deprecated]: syz.4.209 (pid 6776) Use of struct sctp_assoc_value in delayed_ack socket option.
[  145.199070][ T6776] Use struct sctp_sack_info instead
[  145.217970][   T24] usb 1-1: Product: 퀦렎၈뼝ﲫꨧ浞緃㿷᫱貜
[  145.228692][   T24] usb 1-1: Manufacturer:  
[  145.233387][   T24] usb 1-1: SerialNumber: ဇ
[  145.755163][ T6781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.210'.
[  145.781865][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.818521][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.882705][   T24] usb 1-1: 2:1 : unsupported format bits 0x80
[  145.963667][   T24] usb 1-1: USB disconnect, device number 8
[  146.267285][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  147.109579][ T5974] usb 3-1: can't set first interface for hiFace device.
[  147.139722][ T5974] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -5
[  147.163910][ T6802] netlink: 'syz.3.215': attribute type 29 has an invalid length.
[  147.181861][ T5974] usb 3-1: USB disconnect, device number 8
[  147.210163][ T6802] netlink: 'syz.3.215': attribute type 29 has an invalid length.
[  147.239488][ T6802] netlink: 508 bytes leftover after parsing attributes in process `syz.3.215'.
[  147.292982][ T6809] fuseblk: Unknown parameter '�A�V�e�r�Q�hU0x0000000000000003'
[  147.551402][ T5917] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  147.827933][ T5917] usb 2-1: Using ep0 maxpacket: 8
[  148.052348][ T5917] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a
[  148.077033][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.098569][ T5917] usb 2-1: Product: syz
[  148.105078][ T5917] usb 2-1: Manufacturer: syz
[  148.116371][ T5917] usb 2-1: SerialNumber: syz
[  148.182533][ T6826] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  148.259471][ T5917] usb 2-1: config 0 descriptor??
[  148.839388][ T5917] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  149.398011][ T5917] gspca_sn9c2028: read1 error -110
[  149.414756][ T5917] gspca_sn9c2028: read1 error -32
[  149.427474][ T5917] gspca_sn9c2028: read1 error -32
[  149.434979][ T5917] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -32
[  150.044864][ T5909] usb 2-1: USB disconnect, device number 11
[  160.498638][ T6834] comedi: No check for data length of config insn id 4095 is implemented
[  160.507400][ T6834] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[  160.527659][ T6834] comedi: Assuming n=15 is correct
[  161.367897][ T5909] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  161.933105][ T6838] netlink: 'syz.2.225': attribute type 1 has an invalid length.
[  161.941005][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'.
[  161.984532][ T6838] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  162.007873][ T5909] usb 1-1: device descriptor read/64, error -71
[  162.186896][ T6849] netlink: 'syz.3.228': attribute type 4 has an invalid length.
[  162.578554][ T5909] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  162.739169][ T5909] usb 1-1: device descriptor read/64, error -71
[  162.892478][ T5909] usb usb1-port1: attempt power cycle
[  162.948433][   T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  163.128097][   T10] usb 5-1: Using ep0 maxpacket: 16
[  163.147150][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  163.171262][   T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 88, changing to 7
[  163.207242][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  163.235133][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.248249][ T5909] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  163.276389][   T10] usb 5-1: Product: 퀦렎၈뼝ﲫꨧ浞緃㿷᫱貜
[  163.289950][ T5909] usb 1-1: device descriptor read/8, error -71
[  163.307096][   T10] usb 5-1: Manufacturer:  
[  163.323748][   T10] usb 5-1: SerialNumber: ဇ
[  163.570764][ T5909] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  163.646019][ T6875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.647895][   T30] audit: type=1326 audit(1754810138.239:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6871 comm="syz.3.234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd89158ebe9 code=0x0
[  163.681778][ T6875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.803017][   T10] usb 5-1: 2:1 : unsupported format bits 0x80
[  163.828729][ T5909] usb 1-1: device not accepting address 12, error -71
[  163.848751][ T5909] usb usb1-port1: unable to enumerate USB device
[  163.881398][   T10] usb 5-1: USB disconnect, device number 12
[  163.945811][ T6842] udevd[6842]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  164.158064][ T5909] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  164.327833][ T5909] usb 1-1: Using ep0 maxpacket: 8
[  164.530553][ T5974] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  164.760338][ T5974] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  164.879088][ T5974] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  164.986965][ T5974] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  165.109773][ T5974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.481690][ T6883] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  165.637351][ T5974] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  165.932613][ T5909] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  167.237870][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.245913][ T5909] usb 1-1: Product: syz
[  167.258029][ T5909] usb 1-1: Manufacturer: syz
[  167.262660][ T5909] usb 1-1: SerialNumber: syz
[  167.281721][ T5909] usb 1-1: config 0 descriptor??
[  167.298655][ T5974] usb 2-1: USB disconnect, device number 12
[  167.345074][ T5909] usb 1-1: can't set config #0, error -71
[  167.498565][ T5909] usb 1-1: USB disconnect, device number 13
[  170.182767][ T6915] trusted_key: syz.1.242 sent an empty control message without MSG_MORE.
[  170.881815][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'.
[  171.349225][ T6923] bridge_slave_1: left allmulticast mode
[  171.493806][ T6923] bridge_slave_1: left promiscuous mode
[  171.532821][ T6923] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.694271][   T30] audit: type=1326 audit(1754810146.299:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  171.694998][ T6932] netlink: 'syz.0.248': attribute type 2 has an invalid length.
[  172.295222][   T30] audit: type=1326 audit(1754810146.329:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  172.317627][   T30] audit: type=1326 audit(1754810146.329:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  172.338946][   T30] audit: type=1326 audit(1754810146.329:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  172.375589][ T6932] netlink: 'syz.0.248': attribute type 1 has an invalid length.
[  172.390055][   T30] audit: type=1326 audit(1754810146.329:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  172.414884][ T6935] syz.4.246: attempt to access beyond end of device
[  172.414884][ T6935] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0
[  172.496039][ T6935] syz.4.246: attempt to access beyond end of device
[  172.496039][ T6935] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0
[  172.512234][   T30] audit: type=1326 audit(1754810146.329:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  172.528469][ T6923] bridge_slave_0: left allmulticast mode
[  172.544290][ T6935] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  172.562302][ T6923] bridge_slave_0: left promiscuous mode
[  172.597781][ T6923] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.606800][   T30] audit: type=1326 audit(1754810146.329:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  172.646197][ T6935] syz.4.246: attempt to access beyond end of device
[  172.646197][ T6935] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0
[  172.667858][   T30] audit: type=1326 audit(1754810146.329:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  172.735738][   T30] audit: type=1326 audit(1754810146.329:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  172.757902][ T6935] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  172.831739][ T6935] syz.4.246: attempt to access beyond end of device
[  172.831739][ T6935] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0
[  172.848454][   T30] audit: type=1326 audit(1754810146.329:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6918 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  172.914798][ T6935] syz.4.246: attempt to access beyond end of device
[  172.914798][ T6935] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0
[  173.006933][ T6943] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.052417][ T6935] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  173.186944][ T6935] syz.4.246: attempt to access beyond end of device
[  173.186944][ T6935] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0
[  173.213438][ T6935] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  173.237491][ T6935] syz.4.246: attempt to access beyond end of device
[  173.237491][ T6935] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0
[  173.457343][ T6935] syz.4.246: attempt to access beyond end of device
[  173.457343][ T6935] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0
[  173.479025][ T6935] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  173.562649][ T6935] syz.4.246: attempt to access beyond end of device
[  173.562649][ T6935] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0
[  173.696721][ T6935] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  173.902121][ T6935] syz.4.246: attempt to access beyond end of device
[  173.902121][ T6935] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0
[  174.027846][ T6935] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  174.056626][ T6935] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  174.066447][ T6935] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[  175.178814][ T6969] tipc: Started in network mode
[  175.183748][ T6969] tipc: Node identity fedc883f2331, cluster identity 4711
[  175.243099][ T6969] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.301454][ T6970] syzkaller0: entered promiscuous mode
[  175.364544][ T6970] syzkaller0: entered allmulticast mode
[  175.413864][ T6951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  175.472994][ T6966] tipc: Resetting bearer <eth:syzkaller0>
[  175.508039][ T5974] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  175.529137][ T6966] tipc: Disabling bearer <eth:syzkaller0>
[  176.052487][   T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  176.238305][   T10] usb 5-1: Using ep0 maxpacket: 32
[  176.252981][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.297898][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  176.306325][   T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  176.325849][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.352163][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.366136][   T10] usb 5-1: config 0 descriptor??
[  177.600718][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  177.606776][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  177.683434][   T10] usb 5-1: USB disconnect, device number 13
[  179.400626][ T7013] FAULT_INJECTION: forcing a failure.
[  179.400626][ T7013] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  179.498969][ T5974] usb 4-1: device descriptor read/64, error -71
[  179.527701][ T7013] CPU: 1 UID: 0 PID: 7013 Comm: syz.2.270 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  179.527728][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  179.527742][ T7013] Call Trace:
[  179.527749][ T7013]  <TASK>
[  179.527756][ T7013]  dump_stack_lvl+0x189/0x250
[  179.527781][ T7013]  ? __pfx____ratelimit+0x10/0x10
[  179.527800][ T7013]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.527817][ T7013]  ? __pfx__printk+0x10/0x10
[  179.527853][ T7013]  should_fail_ex+0x414/0x560
[  179.527879][ T7013]  _copy_to_user+0x31/0xb0
[  179.527908][ T7013]  snd_timer_user_read+0x6d8/0x9d0
[  179.527952][ T7013]  ? __pfx_snd_timer_user_read+0x10/0x10
[  179.527975][ T7013]  ? rcu_read_lock_any_held+0xb3/0x120
[  179.528000][ T7013]  ? __pfx_default_wake_function+0x10/0x10
[  179.528031][ T7013]  ? bpf_lsm_file_permission+0x9/0x20
[  179.528051][ T7013]  ? security_file_permission+0x75/0x290
[  179.528074][ T7013]  ? rw_verify_area+0x258/0x650
[  179.528107][ T7013]  ? __pfx_snd_timer_user_read+0x10/0x10
[  179.528131][ T7013]  vfs_read+0x200/0x980
[  179.528179][ T7013]  ? __pfx_vfs_read+0x10/0x10
[  179.528208][ T7013]  ? __fget_files+0x2a/0x420
[  179.528240][ T7013]  ? __fget_files+0x2a/0x420
[  179.528266][ T7013]  ? __fget_files+0x3a0/0x420
[  179.528285][ T7013]  ? __fget_files+0x2a/0x420
[  179.528315][ T7013]  ksys_read+0x145/0x250
[  179.528335][ T7013]  ? __pfx_ksys_read+0x10/0x10
[  179.528349][ T7013]  ? rcu_is_watching+0x15/0xb0
[  179.528375][ T7013]  ? do_syscall_64+0xbe/0x3b0
[  179.528405][ T7013]  do_syscall_64+0xfa/0x3b0
[  179.528424][ T7013]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.528444][ T7013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.528461][ T7013]  ? clear_bhb_loop+0x60/0xb0
[  179.528484][ T7013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.528502][ T7013] RIP: 0033:0x7f387bf8ebe9
[  179.528519][ T7013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.528535][ T7013] RSP: 002b:00007f387cd97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  179.528555][ T7013] RAX: ffffffffffffffda RBX: 00007f387c1b5fa0 RCX: 00007f387bf8ebe9
[  179.528569][ T7013] RDX: 0000000000000039 RSI: 00002000000002c0 RDI: 0000000000000007
[  179.528581][ T7013] RBP: 00007f387cd97090 R08: 0000000000000000 R09: 0000000000000000
[  179.528593][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  179.528604][ T7013] R13: 00007f387c1b6038 R14: 00007f387c1b5fa0 R15: 00007fffc99a7208
[  179.528636][ T7013]  </TASK>
[  179.773928][    C1] vkms_vblank_simulate: vblank timer overrun
[  180.011723][ T5974] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  180.077867][ T5909] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  180.230148][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  180.245204][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.425205][ T5909] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  180.438070][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.791174][ T5909] usb 1-1: config 0 descriptor??
[  181.227519][ T5974] usb 4-1: config index 0 descriptor too short (expected 65069, got 45)
[  181.275771][ T5974] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  181.298411][ T5917] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  181.302617][ T5909] usbhid 1-1:0.0: can't add hid device: -71
[  181.311492][ T5974] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  181.332690][ T5974] usb 4-1: config 0 has an invalid descriptor of length 177, skipping remainder of the config
[  181.343327][ T5909] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  181.354267][ T5974] usb 4-1: config 0 has no interfaces?
[  181.363623][ T5974] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  181.487709][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.509824][ T5917] usb 2-1: Using ep0 maxpacket: 16
[  181.546232][ T5909] usb 1-1: USB disconnect, device number 14
[  181.606719][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short
[  181.661150][ T5917] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 88, changing to 7
[  182.004998][ T5974] usb 4-1: config 0 descriptor??
[  182.016373][ T5974] usb 4-1: can't set config #0, error -71
[  182.022905][ T5917] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  182.035398][ T5974] usb 4-1: USB disconnect, device number 18
[  182.041397][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.050992][ T5917] usb 2-1: Product: 퀦렎၈뼝ﲫꨧ浞緃㿷᫱貜
[  182.137943][ T5917] usb 2-1: Manufacturer:  
[  182.142607][ T5917] usb 2-1: SerialNumber: ဇ
[  182.315479][ T7077] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  182.473257][ T7084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.494908][ T7084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.528046][ T5974] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  182.624820][ T5917] usb 2-1: 2:1 : unsupported format bits 0x80
[  182.677673][ T5917] usb 2-1: USB disconnect, device number 13
[  182.698141][ T5974] usb 5-1: Using ep0 maxpacket: 16
[  182.708278][ T5974] usb 5-1: unable to get BOS descriptor or descriptor too short
[  182.723429][ T5974] usb 5-1: config 13 has an invalid interface number: 50 but max is 0
[  182.742697][ T5974] usb 5-1: config 13 has no interface number 0
[  182.760900][ T5974] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16
[  182.794812][ T6842] udevd[6842]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  183.018314][ T5974] usb 5-1: config 13 interface 50 has no altsetting 0
[  183.033381][ T5974] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  183.042700][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.058106][ T5974] usb 5-1: Product: syz
[  183.062318][ T5974] usb 5-1: Manufacturer: syz
[  183.066925][ T5974] usb 5-1: SerialNumber: syz
[  183.116507][ T7079] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  183.641808][ T5974] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  183.780603][ T5974] usb 5-1: MIDIStreaming interface descriptor not found
[  183.826083][ T7092] FAULT_INJECTION: forcing a failure.
[  183.826083][ T7092] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  183.842013][ T5974] usb 5-1: USB disconnect, device number 14
[  183.913905][ T7092] CPU: 0 UID: 0 PID: 7092 Comm: syz.0.291 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  183.913932][ T7092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  183.913943][ T7092] Call Trace:
[  183.913950][ T7092]  <TASK>
[  183.913957][ T7092]  dump_stack_lvl+0x189/0x250
[  183.913983][ T7092]  ? __pfx____ratelimit+0x10/0x10
[  183.914004][ T7092]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.914025][ T7092]  ? __pfx__printk+0x10/0x10
[  183.914062][ T7092]  should_fail_ex+0x414/0x560
[  183.914088][ T7092]  _copy_to_user+0x31/0xb0
[  183.914117][ T7092]  simple_read_from_buffer+0xe1/0x170
[  183.914142][ T7092]  proc_fail_nth_read+0x1df/0x250
[  183.914168][ T7092]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  183.914192][ T7092]  ? rw_verify_area+0x258/0x650
[  183.914220][ T7092]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  183.914245][ T7092]  vfs_read+0x200/0x980
[  183.914280][ T7092]  ? __pfx___mutex_lock+0x10/0x10
[  183.914302][ T7092]  ? __pfx_vfs_read+0x10/0x10
[  183.914333][ T7092]  ? __fget_files+0x2a/0x420
[  183.914364][ T7092]  ? __fget_files+0x3a0/0x420
[  183.914384][ T7092]  ? __fget_files+0x2a/0x420
[  183.914415][ T7092]  ksys_read+0x145/0x250
[  183.914436][ T7092]  ? __pfx_ksys_read+0x10/0x10
[  183.914450][ T7092]  ? rcu_is_watching+0x15/0xb0
[  183.914475][ T7092]  ? do_syscall_64+0xbe/0x3b0
[  183.914499][ T7092]  do_syscall_64+0xfa/0x3b0
[  183.914520][ T7092]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.914537][ T7092]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  183.914556][ T7092]  ? clear_bhb_loop+0x60/0xb0
[  183.914579][ T7092]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.914597][ T7092] RIP: 0033:0x7f114038d5fc
[  183.914621][ T7092] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  183.914636][ T7092] RSP: 002b:00007f1141253030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  183.914656][ T7092] RAX: ffffffffffffffda RBX: 00007f11405b5fa0 RCX: 00007f114038d5fc
[  183.914671][ T7092] RDX: 000000000000000f RSI: 00007f11412530a0 RDI: 0000000000000008
[  183.914683][ T7092] RBP: 00007f1141253090 R08: 0000000000000000 R09: 0000000000000000
[  183.914695][ T7092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.914705][ T7092] R13: 00007f11405b6038 R14: 00007f11405b5fa0 R15: 00007ffe5f958a88
[  183.914736][ T7092]  </TASK>
[  184.284184][ T6841] udevd[6841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  184.779718][ T7114] netlink: 196 bytes leftover after parsing attributes in process `syz.3.298'.
[  184.870356][ T5930] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  185.670015][ T5930] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  185.751629][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.769725][ T5930] usb 5-1: config 0 descriptor??
[  185.800823][ T5930] gspca_main: cpia1-2.14.0 probing 0813:0001
[  185.882820][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'.
[  186.024169][ T7139] xt_hashlimit: size too large, truncated to 1048576
[  186.125668][ T7136] netlink: 80 bytes leftover after parsing attributes in process `syz.3.302'.
[  186.348000][ T5930] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[  186.372358][ T7136] XFS (nullb0): Invalid superblock magic number
[  186.687983][   T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  187.204740][   T10] usb 1-1: Using ep0 maxpacket: 16
[  187.292849][   T10] usb 1-1: config 1 descriptor has 1 excess byte, ignoring
[  187.316400][   T10] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  187.332453][   T10] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  187.503995][   T10] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  187.713171][   T10] usb 1-1: config 1 interface 0 has no altsetting 0
[  187.721145][ T5930] gspca_cpia1: usb_control_msg 02, error -110
[  187.736881][ T5930] gspca_cpia1: usb_control_msg 05, error -32
[  187.756174][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  187.771686][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.780475][ T5930] gspca_cpia1: usb_control_msg 05, error -32
[  187.787614][ T7167] netlink: 16 bytes leftover after parsing attributes in process `syz.3.308'.
[  187.806633][ T5930] gspca_cpia1: usb_control_msg 05, error -71
[  187.816251][   T10] usb 1-1: Product: syz
[  187.828156][   T10] usb 1-1: Manufacturer: syz
[  187.847152][ T5930] cpia1 5-1:0.0: unexpected systemstate: 00
[  187.859767][   T10] usb 1-1: SerialNumber: syz
[  187.866997][ T5930] usb 5-1: USB disconnect, device number 15
[  188.067882][ T5909] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  188.136930][   T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8
[  188.189715][   T10] usb 1-1: USB disconnect, device number 15
[  188.225380][   T10] usblp0: removed
[  188.253727][ T5909] usb 3-1: config 0 has an invalid interface number: 231 but max is 0
[  188.272206][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  188.321760][ T5909] usb 3-1: config 0 has no interface number 0
[  188.360132][ T5909] usb 3-1: config 0 interface 231 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  188.459894][ T5909] usb 3-1: config 0 interface 231 has no altsetting 0
[  188.483344][ T5909] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78
[  189.135472][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.143590][ T5909] usb 3-1: Product: syz
[  189.244459][ T5909] usb 3-1: Manufacturer: syz
[  189.267819][ T5909] usb 3-1: SerialNumber: syz
[  189.293868][ T5909] usb 3-1: config 0 descriptor??
[  189.535292][ T5909] asix 3-1:0.231 (unnamed net_device) (uninitialized): invalid hw address, using random
[  189.704978][ T7192] xt_cgroup: xt_cgroup: no path or classid specified
[  189.707925][   T43] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  189.746208][ T5909] asix 3-1:0.231 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  189.759785][ T5909] asix 3-1:0.231 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  189.771189][ T5909] asix 3-1:0.231: probe with driver asix failed with error -71
[  189.786173][ T5909] usb 3-1: USB disconnect, device number 9
[  189.868075][   T43] usb 4-1: device descriptor read/64, error -71
[  190.118724][   T43] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  190.268629][   T43] usb 4-1: device descriptor read/64, error -71
[  190.419581][   T43] usb usb4-port1: attempt power cycle
[  190.621653][ T7203] Cannot find map_set index 0 as target
[  190.972934][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.318'.
[  190.982167][   T43] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  191.064773][ T7213] comedi comedi3: comedi_config --init_data is deprecated
[  191.086319][ T7202] mmap: syz.4.318 (7202) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  191.136510][   T43] usb 4-1: device descriptor read/8, error -71
[  191.468476][   T43] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  191.712556][   T43] usb 4-1: device descriptor read/8, error -71
[  191.775895][ T7219] Bluetooth: MGMT ver 1.23
[  191.841255][   T43] usb usb4-port1: unable to enumerate USB device
[  192.367988][ T5909] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  192.532024][ T5909] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  193.167838][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.189125][ T5909] usb 3-1: config 0 descriptor??
[  194.273915][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  194.461246][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  194.812282][ T7229] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  196.185532][ T5909] usb 3-1: Cannot set autoneg
[  196.201053][ T5909] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  196.458462][ T7268] vivid-000: disconnect
[  196.857620][ T5909] usb 3-1: USB disconnect, device number 10
[  197.297983][   T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  198.048645][ T5974] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  198.637991][    T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  198.992145][    T9] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  199.015796][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.127583][    T9] usb 3-1: config 0 descriptor??
[  199.139399][   T30] kauditd_printk_skb: 16 callbacks suppressed
[  199.139415][   T30] audit: type=1326 audit(1754810173.749:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7290 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  199.168100][   T30] audit: type=1326 audit(1754810173.749:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7290 comm="syz.4.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  199.192818][    T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  199.232221][ T7291] bio_check_eod: 2 callbacks suppressed
[  199.232238][ T7291] syz.4.342: attempt to access beyond end of device
[  199.232238][ T7291] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0
[  199.252048][ T7291] syz.4.342: attempt to access beyond end of device
[  199.252048][ T7291] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0
[  199.265025][ T7291] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  199.274947][ T7291] syz.4.342: attempt to access beyond end of device
[  199.274947][ T7291] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0
[  199.287945][ T7291] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  199.298607][ T7291] syz.4.342: attempt to access beyond end of device
[  199.298607][ T7291] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0
[  199.311668][ T7291] syz.4.342: attempt to access beyond end of device
[  199.311668][ T7291] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0
[  199.324758][ T7291] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  199.334517][ T7291] syz.4.342: attempt to access beyond end of device
[  199.334517][ T7291] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0
[  199.348042][ T7291] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  199.358612][ T7291] syz.4.342: attempt to access beyond end of device
[  199.358612][ T7291] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0
[  199.371691][ T7291] syz.4.342: attempt to access beyond end of device
[  199.371691][ T7291] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0
[  199.384776][ T7291] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  199.395236][ T7291] syz.4.342: attempt to access beyond end of device
[  199.395236][ T7291] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0
[  199.408232][ T7291] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  199.418327][ T7291] syz.4.342: attempt to access beyond end of device
[  199.418327][ T7291] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0
[  199.431320][ T7291] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  199.441617][ T7291] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  199.451158][ T7291] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[  199.500805][ T7268] vivid-000: reconnect
[  199.830166][    T9] gp8psk: usb out operation failed.
[  199.845983][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  199.883210][    T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  200.327669][ T5974] usb 4-1: device descriptor read/64, error -71
[  200.498316][    T9] usb 3-1: USB disconnect, device number 11
[  200.578818][ T5974] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  200.707819][ T5917] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  200.738014][ T5974] usb 4-1: Using ep0 maxpacket: 32
[  200.763411][ T5974] usb 4-1: unable to get BOS descriptor or descriptor too short
[  200.787431][ T5974] usb 4-1: config 176 has an invalid interface number: 240 but max is 0
[  200.807021][ T5974] usb 4-1: config 176 has no interface number 0
[  200.827676][ T5974] usb 4-1: config 176 interface 240 has no altsetting 0
[  200.838596][ T5974] usb 4-1: language id specifier not provided by device, defaulting to English
[  200.872823][ T5974] usb 4-1: New USB device found, idVendor=19d2, idProduct=fff6, bcdDevice=c3.db
[  200.883454][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.898142][ T5917] usb 1-1: Using ep0 maxpacket: 8
[  200.908971][ T5909] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  201.090530][ T5974] usb 4-1: Product: syz
[  201.095770][ T5974] usb 4-1: Manufacturer: ᘩ弸摯ȶ§誒愳ṇᒻࣣ뻖友몴릌俈佫⌋㴒✫硉࿾ᤖ붗嵿呈弳ጚ臰䣋恗ꟸ楞痡䐶⇾ᇵ鹓᤻濾뷐谿兵ꈵ䏀ﯠ樃ꏻ䕇䂒췼쓜
[  201.115606][ T5974] usb 4-1: SerialNumber: syz
[  201.129368][ T5917] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  201.139325][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.146965][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  201.147372][ T5917] usb 1-1: Product: syz
[  201.176774][ T5909] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  201.187923][ T5917] usb 1-1: Manufacturer: syz
[  201.201308][ T5917] usb 1-1: SerialNumber: syz
[  201.363800][ T5917] usb 1-1: config 0 descriptor??
[  201.564921][ T5917] gspca_main: se401-2.14.0 probing 047d:5003
[  201.628644][ T5974] option 4-1:176.240: GSM modem (1-port) converter detected
[  201.715204][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.800497][ T5909] usb 2-1: config 0 descriptor??
[  201.836542][ T5909] pwc: Askey VC010 type 2 USB webcam detected.
[  201.903818][ T5917] gspca_se401: Wrong descriptor type
[  201.915116][ T5974] usb 4-1: USB disconnect, device number 24
[  201.923367][ T5974] option 4-1:176.240: device disconnected
[  201.951861][ T7323] futex_wake_op: syz.4.353 tries to shift op by 36; fix this program
[  201.964230][ T7323] futex_wake_op: syz.4.353 tries to shift op by 36; fix this program
[  202.105807][ T7328] netem: incorrect gi model size
[  202.111556][ T7328] netem: change failed
[  202.115040][ T5974] usb 1-1: USB disconnect, device number 16
[  202.227906][ T5909] pwc: recv_control_msg error -32 req 02 val 2b00
[  202.245199][ T7312] IPVS: stopping backup sync thread 7331 ...
[  202.256896][ T7331] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  203.088414][ T5909] pwc: recv_control_msg error -71 req 02 val 2c00
[  203.095402][ T5909] pwc: recv_control_msg error -71 req 04 val 1000
[  203.103161][ T5909] pwc: recv_control_msg error -71 req 04 val 1300
[  203.110133][ T5909] pwc: recv_control_msg error -71 req 04 val 1400
[  203.117037][ T5909] pwc: recv_control_msg error -71 req 02 val 2000
[  203.129171][ T5909] pwc: recv_control_msg error -71 req 02 val 2100
[  203.145584][ T5909] pwc: recv_control_msg error -71 req 04 val 1500
[  203.152937][ T5909] pwc: recv_control_msg error -71 req 02 val 2500
[  203.160044][ T5909] pwc: recv_control_msg error -71 req 02 val 2400
[  203.173687][ T5909] pwc: recv_control_msg error -71 req 02 val 2600
[  203.182479][ T5909] pwc: recv_control_msg error -71 req 02 val 2900
[  203.189488][ T5909] pwc: recv_control_msg error -71 req 02 val 2800
[  203.196616][ T5909] pwc: recv_control_msg error -71 req 04 val 1100
[  203.205681][ T5909] pwc: recv_control_msg error -71 req 04 val 1200
[  203.214049][ T5909] pwc: Registered as video103.
[  203.220924][ T5909] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9
[  203.238082][ T5909] usb 2-1: USB disconnect, device number 15
[  204.243170][ T7357] netlink: 'syz.2.365': attribute type 2 has an invalid length.
[  204.270070][ T7357] netlink: 132 bytes leftover after parsing attributes in process `syz.2.365'.
[  204.487977][ T5909] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  204.657949][ T5909] usb 5-1: Using ep0 maxpacket: 32
[  204.676352][ T5909] usb 5-1: config 0 has an invalid interface number: 23 but max is 0
[  204.697899][ T5909] usb 5-1: config 0 has no interface number 0
[  204.723713][ T5909] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62
[  204.760289][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.794057][ T5909] usb 5-1: config 0 descriptor??
[  204.818116][ T5909] gspca_main: sunplus-2.14.0 probing 052b:1803
[  204.992340][ T7371] netlink: 'syz.1.367': attribute type 5 has an invalid length.
[  206.159909][ T5909] gspca_sunplus: reg_r err -110
[  206.217938][ T5909] sunplus 5-1:0.23: probe with driver sunplus failed with error -110
[  206.229700][ T5909] usb 5-1: USB disconnect, device number 16
[  206.461765][ T7379] netlink: 'syz.2.371': attribute type 24 has an invalid length.
[  206.588363][ T5849] Bluetooth: hci0: command 0x0406 tx timeout
[  206.596381][ T5849] Bluetooth: hci1: command 0x0406 tx timeout
[  206.603263][ T5843] Bluetooth: hci2: command 0x0406 tx timeout
[  206.603324][ T5854] Bluetooth: hci3: command 0x0406 tx timeout
[  207.153442][ T7387] netlink: 248 bytes leftover after parsing attributes in process `syz.3.375'.
[  207.838625][   T43] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  208.061171][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.085799][ T7396] netlink: 'syz.3.378': attribute type 10 has an invalid length.
[  208.121992][ T7396] 8021q: adding VLAN 0 to HW filter on device team0
[  208.129459][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.133004][ T7396] bond0: (slave team0): Enslaving as an active interface with an up link
[  208.161382][ T7396] netlink: 'syz.3.378': attribute type 10 has an invalid length.
[  208.166510][   T43] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  208.643306][ T7401] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  208.937606][   T30] audit: type=1400 audit(1754810183.539:110): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7392 comm="syz.4.377" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0
[  208.961935][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.984027][   T43] usb 2-1: config 0 descriptor??
[  208.986336][ T7396] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  209.096771][ T7399] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  209.125100][ T7399] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  209.411333][   T43] isku 0003:1E7D:319C.0004: unknown main item tag 0x0
[  209.425257][   T43] isku 0003:1E7D:319C.0004: unknown main item tag 0x0
[  209.524649][   T43] isku 0003:1E7D:319C.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0
[  210.122054][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'.
[  210.368130][   T43] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  210.510212][ T5974] usb 2-1: USB disconnect, device number 16
[  210.578781][   T43] usb 1-1: device descriptor read/64, error -71
[  210.711045][ T7422] kvm: kvm [7421]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x890000fdb1
[  210.720867][ T7422] kvm: kvm [7421]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x890000bdb1
[  210.736509][ T7422] kvm_intel: kvm [7421]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x7000056c3
[  210.746438][ T7424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.382'.
[  210.819459][   T43] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  210.888040][ T5839] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  210.958266][   T43] usb 1-1: device descriptor read/64, error -71
[  211.134811][   T43] usb usb1-port1: attempt power cycle
[  211.165211][ T5839] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.185679][ T5839] usb 5-1: config 0 interface 0 has no altsetting 0
[  211.226165][ T5839] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  211.374441][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.488223][   T43] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  211.520863][ T5839] usb 5-1: Product: syz
[  211.586519][ T5839] usb 5-1: Manufacturer: syz
[  211.679091][ T5839] usb 5-1: SerialNumber: syz
[  211.691908][   T43] usb 1-1: device descriptor read/8, error -71
[  211.723438][ T5839] usb 5-1: config 0 descriptor??
[  211.939330][ T5839] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  212.043349][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  212.151201][   T43] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  212.172314][ T5839] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  212.241466][   T43] usb 1-1: device descriptor read/8, error -71
[  212.258046][ T5839] usb 5-1: media controller created
[  212.409964][   T43] usb usb1-port1: unable to enumerate USB device
[  212.755844][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  212.836205][ T5839] DVB: Unable to find symbol tda10046_attach()
[  212.848436][ T5839] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  213.052796][ T5839] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  213.076163][ T7456] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.389' sets config #8
[  213.103922][   T30] audit: type=1400 audit(1754810187.709:111): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7446 comm="syz.0.391" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=gre0
[  213.866532][ T5839] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  213.904794][ T5839] usb 5-1: USB disconnect, device number 17
[  214.618495][ T7479] /dev/nullb0: Can't open blockdev
[  214.704284][ T7482] 9pnet_fd: Insufficient options for proto=fd
[  215.499251][ T7487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.730407][ T5839] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  216.928102][ T5839] usb 2-1: Using ep0 maxpacket: 8
[  216.954749][ T5839] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  216.988003][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.996053][ T5839] usb 2-1: Product: syz
[  217.011190][ T5839] usb 2-1: Manufacturer: syz
[  217.024375][ T5839] usb 2-1: SerialNumber: syz
[  217.047909][ T5909] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  217.057440][ T5839] usb 2-1: config 0 descriptor??
[  217.083061][ T5839] gspca_main: sq905-2.14.0 probing 2770:9120
[  217.098575][   T30] audit: type=1400 audit(1754810191.699:112): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7504 comm="syz.3.406" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=gre0
[  217.223165][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  217.235390][ T5909] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  217.246940][ T5909] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  217.278963][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.295258][ T5909] usb 5-1: rejected 1 configuration due to insufficient available bus power
[  217.318817][ T5909] usb 5-1: no configuration chosen from 1 choice
[  218.196614][ T5839] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[  218.206908][ T5839] sq905 2-1:0.0: probe with driver sq905 failed with error -71
[  218.352007][ T5839] usb 2-1: USB disconnect, device number 17
[  218.413167][ T7526] batadv0: entered promiscuous mode
[  218.422776][ T7526] macsec1: entered promiscuous mode
[  218.437934][ T7526] macsec1: entered allmulticast mode
[  218.444017][ T7526] batadv0: entered allmulticast mode
[  218.499270][ T7526] batadv0: left allmulticast mode
[  218.513736][ T7526] batadv0: left promiscuous mode
[  219.032635][   T30] audit: type=1326 audit(1754810193.609:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7527 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89158ebe9 code=0x7ffc0000
[  219.060102][ T7533] bio_check_eod: 2 callbacks suppressed
[  219.060119][ T7533] syz.3.413: attempt to access beyond end of device
[  219.060119][ T7533] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0
[  219.088043][ T7533] syz.3.413: attempt to access beyond end of device
[  219.088043][ T7533] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0
[  219.256038][ T7533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  219.265843][   T30] audit: type=1326 audit(1754810193.619:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7527 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89158ebe9 code=0x7ffc0000
[  219.287188][    C0] vkms_vblank_simulate: vblank timer overrun
[  219.909682][   T30] audit: type=1326 audit(1754810193.619:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7527 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fd89158ebe9 code=0x7ffc0000
[  219.932771][   T30] audit: type=1326 audit(1754810193.619:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7527 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89158ebe9 code=0x7ffc0000
[  219.954179][    C0] vkms_vblank_simulate: vblank timer overrun
[  219.969519][ T7533] syz.3.413: attempt to access beyond end of device
[  219.969519][ T7533] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0
[  219.973489][   T30] audit: type=1326 audit(1754810193.619:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7527 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89158ebe9 code=0x7ffc0000
[  220.003828][    C0] vkms_vblank_simulate: vblank timer overrun
[  220.054089][ T7533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  220.067031][ T7540] binder: 7539:7540 unknown command 0
[  220.075552][ T7540] binder: 7539:7540 ioctl c0306201 200000000080 returned -22
[  220.086930][   T10] usb 5-1: USB disconnect, device number 18
[  220.095068][   T30] audit: type=1326 audit(1754810193.619:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7527 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd89158ebe9 code=0x7ffc0000
[  220.126584][ T7533] syz.3.413: attempt to access beyond end of device
[  220.126584][ T7533] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0
[  220.258782][ T7533] syz.3.413: attempt to access beyond end of device
[  220.258782][ T7533] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0
[  220.278194][   T30] audit: type=1326 audit(1754810193.619:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7527 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89158ebe9 code=0x7ffc0000
[  220.300901][ T7533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  220.313113][ T7533] syz.3.413: attempt to access beyond end of device
[  220.313113][ T7533] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0
[  220.358817][   T30] audit: type=1326 audit(1754810193.619:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7527 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89158ebe9 code=0x7ffc0000
[  220.381068][ T7533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  220.410158][ T7551] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.459587][ T7533] syz.3.413: attempt to access beyond end of device
[  220.459587][ T7533] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0
[  220.482947][   T30] audit: type=1326 audit(1754810193.659:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7527 comm="syz.3.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd89158ebe9 code=0x7ffc0000
[  220.504442][    C0] vkms_vblank_simulate: vblank timer overrun
[  220.572342][ T7533] syz.3.413: attempt to access beyond end of device
[  220.572342][ T7533] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0
[  220.600251][ T7533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  220.676957][ T7533] syz.3.413: attempt to access beyond end of device
[  220.676957][ T7533] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0
[  220.967704][ T7533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  220.997237][ T7533] syz.3.413: attempt to access beyond end of device
[  220.997237][ T7533] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0
[  221.032312][ T7533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  221.045878][ T7533] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  221.061291][ T7533] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[  223.476091][ T7580] bond0: (slave syz_tun): Releasing backup interface
[  223.572424][ T7580] bridge_slave_0: left allmulticast mode
[  223.608143][ T7580] bridge_slave_0: left promiscuous mode
[  223.643841][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.681855][ T7580] bridge_slave_1: left allmulticast mode
[  223.690892][ T7580] bridge_slave_1: left promiscuous mode
[  223.696737][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.878349][ T7580] bond0: (slave bond_slave_0): Releasing backup interface
[  224.556208][ T7580] bond0: (slave bond_slave_1): Releasing backup interface
[  224.608468][ T7599] overlayfs: conflicting options: userxattr,redirect_dir=on
[  224.643690][ T7580] team0: Port device team_slave_0 removed
[  224.667892][ T7580] team0: Port device team_slave_1 removed
[  224.674678][ T7580] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.689023][ T7580] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.698926][ T7580] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.706563][ T7580] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.793839][ T7603] netlink: 104 bytes leftover after parsing attributes in process `syz.1.432'.
[  224.942122][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'.
[  225.288064][ T5917] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  225.570232][ T5917] usb 2-1: Using ep0 maxpacket: 8
[  225.584715][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.602721][ T5917] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  226.220856][ T5917] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a
[  226.265335][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.281262][ T5917] usb 2-1: Product: syz
[  226.285577][ T5917] usb 2-1: Manufacturer: syz
[  226.356804][ T5917] usb 2-1: SerialNumber: syz
[  226.376425][ T5917] usb 2-1: config 0 descriptor??
[  226.875771][ T5909] usb 2-1: USB disconnect, device number 18
[  227.881694][ T7630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.565503][ T7635] netlink: 'syz.3.441': attribute type 14 has an invalid length.
[  228.781611][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  228.781628][   T30] audit: type=1400 audit(1754810203.389:143): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7643 comm="syz.4.442" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0
[  228.811454][ T7650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  228.819101][ T7650] IPv6: NLM_F_CREATE should be set when creating new route
[  228.826410][ T7650] IPv6: NLM_F_CREATE should be set when creating new route
[  229.735974][ T7662] netlink: 212152 bytes leftover after parsing attributes in process `syz.3.448'.
[  229.811647][ T5917] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  229.958547][ T5917] usb 1-1: device descriptor read/64, error -71
[  230.291095][ T5917] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  230.727840][ T5917] usb 1-1: device descriptor read/64, error -71
[  230.841815][ T5917] usb usb1-port1: attempt power cycle
[  231.208077][ T5917] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  231.470952][ T5917] usb 1-1: device descriptor read/8, error -71
[  231.569195][ T7691] loop6: detected capacity change from 0 to 524287999
[  231.718349][ T5917] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  231.769017][ T5917] usb 1-1: device descriptor read/8, error -71
[  231.878100][ T5917] usb usb1-port1: unable to enumerate USB device
[  232.068098][ T7696] Bluetooth: hci0: invalid length 0, exp 2 for type 16
[  232.366120][ T7699] netlink: 'syz.2.458': attribute type 39 has an invalid length.
[  232.650512][ T7702] : entered promiscuous mode
[  233.937551][ T7716] trusted_key: encrypted_key: master key parameter is missing
[  234.435982][ T7721] /dev/nullb0: Can't open blockdev
[  235.870415][ T7740] Bluetooth: hci0: invalid length 0, exp 2 for type 16
[  236.388282][   T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  236.854889][ T7758] xt_hashlimit: size too large, truncated to 1048576
[  236.877873][   T10] usb 2-1: Using ep0 maxpacket: 32
[  236.891510][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  236.908589][   T10] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  236.917792][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.937239][   T10] usb 2-1: Product: syz
[  236.948584][   T10] usb 2-1: Manufacturer: syz
[  236.953225][   T10] usb 2-1: SerialNumber: syz
[  237.081010][   T10] usb 2-1: config 0 descriptor??
[  237.086974][ T7746] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  237.097356][   T10] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11
[  238.995154][ T5909] usb 2-1: USB disconnect, device number 19
[  239.001197][    C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  239.628306][   T43] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  240.827893][   T43] usb 5-1: Using ep0 maxpacket: 32
[  240.839461][   T43] usb 5-1: config 0 has an invalid interface number: 231 but max is 0
[  240.847842][   T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.868375][   T43] usb 5-1: config 0 has no interface number 0
[  240.874587][   T43] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  240.895141][   T43] usb 5-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  240.955018][   T43] usb 5-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9
[  240.955051][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.955072][   T43] usb 5-1: Product: syz
[  240.955088][   T43] usb 5-1: Manufacturer: syz
[  240.955103][   T43] usb 5-1: SerialNumber: syz
[  240.958181][   T43] usb 5-1: config 0 descriptor??
[  240.958908][ T7776] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  240.962875][   T43] usb-storage 5-1:0.231: USB Mass Storage device detected
[  241.259791][ T7776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.259983][ T7776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.270008][ T5909] usb 5-1: USB disconnect, device number 19
[  241.961705][ T7801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.487'.
[  241.969634][ T7791] tty tty2: ldisc open failed (-12), clearing slot 1
[  243.378030][ T5917] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  243.927459][ T5917] usb 4-1: unable to get BOS descriptor or descriptor too short
[  243.960975][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  243.982471][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  244.002122][ T5917] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  244.075108][ T5917] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39
[  244.103100][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.247871][ T5917] usb 4-1: Product: syz
[  244.252111][ T5917] usb 4-1: Manufacturer: syz
[  244.278172][ T5917] usb 4-1: SerialNumber: syz
[  244.295420][ T5917] usb 4-1: config 0 descriptor??
[  244.310525][ T5917] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  244.517383][ T5917] usb 4-1: USB disconnect, device number 25
[  246.608129][   T10] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  246.792150][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64
[  246.823666][ T7866] netlink: 'syz.2.503': attribute type 3 has an invalid length.
[  246.834080][   T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  246.864109][   T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  246.921992][   T10] usb 4-1: Product: syz
[  246.946862][   T10] usb 4-1: Manufacturer: syz
[  246.978641][   T10] usb 4-1: SerialNumber: syz
[  247.024506][   T10] usb 4-1: config 0 descriptor??
[  247.038417][ T7861] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  247.046528][   T10] hub 4-1:0.0: bad descriptor, ignoring hub
[  247.077878][   T10] hub 4-1:0.0: probe with driver hub failed with error -5
[  247.498872][   T10] usb 4-1: USB disconnect, device number 26
[  247.627589][ T7880] overlayfs: missing 'lowerdir'
[  248.017939][   T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  248.307888][   T10] usb 2-1: Using ep0 maxpacket: 16
[  248.315314][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  248.337457][   T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 88, changing to 7
[  248.376304][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  248.410276][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.448479][   T10] usb 2-1: Product: 퀦렎၈뼝ﲫꨧ浞緃㿷᫱貜
[  248.464792][   T10] usb 2-1: Manufacturer:  
[  248.477829][   T10] usb 2-1: SerialNumber: ဇ
[  249.435092][ T5852] Bluetooth: hci4: command 0x0405 tx timeout
[  249.603945][ T7884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.626994][ T7884] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.646858][   T10] usb 2-1: 2:1 : unsupported format bits 0x80
[  249.717889][ T5930] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  249.764726][ T7918] bridge0: port 3(vlan2) entered blocking state
[  249.772026][ T7918] bridge0: port 3(vlan2) entered disabled state
[  249.777505][ T7920] netlink: 48 bytes leftover after parsing attributes in process `syz.2.516'.
[  249.804767][   T10] usb 2-1: USB disconnect, device number 20
[  249.819367][ T7918] vlan2: entered allmulticast mode
[  249.827188][ T7918] bridge0: entered allmulticast mode
[  249.855794][ T7918] vlan2: left allmulticast mode
[  249.861683][ T7918] bridge0: left allmulticast mode
[  249.941930][ T5930] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b
[  249.955577][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.974294][ T5930] usb 4-1: Product: syz
[  249.981608][ T5930] usb 4-1: Manufacturer: syz
[  249.986821][ T5930] usb 4-1: SerialNumber: syz
[  250.167885][ T5944] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  250.662132][ T5930] gspca_main: pac207-2.14.0 probing 093a:2476
[  251.114990][ T5930] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[  251.125663][ T5930] usb 4-1: USB disconnect, device number 27
[  251.301806][ T5944] usb 5-1: config 8 has an invalid interface number: 255 but max is 0
[  251.516647][ T5944] usb 5-1: config 8 has an invalid descriptor of length 135, skipping remainder of the config
[  251.645651][ T5944] usb 5-1: config 8 has no interface number 0
[  251.731606][ T5944] usb 5-1: too many endpoints for config 8 interface 255 altsetting 3: 247, using maximum allowed: 30
[  251.853969][ T5944] usb 5-1: config 8 interface 255 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 247
[  252.013208][ T5944] usb 5-1: config 8 interface 255 has no altsetting 0
[  252.095159][ T5944] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  252.184801][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.460491][ T5944] usb 5-1: string descriptor 0 read error: -71
[  252.560785][   T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  252.563743][   T30] audit: type=1326 audit(1754810227.159:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7947 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387bf8ebe9 code=0x7ffc0000
[  252.579678][ T5974] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  252.598460][ T5944] usb 5-1: USB disconnect, device number 20
[  252.658320][   T30] audit: type=1326 audit(1754810227.159:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7947 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f387bf8ebe9 code=0x7ffc0000
[  252.709901][ T7949] bio_check_eod: 2 callbacks suppressed
[  252.709933][ T7949] syz.2.528: attempt to access beyond end of device
[  252.709933][ T7949] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0
[  252.738423][ T7949] syz.2.528: attempt to access beyond end of device
[  252.738423][ T7949] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0
[  252.755419][ T7949] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  252.779567][ T7949] syz.2.528: attempt to access beyond end of device
[  252.779567][ T7949] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0
[  252.797927][ T7949] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  252.819624][   T43] usb 2-1: Using ep0 maxpacket: 32
[  252.833281][   T30] audit: type=1326 audit(1754810227.169:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7947 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387bf8ebe9 code=0x7ffc0000
[  252.857639][ T7949] syz.2.528: attempt to access beyond end of device
[  252.857639][ T7949] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0
[  252.875415][ T7949] syz.2.528: attempt to access beyond end of device
[  252.875415][ T7949] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0
[  252.876565][ T7949] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  252.877566][   T43] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88
[  252.891026][ T7949] syz.2.528: attempt to access beyond end of device
[  252.891026][ T7949] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0
[  252.928346][ T7949] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  252.946129][ T5974] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.967975][ T7949] syz.2.528: attempt to access beyond end of device
[  252.967975][ T7949] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0
[  252.977899][ T5974] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  252.992357][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.007939][ T7949] syz.2.528: attempt to access beyond end of device
[  253.007939][ T7949] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0
[  253.022038][ T7949] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  253.023698][ T5974] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  253.037837][   T30] audit: type=1326 audit(1754810227.229:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7947 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f387bf8ebe9 code=0x7ffc0000
[  253.069267][   T43] usb 2-1: Product: syz
[  253.074176][   T43] usb 2-1: Manufacturer: syz
[  253.080403][ T7949] syz.2.528: attempt to access beyond end of device
[  253.080403][ T7949] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0
[  253.082540][ T5974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  253.103245][   T43] usb 2-1: SerialNumber: syz
[  253.112242][   T30] audit: type=1326 audit(1754810227.239:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7947 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387bf8ebe9 code=0x7ffc0000
[  253.136257][ T7949] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  253.137870][ T5974] usb 1-1: SerialNumber: syz
[  253.159258][   T43] usb 2-1: config 0 descriptor??
[  253.185372][ T7949] syz.2.528: attempt to access beyond end of device
[  253.185372][ T7949] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0
[  253.202358][   T43] as10x_usb: device has been detected
[  253.262500][   T43] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  253.289878][ T7949] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256
[  253.332009][ T7953] netlink: 830 bytes leftover after parsing attributes in process `syz.3.529'.
[  253.368037][   T30] audit: type=1326 audit(1754810227.249:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7947 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387bf8ebe9 code=0x7ffc0000
[  253.416562][   T30] audit: type=1326 audit(1754810227.249:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7947 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f387bf8ebe9 code=0x7ffc0000
[  253.577349][ T5974] usb 1-1: 0:2 : does not exist
[  253.604477][ T7949] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512
[  253.629510][ T7949] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1)
[  253.659160][   T30] audit: type=1326 audit(1754810227.289:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7947 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387bf8ebe9 code=0x7ffc0000
[  253.669567][ T5974] usb 1-1: USB disconnect, device number 25
[  253.699223][   T43] usb 2-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)...
[  253.742610][   T30] audit: type=1326 audit(1754810227.289:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7947 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387bf8ebe9 code=0x7ffc0000
[  253.747023][   T43] as10x_usb: error during firmware upload part1
[  253.795465][   T30] audit: type=1326 audit(1754810227.289:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7947 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f387bf8ebe9 code=0x7ffc0000
[  253.807838][   T43] Registered device Abilis Systems DVB-Titan
[  254.018967][   T43] usb 2-1: USB disconnect, device number 21
[  254.086118][   T43] Unregistered device Abilis Systems DVB-Titan
[  254.087840][   T43] as10x_usb: device has been disconnected
[  254.730587][   T43] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  254.918105][   T43] usb 2-1: Using ep0 maxpacket: 16
[  254.922766][ T7967] tipc: Started in network mode
[  254.928959][ T7967] tipc: Node identity ac14140f, cluster identity 4711
[  254.940073][   T43] usb 2-1: unable to get BOS descriptor or descriptor too short
[  254.957174][ T7967] tipc: New replicast peer: 255.255.255.255
[  254.974744][ T7967] tipc: Enabled bearer <udp:syz2>, priority 10
[  255.142335][   T43] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 88, changing to 7
[  255.283240][   T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  255.337813][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'.
[  255.415445][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.427524][   T43] usb 2-1: Product: 퀦렎၈뼝ﲫꨧ浞緃㿷᫱貜
[  255.436788][   T43] usb 2-1: Manufacturer:  
[  255.441882][   T43] usb 2-1: SerialNumber: ဇ
[  255.762334][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  255.768979][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  256.198690][ T5930] tipc: Node number set to 2886997007
[  256.231985][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.242921][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.419704][   T43] usb 2-1: 2:1 : unsupported format bits 0x80
[  256.445320][   T43] usb 2-1: USB disconnect, device number 22
[  256.858231][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  256.877409][ T7996] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  256.889175][ T7996] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  256.909825][ T7996] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  256.923362][ T7996] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  256.935839][ T7996] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  256.947712][ T7996] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  256.958899][ T7996] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[  256.969916][ T7996] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[  256.979946][ T7996] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[  257.050631][ T7993] IPv6: Can't replace route, no match found
[  257.189212][   T10] usb 3-1: device descriptor read/64, error -71
[  257.258464][ T8005] Cannot find add_set index 0 as target
[  257.375652][ T8000] process 'syz.4.542' launched './file2' with NULL argv: empty string added
[  257.438095][ T5930] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  257.478104][   T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  257.572276][ T8027] overlay: Unknown parameter 'context'
[  257.621203][ T5930] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  257.633571][   T10] usb 3-1: device descriptor read/64, error -71
[  257.651392][ T5930] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  257.672161][ T5930] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  257.776357][   T10] usb usb3-port1: attempt power cycle
[  257.796846][ T5930] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  257.801743][ T8031] geneve2: entered promiscuous mode
[  257.812166][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.172985][ T5930] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  258.611796][   T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  259.054640][ T5930] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2
[  259.069084][   T10] usb 3-1: device descriptor read/8, error -71
[  260.078520][   T43] usb 4-1: USB disconnect, device number 28
[  260.111482][   T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  260.256793][   T30] kauditd_printk_skb: 51 callbacks suppressed
[  260.256810][   T30] audit: type=1326 audit(1754810234.859:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  260.315816][ T8050] bio_check_eod: 14 callbacks suppressed
[  260.315828][ T8050] syz.4.553: attempt to access beyond end of device
[  260.315828][ T8050] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0
[  260.334436][ T8050] syz.4.553: attempt to access beyond end of device
[  260.334436][ T8050] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0
[  260.347572][ T8050] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  260.357370][ T8050] syz.4.553: attempt to access beyond end of device
[  260.357370][ T8050] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0
[  260.371408][ T8050] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  260.381468][ T8050] syz.4.553: attempt to access beyond end of device
[  260.381468][ T8050] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0
[  260.394367][ T8050] syz.4.553: attempt to access beyond end of device
[  260.394367][ T8050] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0
[  260.407209][ T8050] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  260.416981][ T8050] syz.4.553: attempt to access beyond end of device
[  260.416981][ T8050] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0
[  260.429964][ T8050] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  260.439893][ T8050] syz.4.553: attempt to access beyond end of device
[  260.439893][ T8050] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0
[  260.452770][ T8050] syz.4.553: attempt to access beyond end of device
[  260.452770][ T8050] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0
[  260.465773][ T8050] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  260.476600][ T8050] syz.4.553: attempt to access beyond end of device
[  260.476600][ T8050] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0
[  260.489632][ T8050] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  260.499470][ T8050] syz.4.553: attempt to access beyond end of device
[  260.499470][ T8050] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0
[  260.512350][ T8050] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256
[  260.521993][ T8050] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512
[  260.531499][ T8050] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1)
[  260.540341][   T10] usb 3-1: device not accepting address 15, error -71
[  260.555453][   T10] usb usb3-port1: unable to enumerate USB device
[  260.563139][   T30] audit: type=1326 audit(1754810234.859:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  260.595980][   T30] audit: type=1326 audit(1754810234.919:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  260.658213][   T30] audit: type=1326 audit(1754810234.919:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  260.726203][   T30] audit: type=1326 audit(1754810234.919:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  260.759609][   T30] audit: type=1326 audit(1754810234.919:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  260.828451][   T30] audit: type=1326 audit(1754810234.919:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  260.877877][   T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  260.917437][   T30] audit: type=1326 audit(1754810234.919:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  260.962634][   T30] audit: type=1326 audit(1754810234.919:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  260.996001][ T8070] sctp: [Deprecated]: syz.3.560 (pid 8070) Use of int in max_burst socket option deprecated.
[  260.996001][ T8070] Use struct sctp_assoc_value instead
[  261.013894][   T30] audit: type=1326 audit(1754810234.919:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde4478ebe9 code=0x7ffc0000
[  261.036987][ T8072] netlink: 80 bytes leftover after parsing attributes in process `syz.1.563'.
[  261.051388][ T8072] netlink: 80 bytes leftover after parsing attributes in process `syz.1.563'.
[  261.077857][   T10] usb 3-1: Using ep0 maxpacket: 16
[  261.085260][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  261.099466][   T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 88, changing to 7
[  261.117618][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  261.128561][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.136686][   T10] usb 3-1: Product: 퀦렎၈뼝ﲫꨧ浞緃㿷᫱貜
[  261.148603][ T5917] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  261.174172][   T10] usb 3-1: Manufacturer:  
[  261.184308][   T10] usb 3-1: SerialNumber: ဇ
[  261.200511][   T43] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  261.317979][ T5917] usb 1-1: Using ep0 maxpacket: 32
[  261.320224][ T8083] netlink: 'syz.1.565': attribute type 10 has an invalid length.
[  261.332068][ T8083] netlink: 40 bytes leftover after parsing attributes in process `syz.1.565'.
[  261.337307][ T5917] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  261.342557][ T8083] dummy0: entered promiscuous mode
[  261.368205][   T43] usb 5-1: Using ep0 maxpacket: 16
[  261.416727][   T43] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  261.419358][ T8083] bridge0: port 3(dummy0) entered blocking state
[  261.436069][ T5917] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  261.440517][ T8083] bridge0: port 3(dummy0) entered disabled state
[  261.457860][ T8083] dummy0: entered allmulticast mode
[  261.462471][   T43] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  261.463527][ T5930] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  261.476561][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.487951][ T8083] bridge0: port 3(dummy0) entered blocking state
[  261.494684][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.497583][ T5917] usb 1-1: Product: syz
[  261.502915][ T8083] bridge0: port 3(dummy0) entered forwarding state
[  261.529250][   T43] usb 5-1: config 0 descriptor??
[  261.830116][ T8086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.841036][ T8086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.888393][ T5930] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  261.892702][ T5917] usb 1-1: Manufacturer: syz
[  261.912286][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  261.915476][ T5917] usb 1-1: SerialNumber: syz
[  261.933448][ T8088] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  261.945256][ T5930] usb 4-1: Product: syz
[  261.948712][ T5917] usb 1-1: config 0 descriptor??
[  261.958630][ T5930] usb 4-1: Manufacturer: syz
[  261.963286][ T5930] usb 4-1: SerialNumber: syz
[  261.968604][ T8063] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  261.982164][ T5917] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12
[  262.005732][ T5930] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  262.022774][   T10] usb 3-1: 2:1 : unsupported format bits 0x80
[  262.069592][   T10] usb 3-1: USB disconnect, device number 16
[  262.419897][ T8080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  262.429226][ T8080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  262.441030][ T5930] vp7045: USB control message 'in' went wrong.
[  262.447227][ T5930] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  262.458841][ T5930] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  262.472541][ T5930] usb 4-1: USB disconnect, device number 29
[  262.548729][ T8092] _�Z`Ԁ@: entered promiscuous mode
[  262.566276][ T8092] input: syz1 as /devices/virtual/input/input13
[  262.735132][ T5930] usb 1-1: USB disconnect, device number 26
[  262.735286][    C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  262.880559][ T8098] Device name cannot be null; rc = [-22]
[  266.387882][   T43] usb 5-1: USB disconnect, device number 21
[  266.702298][   T30] kauditd_printk_skb: 28 callbacks suppressed
[  266.702352][   T30] audit: type=1400 audit(1754810241.299:243): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8111 comm="syz.2.572" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0
[  267.570015][ T8136] netlink: 'syz.3.577': attribute type 10 has an invalid length.
[  267.610487][ T8136] hsr0: entered promiscuous mode
[  268.216335][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'.
[  268.225241][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.578'.
[  268.226705][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'.
[  268.245582][ T5852] Bluetooth: hci4: command 0x0405 tx timeout
[  268.256848][ T8136] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  268.288864][ T8140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.578'.
[  268.341751][ T8136] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  268.461122][ T8136] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  268.499485][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'.
[  268.576918][ T8154] binder: 8145:8154 ioctl 8955 2000000002c0 returned -22
[  268.682184][   T10] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0
[  268.736422][ T8149] binder: 8145:8149 ioctl c0306201 2000000003c0 returned -14
[  268.739433][   T10] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0
[  268.752541][ T8149] binder: 8145:8149 ioctl c0306201 2000000001c0 returned -14
[  268.763404][   T10] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0
[  268.822617][   T10] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  268.902562][ T8170] 9pnet_fd: Insufficient options for proto=fd
[  268.949575][ T8170] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  268.980753][ T8170] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  269.481937][ T8195] netlink: 28 bytes leftover after parsing attributes in process `syz.4.588'.
[  269.671469][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.809661][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.936597][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.977945][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.727920][   T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  270.746279][ T8215] FAULT_INJECTION: forcing a failure.
[  270.746279][ T8215] name failslab, interval 1, probability 0, space 0, times 0
[  270.777936][ T8215] CPU: 0 UID: 0 PID: 8215 Comm: syz.1.597 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  270.777964][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  270.777977][ T8215] Call Trace:
[  270.777985][ T8215]  <TASK>
[  270.777995][ T8215]  dump_stack_lvl+0x189/0x250
[  270.778030][ T8215]  ? __pfx____ratelimit+0x10/0x10
[  270.778052][ T8215]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.778073][ T8215]  ? __pfx__printk+0x10/0x10
[  270.778104][ T8215]  ? __pfx___might_resched+0x10/0x10
[  270.778125][ T8215]  ? fs_reclaim_acquire+0x7d/0x100
[  270.778153][ T8215]  should_fail_ex+0x414/0x560
[  270.778180][ T8215]  should_failslab+0xa8/0x100
[  270.778202][ T8215]  __kmalloc_cache_noprof+0x70/0x3d0
[  270.778222][ T8215]  ? madvise_collapse+0x154/0xa80
[  270.778251][ T8215]  madvise_collapse+0x154/0xa80
[  270.778293][ T8215]  madvise_do_behavior+0xd35/0x2e70
[  270.778330][ T8215]  ? __pfx_madvise_do_behavior+0x10/0x10
[  270.778355][ T8215]  ? __might_fault+0xb0/0x130
[  270.778376][ T8215]  ? _parse_integer_limit+0x1ae/0x1f0
[  270.778408][ T8215]  ? __lock_acquire+0xab9/0xd20
[  270.778438][ T8215]  ? get_pid_task+0x20/0x1f0
[  270.778479][ T8215]  ? __lock_acquire+0xab9/0xd20
[  270.778508][ T8215]  ? madvise_lock+0xda/0x200
[  270.778552][ T8215]  do_madvise+0x174/0x220
[  270.778577][ T8215]  ? __pfx_do_madvise+0x10/0x10
[  270.778611][ T8215]  ? __pfx_ksys_write+0x10/0x10
[  270.778627][ T8215]  ? rcu_is_watching+0x15/0xb0
[  270.778654][ T8215]  __x64_sys_madvise+0xa7/0xc0
[  270.778676][ T8215]  do_syscall_64+0xfa/0x3b0
[  270.778695][ T8215]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.778718][ T8215]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.778736][ T8215]  ? clear_bhb_loop+0x60/0xb0
[  270.778760][ T8215]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.778779][ T8215] RIP: 0033:0x7f08f858ebe9
[  270.778796][ T8215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.778814][ T8215] RSP: 002b:00007f08f931a038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  270.778835][ T8215] RAX: ffffffffffffffda RBX: 00007f08f87b5fa0 RCX: 00007f08f858ebe9
[  270.778850][ T8215] RDX: 0000000000000019 RSI: 0000000000c00000 RDI: 0000200000000000
[  270.778863][ T8215] RBP: 00007f08f931a090 R08: 0000000000000000 R09: 0000000000000000
[  270.778876][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  270.778888][ T8215] R13: 00007f08f87b6038 R14: 00007f08f87b5fa0 R15: 00007ffee363bb98
[  270.778921][ T8215]  </TASK>
[  271.057448][ T8220] trusted_key: encrypted_key: insufficient parameters specified
[  271.187831][   T10] usb 3-1: Using ep0 maxpacket: 32
[  271.195115][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  271.204092][   T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023
[  271.214238][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  271.228296][   T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  271.238073][   T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  271.558911][   T10] usb 3-1: language id specifier not provided by device, defaulting to English
[  271.576144][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  271.585776][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.593958][   T10] usb 3-1: Manufacturer: 泘⭸㟐쒗袾磦䓓걙모莨컺蜐샄㘙矆䐨Ⲓ拤
[  271.611301][   T10] usb 3-1: SerialNumber: syz
[  271.625192][ T8200] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  271.656023][ T8245] xt_hashlimit: size too large, truncated to 1048576
[  271.724984][   T30] audit: type=1400 audit(1754810246.319:244): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8243 comm="syz.3.607" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=gre0
[  271.850818][   T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  271.891724][   T10] usb 3-1: USB disconnect, device number 17
[  273.510996][   T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  273.921728][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'.
[  273.932513][   T10] usb 4-1: config 0 has no interfaces?
[  273.938168][   T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4
[  273.947557][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.258201][   T10] usb 4-1: config 0 descriptor??
[  274.502305][ T5917] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  274.524485][ T5917] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  274.528375][ T8289] sch_fq: defrate 0 ignored.
[  274.594426][ T8290] netlink: 'syz.2.620': attribute type 21 has an invalid length.
[  274.636379][ T8290] netlink: 128 bytes leftover after parsing attributes in process `syz.2.620'.
[  274.759199][ T8290] netlink: 'syz.2.620': attribute type 4 has an invalid length.
[  274.767202][ T8290] netlink: 3 bytes leftover after parsing attributes in process `syz.2.620'.
[  274.797910][   T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  274.944257][   T10] usb 3-1: device descriptor read/64, error -71
[  275.091074][ T5917] usb 4-1: USB disconnect, device number 30
[  275.218742][   T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  275.407991][   T10] usb 3-1: device descriptor read/64, error -71
[  275.550817][   T10] usb usb3-port1: attempt power cycle
[  275.680656][ T8307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.625'.
[  275.918152][   T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  275.956582][   T10] usb 3-1: device descriptor read/8, error -71
[  276.188369][ T5917] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  276.207884][   T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  276.243274][   T10] usb 3-1: device descriptor read/8, error -71
[  276.348073][ T5917] usb 5-1: Using ep0 maxpacket: 16
[  276.360927][ T5917] usb 5-1: unable to get BOS descriptor or descriptor too short
[  276.372775][ T5917] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 88, changing to 7
[  276.375869][   T10] usb usb3-port1: unable to enumerate USB device
[  276.403174][ T5917] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  276.416594][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.440569][ T5917] usb 5-1: Product: 퀦렎၈뼝ﲫꨧ浞緃㿷᫱貜
[  276.450858][ T5917] usb 5-1: Manufacturer:  
[  276.455489][ T5917] usb 5-1: SerialNumber: ဇ
[  276.512179][ T8328] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  276.569988][ T8328] ------------[ cut here ]------------
[  276.575925][ T8328] WARNING: CPU: 1 PID: 8328 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310
[  276.585922][ T8328] Modules linked in:
[  276.590224][ T8328] CPU: 1 UID: 0 PID: 8328 Comm: syz.1.633 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  276.600164][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  276.610319][ T8328] RIP: 0010:folio_memcg+0x1a8/0x310
[  276.615602][ T8328] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff
[  276.635370][ T8328] RSP: 0018:ffffc9001b597250 EFLAGS: 00010283
[  276.641566][ T8328] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000
[  276.649740][ T8328] RDX: ffffc900046d1000 RSI: 0000000000001dd5 RDI: 0000000000001dd6
[  276.658259][ T8328] RBP: 0000000000000000 R08: ffffea0001535747 R09: 1ffffd40002a6ae8
[  276.666361][ T8328] R10: dffffc0000000000 R11: fffff940002a6ae9 R12: ffffea0001535770
[  276.674961][ T8328] R13: dffffc0000000000 R14: ffff88807a7e6a80 R15: 0000000000000002
[  276.683032][ T8328] FS:  00007f08f931a6c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000
[  276.692137][ T8328] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  276.698835][ T8328] CR2: 0000000000000000 CR3: 0000000054a4a000 CR4: 00000000003526f0
[  276.706862][ T8328] DR0: ffffffffffffffff DR1: 0000000000000047 DR2: 0000000000000005
[  276.714930][ T8328] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  276.722985][ T8328] Call Trace:
[  276.726316][ T8328]  <TASK>
[  276.729330][ T8328]  workingset_activation+0x5f/0x4a0
[  276.734584][ T8328]  ? folio_mark_accessed+0x361/0x4a0
[  276.739956][ T8328]  folio_mark_accessed+0x3b5/0x4a0
[  276.745149][ T8328]  kvm_release_page_clean+0x9a/0xe0
[  276.750452][ T8328]  kvm_tdp_page_fault+0x2dd/0x370
[  276.755968][ T8328]  kvm_mmu_do_page_fault+0x2c5/0x640
[  276.761818][ T8328]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[  276.767704][ T8328]  ? vmx_handle_exit_irqoff+0x29e/0xad0
[  276.773353][ T8328]  kvm_mmu_page_fault+0x22f/0xb70
[  276.778475][ T8328]  ? __pfx_handle_ept_violation+0x10/0x10
[  276.784269][ T8328]  vmx_handle_exit+0x1090/0x18a0
[  276.789329][ T8328]  ? vcpu_run+0x361c/0x6f70
[  276.793890][ T8328]  ? rcu_is_watching+0x15/0xb0
[  276.798745][ T8328]  vcpu_run+0x432e/0x6f70
[  276.803153][ T8328]  ? vcpu_run+0x361c/0x6f70
[  276.807828][ T8328]  ? __pfx_vcpu_run+0x10/0x10
[  276.812566][ T8328]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  276.818379][ T8328]  ? rcu_is_watching+0x15/0xb0
[  276.819690][ T8334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.823179][ T8328]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[  276.837379][ T8328]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  276.843194][ T8328]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  276.844061][ T8334] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.849236][ T8328]  ? rcu_is_watching+0x15/0xb0
[  276.862542][ T8328]  ? look_up_lock_class+0x74/0x170
[  276.867711][ T8328]  ? register_lock_class+0x51/0x320
[  276.873050][ T8328]  ? __lock_acquire+0xab9/0xd20
[  276.878025][ T8328]  kvm_vcpu_ioctl+0x95c/0xe90
[  276.882760][ T8328]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  276.888039][ T8328]  ? __lock_acquire+0xab9/0xd20
[  276.892930][ T8328]  ? __asan_memset+0x22/0x50
[  276.897571][ T8328]  ? smack_file_ioctl+0x302/0x340
[  276.902683][ T8328]  ? __pfx_smack_file_ioctl+0x10/0x10
[  276.908180][ T8328]  ? __fget_files+0x2a/0x420
[  276.912819][ T8328]  ? __fget_files+0x3a0/0x420
[  276.917535][ T8328]  ? __fget_files+0x2a/0x420
[  276.922366][ T8328]  ? bpf_lsm_file_ioctl+0x9/0x20
[  276.927356][ T8328]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  276.932650][ T8328]  __se_sys_ioctl+0xfc/0x170
[  276.937300][ T8328]  do_syscall_64+0xfa/0x3b0
[  276.941908][ T8328]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.948054][ T8328]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  276.954256][ T8328]  ? clear_bhb_loop+0x60/0xb0
[  276.959431][ T8328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.965356][ T8328] RIP: 0033:0x7f08f858ebe9
[  276.970222][ T8328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.989944][ T8328] RSP: 002b:00007f08f931a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  276.998458][ T8328] RAX: ffffffffffffffda RBX: 00007f08f87b5fa0 RCX: 00007f08f858ebe9
[  277.006506][ T8328] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009
[  277.014576][ T8328] RBP: 00007f08f8611e19 R08: 0000000000000000 R09: 0000000000000000
[  277.022683][ T8328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  277.031072][ T8328] R13: 00007f08f87b6038 R14: 00007f08f87b5fa0 R15: 00007ffee363bb98
[  277.039200][ T8328]  </TASK>
[  277.042353][ T8328] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  277.049654][ T8328] CPU: 1 UID: 0 PID: 8328 Comm: syz.1.633 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  277.059483][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  277.069558][ T8328] Call Trace:
[  277.072858][ T8328]  <TASK>
[  277.075803][ T8328]  dump_stack_lvl+0x99/0x250
[  277.080419][ T8328]  ? __asan_memcpy+0x40/0x70
[  277.085045][ T8328]  ? __pfx_dump_stack_lvl+0x10/0x10
[  277.090268][ T8328]  ? __pfx__printk+0x10/0x10
[  277.094902][ T8328]  panic+0x2db/0x790
[  277.098824][ T8328]  ? __pfx_panic+0x10/0x10
[  277.103280][ T8328]  __warn+0x31b/0x4b0
[  277.107281][ T8328]  ? folio_memcg+0x1a8/0x310
[  277.111892][ T8328]  ? folio_memcg+0x1a8/0x310
[  277.116498][ T8328]  report_bug+0x2be/0x4f0
[  277.120830][ T8328]  ? folio_memcg+0x1a8/0x310
[  277.125432][ T8328]  ? folio_memcg+0x1a8/0x310
[  277.130031][ T8328]  ? folio_memcg+0x1aa/0x310
[  277.134622][ T8328]  handle_bug+0x84/0x160
[  277.138871][ T8328]  exc_invalid_op+0x1a/0x50
[  277.143375][ T8328]  asm_exc_invalid_op+0x1a/0x20
[  277.148228][ T8328] RIP: 0010:folio_memcg+0x1a8/0x310
[  277.153434][ T8328] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff
[  277.173050][ T8328] RSP: 0018:ffffc9001b597250 EFLAGS: 00010283
[  277.179124][ T8328] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000
[  277.187091][ T8328] RDX: ffffc900046d1000 RSI: 0000000000001dd5 RDI: 0000000000001dd6
[  277.195062][ T8328] RBP: 0000000000000000 R08: ffffea0001535747 R09: 1ffffd40002a6ae8
[  277.203031][ T8328] R10: dffffc0000000000 R11: fffff940002a6ae9 R12: ffffea0001535770
[  277.211102][ T8328] R13: dffffc0000000000 R14: ffff88807a7e6a80 R15: 0000000000000002
[  277.219079][ T8328]  ? folio_memcg+0x1a7/0x310
[  277.223687][ T8328]  workingset_activation+0x5f/0x4a0
[  277.228888][ T8328]  ? folio_mark_accessed+0x361/0x4a0
[  277.234201][ T8328]  folio_mark_accessed+0x3b5/0x4a0
[  277.239341][ T8328]  kvm_release_page_clean+0x9a/0xe0
[  277.244548][ T8328]  kvm_tdp_page_fault+0x2dd/0x370
[  277.249588][ T8328]  kvm_mmu_do_page_fault+0x2c5/0x640
[  277.254898][ T8328]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[  277.260728][ T8328]  ? vmx_handle_exit_irqoff+0x29e/0xad0
[  277.266280][ T8328]  kvm_mmu_page_fault+0x22f/0xb70
[  277.271326][ T8328]  ? __pfx_handle_ept_violation+0x10/0x10
[  277.277053][ T8328]  vmx_handle_exit+0x1090/0x18a0
[  277.281991][ T8328]  ? vcpu_run+0x361c/0x6f70
[  277.286497][ T8328]  ? rcu_is_watching+0x15/0xb0
[  277.291295][ T8328]  vcpu_run+0x432e/0x6f70
[  277.295644][ T8328]  ? vcpu_run+0x361c/0x6f70
[  277.300191][ T8328]  ? __pfx_vcpu_run+0x10/0x10
[  277.304882][ T8328]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  277.310606][ T8328]  ? rcu_is_watching+0x15/0xb0
[  277.315375][ T8328]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[  277.320930][ T8328]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  277.326648][ T8328]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  277.332634][ T8328]  ? rcu_is_watching+0x15/0xb0
[  277.337396][ T8328]  ? look_up_lock_class+0x74/0x170
[  277.342508][ T8328]  ? register_lock_class+0x51/0x320
[  277.347719][ T8328]  ? __lock_acquire+0xab9/0xd20
[  277.352602][ T8328]  kvm_vcpu_ioctl+0x95c/0xe90
[  277.357285][ T8328]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  277.362481][ T8328]  ? __lock_acquire+0xab9/0xd20
[  277.367341][ T8328]  ? __asan_memset+0x22/0x50
[  277.371946][ T8328]  ? smack_file_ioctl+0x302/0x340
[  277.376977][ T8328]  ? __pfx_smack_file_ioctl+0x10/0x10
[  277.382374][ T8328]  ? __fget_files+0x2a/0x420
[  277.386968][ T8328]  ? __fget_files+0x3a0/0x420
[  277.391651][ T8328]  ? __fget_files+0x2a/0x420
[  277.396265][ T8328]  ? bpf_lsm_file_ioctl+0x9/0x20
[  277.401213][ T8328]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  277.406413][ T8328]  __se_sys_ioctl+0xfc/0x170
[  277.411015][ T8328]  do_syscall_64+0xfa/0x3b0
[  277.415523][ T8328]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.421603][ T8328]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  277.427783][ T8328]  ? clear_bhb_loop+0x60/0xb0
[  277.432489][ T8328]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.438408][ T8328] RIP: 0033:0x7f08f858ebe9
[  277.442830][ T8328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  277.462466][ T8328] RSP: 002b:00007f08f931a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  277.470901][ T8328] RAX: ffffffffffffffda RBX: 00007f08f87b5fa0 RCX: 00007f08f858ebe9
[  277.478880][ T8328] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009
[  277.486856][ T8328] RBP: 00007f08f8611e19 R08: 0000000000000000 R09: 0000000000000000
[  277.494916][ T8328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  277.502885][ T8328] R13: 00007f08f87b6038 R14: 00007f08f87b5fa0 R15: 00007ffee363bb98
[  277.510875][ T8328]  </TASK>
[  277.514273][ T8328] Kernel Offset: disabled
[  277.518590][ T8328] Rebooting in 86400 seconds..