last executing test programs: 6m35.240638846s ago: executing program 3 (id=410): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a32"], 0xa0}}, 0x20008004) sendto$inet6(r0, &(0x7f0000000580)="02a3", 0x2, 0x8081, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000007c0), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000800), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="941ccd", 0x3}], 0x1}, 0x4c010) sched_setattr(0x0, &(0x7f0000000ac0)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb46, 0x9, 0x8, 0x2, 0x3}, 0x0) fsopen(&(0x7f0000000b00)='afs\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001002500000008000a0002"], 0x24}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) close(0x3) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) readv(r6, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0xadc, 0x0) unshare(0xa000000) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={0x0, 0x80}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000c80)={{}, {0x77359400}}, 0x0) 6m32.185401723s ago: executing program 3 (id=419): socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) socket$unix(0x1, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$uac1(0x3, 0x83, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x9, 0x40, 0xf9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x0, 0x3d, {0x7, 0x25, 0x1, 0xc, 0x7, 0xc400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x6, 0xe, 0x4f}, @as_header={0x7, 0x24, 0x1, 0x7, 0x8b, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0x6, 0x4d, {0x7, 0x25, 0x1, 0x4, 0x5, 0x2}}}}}}}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0xc0802, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x2201) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) open(&(0x7f0000000300)='./file0\x00', 0x108943, 0x148) open(&(0x7f0000000340)='./file0\x00', 0x108843, 0x55) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00') getdents(r2, &(0x7f00000003c0)=""/4101, 0x1005) socket(0x10, 0x803, 0x0) syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=@delqdisc={0x24, 0x25, 0x9, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000003, &(0x7f0000000000), 0x13f, 0x9}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 6m30.184760578s ago: executing program 3 (id=425): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000480)='cgroup.freeze\x00', 0x275a, 0x0) read$FUSE(r5, &(0x7f0000000a40)={0x2020}, 0x2020) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0201ff070a000000000000000010000005000500338000000a004e240000b10efc0200000000000000000000000600ff20000002004e220000306dd87641477700"/80], 0x50}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000340)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) 6m29.160844006s ago: executing program 3 (id=428): ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x5, 0x0, 0x87, 0x7ffc0200}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x7, 0x1, 0x2}}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x4, 0xa, 0x1, 0x1}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20541, 0x0) r1 = syz_clone(0x80000000, &(0x7f0000000100)="00330f9f8a5a782bf5f1a3bd432c29d49093c3b2e165010322a347624a619c7574547d", 0x23, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="de4ae0da003c6562fdabd7d82923f1422c7d186d5d75b40a7e846e74dc12a28e2606c526de08ae042627edf17a93bdf79e4bcb2504c773e9b6851490514fd99c21e46d55de68c32254dbf16935cbffbfcab1518a1235df54604f933482b792777fd4f43f99fadc2913eeb57a2712c60be2c3438361f2020219bd646f872b") capset(&(0x7f0000000240)={0x20071026, r1}, &(0x7f0000000280)={0x6, 0x3, 0x3, 0x1, 0x587, 0x52}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x11015, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0xca58c30f81b6079f}) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 6m28.407565489s ago: executing program 3 (id=429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x60e6, 0x90000, @empty}, 0x1c) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a00280006000000600000000030114020010000000000000000020000000001200100000000000000000000000000024e2060e6"], 0x64) 6m27.380165012s ago: executing program 3 (id=431): read(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, 0x0, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x2, 0xf74, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x150}}}, &(0x7f0000000480)) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000880)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f00000001c0)={0x4, r5}) fchown(r7, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000900), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000940), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000c00)={0x38, 0x6, 0x4, 0x3, 0x0, 0x8, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f00004da000/0x4000)=nil, 0x4000, 0xf) syz_open_procfs(0x0, &(0x7f0000000c40)='net/fib_triestat\x00') syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x2c}}, 0x0) recvfrom(r8, &(0x7f0000000b00), 0x1000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000bc0)={0x1, &(0x7f0000000dc0)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) mkdir(&(0x7f0000000e00)='./file0\x00', 0x83) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="14"], &(0x7f0000001000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000001040)=ANY=[], 0x8e79f0352167ea94) 6m26.575793077s ago: executing program 32 (id=431): read(0xffffffffffffffff, &(0x7f0000000040), 0x0) r0 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, 0x0, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x2, 0xf74, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x150}}}, &(0x7f0000000480)) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000880)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f00000001c0)={0x4, r5}) fchown(r7, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000900), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000940), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000c00)={0x38, 0x6, 0x4, 0x3, 0x0, 0x8, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f00004da000/0x4000)=nil, 0x4000, 0xf) syz_open_procfs(0x0, &(0x7f0000000c40)='net/fib_triestat\x00') syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x2c}}, 0x0) recvfrom(r8, &(0x7f0000000b00), 0x1000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000bc0)={0x1, &(0x7f0000000dc0)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) mkdir(&(0x7f0000000e00)='./file0\x00', 0x83) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)=ANY=[@ANYBLOB="14"], &(0x7f0000001000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000001040)=ANY=[], 0x8e79f0352167ea94) 5m39.984949078s ago: executing program 1 (id=593): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x10000000000) 5m36.325565302s ago: executing program 1 (id=608): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="a4000000100001040800000003000000ffffffff", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c000700000005000700a100000005000a00ffa1000005000800ffa10000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 5m31.960478569s ago: executing program 1 (id=620): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/partitions\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x0, 0x7, 0x4e, 0x6, 0x8, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x8, 0x7, 0x2}}) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0xd0f, 0x470bd25, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x10}, {0x0, 0xa}, {0x10, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40055}, 0x4c050) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000000b06010000000000000000000000000005000100070000000900020073797a3000000000440007"], 0x6c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @fd=r7}, @typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48854}, 0xc010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendfile(r2, r0, &(0x7f0000000800)=0x9c, 0x7) 5m30.622663918s ago: executing program 1 (id=628): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000200)=0xfffffffd, 0x4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x22401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000001340)={0x101ff, 0x200, 0x1c0, &(0x7f0000001380)=[0x9, 0xfffffffffffffffe, 0x6, 0x2, 0x7c2, 0x1000000000000, 0x4, 0x4, 0x8, 0x3, 0xd5, 0x5, 0x7, 0x80, 0x9, 0xe3, 0x1, 0x6, 0x4, 0x2, 0x7, 0x0, 0x1ff, 0x3, 0x8, 0xb, 0x4, 0xc0000000000000, 0x100000000, 0xc3a, 0x40, 0x4da, 0x8b, 0x800, 0x5, 0x6, 0x7, 0xfffffffffffff354, 0xe47, 0x7fff, 0x3, 0x800, 0x8000000000000000, 0x5, 0x6, 0x800, 0x5, 0x4, 0x200, 0x7, 0x8, 0xfffffffffffffffc, 0xff, 0xe69d000000, 0x7, 0xfff, 0x8, 0x7fffffff, 0x3, 0x2, 0xc, 0x10, 0x3ff, 0xff, 0x1000, 0x7fffffff, 0x8000000, 0xff, 0x100, 0x8, 0x7, 0x8000, 0x80, 0x5, 0x80, 0x9d64, 0xffffffffffff8001, 0x7, 0x8000000000000000, 0x9, 0x0, 0x2, 0x4, 0x83, 0x100000001, 0x0, 0x7, 0x4, 0x88, 0x2, 0x8, 0x6c, 0xf89, 0x8, 0x4eb, 0x0, 0x7, 0x6, 0x8000000000000001, 0x2, 0x6, 0x8, 0x5, 0x1ff, 0x3, 0x3, 0x8001, 0x4, 0x0, 0x7fffffffffffffff, 0xffff, 0xcd48, 0xfe0, 0x4, 0x80000001, 0x10001, 0x6, 0x9, 0x7, 0x3, 0x8, 0x8, 0x8, 0x6, 0x6, 0x1, 0xfffffffffffffffc, 0x1]}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001780)=[@text16={0x10, &(0x7f00000017c0)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001840)=[@text16={0x10, 0x0}], 0x1, 0xe55493bfbe236ced, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, 0x9}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f00000002c0)={0xf, {"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", 0x1000}}, 0x1006) r9 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x1) ioctl$DRM_IOCTL_MODE_GET_LEASE(r9, 0xc01064c8, &(0x7f0000000180)={0x0, 0x2000000, 0x0}) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x8002, 0x0) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f00000001c0)=0x4) write$P9_RSTATu(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="370200007d02000005f6"], 0x237) 5m27.437886731s ago: executing program 1 (id=651): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009"], 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000001c0)='wg2\x00', 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000bc0)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000d40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000e80)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000ec0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', r8, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) sendmsg$nl_route_sched(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffd, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000001100)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m20.597168538s ago: executing program 1 (id=668): openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_usercopy/probability\x00', 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="5400000012000100000000006b000000000a00000000004e22fcffffff000000007ecd00"/56, @ANYRES32=0x0, @ANYBLOB="010000000000000000000000002000000800030006"], 0x54}}, 0x20000080) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000140)={0x0, 0x214f, 0xc000, 0x3, 0xce}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000780), 0x1c3902, 0x0) r4 = syz_clone(0x40000080, &(0x7f0000000080)="3544b1d23b6a226ecace6a0efe670948d2ca20bd255c11b7", 0x18, &(0x7f0000001800), &(0x7f0000001840), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r4, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001880)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r3, r3, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f00000018c0)={0x38, 0x0, 0x8, 0x85, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) userfaultfd(0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@bridge_getlink={0x28, 0x12, 0x1, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x5, 0x4002}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x1) timer_create(0x0, 0x0, &(0x7f0000001900)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x6) syz_io_uring_setup(0x6c9a, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x10010, r2, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001940)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000001980), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000001a80)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000001ac0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x2, 0x4e29, @loopback}, 0x10) syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) 5m5.392877262s ago: executing program 33 (id=668): openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_usercopy/probability\x00', 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="5400000012000100000000006b000000000a00000000004e22fcffffff000000007ecd00"/56, @ANYRES32=0x0, @ANYBLOB="010000000000000000000000002000000800030006"], 0x54}}, 0x20000080) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000140)={0x0, 0x214f, 0xc000, 0x3, 0xce}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000780), 0x1c3902, 0x0) r4 = syz_clone(0x40000080, &(0x7f0000000080)="3544b1d23b6a226ecace6a0efe670948d2ca20bd255c11b7", 0x18, &(0x7f0000001800), &(0x7f0000001840), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r4, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001880)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r3, r3, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f00000018c0)={0x38, 0x0, 0x8, 0x85, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) userfaultfd(0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@bridge_getlink={0x28, 0x12, 0x1, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x5, 0x4002}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x1) timer_create(0x0, 0x0, &(0x7f0000001900)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x6) syz_io_uring_setup(0x6c9a, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x10010, r2, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001940)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000001980), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000001a80)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000001ac0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x2, 0x4e29, @loopback}, 0x10) syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) 11.305320665s ago: executing program 2 (id=1992): socket$rxrpc(0x21, 0x2, 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3902, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f00000006c0)={0x20080522}, 0x0) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000740)=0x7, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) userfaultfd(0x801) syz_io_uring_setup(0x6c9a, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r2, &(0x7f00000005c0)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000640)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000680)={0x0, '\x00', 0x3}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f00003b2000/0x4000)=nil, 0x4000, 0xb, 0x4008032, r3, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x256}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x20146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacdc, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x400, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 9.79002777s ago: executing program 6 (id=1999): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x103a42, 0x32) sigaltstack(&(0x7f0000000340)={0x0, 0x80000001}, 0x0) sigaltstack(0x0, &(0x7f0000000380)={0x0}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1c0000001d005f0214fffffffffffff8070000000d00000000000700", 0x1c) 9.573930994s ago: executing program 2 (id=2001): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x480c1}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x0, 0x0}) socket$igmp6(0xa, 0x3, 0x2) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x300, 0x0, 0x5, 0x5, r1, 0x0}]) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x20000, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) fchdir(r4) close(r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000380)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r5, &(0x7f00000003c0)={&(0x7f0000000400)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="4c4a016a7d1c9e5cc4", 0x9}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r5, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10005, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) 8.494129369s ago: executing program 6 (id=2004): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_usb_connect(0x2, 0x57, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff0007058102"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000540)={0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, &(0x7f00000007c0)={0x34, &(0x7f0000000580)={0x40, 0x6, 0x3e, "c801e655063f4f929f90542adf4d2e536fe5519769594bef6cb65136124fb00d133df2ababc45d9a29cc5e8b761cc4d9e76422dbc6bbcdc8819262fd21d5"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xd7}, &(0x7f0000000680)={0x20, 0x0, 0xae, {0xac, "39f6dfc238216027f0d075e47b844b9c76613c7d17fe639907af8d512be1886d05527fa95f5c6a7d4877ec178fab9f71ef8e4f3aee4a8c0ac812eb3de32fe03fc91a5cc990fd6dc911cacf47a68d52b933c3762551eb1753ec21ceca8df0a1e84b08622287749a7b9e62866b64494e97197576fbf554b64060354b5ad64ae52c6715e2f2093a1148b8abea8dcea99e7b83a3b69abe52c33228adbf6ff20548b1c4846ad54eacd14aabc63a3b"}}, &(0x7f0000000740)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0x3}}) (async) r3 = syz_open_dev$midi(&(0x7f0000000140), 0xfffffffffffffffc, 0x20a401) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, &(0x7f0000000340)) syz_open_dev$sndpcmc(0x0, 0x0, 0x2) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) munlockall() (async) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000021b000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00003fd000/0x2000)=nil) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/test\x00', 0x777) r7 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r7, &(0x7f00000008c0)='10000', 0x5) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r8, &(0x7f0000000940)='0', 0x1) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000980)) (async) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000009c0)={0x0, 0x200000}) (async) epoll_create1(0x80000) (async) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000a00)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sched_setattr(0x0, &(0x7f0000000a80)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) 6.792070606s ago: executing program 2 (id=2008): r0 = socket(0x0, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f0000000480)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 5.544868989s ago: executing program 2 (id=2009): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="a00000004100010026bd700000ccd900030100000f00000012000100002802e08a17503ca13e6d3e3627000004000280700003806c00118068001c8062"], 0xa0}, 0x1, 0x0, 0x300000000000000, 0x4004004}, 0x0) 5.056845871s ago: executing program 2 (id=2012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000140)={0x34, &(0x7f0000000180)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000200), 0x4) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f00000002c0)=@caif=@dgm={0x25, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="18", 0x1}], 0x1}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f00000001c0)={0x40, 0x0, 0x32, "00d04caffda64f9ae4e054eb8f7138aff40000e85bf66bbb9f32a66b8b48ef4ad5032c925217de0d04e50f1b55481141f200"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000005c0)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000680)={0x20, 0xc, 0x1, "e3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000700)={0x20, 0x17, 0x1, ','}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) syz_usb_control_io$uac2(r1, &(0x7f0000000940)={0x14, &(0x7f0000000740)={0x0, 0x30, 0x2, {0x2, 0x5}}, &(0x7f0000000840)=ANY=[@ANYBLOB="0003a4000000a403cb96a748b7ac682458026b259474274f7e5387b1bf404377741daf5121e889badfd565a2ab4637438365e3000b32ccd96c6d3e767d4accb4a8f6ac1db66f54a7300e44118c0d1e81df3d6fa1f78f8c531ded083961ba03a98f09fe0483c6f93dbb668e0747b09ebc212bad9f76a39f283fac5c212a95483bb82f5c959c3892e66ed400953670aa535e38837429a0bbd5cba5925dc80d43e85a962f1a7f92979d2283"]}, &(0x7f0000000c40)={0x44, &(0x7f0000000980)={0x20, 0x14, 0xe6, "f833c85436570e347b2e5c053757282f920a4a9abd43652e4f5f789e6f713c53c0f451dfa743dcab754afe7f0266075135afc96f61c04669b35741d650dab84a6104c87aa439e1a2c6e5ccbd4f1337956ff8fffccac4ba2b6aec474586ca26eb9d52f0a7035630725360bd1c38a8a03b62e3f74712ba5886a81627b98f7aaa5f0e80d841d2da33a22901eed093f35afee5d12dc4ad2237b76238d6e0af4b24e9d59864e9e90702e58dc536186f69a338567b854d74b697b44aeb86969e1812f2e394b37fe6f08a23f0f2fc4ae8b308fa46a8b6557d036dc3ce21b7a9e9619d069abc2800c9d9"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b40)={0x20, 0x81, 0x2, "1440"}, &(0x7f0000000b80)={0x20, 0x82, 0x2, "8baf"}, &(0x7f0000000b00)={0x20, 0x83, 0x1, "bd"}, &(0x7f0000000bc0)={0x20, 0x84, 0x2, 'r)'}, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000e00)={0x14, &(0x7f0000000cc0)={0x20, 0x38, 0x3b, {0x3b, 0x8, "fa0141425b89a69e957995207e75723a3fb125cd8ab09d51574f987d0d9dff1e314313f0fde1a7e4afb1461fbc3dab9fe81fbb84161ea4ce34"}}, &(0x7f0000000d40)={0x0, 0x3, 0x87, @string={0x87, 0x3, "9a6b17c6ec8d9cd63fcccb47973bb716387ddfe86044723576f46530b2ab9a32ec98b5022eed7ed75b69db4d293f94f72e188ff3ab461556df0b9ac7e2cfa23b7deff86e4d9416a09d1c95b8ddd26ee674f7d2d48eae1d7596527f9ee5d0f501d9259858165d6fd846f73a3f2ca297d4c96f19606553d2143f58a0517b9a04f0ab78dd4e9e"}}}, &(0x7f00000010c0)={0x44, &(0x7f0000000e40)={0x0, 0x3, 0x5f, "5e11b8afbdfa379ce779f2188aa708c741eb2220edd765cf31e295841cd6135010afed2150e128eb47e8b7154e058ecf09a00e6d1cf153654b7ddbdd66fecc3ecb4f1f5d162f740696c941ea56d684a7b56d0d2b05e2d9cde4619a323b5002"}, 0x0, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000f80)={0x20, 0x81, 0x2, "3ed0"}, &(0x7f0000000fc0)={0x20, 0x82, 0x3, "6cefb0"}, &(0x7f0000001000)={0x20, 0x83, 0x3, "1a6d7d"}, &(0x7f0000001040)={0x20, 0x84, 0x1, "93"}, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r4 = syz_open_procfs(0x0, &(0x7f0000000780)='schedstat\x00') readv(r4, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/20, 0x5}, {0x0, 0x2}], 0x2) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x4040840) 4.247259151s ago: executing program 5 (id=2015): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1c0000001d005f0214fffffffffffff8070000000d00000000000700", 0x1c) 4.160367284s ago: executing program 6 (id=2017): openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x381000, 0x63) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sendfile(r0, r0, 0x0, 0x20000005) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) userfaultfd(0x801) (async) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) (async) getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x42, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="5800b5d4", @ANYRES16=r4, @ANYBLOB="210128bd7000000000002b00000008000300", @ANYRES32=r5, @ANYBLOB="040046000a0034000202020202020000080026006c090000240051802000008005000200020000000800030001ac0f00090001009e1f50cc3c000000"], 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x0) (async) fanotify_init(0xf00, 0x1) (async) pipe2(&(0x7f00000007c0), 0x80000) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r7, 0x0, &(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x6}) 4.007712259s ago: executing program 5 (id=2018): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x9, 0x4) socket$nl_crypto(0x10, 0x3, 0x15) pselect6(0x900, 0x0, 0x0, &(0x7f0000000140)={0x1f, 0x0, 0x0, 0x0, 0x2000000}, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000480)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f00000004c0)={0x11, 0x0, r1}, 0x14) 3.862375509s ago: executing program 4 (id=2019): r0 = socket(0x2b, 0x80801, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x3000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x2, 0x0, 0x1, 0x40, 0x4}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x1, @loopback, 0x1}, 0x1c) 3.224501874s ago: executing program 5 (id=2021): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000003940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2, {0x7, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0x5}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x22, 0x2}]}, 0x140}, 0x1, 0xfffe}, 0x844) 2.918744573s ago: executing program 5 (id=2022): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0xf00, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}}}}]}, 0x38}}, 0xa890) 2.620703333s ago: executing program 5 (id=2023): socket$rxrpc(0x21, 0x2, 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3902, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f00000006c0)={0x20080522}, 0x0) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000740)=0x7, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) userfaultfd(0x801) syz_io_uring_setup(0x6c9a, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r2, &(0x7f00000005c0)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000640)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000680)={0x0, '\x00', 0x3}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f00003b2000/0x4000)=nil, 0x4000, 0xb, 0x4008032, r3, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x20146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacdc, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x400, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2.620490287s ago: executing program 4 (id=2024): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000005400050001000000000000000700ffff", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01000000ef01010100000000"], 0x60}}, 0x0) 2.404035686s ago: executing program 4 (id=2025): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x1f7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 2.194005519s ago: executing program 5 (id=2027): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xfff) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, 0x0, &(0x7f00000000c0)) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000010ef17476000000000000109022400010000a00209040005020300840009210000400122180009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002a40)=ANY=[@ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x46854}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a3c000000000000000700000008000a40000000000903000000000000000000000900010073797a300000000008000540000000211400f3ff0b0a010300000000000000000700000914f44611b94a7f87b1000000000000000084000abab27c388aa549ddf3f290c3a8f435f0933081de9ec722412706791feb44dbe23c1a65abb61ae29e19af3b6b6d9c7181a8fb9a8140ee9e5855e025cb4606f05d"], 0x78}}, 0x200480d1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002a80)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000002ac0)=0x3) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x8, 0x62000) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x40042, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000740)='net/ip_vs\x00') read$FUSE(r6, &(0x7f0000000780)={0x2020}, 0x2020) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f0000003e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003e00)={&(0x7f0000003e80)={0x11e0, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x8, 0x111, 0x0, 0x1, {0x4}}, @NL80211_ATTR_PEER_MEASUREMENTS={0xa04, 0x111, 0x0, 0x1, {0xa00, 0x5, 0x0, 0x1, [{0x1f0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1d8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x13b6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}]}, {0x3c8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x198, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xaa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfeff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1cc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x163a}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x354, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x144, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x985}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16a}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x74, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xcc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x7a4, 0x111, 0x0, 0x1, {0x7a0, 0x5, 0x0, 0x1, [{0x144, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8960}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3b6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x384, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x354, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xeab}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x2d4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x90, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0xfffffffffffffebd, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}]}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}]}, 0x11e0}, 0x1, 0x0, 0x0, 0x80}, 0x4000) pread64(r6, &(0x7f00000027c0)=""/2, 0x7, 0x200004) write$dsp(r5, &(0x7f00000003c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000400)=0x9) openat$dir(0xffffffffffffff9c, &(0x7f0000002800)='./file0\x00', 0x140, 0x82) io_uring_setup(0x136a, &(0x7f0000002840)={0x0, 0x1f8a, 0x40, 0x1, 0x100028c}) io_setup(0x93, &(0x7f00000028c0)=0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000002900), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000002940)={'syzkaller0\x00', 0x7101}) io_submit(r7, 0x3, &(0x7f0000002980)=[&(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x8, r8, &(0x7f0000002a00)="ca04", 0x2, 0x10000, 0x0, 0x2}, 0x0, 0x0]) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000005c0)={0x14, &(0x7f0000002b00)=ANY=[@ANYBLOB="200ab0000000b030d74295339d06b981ee0f529370b7dd2e71ec65081606a56954bf202c60d75f61aa1cadd3d0e3fd79523db01a2d7d1809126a6ec275e6784ef9bf7162cb82cd6fff90a9fb670ca43c1211811963e5eb8b1286be9ef481b933ea3cc0acdcd3d84fcfd318654911d448462ae32458cedabbceefbb60dd6f113ccb47601d9367716d13ca70b3c9a86626bfdebdb59b2699b4a344a9391e8b4464a5b1298d043586215352d4b740cca38e48dfa222435b26c7cbbcff2e6a000000000000001445b48571196db740791118c855beb1db50"], &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000600)={0x0, 0x30, 0x76, "ce69e4640f19000334408a51639864fb66e3153515cffbcf9e81f93d79d7b168afebb7087ae540eee78150f74ebe89082cc5f00c81a51bf1ff943c737c8c0549aa2f85ec783cf8af73aa679bece3f8b16337fe796e014d14b48a42ee8d8d9b309402d363d0491c276c89c4effb2ccd1847b3e818790c"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x5b}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x81}}) pipe(&(0x7f0000000440)) close(0xffffffffffffffff) 1.544635771s ago: executing program 0 (id=2030): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0), 0xfffffffffffffe89}, 0x48) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000000)={0x1, 0x0, [{0x7, 0xffffffff, 0x1, 0x823, 0x101, 0x4, 0xf}]}) fanotify_init(0x200, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x7c5100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8843, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xa101, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0), 0x111, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2, 0x4}}, 0x20) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340), 0x86}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r0, 0x0, 0xe, 0x0, &(0x7f0000001c80)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001cc0)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0x4c) 1.345725464s ago: executing program 4 (id=2031): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x3, 0xac5) setreuid(0xee01, 0x0) r1 = getuid() setresuid(r1, 0x0, r1) r2 = syz_open_dev$video4linux(&(0x7f0000000180), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000001c0)={0x3, 0x980900}) syz_clone3(&(0x7f0000000200)={0x23800000, &(0x7f0000000280)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f00000002c0)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r4, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000300)='./cgroup/../file0\x00') io_setup(0x8, &(0x7f0000000340)=0x0) io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x4, r3, 0x0}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x7c}}, 0x40000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000004c0)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000500)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc000000ff"}) 855.531471ms ago: executing program 0 (id=2032): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000900)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000940)={0x1d, r1, 0x3, {0x2, 0x0, 0x4}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f00000044c0)=[{{&(0x7f0000000040)=@can={0x1d, r1}, 0x80, 0x0, 0xc7}}], 0x1, 0x50) 761.018023ms ago: executing program 6 (id=2033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbfs(&(0x7f0000000900), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000940)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000a80)={0x82, 0x0, 0x0, 0xff81, 0x0, 0xecff, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a50000000090a015924883000000000000200000008000a40000000010900020073797a31000000000900010073797a3000000000080005400000000814000980070002"], 0x78}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xffffffffffffffca}, 0x1, 0x0, 0x0, 0x48881}, 0x4008055) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 686.748191ms ago: executing program 4 (id=2034): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$sndseq(r0, &(0x7f0000000340)=[{0xe, 0x1, 0x0, 0xfd, @tick=0xff03, {}, {0xe}, @result={0xffffffff, 0x20000}}], 0x1c) 622.774372ms ago: executing program 0 (id=2035): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="580000001400192340834b80040d8c560a067fbc45ff8105000000ffff0058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100050808004149014006040800", 0x58}], 0x1) 521.474329ms ago: executing program 2 (id=2036): syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a00009"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000440), 0x1, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000480)={&(0x7f0000001740)=[{0xb996, 0x800, 0x1000, &(0x7f00000004c0)="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"}, {0x6, 0xc000, 0x4b, &(0x7f00000014c0)="be4608949e1f0a2737d29416aff4cda95a4c38a8e17406071e9ab5e46ab568be07b263e568db53a91aa8198a78bbc28e532c407b72515c40a3385d3817434f96a5afe7b69610de132bb3bf"}, {0x67, 0x210, 0x84, &(0x7f0000001540)="e7d9fedbd82f08eb7c384d0602ae383241c82c5fbc9ed5e45169d36a025e318c85418d46ddbd103dfbfcaea7153f88ab2a9bfa5ceb3d661ec6573380f1a6c032e536ded6bbdc6988202c0139734488c2b6c172041a8ddcd2217efd1e720e693989d35035c5d0babb1e3ecfe66ad00b03254d1dc66a977542b717fec0b94dc174d33a59c8"}, {0x8002, 0x200, 0x73, &(0x7f0000001600)="b7a1e88a0296342968280df5e5ae10a065e92f0fdbe14658468f5653756da1342b2d1e4d4b834ca4fae3296006ab66434d4fb1d11f9fe4a2b0e89ac2e3fb9711f3ff71fea342c1fda17f721ae0989b234e5ee88fe4fa9fe4856041dedf70678b28f740ed884837918fbf61f94641c1c8a59958"}, {0xfff8, 0x1000, 0x84, &(0x7f0000001680)="49102c8ec4a4f71a93e868019de624887ac0654dd502a1650aed6a9f817c296b742ffcd7cb9a48409ca831acc5f04ad0c9f798eaf80c5bff2fcf06ae99db3a88674a08a2c2a45b2c75b210fc36c53baa87c3143f3914e9741acdb829e3f6ee6ba3c49c015589fee460902325a91e1696386e738a7210a3c448a72ce3a041db92c6ccd29f"}], 0x5}) 505.262858ms ago: executing program 4 (id=2037): socket$rxrpc(0x21, 0x2, 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3902, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f00000006c0)={0x20080522}, 0x0) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000740)=0x7, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) userfaultfd(0x801) syz_io_uring_setup(0x6c9a, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r2, &(0x7f00000005c0)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000640)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000680)={0x0, '\x00', 0x3}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f00003b2000/0x4000)=nil, 0x4000, 0xb, 0x4008032, r3, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x20146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacdc, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x400, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 447.707253ms ago: executing program 6 (id=2038): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000104000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e"], 0x60}}, 0x0) 356.939161ms ago: executing program 0 (id=2039): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1c0000001d005f0214fffffffffffff8070000000d00000000000700", 0x1c) 270.514621ms ago: executing program 6 (id=2040): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="680200000005030000000000000000000500000254020100010000000000008001050900ff00120073797a310000000000000000000000000000000000000000000000000000000083536fbebb759c421376cc71fc07dd45365540742570280cc97680299f52a2d35d606f739128a0826de95fedb865085504ce24b5735bcc31c9eff26500080700000000000800000001000d0000000000020000007400040002000000010001002000008000000000040000004a"], 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000002c0)={0x0, 0xffffff56, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01fffc00000000000000200100000c00028008000282d01ca998006c6f0000180003800400b5d76e3e3dc2709d5660ed0100"], 0x38}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000034276d20402004c68e01000000010902120001000000000904"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x19) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000004000000000000030000005f100c0000000000950000004a4a9c695191f638c91b8b43e44db000000000"], &(0x7f0000000800)='GPL\x00', 0x5}, 0x94) write$P9_RWSTAT(r1, &(0x7f0000000840)={0x7, 0x7f, 0x1}, 0x7) r2 = socket(0x1e, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000008c0)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000900)=[@text32={0x20, &(0x7f0000000940)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pipe2(&(0x7f0000000980)={0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(r6, 0xffffffffffffffff, 0xff, 0x8) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000009c0)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$tipc(r2, &(0x7f0000000a00)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r7 = gettid() syz_open_procfs(r7, &(0x7f0000000c00)='net/igmp\x00') ioctl$KVM_S390_VCPU_FAULT(r5, 0x4008ae52, &(0x7f0000000a40)=0x3) recvmmsg(r2, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000c40)=""/156, 0x9c}], 0x1, &(0x7f0000000bc0)=""/17, 0x11}, 0x8000}], 0x1, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB="08002700020001000800a0"], 0x34}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x60, &(0x7f0000000d00)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) write$binfmt_misc(r2, &(0x7f0000000c00), 0x2000011a) socket$nl_generic(0x10, 0x3, 0x10) 210.542011ms ago: executing program 0 (id=2041): r0 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0x32, &(0x7f0000000ac0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000b00)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty=0xdeff}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "2a995ffbee74ab1b3690842deee3df48f8806827d5c763698c4c288abc85bfcc", "9f6cf565ebbd4ddfc4f9c023b431968db6dbc868705956f8baf975b8cb6e17048850e8e89f732bced1e3baee50e5acb8", "112c482ee3d37cb1a7a31c450e403a6ee32477eaeb41d283c8618b26", {"6652725f56c59b04563b19a79d293550", "25b048c89cb27902d8d629c56b49c550"}}}}}}}, 0x0) 0s ago: executing program 0 (id=2042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) ioprio_set$uid(0x3, 0x0, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x300, 0xb, 0x29, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) kernel console output (not intermixed with test programs): ] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.477380][T11317] RSP: 002b:00007fed9c49a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.477405][T11317] RAX: ffffffffffffffda RBX: 00007fed9b825fa0 RCX: 00007fed9b59f559 [ 494.477421][T11317] RDX: 0000200000000180 RSI: 00000000000089e0 RDI: 0000000000000003 [ 494.477437][T11317] RBP: 00007fed9c49a090 R08: 0000000000000000 R09: 0000000000000000 [ 494.477451][T11317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.477464][T11317] R13: 00007fed9b826038 R14: 00007fed9b825fa0 R15: 00007fed9b94fa48 [ 494.477501][T11317] [ 494.477726][T11317] ERROR: Out of memory at tomoyo_realpath_from_path. [ 494.861531][T11322] netlink: 'syz.5.1558': attribute type 4 has an invalid length. [ 494.861554][T11322] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1558'. [ 494.865777][T11320] vlan1: entered promiscuous mode [ 495.116909][T11327] xt_policy: output policy not valid in PREROUTING and INPUT [ 495.850301][ T8365] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 496.000262][ T8365] usb 7-1: Using ep0 maxpacket: 8 [ 496.000986][ T8365] usb 7-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 496.002057][ T8365] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 496.002090][ T8365] usb 7-1: config 2 has no interface number 0 [ 496.002127][ T8365] usb 7-1: config 2 interface 31 has no altsetting 0 [ 496.006267][ T8365] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.006286][ T8365] usb 7-1: Product: syz [ 496.006297][ T8365] usb 7-1: Manufacturer: syz [ 496.006308][ T8365] usb 7-1: SerialNumber: syz [ 496.359262][ T8372] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 496.499250][ T8372] usb 5-1: device descriptor read/64, error -71 [ 496.754621][ T8372] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 496.789230][ T8367] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 496.879864][ T8372] usb 5-1: device descriptor read/64, error -71 [ 496.889535][T11343] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1564'. [ 496.937366][T11343] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1564'. [ 496.950717][ T8367] usb 1-1: New USB device found: idVendor=0d8c, idProduct=0022, bcdDevice=0.00 [ 496.952994][ T8367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.953018][ T8367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.953045][ T8367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.958263][ T8365] ch9200 7-1:2.31: probe with driver ch9200 failed with error -71 [ 497.007584][ T8372] usb usb5-port1: attempt power cycle [ 497.030719][ T8367] usb 1-1: config 0 descriptor?? [ 497.031590][ T8365] usb 7-1: USB disconnect, device number 41 [ 497.371183][ T8372] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 497.414625][ T8372] usb 5-1: device descriptor read/8, error -71 [ 497.653786][ T8372] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 497.674183][ T8372] usb 5-1: device descriptor read/8, error -71 [ 497.780125][ T8372] usb usb5-port1: unable to enumerate USB device [ 497.983062][ T8367] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0 [ 497.983147][ T8367] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0 [ 498.010496][ T8367] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.002D/input/input78 [ 498.066783][ T8367] cm6533_jd 0003:0D8C:0022.002D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 498.642285][T11396] loop9: detected capacity change from 0 to 7 [ 498.667388][T11396] Dev loop9: unable to read RDB block 7 [ 498.667453][T11396] loop9: unable to read partition table [ 498.667603][T11396] loop9: partition table beyond EOD, truncated [ 498.667637][T11396] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 499.169549][ T8372] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 499.191588][ T8367] usb 1-1: USB disconnect, device number 66 [ 499.329353][ T8372] usb 6-1: Using ep0 maxpacket: 8 [ 499.352806][ T8372] usb 6-1: unable to get BOS descriptor or descriptor too short [ 499.352860][ T8372] usb 6-1: New USB device found: idVendor=041e, idProduct=401d, bcdDevice=29.5c [ 499.354912][ T8372] usb 6-1: config 7 has an invalid interface number: 171 but max is 0 [ 499.354940][ T8372] usb 6-1: config 7 has no interface number 0 [ 499.354972][ T8372] usb 6-1: config 7 interface 171 has no altsetting 0 [ 499.407214][ T8372] usb 6-1: string descriptor 0 read error: -22 [ 499.407333][ T8372] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.450494][ T8372] gspca_main: spca505-2.14.0 probing 041e:401d [ 499.690822][ T8373] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 499.840670][ T8373] usb 7-1: device descriptor read/64, error -71 [ 499.961709][ T8372] gspca_spca505: reg write: error -110 [ 499.961798][ T8372] spca505 6-1:7.171: probe with driver spca505 failed with error -5 [ 500.019470][ T8367] usb 6-1: USB disconnect, device number 68 [ 500.080159][ T8373] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 500.083531][T11410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.169410][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 500.169431][ T30] audit: type=1804 audit(1793123104.186:1559): pid=11408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1585" name="/newroot/363/file0" dev="fuse" ino=1 res=1 errno=0 [ 500.215912][ T30] audit: type=1800 audit(1793123104.236:1560): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1585" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 500.246644][ T8373] usb 7-1: device descriptor read/64, error -71 [ 500.352865][ T8373] usb usb7-port1: attempt power cycle [ 500.390254][ T8372] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 500.430201][T11419] dlm: no locking on control device [ 500.528285][T11424] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1590'. [ 500.556360][ T8372] usb 3-1: New USB device found: idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 500.557921][ T8372] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.594189][ T8372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.594211][ T8372] usb 3-1: Product: syz [ 500.594222][ T8372] usb 3-1: Manufacturer: syz [ 500.594233][ T8372] usb 3-1: SerialNumber: syz [ 500.629608][ T8372] usb 3-1: config 0 descriptor?? [ 500.674118][T11426] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 500.707435][ T8373] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 500.734074][ T8373] usb 7-1: device descriptor read/8, error -71 [ 500.782727][ T8372] mvusb_mdio 3-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 500.832251][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1593'. [ 500.874060][T11429] syzkaller0: entered promiscuous mode [ 500.874084][T11429] syzkaller0: entered allmulticast mode [ 500.898732][ T7499] usb 3-1: USB disconnect, device number 71 [ 500.933169][T11429] tipc: Enabled bearer , priority 0 [ 500.937403][ T30] audit: type=1326 audit(1793123104.956:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.5.1594" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9b59f559 code=0x7ffc0000 [ 500.937856][ T30] audit: type=1326 audit(1793123104.956:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.5.1594" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9b59f559 code=0x7ffc0000 [ 501.000547][ T8373] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 501.012068][ T30] audit: type=1326 audit(1793123105.036:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.5.1594" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fed9b59f559 code=0x7ffc0000 [ 501.012303][ T30] audit: type=1326 audit(1793123105.036:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.5.1594" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9b59f559 code=0x7ffc0000 [ 501.012549][ T30] audit: type=1326 audit(1793123105.036:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.5.1594" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9b59f559 code=0x7ffc0000 [ 501.095228][ T8373] usb 7-1: device descriptor read/8, error -71 [ 501.097482][T11427] tipc: Resetting bearer [ 501.116137][ T30] audit: type=1326 audit(1793123105.146:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.5.1594" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed9b55fd8e code=0x7ffc0000 [ 501.116583][ T30] audit: type=1326 audit(1793123105.146:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.5.1594" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed9b59f1eb code=0x7ffc0000 [ 501.116820][ T30] audit: type=1326 audit(1793123105.146:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11432 comm="syz.5.1594" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed9b59f1eb code=0x7ffc0000 [ 501.204667][ T8373] usb usb7-port1: unable to enumerate USB device [ 501.228874][T11435] fuse: Unknown parameter '017777777777777777777770x0000000000000007' [ 501.253072][T11427] tipc: Disabling bearer [ 501.349372][ T8372] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 501.417689][T11438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.431793][T11438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.502294][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.502352][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.502443][ T8372] usb 6-1: New USB device found: idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 501.510263][ T8372] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 56, changing to 9 [ 501.510300][ T8372] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8703, setting to 1024 [ 501.510388][ T8372] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.571752][ T8372] usb 6-1: config 0 descriptor?? [ 501.639472][ T8367] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 501.699522][ T7499] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 501.792563][ T8367] usb 5-1: New USB device found: idVendor=045a, idProduct=5210, bcdDevice=1.01 [ 501.814462][ T8367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.814488][ T8367] usb 5-1: Product: syz [ 501.814501][ T8367] usb 5-1: Manufacturer: syz [ 501.814514][ T8367] usb 5-1: SerialNumber: syz [ 501.849182][ T7499] usb 1-1: Using ep0 maxpacket: 8 [ 501.850586][ T7499] usb 1-1: New USB device found: idVendor=0525, idProduct=d292, bcdDevice=0.07 [ 501.853638][ T7499] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 501.853666][ T7499] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 501.853820][ T7499] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 501.853845][ T7499] usb 1-1: config 250 has no interface number 0 [ 501.853917][ T7499] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 501.853947][ T7499] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 501.853974][ T7499] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 501.854000][ T7499] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 501.854054][ T7499] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 501.854084][ T7499] usb 1-1: config 250 interface 228 has no altsetting 0 [ 501.861439][ T7499] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 501.861564][ T7499] usb 1-1: Product: syz [ 501.861605][ T7499] usb 1-1: SerialNumber: syz [ 501.903542][ T8367] ums-karma 5-1:1.0: USB Mass Storage device detected [ 501.933170][ T7499] hub 1-1:250.228: bad descriptor, ignoring hub [ 501.933280][ T7499] hub 1-1:250.228: probe with driver hub failed with error -5 [ 502.020190][ T8367] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 502.020190][ T8367] Please send a copy of this message to and [ 502.091092][ T8367] ums-karma 5-1:1.0: probe with driver ums-karma failed with error -5 [ 502.098477][ T8367] usb 5-1: USB disconnect, device number 86 [ 502.132243][ T7499] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 67 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 502.423936][T11447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.428286][T11447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.462060][T11447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.466965][T11447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.499228][ T24] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 502.623719][ T8372] ath6kl: Failed to submit usb control message: -110 [ 502.623772][ T8372] ath6kl: unable to send the bmi data to the device: -110 [ 502.623789][ T8372] ath6kl: Unable to send get target info: -110 [ 502.640206][ T8372] ath6kl: Failed to init ath6kl core: -110 [ 502.660462][ T8372] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 502.678817][ T24] usb 3-1: New USB device found: idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 502.689254][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 502.689278][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 502.689296][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 502.698914][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.698943][ T24] usb 3-1: Product: syz [ 502.698958][ T24] usb 3-1: Manufacturer: syz [ 502.709816][ T24] usb 3-1: SerialNumber: syz [ 502.762152][ T24] usb 3-1: config 0 descriptor?? [ 502.763338][T11446] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 502.763461][T11446] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 502.764854][ T24] usb 3-1: ucan: probing device on interface #0 [ 503.039564][ T8365] usb 1-1: USB disconnect, device number 67 [ 503.048551][ T8365] usblp0: removed [ 503.259674][ T8367] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 503.288289][ T24] usb 3-1: ucan: device reported invalid device info [ 503.288314][ T24] usb 3-1: ucan: probe failed; try to update the device firmware [ 503.361626][T11466] ip_tables: iptables: counters copy to user failed while replacing table [ 503.409365][ T8367] usb 5-1: Using ep0 maxpacket: 8 [ 503.410180][ T8367] usb 5-1: New USB device found: idVendor=0525, idProduct=d292, bcdDevice=0.07 [ 503.411885][ T8367] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 503.411913][ T8367] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 503.411935][ T8367] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 503.411959][ T8367] usb 5-1: config 250 has no interface number 0 [ 503.412242][ T8367] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 503.412263][ T8367] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 503.412282][ T8367] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 503.412298][ T8367] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 503.412315][ T8367] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 503.412335][ T8367] usb 5-1: config 250 interface 228 has no altsetting 0 [ 503.415131][ T8367] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 503.415157][ T8367] usb 5-1: Product: syz [ 503.415176][ T8367] usb 5-1: SerialNumber: syz [ 503.467475][ T8367] hub 5-1:250.228: bad descriptor, ignoring hub [ 503.467556][ T8367] hub 5-1:250.228: probe with driver hub failed with error -5 [ 503.549947][T11468] [U] M٭Q& K4 [ 503.576120][T11468] [U] [)U}ǔJϬ}NSEF* NZF[F_H'W"X~;VA)^`1C':ZFOB *?۟CZS<8ZNѷјEY TT<$CRƖ/VG {Y~Y5\;ƃZDXYA"XIF{`A$í55?SAMOͻ*K [ 503.576170][T11468] [U] O4 [ 503.576650][T11468] [U] UB+ '~GIރRQ^,(-|ڟ-<6&H.Z9/RJΩˈ+)֭KΦ.NHA#LW#RF7P٪MAX]LN"KM +,GSBHJX̧CQ [ 503.646451][ T8372] usb 3-1: USB disconnect, device number 72 [ 503.647568][ T8367] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 87 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 503.795896][T11472] netlink: 'syz.6.1607': attribute type 1 has an invalid length. [ 503.832235][T11472] bond2: entered allmulticast mode [ 503.863593][T11472] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 503.863622][T11472] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 503.894952][T11472] bond2: (slave vti0): making interface the new active one [ 503.894977][T11472] vti0: entered allmulticast mode [ 503.916816][T11472] bond2: (slave vti0): Enslaving as an active interface with an up link [ 503.944375][T11478] bond2 (unregistering): (slave vti0): Releasing backup interface [ 503.944406][T11478] vti0: left allmulticast mode [ 503.955514][T11478] bond2 (unregistering): Released all slaves [ 503.991111][ T24] usb 5-1: USB disconnect, device number 87 [ 504.005891][ T24] usblp0: removed [ 504.043449][ T24] usb 6-1: USB disconnect, device number 69 [ 504.136824][T11480] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 504.136856][T11480] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 504.280683][ T8367] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 504.439427][ T8367] usb 7-1: Using ep0 maxpacket: 32 [ 504.440281][ T8367] usb 7-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 504.442582][ T8367] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.442605][ T8367] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.445888][ T8367] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 504.445916][ T8367] usb 7-1: Product: syz [ 504.445933][ T8367] usb 7-1: Manufacturer: syz [ 504.544349][ T8367] hub 7-1:4.0: USB hub found [ 504.824464][ T8367] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 504.892496][ T8367] usb 7-1: USB disconnect, device number 46 [ 504.999598][ T24] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 505.177710][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 505.178685][ T24] usb 6-1: not running at top speed; connect to a high speed hub [ 505.178709][ T24] usb 6-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=e0.47 [ 505.214682][ T24] usb 6-1: config 133 has an invalid interface number: 109 but max is 0 [ 505.214714][ T24] usb 6-1: config 133 has no interface number 0 [ 505.214754][ T24] usb 6-1: config 133 interface 109 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 505.214783][ T24] usb 6-1: config 133 interface 109 has no altsetting 0 [ 505.257198][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.257219][ T24] usb 6-1: Product: syz [ 505.257230][ T24] usb 6-1: Manufacturer: syz [ 505.257242][ T24] usb 6-1: SerialNumber: syz [ 505.345716][ T8367] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 505.493386][ T8367] usb 7-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 505.496162][ T8367] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 505.496198][ T8367] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.513068][ T8367] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 505.513097][ T8367] usb 7-1: Product: syz [ 505.513115][ T8367] usb 7-1: Manufacturer: syz [ 505.575551][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1614'. [ 505.603256][ T8367] hub 7-1:4.0: USB hub found [ 505.866014][ T8367] hub 7-1:4.0: 1 port detected [ 505.971217][T11520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1616'. [ 506.248835][ T8367] hub 7-1:4.0: set hub depth failed [ 506.276618][ T8367] usb 7-1: USB disconnect, device number 47 [ 506.424058][T11524] syzkaller1: entered promiscuous mode [ 506.424083][T11524] syzkaller1: entered allmulticast mode [ 507.475525][ T24] kaweth 6-1:133.109: couldn't find required endpoints [ 507.510872][ T24] usb 6-1: USB disconnect, device number 70 [ 507.588258][T11540] netlink: 'syz.0.1625': attribute type 1 has an invalid length. [ 507.731903][T11540] 8021q: adding VLAN 0 to HW filter on device bond4 [ 507.854046][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1627'. [ 508.413679][T11567] loop4: detected capacity change from 0 to 7 [ 508.435927][T11567] loop4: [ 508.435954][T11567] loop4: partition table partially beyond EOD, truncated [ 508.449359][ T8367] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 508.600173][ T8367] usb 6-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 508.602194][ T8367] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.602220][ T8367] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 508.602242][ T8367] usb 6-1: config 0 interface 0 has no altsetting 0 [ 508.602267][ T8367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.661802][ T8367] usb 6-1: config 0 descriptor?? [ 508.738143][T11571] netlink: 'syz.0.1636': attribute type 1 has an invalid length. [ 508.892397][ T8367] hid-multitouch 0003:0EEF:72C4.002E: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.5-1/input0 [ 509.071328][T11558] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1630'. [ 509.073671][ T8367] usb 6-1: USB disconnect, device number 71 [ 509.284380][T11581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.410878][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 509.415553][ T30] audit: type=1326 audit(1793123113.436:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28c79f559 code=0x7ffc0000 [ 509.415893][ T30] audit: type=1326 audit(1793123113.436:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28c79f559 code=0x7ffc0000 [ 509.416280][ T30] audit: type=1326 audit(1793123113.436:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28c79f559 code=0x7ffc0000 [ 509.416531][ T30] audit: type=1326 audit(1793123113.436:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28c79f559 code=0x7ffc0000 [ 509.416916][ T30] audit: type=1326 audit(1793123113.436:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb28c79f559 code=0x7ffc0000 [ 509.417151][ T30] audit: type=1326 audit(1793123113.436:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28c79f559 code=0x7ffc0000 [ 509.417388][ T30] audit: type=1326 audit(1793123113.436:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28c79f559 code=0x7ffc0000 [ 509.418241][ T30] audit: type=1326 audit(1793123113.436:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28c79f559 code=0x7ffc0000 [ 509.418889][ T30] audit: type=1326 audit(1793123113.436:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb28c79f559 code=0x7ffc0000 [ 509.451718][ T30] audit: type=1326 audit(1793123113.486:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.4.1641" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28c79f559 code=0x7ffc0000 [ 509.788214][T11590] xt_policy: output policy not valid in PREROUTING and INPUT [ 510.003652][T11594] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1643'. [ 510.119393][ T8367] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 510.269315][ T8367] usb 6-1: Using ep0 maxpacket: 16 [ 510.270482][ T8367] usb 6-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 510.272974][ T8367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.273008][ T8367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.273033][ T8367] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 510.273078][ T8367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.337845][ T8367] usb 6-1: config 0 descriptor?? [ 511.264642][T11619] tipc: Enabled bearer , priority 0 [ 511.739892][ T8366] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 511.892410][ T8366] usb 7-1: Using ep0 maxpacket: 16 [ 511.895180][ T8366] usb 7-1: unable to get BOS descriptor or descriptor too short [ 511.895234][ T8366] usb 7-1: New USB device found: idVendor=2b53, idProduct=0023, bcdDevice=0.40 [ 511.896710][ T8366] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.896739][ T8366] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 511.896755][ T8366] usb 7-1: config 1 has no interface number 0 [ 511.896804][ T8366] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 511.899781][ T8366] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.899811][ T8366] usb 7-1: Product: syz [ 511.899856][ T8366] usb 7-1: Manufacturer: syz [ 511.899873][ T8366] usb 7-1: SerialNumber: syz [ 512.115156][T11631] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 512.262175][ T7499] tipc: Node number set to 4269801488 [ 512.362273][ T8366] usb 7-1: USB disconnect, device number 48 [ 512.639255][ T7499] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 512.644242][ T9949] udevd[9949]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.819074][ T7499] usb 5-1: Using ep0 maxpacket: 16 [ 512.824725][ T7499] usb 5-1: New USB device found: idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 512.845157][ T7499] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 512.845183][ T7499] usb 5-1: config 0 has no interface number 0 [ 512.896021][ T7499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.896043][ T7499] usb 5-1: Product: syz [ 512.896054][ T7499] usb 5-1: Manufacturer: syz [ 512.896065][ T7499] usb 5-1: SerialNumber: syz [ 512.943533][ T7499] usb 5-1: config 0 descriptor?? [ 512.986795][ T7499] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 513.233558][T11634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1658'. [ 513.360202][T11634] pim6reg: entered allmulticast mode [ 513.366409][ T7499] gspca_spca1528: reg_w err -71 [ 513.392199][ T7499] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 513.416209][ T8367] usbhid 6-1:0.0: can't add hid device: -71 [ 513.416331][ T8367] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 513.444999][ T8367] usb 6-1: USB disconnect, device number 72 [ 513.463420][ T7499] usb 5-1: USB disconnect, device number 88 [ 513.681298][T11648] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 514.123769][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1665'. [ 514.316307][T11662] syz_tun: entered allmulticast mode [ 514.336107][T11661] syz_tun: left allmulticast mode [ 514.612058][ T7499] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 514.785646][ T7499] usb 6-1: unable to get BOS descriptor or descriptor too short [ 514.785685][ T7499] usb 6-1: New USB device found: idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 514.808690][ T7499] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.808718][ T7499] usb 6-1: config 0 has no interfaces? [ 514.836158][ T7499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.836188][ T7499] usb 6-1: Product: syz [ 514.836205][ T7499] usb 6-1: Manufacturer: syz [ 514.836221][ T7499] usb 6-1: SerialNumber: syz [ 514.870490][ T7499] usb 6-1: config 0 descriptor?? [ 515.159251][ T8366] usb 6-1: USB disconnect, device number 73 [ 515.461911][ T8367] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 515.615663][ T8367] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 515.623253][ T8367] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.623346][ T8367] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.623421][ T8367] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 515.623550][ T8367] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.687783][ T8367] usb 7-1: config 0 descriptor?? [ 515.929628][ T7499] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 516.090399][ T7499] usb 5-1: New USB device found: idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 516.095216][ T7499] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.095270][ T7499] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 516.095297][ T7499] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 516.146615][ T7499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 516.146646][ T7499] usb 5-1: Product: syz [ 516.146663][ T7499] usb 5-1: Manufacturer: syz [ 516.146680][ T7499] usb 5-1: SerialNumber: syz [ 516.179321][ T7499] usb 5-1: config 0 descriptor?? [ 516.196863][ T7499] usb 5-1: no audio or video endpoints found [ 516.472677][ T8367] usbhid 7-1:0.0: can't add hid device: -71 [ 516.472755][ T8367] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 516.481018][ T7499] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 516.510463][ T8367] usb 7-1: USB disconnect, device number 49 [ 516.562410][T11696] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 516.650778][ T7499] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 516.655143][ T7499] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 516.655194][ T7499] usb 6-1: config 0 interface 0 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 516.655211][ T7499] usb 6-1: config 0 interface 0 has no altsetting 0 [ 516.669725][ T7499] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 516.669760][ T7499] usb 6-1: Product: syz [ 516.669771][ T7499] usb 6-1: Manufacturer: syz [ 516.669783][ T7499] usb 6-1: SerialNumber: syz [ 516.722750][ T7499] usb 6-1: config 0 descriptor?? [ 516.771674][T11702] fuse: Unknown parameter 'eF(' [ 516.858721][ T7499] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 516.869411][ T8366] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 516.933452][ T9950] udevd[9950]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 517.041328][ T8366] usb 3-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 517.042790][ T8366] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 517.042845][ T8366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.070828][ T8366] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 517.070936][ T8366] usb 3-1: Manufacturer: syz [ 517.110181][ T8366] usb 3-1: config 0 descriptor?? [ 517.165263][ T8367] usb 6-1: USB disconnect, device number 74 [ 517.289392][ T8366] rc_core: IR keymap rc-hauppauge not found [ 517.289407][ T8366] Registered IR keymap rc-empty [ 517.290383][ T8366] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 517.318798][ T8366] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input79 [ 517.579467][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 517.699953][ T8376] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 517.861440][ T8376] usb 1-1: New USB device found: idVendor=172f, idProduct=0500, bcdDevice=0.00 [ 517.863065][ T8376] usb 1-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 517.863106][ T8376] usb 1-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 517.865182][ T8376] usb 1-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 517.865217][ T8376] usb 1-1: config 0 interface 0 has no altsetting 0 [ 517.865254][ T8376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.943378][ T8376] usb 1-1: config 0 descriptor?? [ 517.959461][ T8376] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 518.421342][T11724] tipc: Enabled bearer , priority 0 [ 518.444847][T11726] syzkaller0: entered promiscuous mode [ 518.444878][T11726] syzkaller0: entered allmulticast mode [ 518.463942][ T7499] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 518.617451][T11727] tipc: Resetting bearer [ 518.619340][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 518.642044][ T7499] usb 7-1: New USB device found: idVendor=1e7d, idProduct=2dbe, bcdDevice=0.00 [ 518.647262][T11727] usb usb5: usbfs: process 11727 (syz.5.1687) did not claim interface 23 before use [ 518.647487][ T7499] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 518.647523][ T7499] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.647574][ T7499] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.702507][ T7499] usb 7-1: config 0 descriptor?? [ 518.865291][ T8376] usb 5-1: USB disconnect, device number 89 [ 519.132734][ T7499] konepure 0003:1E7D:2DBE.002F: unknown main item tag 0x4 [ 519.146875][ T7499] konepure 0003:1E7D:2DBE.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.6-1/input0 [ 519.172656][T11723] tipc: Resetting bearer [ 519.248007][T11723] tipc: Disabling bearer [ 519.334827][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1686'. [ 519.334867][T11722] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1686'. [ 519.368382][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1686'. [ 519.368420][T11722] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1686'. [ 519.399194][ T9100] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.407280][ T7499] usb 7-1: USB disconnect, device number 50 [ 519.409776][ T9100] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.409968][ T9100] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.410129][ T9100] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.522992][T11732] fido_id[11732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 519.647441][ T8367] usb 3-1: USB disconnect, device number 73 [ 520.110796][T11745] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 520.110817][T11745] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 520.201466][T11750] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 520.493280][ T7499] usb 1-1: USB disconnect, device number 68 [ 521.274413][T11775] syz_tun: entered allmulticast mode [ 521.325430][T11774] syz_tun: left allmulticast mode [ 521.822643][T11781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1704'. [ 521.826827][T11781] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1704'. [ 521.849113][ T7499] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 522.009275][ T7499] usb 5-1: Using ep0 maxpacket: 32 [ 522.010180][ T7499] usb 5-1: New USB device found: idVendor=0582, idProduct=0145, bcdDevice=0.40 [ 522.012005][ T7499] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.012051][ T7499] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 32 [ 522.012076][ T7499] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 522.012094][ T7499] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.015903][ T7499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.015944][ T7499] usb 5-1: Product: syz [ 522.015956][ T7499] usb 5-1: Manufacturer: syz [ 522.015967][ T7499] usb 5-1: SerialNumber: syz [ 522.103746][T11783] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 522.103893][T11783] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 522.273692][T11793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1709'. [ 522.330681][T11783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.355524][T11783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.888064][ T7499] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 522.888172][ T7499] usb 5-1: MIDIStreaming interface descriptor not found [ 523.126983][ T7499] usb 5-1: USB disconnect, device number 90 [ 523.261675][T11809] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1713'. [ 523.364771][ T6978] udevd[6978]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.929164][ T7499] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 524.089319][ T7499] usb 1-1: Using ep0 maxpacket: 32 [ 524.089968][ T7499] usb 1-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 524.091102][ T7499] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.091125][ T7499] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.091152][ T7499] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.098093][ T7499] usb 1-1: config 0 descriptor?? [ 524.220819][T11825] batman_adv: batadv0: Adding interface: dummy0 [ 524.221808][T11825] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.223033][T11825] batman_adv: batadv0: Interface activated: dummy0 [ 524.311126][T11825] netlink: 'syz.6.1721': attribute type 2 has an invalid length. [ 524.440596][T11825] batadv0: mtu less than device minimum [ 524.441782][T11825] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.442836][T11825] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.443913][T11825] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.444946][T11825] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.445984][T11825] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.447015][T11825] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.448044][T11825] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.449200][T11825] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 524.630906][T11830] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1722'. [ 524.664848][T11821] input: syz0 as /devices/virtual/input/input81 [ 524.775551][ T7499] usbhid 1-1:0.0: can't add hid device: -32 [ 524.775662][ T7499] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 524.807129][T11821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.808116][T11821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.530534][ T8367] usb 1-1: USB disconnect, device number 69 [ 525.727441][T11858] netlink: 3408 bytes leftover after parsing attributes in process `syz.5.1728'. [ 526.033401][T11864] net_ratelimit: 11 callbacks suppressed [ 526.033923][T11864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.680510][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1736'. [ 527.139308][ T8367] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 527.309160][ T8367] usb 3-1: Using ep0 maxpacket: 8 [ 527.310154][ T8367] usb 3-1: New USB device found: idVendor=0525, idProduct=d292, bcdDevice=0.07 [ 527.311720][ T8367] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 527.311748][ T8367] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 527.311771][ T8367] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 527.311795][ T8367] usb 3-1: config 250 has no interface number 0 [ 527.311839][ T8367] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 527.311975][ T8367] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 527.312005][ T8367] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 527.312030][ T8367] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 527.312057][ T8367] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 527.312087][ T8367] usb 3-1: config 250 interface 228 has no altsetting 0 [ 527.314570][ T8367] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 527.314600][ T8367] usb 3-1: Product: syz [ 527.314617][ T8367] usb 3-1: SerialNumber: syz [ 527.455819][ T8367] hub 3-1:250.228: bad descriptor, ignoring hub [ 527.455855][ T8367] hub 3-1:250.228: probe with driver hub failed with error -5 [ 527.522008][T11897] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 527.582948][T11887] netlink: 'syz.2.1738': attribute type 1 has an invalid length. [ 527.640537][T11904] fuse: Bad value for 'fd' [ 527.646304][T11887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 527.694910][T11905] bond2: (slave geneve2): making interface the new active one [ 527.708711][T11905] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 527.771572][ T8367] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 74 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 527.933560][T11917] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1747'. [ 527.990581][T11914] input: syz1 as /devices/virtual/input/input82 [ 527.993064][T11914] input: failed to attach handler leds to device input82, error: -6 [ 528.112497][T11922] 8021q: adding VLAN 0 to HW filter on device bond5 [ 528.319425][ T8372] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 528.402217][T11932] syzkaller0: entered promiscuous mode [ 528.402242][T11932] syzkaller0: entered allmulticast mode [ 528.423198][T11932] tipc: Enabled bearer , priority 0 [ 528.435798][T11930] tipc: Resetting bearer [ 528.479931][ T8372] usb 7-1: New USB device found: idVendor=056a, idProduct=0063, bcdDevice=0.00 [ 528.479977][ T8372] usb 7-1: too many configurations: 248, using maximum allowed: 8 [ 528.482979][ T8372] usb 7-1: config 0 has no interfaces? [ 528.483481][ T8372] usb 7-1: config 0 has no interfaces? [ 528.510637][T11930] tipc: Disabling bearer [ 528.511409][ T8372] usb 7-1: config 0 has no interfaces? [ 528.530717][ T8372] usb 7-1: config 0 has no interfaces? [ 528.531300][ T8372] usb 7-1: config 0 has no interfaces? [ 528.533975][ T8372] usb 7-1: config 0 has no interfaces? [ 528.534606][ T8372] usb 7-1: config 0 has no interfaces? [ 528.537975][ T8372] usb 7-1: config 0 has no interfaces? [ 528.538016][ T8372] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.580944][ T8372] usb 7-1: config 0 descriptor?? [ 528.846134][T11912] veth0_to_team: entered promiscuous mode [ 528.846154][T11912] veth0_to_team: entered allmulticast mode [ 528.911728][T11945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.989099][ T8372] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 529.140378][ T8372] usb 5-1: New USB device found: idVendor=0552, idProduct=5510, bcdDevice=0.00 [ 529.146060][ T8372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 529.146080][ T8372] usb 5-1: Product: syz [ 529.146092][ T8372] usb 5-1: Manufacturer: syz [ 529.817222][ T8372] scsi host1: uas [ 529.860046][ C0] usb 5-1: stat urb: no pending cmd for uas-tag 0 [ 530.073412][ C0] usb 5-1: cmd cmplt err -71 [ 530.075300][ T24] usb 5-1: USB disconnect, device number 91 [ 530.101293][ T24] scsi 1:0:0:0: tag#16 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 530.101391][ T24] scsi 1:0:0:0: tag#16 CDB: Inquiry 12 00 00 00 24 00 [ 530.411451][T11958] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1760'. [ 530.554609][T11961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1761'. [ 530.761698][ T24] usb 7-1: USB disconnect, device number 51 [ 531.144058][ T8372] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 531.235912][ T7499] usb 3-1: USB disconnect, device number 74 [ 531.260090][ T7499] usblp0: removed [ 531.300489][ T8372] usb 6-1: New USB device found: idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 531.302180][ T8372] usb 6-1: config 0 has an invalid interface number: 6 but max is 0 [ 531.302207][ T8372] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.302227][ T8372] usb 6-1: config 0 has no interface number 0 [ 531.302276][ T8372] usb 6-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 531.302308][ T8372] usb 6-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 531.375589][ T8372] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.375621][ T8372] usb 6-1: Product: syz [ 531.375639][ T8372] usb 6-1: Manufacturer: syz [ 531.375656][ T8372] usb 6-1: SerialNumber: syz [ 531.403259][ T8372] usb 6-1: config 0 descriptor?? [ 531.406843][T11969] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 531.406962][T11969] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 531.452660][ T8372] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 531.641465][T11969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.652338][T11969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.673832][ T24] usb 6-1: USB disconnect, device number 75 [ 531.770762][T11987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1769'. [ 532.014079][T11989] tipc: Enabling of bearer rejected, failed to enable media [ 532.234209][T11992] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1771'. [ 533.002942][ T24] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 533.130806][ T24] usb 7-1: device descriptor read/64, error -71 [ 533.339155][ T8372] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 533.369375][ T24] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 533.489916][ T8372] usb 1-1: New USB device found: idVendor=041e, idProduct=2801, bcdDevice=0.00 [ 533.491313][ T8372] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 533.491340][ T8372] usb 1-1: config 0 has no interface number 0 [ 533.491380][ T8372] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.491399][ T8372] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.491427][ T8372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.497678][ T8372] usb 1-1: config 0 descriptor?? [ 533.558904][ T24] usb 7-1: device descriptor read/64, error -71 [ 533.661851][ T24] usb usb7-port1: attempt power cycle [ 533.721317][ T8372] usbhid 1-1:0.1: can't add hid device: -71 [ 533.721438][ T8372] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 533.747984][ T8372] usb 1-1: USB disconnect, device number 70 [ 533.885484][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1783'. [ 533.885505][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1783'. [ 534.009172][ T24] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 534.009489][ T8367] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 534.038477][ T24] usb 7-1: device descriptor read/8, error -71 [ 534.156086][T12038] syzkaller0: entered promiscuous mode [ 534.156106][T12038] syzkaller0: entered allmulticast mode [ 534.171569][ T8367] usb 6-1: Using ep0 maxpacket: 8 [ 534.172488][ T8367] usb 6-1: New USB device found: idVendor=0525, idProduct=d292, bcdDevice=0.07 [ 534.173767][ T8367] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 534.173796][ T8367] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 534.173819][ T8367] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 534.173842][ T8367] usb 6-1: config 250 has no interface number 0 [ 534.173887][ T8367] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 534.173908][ T8367] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 534.173926][ T8367] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 534.173943][ T8367] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 534.173964][ T8367] usb 6-1: config 250 interface 228 has no altsetting 0 [ 534.176176][T12038] tipc: Started in network mode [ 534.176761][T12038] tipc: Node identity d2aec1eedd1c, cluster identity 4711 [ 534.177578][ T8367] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 534.177597][ T8367] usb 6-1: Product: syz [ 534.177609][ T8367] usb 6-1: SerialNumber: syz [ 534.179324][T12038] tipc: Enabled bearer , priority 0 [ 534.322110][ T24] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 534.341275][T12038] tipc: Resetting bearer [ 534.343888][ T24] usb 7-1: device descriptor read/8, error -71 [ 534.346410][ T8367] hub 6-1:250.228: bad descriptor, ignoring hub [ 534.346438][ T8367] hub 6-1:250.228: probe with driver hub failed with error -5 [ 534.380684][T12037] tipc: Resetting bearer [ 534.448616][T12037] tipc: Disabling bearer [ 534.456049][ T24] usb usb7-port1: unable to enumerate USB device [ 534.662126][ T8372] usb 6-1: USB disconnect, device number 76 [ 535.190998][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'. [ 535.191046][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'. [ 535.500583][ C1] sd 0:0:1:0: [sda] tag#8874 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 535.500661][ C1] sd 0:0:1:0: [sda] tag#8874 CDB: Write(10) 2a 00 00 00 00 00 00 00 01 [ 535.729216][ T8372] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 535.787306][T12071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1795'. [ 535.787327][T12071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1795'. [ 535.890157][ T8372] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 535.891434][ T8372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.891467][ T8372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.891502][ T8372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 535.891533][ T8372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.894109][ T8372] usb 5-1: config 0 descriptor?? [ 536.369138][ T7499] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 536.507068][T12078] netlink: 'syz.0.1798': attribute type 1 has an invalid length. [ 536.529136][ T8373] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 536.530237][ T7499] usb 7-1: New USB device found: idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 536.532229][ T7499] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 536.532257][ T7499] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 536.532284][ T7499] usb 7-1: config 0 has no interface number 0 [ 536.532336][ T7499] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 536.532353][ T7499] usb 7-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 536.534911][ T7499] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.534936][ T7499] usb 7-1: Product: syz [ 536.534951][ T7499] usb 7-1: Manufacturer: syz [ 536.534979][ T7499] usb 7-1: SerialNumber: syz [ 536.607354][ T7499] usb 7-1: config 0 descriptor?? [ 536.723764][ T8373] usb 6-1: Using ep0 maxpacket: 16 [ 536.724777][ T8373] usb 6-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 536.726049][ T8373] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 536.726112][ T8373] usb 6-1: config 0 interface 0 has no altsetting 0 [ 536.763544][ T8373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.763574][ T8373] usb 6-1: Product: syz [ 536.763592][ T8373] usb 6-1: Manufacturer: syz [ 536.763608][ T8373] usb 6-1: SerialNumber: syz [ 536.788470][ T8373] usb 6-1: config 0 descriptor?? [ 536.810627][ T8372] usbhid 5-1:0.0: can't add hid device: -71 [ 536.810935][ T8372] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 536.836417][ T8372] usb 5-1: USB disconnect, device number 92 [ 536.986464][T12080] bond6: (slave geneve2): making interface the new active one [ 537.007951][T12080] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 537.020023][ T3283] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 537.024182][ T9099] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 537.024235][ T9099] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 537.024278][ T9099] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 537.104542][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 537.108486][ T8373] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input84 [ 537.141957][ T8373] imon:send_packet: packet tx failed (-71) [ 537.159084][ T8373] imon 6-1:0.0: panel buttons/knobs setup failed [ 537.205486][T12074] syzkaller0: entered promiscuous mode [ 537.205521][T12074] syzkaller0: entered allmulticast mode [ 537.269121][ T8373] rc_core: IR keymap rc-imon-pad not found [ 537.269142][ T8373] Registered IR keymap rc-empty [ 537.269221][ T8373] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 537.269242][ T8373] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 537.269911][ T8373] imon:send_packet: packet tx failed (-71) [ 537.310632][ T8373] imon 6-1:0.0: remote input dev register failed [ 537.310752][ T8373] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 537.381522][ T8373] imon 6-1:0.0: unable to initialize intf0, err 0 [ 537.397086][ T8373] usb 6-1: USB disconnect, device number 77 [ 537.672015][T12095] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 537.672542][T12095] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 537.729161][ T8373] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 537.881864][ T8373] usb 6-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 537.883689][ T8373] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 537.883714][ T8373] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 537.883734][ T8373] usb 6-1: config 0 interface 0 has no altsetting 0 [ 537.887729][ T8373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.887748][ T8373] usb 6-1: Product: syz [ 537.887760][ T8373] usb 6-1: Manufacturer: syz [ 537.887770][ T8373] usb 6-1: SerialNumber: syz [ 537.911988][ T7499] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 537.962862][ T8373] usb 6-1: config 0 descriptor?? [ 537.964143][T12076] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 538.109199][ T7499] usb 1-1: device descriptor read/64, error -71 [ 538.178381][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 538.194666][ T8373] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input86 [ 538.359368][ T7499] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 538.489383][ T7499] usb 1-1: device descriptor read/64, error -71 [ 538.610040][ T8373] rc_core: IR keymap rc-imon-pad not found [ 538.610055][ T8373] Registered IR keymap rc-empty [ 538.610112][ T8373] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 538.610126][ T8373] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 538.610426][ T7499] usb usb1-port1: attempt power cycle [ 538.660173][ T8373] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 538.663558][ T8373] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input87 [ 538.696970][ T8373] imon 6-1:0.0: iMON device (15c2:0045) on usb<6:78> initialized [ 538.844019][T12076] imon:lcd_write: invalid payload size: 7 (expected 8) [ 538.845164][ T8373] usb 6-1: USB disconnect, device number 78 [ 538.969619][ T7499] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 538.990021][ T7499] usb 1-1: device descriptor read/8, error -71 [ 538.997669][T12109] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1806'. [ 539.229501][ T7499] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 539.250397][T12111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1807'. [ 539.250425][T12111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1807'. [ 539.281505][ T7499] usb 1-1: device descriptor read/8, error -71 [ 539.310604][ T8373] usb 7-1: USB disconnect, device number 56 [ 539.391697][ T7499] usb usb1-port1: unable to enumerate USB device [ 539.541790][T12117] pim6reg: entered allmulticast mode [ 540.154881][T12137] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1814'. [ 540.197448][T12136] syzkaller1: entered promiscuous mode [ 540.197474][T12136] syzkaller1: entered allmulticast mode [ 540.360276][T12139] deleting an unspecified loop device is not supported. [ 540.366167][T12139] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 541.008622][T12147] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 541.022740][T12147] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 541.124038][T12152] lo: entered allmulticast mode [ 541.216657][T12148] lo: left allmulticast mode [ 541.559989][ T8373] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 541.650694][ T8372] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 541.730007][ T8373] usb 5-1: New USB device found: idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 541.731104][ T8373] usb 5-1: config 2 has an invalid interface number: 79 but max is 0 [ 541.731123][ T8373] usb 5-1: config 2 has no interface number 0 [ 541.731145][ T8373] usb 5-1: config 2 interface 79 has no altsetting 0 [ 541.768207][ T8373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.768227][ T8373] usb 5-1: Product: syz [ 541.768238][ T8373] usb 5-1: Manufacturer: syz [ 541.768250][ T8373] usb 5-1: SerialNumber: syz [ 541.829373][ T8372] usb 3-1: Using ep0 maxpacket: 16 [ 541.830244][ T8372] usb 3-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 541.833893][ T8372] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 541.833926][ T8372] usb 3-1: config 0 interface 0 has no altsetting 0 [ 541.874632][ T8372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.874690][ T8372] usb 3-1: Product: syz [ 541.874707][ T8372] usb 3-1: Manufacturer: syz [ 541.874723][ T8372] usb 3-1: SerialNumber: syz [ 541.907056][ T8372] usb 3-1: config 0 descriptor?? [ 541.948577][ T30] kauditd_printk_skb: 117 callbacks suppressed [ 541.948599][ T30] audit: type=1326 audit(1793123145.966:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12166 comm="syz.0.1826" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae8819f559 code=0x0 [ 542.156553][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 542.170652][ T8372] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input88 [ 542.197085][ T8372] imon:send_packet: packet tx failed (-71) [ 542.197580][T12170] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 542.218609][ T8372] imon 3-1:0.0: panel buttons/knobs setup failed [ 542.283610][ T8373] usb 5-1: USB disconnect, device number 93 [ 542.424631][ T8372] rc_core: IR keymap rc-imon-pad not found [ 542.424652][ T8372] Registered IR keymap rc-empty [ 542.424736][ T8372] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 542.424755][ T8372] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 542.425214][ T8372] imon:send_packet: packet tx failed (-71) [ 542.455969][ T8372] imon 3-1:0.0: remote input dev register failed [ 542.456140][ T8372] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 542.527635][ T8372] imon 3-1:0.0: unable to initialize intf0, err 0 [ 542.546176][ T8372] usb 3-1: USB disconnect, device number 75 [ 542.920326][ T8372] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 542.959239][ T8373] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 543.074022][ T8372] usb 3-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 543.076220][ T8372] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 543.076254][ T8372] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 543.076275][ T8372] usb 3-1: config 0 interface 0 has no altsetting 0 [ 543.124302][ T8372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.124332][ T8372] usb 3-1: Product: syz [ 543.124350][ T8372] usb 3-1: Manufacturer: syz [ 543.124369][ T8372] usb 3-1: SerialNumber: syz [ 543.147528][ T8372] usb 3-1: config 0 descriptor?? [ 543.159490][ T8373] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 543.162635][ T8373] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 543.162669][ T8373] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.162683][ T8373] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 543.162738][ T8373] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.166094][T12161] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 543.167359][ T8373] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 543.167387][ T8373] usb 6-1: Product: syz [ 543.167403][ T8373] usb 6-1: Manufacturer: syz [ 543.243420][ T24] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 543.256513][ T8373] cdc_wdm 6-1:1.0: skipping garbage [ 543.256538][ T8373] cdc_wdm 6-1:1.0: skipping garbage [ 543.276144][ T8373] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 543.276277][ T8373] cdc_wdm 6-1:1.0: Unknown control protocol [ 543.413020][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 543.431151][ T8372] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input90 [ 543.452428][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 543.455273][ T24] usb 1-1: New USB device found: idVendor=0eef, idProduct=0001, bcdDevice=0.00 [ 543.475338][ T24] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 543.475416][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 543.475458][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.546546][ T24] usb 1-1: config 0 descriptor?? [ 543.564592][ T8366] usb 6-1: USB disconnect, device number 79 [ 543.820182][T12184] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1831'. [ 543.826006][T12184] batman_adv: batadv0: Adding interface: veth0 [ 543.826025][T12184] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.826067][T12184] batman_adv: batadv0: Interface activated: veth0 [ 543.826081][T12184] batadv0: mtu less than device minimum [ 543.827796][T12184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.829501][T12184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.831125][T12184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.832707][T12184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.834376][T12184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.836010][T12184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.837601][T12184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.839226][T12184] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 543.872234][ T8372] rc_core: IR keymap rc-imon-pad not found [ 543.872285][ T8372] Registered IR keymap rc-empty [ 543.873607][ T8372] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 543.874237][ T8372] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 543.906616][ T8372] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 543.917059][ T8372] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input91 [ 543.920614][T12184] batman_adv: batadv0: Interface deactivated: dummy0 [ 543.920678][T12184] batman_adv: batadv0: Removing interface: dummy0 [ 543.947004][ T8372] imon 3-1:0.0: iMON device (15c2:0045) on usb<3:76> initialized [ 544.074577][T12184] batman_adv: batadv0: Interface deactivated: veth0 [ 544.074603][T12184] batman_adv: batadv0: Removing interface: veth0 [ 544.114351][ T8373] usb 3-1: USB disconnect, device number 76 [ 544.319440][ T8372] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 544.481189][ T8372] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 544.482735][ T8372] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 544.482782][ T8372] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.482804][ T8372] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 544.482861][ T8372] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.485687][ T8372] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 544.485716][ T8372] usb 6-1: Product: syz [ 544.485733][ T8372] usb 6-1: Manufacturer: syz [ 544.573044][ T8372] cdc_wdm 6-1:1.0: skipping garbage [ 544.573069][ T8372] cdc_wdm 6-1:1.0: skipping garbage [ 544.585457][ T8372] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 544.585526][ T8372] cdc_wdm 6-1:1.0: Unknown control protocol [ 544.773265][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 544.773334][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 544.773801][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 544.773859][ C0] cdc_wdm 6-1:1.0: Cannot schedule work [ 544.775129][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 544.775349][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 544.775537][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 544.778005][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 544.778222][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 544.778433][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 544.778726][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 544.778916][ C0] cdc_wdm 6-1:1.0: Stall on int endpoint [ 544.856739][ C0] cdc_wdm 6-1:1.0: Unexpected error -71 [ 544.880272][ C0] cdc_wdm 6-1:1.0: Unexpected error -71 [ 544.886486][ T8372] usb 6-1: USB disconnect, device number 80 [ 545.287942][T12200] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1838'. [ 546.119683][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 546.119797][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 546.153047][ T24] usb 1-1: USB disconnect, device number 75 [ 546.389155][ T8366] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 546.423157][T12217] net_ratelimit: 11 callbacks suppressed [ 546.423174][T12217] ip_tables: iptables: counters copy to user failed while replacing table [ 546.423955][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1844'. [ 546.540003][ T8366] usb 3-1: New USB device found: idVendor=0489, idProduct=e057, bcdDevice=0.00 [ 546.541407][ T8366] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.541433][ T8366] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 546.541483][ T8366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.547914][ T8366] usb 3-1: config 0 descriptor?? [ 546.833971][T12223] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1847'. [ 546.879264][T12223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1847'. [ 546.947969][T12228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.948460][T12228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.144796][T12221] kvm [12220]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0xc1) = 0x60000009b27 [ 547.148138][T12221] kvm [12220]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0xc2) = 0x60000008cff [ 547.214526][T12221] kvm [12220]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x11e) = 0x60000007fa7 [ 547.266990][T12221] kvm [12220]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x186) = 0x60000008e27 [ 547.267123][T12221] kvm [12220]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x187) = 0x600000000bb [ 547.310902][ T8372] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 547.331373][T12221] kvm_intel: kvm [12220]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x1d9) = 0x60000008135 [ 547.460846][ T8372] usb 7-1: Using ep0 maxpacket: 8 [ 547.467140][ T8372] usb 7-1: New USB device found: idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 547.498595][ T8372] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 547.498628][ T8372] usb 7-1: Product: syz [ 547.498646][ T8372] usb 7-1: Manufacturer: syz [ 547.498664][ T8372] usb 7-1: SerialNumber: syz [ 547.535637][ T8372] usb 7-1: config 0 descriptor?? [ 547.557244][ T8372] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 547.878642][ T8366] Bluetooth: Can't get version to change to load ram patch err [ 547.878681][ T8366] Bluetooth: Loading patch file failed [ 547.878711][ T8366] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 547.907882][ T8366] usb 3-1: USB disconnect, device number 77 [ 547.995389][T12230] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1848'. [ 548.445003][ T8372] gspca_zc3xx: reg_w_i err -71 [ 548.445113][ T8372] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 548.474642][ T8372] usb 7-1: USB disconnect, device number 57 [ 548.900845][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 549.249418][ T8372] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 549.409258][ T8372] usb 3-1: Using ep0 maxpacket: 16 [ 549.410183][ T8372] usb 3-1: New USB device found: idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 549.411634][ T8372] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 549.411662][ T8372] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 549.411684][ T8372] usb 3-1: config 8 has no interface number 0 [ 549.411727][ T8372] usb 3-1: config 8 interface 223 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 549.411755][ T8372] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 549.414153][ T8372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.414180][ T8372] usb 3-1: Product: syz [ 549.414197][ T8372] usb 3-1: Manufacturer: syz [ 549.414215][ T8372] usb 3-1: SerialNumber: syz [ 549.504417][T12257] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 549.567771][ T8367] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 549.567815][ T8367] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 549.616203][ T8367] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz0] on syz0 [ 549.639459][ T8373] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 549.812701][ T8373] usb 7-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 549.830349][ T8373] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 549.830380][ T8373] usb 7-1: config 1 has no interface number 0 [ 549.830424][ T8373] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 549.830455][ T8373] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 549.830483][ T8373] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.847429][ T8372] usb 3-1: USB disconnect, device number 78 [ 549.911591][ T8373] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.911613][ T8373] usb 7-1: Product: syz [ 549.911625][ T8373] usb 7-1: Manufacturer: syz [ 549.911637][ T8373] usb 7-1: SerialNumber: syz [ 549.948075][T12262] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 550.147667][T12266] fido_id[12266]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 550.405778][ T8373] usb 7-1: Error in usbnet_get_endpoints (-71) [ 550.449291][ T8373] usb 7-1: USB disconnect, device number 58 [ 550.866767][T12276] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 551.378114][T12288] loop5: detected capacity change from 0 to 7 [ 551.394547][T12288] Dev loop5: unable to read RDB block 7 [ 551.394594][T12288] loop5: unable to read partition table [ 551.394795][T12288] loop5: partition table beyond EOD, truncated [ 551.394817][T12288] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 552.627129][T12319] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1871'. [ 552.931523][T12322] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1875'. [ 552.952151][T12322] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1875'. [ 553.134355][T12322] program syz.5.1875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 554.239224][ T8372] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 554.389471][ T8372] usb 1-1: Using ep0 maxpacket: 32 [ 554.396164][ T8372] usb 1-1: unable to get BOS descriptor or descriptor too short [ 554.396201][ T8372] usb 1-1: New USB device found: idVendor=1a86, idProduct=752d, bcdDevice=0.40 [ 554.398826][ T8372] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 102, changing to 7 [ 554.398877][ T8372] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 554.455070][ T8372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.455104][ T8372] usb 1-1: Product: syz [ 554.455122][ T8372] usb 1-1: Manufacturer: syz [ 554.455139][ T8372] usb 1-1: SerialNumber: syz [ 554.723842][T12330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.726013][T12330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.752638][T12330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.753095][T12330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.789446][T12340] loop4: detected capacity change from 0 to 7 [ 554.796945][T12340] loop4: [ 554.796975][T12340] loop4: partition table partially beyond EOD, truncated [ 554.944962][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1879'. [ 555.084701][T12344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.086001][T12344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.749386][ T8373] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 555.928739][ T8373] usb 6-1: unable to get BOS descriptor or descriptor too short [ 555.939070][ T8373] usb 6-1: not running at top speed; connect to a high speed hub [ 555.939135][ T8373] usb 6-1: New USB device found: idVendor=0d46, idProduct=2012, bcdDevice=7d.53 [ 555.961397][ T8373] usb 6-1: config index 0 descriptor too short (expected 2066, got 18) [ 555.961430][ T8373] usb 6-1: config 5 has an invalid descriptor of length 144, skipping remainder of the config [ 555.961484][ T8373] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 556.001420][ T8373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.001483][ T8373] usb 6-1: Product: syz [ 556.001501][ T8373] usb 6-1: Manufacturer: syz [ 556.001518][ T8373] usb 6-1: SerialNumber: syz [ 556.292142][T12357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.302130][T12357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.365925][T12363] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1889'. [ 556.760867][T12373] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 556.765262][T12373] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 557.214785][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1895'. [ 557.329300][T12379] lo: entered allmulticast mode [ 557.417419][ T8373] usb 6-1: USB disconnect, device number 81 [ 557.461451][T12380] dvmrp6: entered allmulticast mode [ 557.480643][T12382] syz_tun: entered allmulticast mode [ 557.534229][T12382] pimreg: entered allmulticast mode [ 557.820457][ T8372] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 557.824729][ T8372] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 557.853045][ T8372] usb 1-1: USB disconnect, device number 76 [ 558.107447][T12378] lo: left allmulticast mode [ 558.547368][T12409] x_tables: duplicate entry at hook 2 [ 559.485600][T12381] syz_tun: left allmulticast mode [ 559.820711][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1907'. [ 559.821318][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1907'. [ 560.077056][T12398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1902'. [ 560.839462][T12433] IPVS: dh: FWM 3 0x00000003 - no destination available [ 562.017836][T12456] netlink: 'syz.2.1917': attribute type 29 has an invalid length. [ 562.017869][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1917'. [ 562.017895][T12456] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 562.390509][ T8367] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 562.540020][ T8367] usb 1-1: New USB device found: idVendor=046d, idProduct=c71b, bcdDevice=0.00 [ 562.542541][ T8367] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 562.542567][ T8367] usb 1-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 562.542587][ T8367] usb 1-1: config 0 interface 0 has no altsetting 0 [ 562.542611][ T8367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.558906][ T8366] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 562.601999][ T8367] usb 1-1: config 0 descriptor?? [ 562.607489][T12459] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 562.732157][ T8366] usb 5-1: Using ep0 maxpacket: 8 [ 562.735511][ T8366] usb 5-1: unable to get BOS descriptor or descriptor too short [ 562.735561][ T8366] usb 5-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=44.07 [ 562.753413][ T8366] usb 5-1: config 1 has an invalid interface number: 8 but max is 0 [ 562.753484][ T8366] usb 5-1: config 1 has no interface number 0 [ 562.753658][ T8366] usb 5-1: config 1 interface 8 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 562.753791][ T8366] usb 5-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0x11, changing to 0x1 [ 562.753862][ T8366] usb 5-1: config 1 interface 8 altsetting 7 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 562.753985][ T8366] usb 5-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 562.754048][ T8366] usb 5-1: config 1 interface 8 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.754181][ T8366] usb 5-1: config 1 interface 8 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 562.754247][ T8366] usb 5-1: config 1 interface 8 has no altsetting 0 [ 562.868854][ T8366] usb 5-1: string descriptor 0 read error: -22 [ 562.876883][ T8366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.951080][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.951124][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.977259][ T8366] cxacru 5-1:1.8: send of cm 0x90 failed (-71) [ 562.978761][ T8366] cxacru 5-1:1.8: usbatm_usb_probe: invalid endpoint 02! [ 562.998111][ T8366] cxacru 5-1:1.8: probe with driver cxacru failed with error -22 [ 563.098352][ T8367] logitech-djreceiver 0003:046D:C71B.0031: unknown main item tag 0x0 [ 563.098380][ T8367] logitech-djreceiver 0003:046D:C71B.0031: unknown main item tag 0x0 [ 563.098401][ T8367] logitech-djreceiver 0003:046D:C71B.0031: unknown main item tag 0x0 [ 563.098420][ T8367] logitech-djreceiver 0003:046D:C71B.0031: unknown main item tag 0x0 [ 563.098440][ T8367] logitech-djreceiver 0003:046D:C71B.0031: unknown main item tag 0x0 [ 563.098460][ T8367] logitech-djreceiver 0003:046D:C71B.0031: unknown main item tag 0x0 [ 563.098480][ T8367] logitech-djreceiver 0003:046D:C71B.0031: unknown main item tag 0x0 [ 563.098499][ T8367] logitech-djreceiver 0003:046D:C71B.0031: unknown main item tag 0x0 [ 563.098519][ T8367] logitech-djreceiver 0003:046D:C71B.0031: unknown main item tag 0x0 [ 563.098539][ T8367] logitech-djreceiver 0003:046D:C71B.0031: unknown main item tag 0x0 [ 563.214265][ T8367] usb 5-1: USB disconnect, device number 94 [ 563.286880][ T8366] usb 1-1: USB disconnect, device number 77 [ 564.089270][ T8373] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 564.222711][ T8373] usb 7-1: device descriptor read/64, error -71 [ 564.461424][ T8373] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 564.599128][ T8373] usb 7-1: device descriptor read/64, error -71 [ 564.709460][ T8373] usb usb7-port1: attempt power cycle [ 565.059505][ T8373] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 565.059612][ T8372] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 565.091222][ T8373] usb 7-1: device descriptor read/8, error -71 [ 565.219261][ T8372] usb 6-1: Using ep0 maxpacket: 16 [ 565.219748][ T8372] usb 6-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 565.220958][ T8372] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 565.220995][ T8372] usb 6-1: config 0 interface 0 has no altsetting 0 [ 565.227463][ T8372] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.227494][ T8372] usb 6-1: Product: syz [ 565.227512][ T8372] usb 6-1: Manufacturer: syz [ 565.227530][ T8372] usb 6-1: SerialNumber: syz [ 565.291972][ T8372] usb 6-1: config 0 descriptor?? [ 565.339191][ T8373] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 565.359818][ T8373] usb 7-1: device descriptor read/8, error -71 [ 565.464135][T12509] syzkaller1: entered promiscuous mode [ 565.464161][T12509] syzkaller1: entered allmulticast mode [ 565.481777][ T8373] usb usb7-port1: unable to enumerate USB device [ 565.516334][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 565.545301][ T8372] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input93 [ 565.567129][ T8372] imon:send_packet: packet tx failed (-71) [ 565.579106][ T8372] imon 6-1:0.0: panel buttons/knobs setup failed [ 565.851842][ T8372] rc_core: IR keymap rc-imon-pad not found [ 565.851859][ T8372] Registered IR keymap rc-empty [ 565.851917][ T8372] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 565.851931][ T8372] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 565.852668][ T8372] imon:send_packet: packet tx failed (-71) [ 565.871603][ T8372] imon 6-1:0.0: remote input dev register failed [ 565.871724][ T8372] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 565.960680][ T8372] imon 6-1:0.0: unable to initialize intf0, err 0 [ 565.965730][ T8372] usb 6-1: USB disconnect, device number 82 [ 566.312333][ T8372] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 566.471830][ T8372] usb 6-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 566.473554][ T8372] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 566.473587][ T8372] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 566.473622][ T8372] usb 6-1: config 0 interface 0 has no altsetting 0 [ 566.535925][ T8372] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.535955][ T8372] usb 6-1: Product: syz [ 566.535966][ T8372] usb 6-1: Manufacturer: syz [ 566.535977][ T8372] usb 6-1: SerialNumber: syz [ 566.563676][ T8372] usb 6-1: config 0 descriptor?? [ 566.564487][T12506] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 566.774274][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 566.789919][ T8372] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input95 [ 567.082876][ T30] audit: type=1326 audit(1793123171.096:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12490 comm="syz.0.1928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8819f559 code=0x7fc00000 [ 567.210833][ T8372] rc_core: IR keymap rc-imon-pad not found [ 567.210873][ T8372] Registered IR keymap rc-empty [ 567.210952][ T8372] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 567.210967][ T8372] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 567.252007][ T8372] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 567.277371][ T8372] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input96 [ 567.293503][ T8372] imon 6-1:0.0: iMON device (15c2:0045) on usb<6:83> initialized [ 567.414477][T12506] FAULT_INJECTION: forcing a failure. [ 567.414477][T12506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.414520][T12506] CPU: 0 UID: 0 PID: 12506 Comm: syz.5.1933 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.414542][T12506] Tainted: [L]=SOFTLOCKUP [ 567.414548][T12506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 567.414558][T12506] Call Trace: [ 567.414565][T12506] [ 567.414572][T12506] dump_stack_lvl+0xe8/0x150 [ 567.414602][T12506] should_fail_ex+0x410/0x560 [ 567.414629][T12506] _copy_from_user+0x2d/0xb0 [ 567.414654][T12506] lcd_write+0xc7/0x2d0 [ 567.414673][T12506] ? __pfx_lcd_write+0x10/0x10 [ 567.414691][T12506] vfs_write+0x296/0xba0 [ 567.414716][T12506] ? __pfx_vfs_write+0x10/0x10 [ 567.414735][T12506] ? __fget_files+0x2a/0x420 [ 567.414752][T12506] ? __fget_files+0x3a2/0x420 [ 567.414767][T12506] ? __fget_files+0x2a/0x420 [ 567.414786][T12506] ? fdget+0x1ac/0x250 [ 567.414807][T12506] ksys_write+0x150/0x270 [ 567.414827][T12506] ? __pfx_ksys_write+0x10/0x10 [ 567.414854][T12506] do_syscall_64+0x166/0x520 [ 567.414873][T12506] ? trace_irq_disable+0x3b/0x140 [ 567.414895][T12506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.414911][T12506] ? clear_bhb_loop+0x70/0xc0 [ 567.414931][T12506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.414947][T12506] RIP: 0033:0x7fed9b59f559 [ 567.414969][T12506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.414983][T12506] RSP: 002b:00007fed9c49a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 567.415001][T12506] RAX: ffffffffffffffda RBX: 00007fed9b825fa0 RCX: 00007fed9b59f559 [ 567.415013][T12506] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000004 [ 567.415024][T12506] RBP: 00007fed9c49a090 R08: 0000000000000000 R09: 0000000000000000 [ 567.415034][T12506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.415044][T12506] R13: 00007fed9b826038 R14: 00007fed9b825fa0 R15: 00007fed9b94fa48 [ 567.415069][T12506] [ 567.483577][ T8372] usb 6-1: USB disconnect, device number 83 [ 567.701088][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1941'. [ 567.913076][ T8767] udevd[8767]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 567.913193][ T8767] udevd[8767]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 569.211495][ T8372] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 569.376844][ T8372] usb 7-1: New USB device found: idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 569.394664][ T8372] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.394686][ T8372] usb 7-1: config 0 has no interfaces? [ 569.421256][ T8372] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.421288][ T8372] usb 7-1: Product: syz [ 569.421305][ T8372] usb 7-1: Manufacturer: syz [ 569.421322][ T8372] usb 7-1: SerialNumber: syz [ 569.457363][ T8372] usb 7-1: config 0 descriptor?? [ 569.736458][ T8372] usb 7-1: USB disconnect, device number 63 [ 570.311571][T12573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 570.781837][T12578] fuse: Bad value for 'fd' [ 570.971344][T12579] syzkaller0: entered promiscuous mode [ 570.971364][T12579] syzkaller0: entered allmulticast mode [ 571.015110][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1954'. [ 571.900319][ T8372] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 572.049437][ T8372] usb 3-1: Using ep0 maxpacket: 8 [ 572.051074][ T8372] usb 3-1: New USB device found: idVendor=04b4, idProduct=0001, bcdDevice=0.40 [ 572.052643][ T8372] usb 3-1: config 1 interface 0 altsetting 58 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 572.052678][ T8372] usb 3-1: config 1 interface 0 has no altsetting 0 [ 572.099952][ T8372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.099986][ T8372] usb 3-1: Product: ⛚↿쁕㜊蜜逄콄ꅿꆐ뒋ສ녕듣䙆赍๣ո㾎炛ℽ໴ᔗ坍璙醭汏 [ 572.100004][ T8372] usb 3-1: Manufacturer: ї [ 572.100015][ T8372] usb 3-1: SerialNumber: 䅂쥐ᘲ⌛ᐵ௅睂ꄥ㎶톼뾤樕༷멭䵓㯃胓놃Ӛ䰏泺┆㢤⟅喚࿴㐡佁蜣潔䑥㡡촕⢛汊쉇坉䳈侬큂庋鬾嶁傕馴虢ở傈ਓ셦똿0⊿㊉ᨤ‰땔쩛䕗㟪辍气넗R⭶鐒㉙੺쇽᱂亣긕᪂璇絚椻ᕐꑔ拏섊ࡅ᧖鼅稷嚐㶶韬⡂ਠ♯敻怾ꦄว슠敩嚡삁ᳺ⛅倲 [ 572.309839][ T8373] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 572.420707][ T8367] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 572.482516][ T8373] usb 6-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 572.482552][ T8373] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 572.490095][ T8366] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 572.499896][ T8373] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 572.499950][ T8373] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 572.500025][ T8373] usb 6-1: config 0 interface 0 has no altsetting 0 [ 572.546754][ T8373] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 572.546850][ T8373] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 572.546882][ T8373] usb 6-1: config 0 interface 0 has no altsetting 0 [ 572.548205][ T8373] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 572.548824][ T8373] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 572.548856][ T8373] usb 6-1: config 0 interface 0 has no altsetting 0 [ 572.612636][ T8367] usb 1-1: New USB device found: idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 572.628691][ T8373] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 572.628777][ T8373] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 572.628798][ T8373] usb 6-1: config 0 interface 0 has no altsetting 0 [ 572.635232][ T8367] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.635313][ T8367] usb 1-1: config 0 has no interfaces? [ 572.680729][ T8373] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 572.681634][ T8373] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 572.681669][ T8373] usb 6-1: config 0 interface 0 has no altsetting 0 [ 572.683714][ T8373] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 572.683796][ T8373] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 572.683827][ T8373] usb 6-1: config 0 interface 0 has no altsetting 0 [ 572.684123][ T8367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.684150][ T8367] usb 1-1: Product: syz [ 572.684167][ T8367] usb 1-1: Manufacturer: syz [ 572.684184][ T8367] usb 1-1: SerialNumber: syz [ 572.685156][ T8373] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 572.685207][ T8373] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 572.685263][ T8373] usb 6-1: config 0 interface 0 has no altsetting 0 [ 572.709849][ T8373] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 572.709912][ T8373] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 572.709933][ T8373] usb 6-1: config 0 interface 0 has no altsetting 0 [ 572.838879][ T8373] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 572.838937][ T8373] usb 6-1: Product: syz [ 572.838956][ T8373] usb 6-1: Manufacturer: syz [ 572.841722][ T8366] usb 7-1: Using ep0 maxpacket: 32 [ 572.851238][ T8366] usb 7-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 572.865261][ T8367] usb 1-1: config 0 descriptor?? [ 572.872177][ T8373] usb 6-1: SerialNumber: syz [ 572.891804][ T8373] usb 6-1: config 0 descriptor?? [ 572.897567][ T8366] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 572.897597][ T8366] usb 7-1: config 0 has no interface number 0 [ 572.897651][ T8366] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 572.937087][ T8366] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.937119][ T8366] usb 7-1: Product: syz [ 572.937135][ T8366] usb 7-1: Manufacturer: syz [ 572.937150][ T8366] usb 7-1: SerialNumber: syz [ 572.997503][ T8373] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 572.998131][ T8366] usb 7-1: config 0 descriptor?? [ 573.012405][T12600] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 573.024788][T12592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.025255][T12592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.076722][T12592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.109812][T12592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.219867][T12592] fuse: blksize only supported for fuseblk [ 573.248114][ T8372] usbhid 3-1:1.0: can't add hid device: -71 [ 573.248262][ T8372] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 573.269265][ T8372] usb 3-1: USB disconnect, device number 79 [ 573.333547][ T8367] usb 1-1: USB disconnect, device number 78 [ 573.349627][T12600] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 573.539995][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 573.562845][ T8372] usb 6-1: USB disconnect, device number 84 [ 573.585259][ T8372] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 573.792495][ T8366] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 573.793223][ T8366] asix 7-1:0.188: probe with driver asix failed with error -61 [ 574.829703][ T8373] usb 7-1: USB disconnect, device number 64 [ 574.964158][T12621] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1968'. [ 575.035118][ T8372] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 575.186685][ T8372] usb 3-1: unable to get BOS descriptor or descriptor too short [ 575.188001][ T8372] usb 3-1: not running at top speed; connect to a high speed hub [ 575.188027][ T8372] usb 3-1: New USB device found: idVendor=1430, idProduct=474a, bcdDevice=0.40 [ 575.215527][ T8372] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 575.215554][ T8372] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 575.262162][ T8372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.262540][ T8372] usb 3-1: Product: syz [ 575.262562][ T8372] usb 3-1: Manufacturer: syz [ 575.262574][ T8372] usb 3-1: SerialNumber: syz [ 575.301763][T12616] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 575.523415][T12627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.523793][T12627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.564988][ T8372] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 575.565053][ T8372] usb 3-1: MIDIStreaming interface descriptor not found [ 575.766421][ T8372] usb 3-1: USB disconnect, device number 80 [ 575.872707][ T6978] udevd[6978]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.940372][ T8373] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 576.109604][ T8373] usb 6-1: unable to get BOS descriptor or descriptor too short [ 576.109655][ T8373] usb 6-1: New USB device found: idVendor=0baf, idProduct=00f1, bcdDevice=d4.68 [ 576.110830][ T8373] usb 6-1: config 9 has an invalid interface number: 97 but max is 0 [ 576.110938][ T8373] usb 6-1: config 9 has no interface number 0 [ 576.165745][ T8373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.165777][ T8373] usb 6-1: Product: syz [ 576.165795][ T8373] usb 6-1: Manufacturer: syz [ 576.165812][ T8373] usb 6-1: SerialNumber: syz [ 576.211162][T12632] netlink: 408 bytes leftover after parsing attributes in process `syz.6.1971'. [ 576.446797][T12636] fuse: Unknown parameter 'l6UNA7s@' [ 576.860898][ T8372] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 576.904542][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 576.904569][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 577.035616][ T8372] usb 3-1: New USB device found: idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 577.054785][ T8372] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 577.054807][ T8372] usb 3-1: config 54 has 0 interfaces, different from the descriptor's value: 1 [ 577.089674][ T8372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.089733][ T8372] usb 3-1: Product: syz [ 577.089750][ T8372] usb 3-1: Manufacturer: syz [ 577.089765][ T8372] usb 3-1: SerialNumber: syz [ 577.319379][ T8366] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 577.381686][ T8367] usb 3-1: USB disconnect, device number 81 [ 577.471711][ T8366] usb 7-1: Using ep0 maxpacket: 8 [ 577.472841][ T8366] usb 7-1: New USB device found: idVendor=0dba, idProduct=1000, bcdDevice=0.40 [ 577.474510][ T8366] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 152, changing to 7 [ 577.474545][ T8366] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 25088, setting to 1024 [ 577.505024][ T8366] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.505059][ T8366] usb 7-1: Product: syz [ 577.505077][ T8366] usb 7-1: Manufacturer: syz [ 577.505093][ T8366] usb 7-1: SerialNumber: syz [ 577.714715][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880685a8400: rx timeout, send abort [ 577.717235][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880685a8400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 577.781031][ T8373] usb 6-1: USB disconnect, device number 85 [ 577.865899][ T8366] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 577.927682][ T8366] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 578.356549][ T8366] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 578.384426][ T8366] usb 7-1: USB disconnect, device number 65 [ 578.502163][ T9949] udevd[9949]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.042047][T12670] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1981'. [ 579.509848][ T8373] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 579.660253][ T8373] usb 5-1: Using ep0 maxpacket: 32 [ 579.675567][ T8373] usb 5-1: unable to get BOS descriptor or descriptor too short [ 579.675618][ T8373] usb 5-1: New USB device found: idVendor=200c, idProduct=1018, bcdDevice=0.40 [ 579.704607][ T8373] usb 5-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config [ 579.704628][ T8373] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 579.740708][ T8373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.740730][ T8373] usb 5-1: Product: syz [ 579.740742][ T8373] usb 5-1: Manufacturer: syz [ 579.740753][ T8373] usb 5-1: SerialNumber: syz [ 580.023041][T12679] kvm [12678]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0xc1) = 0x60000009b27 [ 580.023141][T12679] kvm [12678]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0xc2) = 0x60000008cff [ 580.088286][ T8373] usb 5-1: 3:0: failed to get current value for ch 1 (-71) [ 580.106999][ T8373] usb 5-1: 3:0: cannot get RANGE values for control 2 (id 3) [ 580.107045][ T8373] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 580.107069][ T8373] usb 5-1: [3] FU [LFE Playback Volume] ch = 2, val = 0/1/1 [ 580.136614][ T8373] usb 5-1: 3:0: cannot get RANGE values for control 2 (id 3) [ 580.136651][ T8373] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 580.136674][ T8373] usb 5-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 580.157653][ T8373] usb 5-1: 3:0: cannot get RANGE values for control 4 (id 3) [ 580.181302][ T8373] usb 5-1: 3:0: failed to get current value for ch 1 (-71) [ 580.202447][ T8373] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 580.225744][ T8373] usb 5-1: 3:0: failed to get current value for ch 1 (-71) [ 580.236874][ T8373] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 580.253167][ T8373] usb 5-1: 3:0: cannot get RANGE values for control 11 (id 3) [ 580.255168][ T8373] usb 5-1: 3:0: cannot get RANGE values for control 11 (id 3) [ 580.257003][ T8373] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 580.323512][T12679] kvm [12678]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x11e) = 0x60000007fa7 [ 580.432170][T12679] kvm [12678]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x186) = 0x60000008e27 [ 580.432263][T12679] kvm [12678]: vcpu0, guest rIP: 0x79 Unhandled WRMSR(0x187) = 0x600000000bb [ 580.539455][ T7499] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 580.558081][ T8373] usb 5-1: USB disconnect, device number 95 [ 580.699812][ T7499] usb 6-1: New USB device found: idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 580.727985][ T7499] usb 6-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 580.728017][ T7499] usb 6-1: config 54 has 0 interfaces, different from the descriptor's value: 1 [ 580.770081][ T7499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.770112][ T7499] usb 6-1: Product: syz [ 580.770124][ T7499] usb 6-1: Manufacturer: syz [ 580.770136][ T7499] usb 6-1: SerialNumber: syz [ 580.893791][ T9950] udevd[9950]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.072240][ T8373] usb 6-1: USB disconnect, device number 86 [ 582.035438][T12700] fuse: Unknown parameter 'u@Jt9d|zg9q>Zi0xffffffffffffffff' [ 582.040911][T12701] fuse: Unknown parameter 'u@Jt9d|zg9q>Zi0xffffffffffffffff' [ 582.598851][T12708] ip_tables: iptables: counters copy to user failed while replacing table [ 584.296454][ T8373] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 584.490654][ T8373] usb 7-1: New USB device found: idVendor=17cc, idProduct=1969, bcdDevice=1.00 [ 584.492193][ T8373] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.492260][ T8373] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.492285][ T8373] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 584.541963][ T8373] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.542000][ T8373] usb 7-1: Product: syz [ 584.542012][ T8373] usb 7-1: Manufacturer: syz [ 584.542023][ T8373] usb 7-1: SerialNumber: syz [ 584.805683][ T8373] snd-usb-caiaq 7-1:1.0: invalid EPs [ 584.805727][ T8373] usb 7-1: unable to init card! (ret=-22) [ 584.806308][ T8373] snd-usb-caiaq 7-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 585.179429][ T8373] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 585.340944][ T8373] usb 6-1: New USB device found: idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 585.343681][ T8373] usb 6-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 585.343709][ T8373] usb 6-1: config 54 has 0 interfaces, different from the descriptor's value: 1 [ 585.384674][ T8373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.384704][ T8373] usb 6-1: Product: syz [ 585.384721][ T8373] usb 6-1: Manufacturer: syz [ 585.384739][ T8373] usb 6-1: SerialNumber: syz [ 585.647707][ T30] audit: type=1326 audit(1793123189.666:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12739 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8819f559 code=0x7ffc0000 [ 585.679738][ T30] audit: type=1326 audit(1793123189.706:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12739 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8819f559 code=0x7ffc0000 [ 585.712924][ T8373] usb 6-1: USB disconnect, device number 87 [ 585.731465][ T30] audit: type=1326 audit(1793123189.756:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12739 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fae8819f559 code=0x7ffc0000 [ 585.731719][ T30] audit: type=1326 audit(1793123189.756:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12739 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8819f559 code=0x7ffc0000 [ 585.731947][ T30] audit: type=1326 audit(1793123189.756:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12739 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8819f559 code=0x7ffc0000 [ 585.733499][ T30] audit: type=1326 audit(1793123189.756:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12739 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fae8819f559 code=0x7ffc0000 [ 585.733494][T12734] syz.6.2004 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 585.733535][T12734] CPU: 0 UID: 0 PID: 12734 Comm: syz.6.2004 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.733568][T12734] Tainted: [L]=SOFTLOCKUP [ 585.733577][T12734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 585.733590][T12734] Call Trace: [ 585.733600][T12734] [ 585.733609][T12734] dump_stack_lvl+0xe8/0x150 [ 585.733653][T12734] dump_header+0xd3/0x4b0 [ 585.733689][T12734] oom_kill_process+0x3ab/0x9e0 [ 585.733725][T12734] out_of_memory+0xfb1/0x13b0 [ 585.733752][T12734] ? try_charge_memcg+0xc16/0x15f0 [ 585.733766][ T30] audit: type=1326 audit(1793123189.756:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12739 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8819f559 code=0x7ffc0000 [ 585.733800][T12734] ? __pfx_out_of_memory+0x10/0x10 [ 585.733827][T12734] ? do_raw_spin_unlock+0xf5/0x200 [ 585.733861][T12734] try_charge_memcg+0xccc/0x15f0 [ 585.733917][T12734] ? __pfx_try_charge_memcg+0x10/0x10 [ 585.733959][T12734] ? percpu_ref_tryget+0x15/0x180 [ 585.734013][T12734] ? __obj_cgroup_charge+0x36/0x2d0 [ 585.734045][T12734] __obj_cgroup_charge+0x20a/0x2d0 [ 585.734072][T12734] ? __obj_cgroup_charge+0x36/0x2d0 [ 585.734103][T12734] __memcg_slab_post_alloc_hook+0x772/0xdb0 [ 585.734154][T12734] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 585.734179][T12734] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 585.734204][T12734] ? __d_alloc+0x37/0x820 [ 585.734227][T12734] ? __d_alloc+0x37/0x820 [ 585.734258][T12734] __d_alloc+0x37/0x820 [ 585.734287][T12734] d_alloc+0x4b/0x190 [ 585.734310][T12734] ? lookup_one_qstr_excl+0xc4/0x360 [ 585.734341][T12734] lookup_one_qstr_excl+0xd8/0x360 [ 585.734375][T12734] filename_create+0x20e/0x370 [ 585.734405][T12734] ? kmem_cache_alloc_noprof+0x31a/0x600 [ 585.734434][T12734] ? __pfx_filename_create+0x10/0x10 [ 585.734466][T12734] ? __asan_memcpy+0x40/0x70 [ 585.734493][T12734] ? do_getname_kernel+0x183/0x230 [ 585.734533][T12734] start_creating_path+0x39/0x150 [ 585.734567][T12734] unix_bind+0x31f/0x1270 [ 585.734612][T12734] ? tomoyo_socket_bind_permission+0x1ae/0x290 [ 585.734645][T12734] ? __pfx_unix_bind+0x10/0x10 [ 585.734670][ T30] audit: type=1326 audit(1793123189.756:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12739 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8819f559 code=0x7ffc0000 [ 585.734687][T12734] ? bpf_lsm_socket_bind+0x9/0x20 [ 585.734720][T12734] __sys_bind+0x2e3/0x410 [ 585.734755][T12734] ? __pfx___sys_bind+0x10/0x10 [ 585.734831][T12734] ? rcu_is_watching+0x16/0xb0 [ 585.734877][T12734] __x64_sys_bind+0x7a/0x90 [ 585.734912][T12734] do_syscall_64+0x166/0x520 [ 585.734940][T12734] ? trace_irq_disable+0x3b/0x140 [ 585.734971][T12734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.735003][T12734] ? clear_bhb_loop+0x70/0xc0 [ 585.735033][T12734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.735058][T12734] RIP: 0033:0x7f1c2cf9f559 [ 585.735080][T12734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.735100][T12734] RSP: 002b:00007f1c2ddf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 585.735125][T12734] RAX: ffffffffffffffda RBX: 00007f1c2d226180 RCX: 00007f1c2cf9f559 [ 585.735144][T12734] RDX: 000000000000006e RSI: 0000200000000a00 RDI: 000000000000000e [ 585.735159][T12734] RBP: 00007f1c2d036b20 R08: 0000000000000000 R09: 0000000000000000 [ 585.735174][T12734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.735188][T12734] R13: 00007f1c2d226218 R14: 00007f1c2d226180 R15: 00007f1c2d34fa48 [ 585.735228][T12734] [ 585.735323][T12734] memory: usage 8kB, limit 8kB, failcnt 21 [ 585.735340][T12734] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 585.735356][T12734] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 585.735371][T12734] Memory cgroup stats for /syz6/test: [ 585.735702][T12734] cache 0 [ 585.735713][T12734] rss 0 [ 585.735722][T12734] rss_huge 0 [ 585.735730][T12734] shmem 0 [ 585.735739][T12734] mapped_file 0 [ 585.735748][T12734] dirty 0 [ 585.735756][T12734] writeback 0 [ 585.735766][T12734] workingset_refault_anon 0 [ 585.735775][T12734] workingset_refault_file 0 [ 585.735785][T12734] swap 0 [ 585.735793][T12734] swapcached 0 [ 585.735803][T12734] pgpgin 0 [ 585.735811][T12734] pgpgout 0 [ 585.735819][T12734] pgfault 0 [ 585.735828][T12734] pgmajfault 0 [ 585.735837][T12734] inactive_anon 0 [ 585.735846][T12734] active_anon 0 [ 585.735856][T12734] inactive_file 0 [ 585.735864][T12734] active_file 0 [ 585.735873][T12734] unevictable 0 [ 585.735882][T12734] hierarchical_memory_limit 8192 [ 585.735892][T12734] hierarchical_memsw_limit 9223372036854771712 [ 585.735903][T12734] total_cache 0 [ 585.735912][T12734] total_rss 0 [ 585.735921][T12734] total_rss_huge 0 [ 585.735930][T12734] total_shmem 0 [ 585.735939][T12734] total_mapped_file 0 [ 585.735948][T12734] total_dirty 0 [ 585.735957][T12734] total_writeback 0 [ 585.735966][T12734] total_workingset_refault_anon 0 [ 585.735984][T12734] total_workingset_refault_file 0 [ 585.735994][T12734] total_swap 0 [ 585.736002][T12734] total_swapcached 0 [ 585.736720][T12734] total_pgpgin 0 [ 585.736732][T12734] total_pgpgout 0 [ 585.736755][T12734] total_pgfault 0 [ 585.736764][T12734] total_pgmajfault 0 [ 585.736774][T12734] total_inactive_anon 0 [ 585.736782][T12734] total_active_anon 0 [ 585.736790][T12734] total_inactive_file 0 [ 585.736799][T12734] total_active_file 0 [ 585.736808][T12734] total_unevictable 0 [ 585.736817][T12734] anon_cost 0 [ 585.736824][T12734] file_cost 0 [ 585.736842][T12734] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6/test,task_memcg=/syz6/test,task=syz.6.2004,pid=12723,uid=0 [ 585.738201][T12734] Memory cgroup out of memory: Killed process 12723 (syz.6.2004) total-vm:99208kB, anon-rss:9632kB, file-rss:21780kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:0 [ 585.749974][ T30] audit: type=1326 audit(1793123189.776:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12739 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fae8819f559 code=0x7ffc0000 [ 585.819554][ T30] audit: type=1326 audit(1793123189.796:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12739 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae8819f559 code=0x7ffc0000 [ 585.901700][ T7499] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 586.204508][ T7499] usb 5-1: Using ep0 maxpacket: 32 [ 586.264840][ T7499] usb 5-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 586.313688][ T7499] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 586.313716][ T7499] usb 5-1: config 0 has no interface number 0 [ 586.313756][ T7499] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 586.313780][ T7499] usb 5-1: config 0 interface 1 has no altsetting 0 [ 586.364546][ T7499] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.364567][ T7499] usb 5-1: Product: syz [ 586.364579][ T7499] usb 5-1: Manufacturer: syz [ 586.364591][ T7499] usb 5-1: SerialNumber: syz [ 586.494592][ T7499] usb 5-1: config 0 descriptor?? [ 586.822469][ T7499] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 586.822508][ T7499] cx231xx 5-1:0.1: Not found matching IAD interface [ 586.842535][ T7499] usb 5-1: USB disconnect, device number 96 [ 587.730654][ T8366] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 587.801473][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2014'. [ 587.879086][ T8366] usb 3-1: Using ep0 maxpacket: 32 [ 587.879832][ T8366] usb 3-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 587.880809][ T8366] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 587.880828][ T8366] usb 3-1: config 0 has no interface number 0 [ 587.880865][ T8366] usb 3-1: config 0 interface 12 has no altsetting 0 [ 587.887082][ T8366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.887112][ T8366] usb 3-1: Product: syz [ 587.887130][ T8366] usb 3-1: Manufacturer: syz [ 587.887147][ T8366] usb 3-1: SerialNumber: syz [ 587.996918][ T8366] usb 3-1: config 0 descriptor?? [ 588.066003][ T8373] usb 7-1: USB disconnect, device number 66 [ 588.280710][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2016'. [ 589.039622][ T8373] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 589.191160][ T8373] usb 1-1: New USB device found: idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 589.192557][ T8373] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 589.192586][ T8373] usb 1-1: config 54 has 0 interfaces, different from the descriptor's value: 1 [ 589.195060][ T8373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.195089][ T8373] usb 1-1: Product: syz [ 589.195102][ T8373] usb 1-1: Manufacturer: syz [ 589.195113][ T8373] usb 1-1: SerialNumber: syz [ 589.408224][ T8373] usb 1-1: USB disconnect, device number 79 [ 589.783737][T12792] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2024'. [ 590.460123][ T8367] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 590.611242][ T8367] usb 6-1: New USB device found: idVendor=17ef, idProduct=6047, bcdDevice=0.00 [ 590.615815][ T8367] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 590.616064][ T8367] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.616092][ T8367] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 590.616123][ T8367] usb 6-1: config 0 interface 0 has no altsetting 0 [ 590.616187][ T8367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.685759][ T8367] usb 6-1: config 0 descriptor?? [ 591.026495][ T8366] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 591.026558][ T8366] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 591.026572][ T8366] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 591.026634][ T8366] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 591.076677][ T8366] usb 3-1: USB disconnect, device number 82 [ 591.106591][ T6766] udevd[6766]: setting mode of /dev/bus/usb/003/082 to 020664 failed: No such file or directory [ 591.108365][ T6766] udevd[6766]: setting owner of /dev/bus/usb/003/082 to uid=0, gid=0 failed: No such file or directory [ 591.185700][ T8367] input: HID 17ef:6047 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:17EF:6047.0032/input/input98 [ 591.258326][ T8367] lenovo 0003:17EF:6047.0032: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 591.958586][T12828] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2038'. [ 592.172524][T12837] ip_tables: iptables: counters copy to user failed while replacing table [ 592.179165][ T8366] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 592.340003][ T8366] usb 3-1: New USB device found: idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 592.341271][ T8366] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 592.341298][ T8366] usb 3-1: config 54 has 0 interfaces, different from the descriptor's value: 1 [ 592.344878][ T8366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.344907][ T8366] usb 3-1: Product: syz [ 592.344934][ T8366] usb 3-1: Manufacturer: syz [ 592.344951][ T8366] usb 3-1: SerialNumber: syz [ 592.391059][ T8367] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 592.477288][T12839] syzkaller1: entered promiscuous mode [ 592.477307][T12839] syzkaller1: entered allmulticast mode [ 592.528199][ T24] usb 6-1: reset full-speed USB device number 88 using dummy_hcd [ 592.569090][ T8367] usb 7-1: Using ep0 maxpacket: 32 [ 592.569844][ T8367] usb 7-1: New USB device found: idVendor=2040, idProduct=c604, bcdDevice=1.8e [ 592.573353][ T8367] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.594290][ T8367] usb 7-1: config 0 descriptor?? [ 592.624331][ T8367] usb 7-1: dvb_usb_v2: found a 'Hauppauge 126xxx DVBT' in warm state [ 592.672725][ T8367] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 592.696462][ T8367] dvbdev: DVB: registering new adapter (Hauppauge 126xxx DVBT) [ 592.696529][ T8367] usb 7-1: media controller created [ 592.734284][T12829] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 592.746246][T12829] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 592.754705][T12829] CPU: 0 UID: 0 PID: 12829 Comm: syz.2.2036 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.765748][T12829] Tainted: [L]=SOFTLOCKUP [ 592.770088][T12829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 592.780160][T12829] RIP: 0010:__mutex_lock+0x143/0x15a0 [ 592.785575][T12829] Code: c0 00 75 c8 9b 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 8d 12 00 00 83 3d 5b e8 c6 0f 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 b2 ed 3d f6 4d 39 64 24 58 0f 85 a0 11 00 00 [ 592.805204][T12829] RSP: 0000:ffffc9000554f460 EFLAGS: 00010206 [ 592.811309][T12829] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9bc87503 [ 592.819305][T12829] RDX: 0000000000000000 RSI: ffffffff8e926c63 RDI: 00000000000000c0 [ 592.827297][T12829] RBP: ffffc9000554f5f8 R08: ffffc9000554f567 R09: 0000000000000000 [ 592.835293][T12829] R10: ffffc9000554f540 R11: fffff52000aa9ead R12: 0000000000000068 [ 592.843295][T12829] R13: 0000000000000000 R14: 1ffff92000aa9ea0 R15: 0000000000000000 [ 592.851299][T12829] FS: 00007f5f771f76c0(0000) GS:ffff88812362d000(0000) knlGS:0000000000000000 [ 592.860286][T12829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.866900][T12829] CR2: 000000110c2ae10b CR3: 00000000754a2000 CR4: 00000000003526f0 [ 592.874896][T12829] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 592.882890][T12829] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 592.890886][T12829] Call Trace: [ 592.894193][T12829] [ 592.897150][T12829] ? __mutex_lock+0x31b/0x15a0 [ 592.901947][T12829] ? dvb_usbv2_generic_write+0x26/0x60 [ 592.907442][T12829] ? __pfx___mutex_lock+0x10/0x10 [ 592.912494][T12829] ? __pfx___mutex_lock+0x10/0x10 [ 592.917559][T12829] ? __mutex_lock+0x305/0x15a0 [ 592.922365][T12829] dvb_usbv2_generic_write+0x26/0x60 [ 592.927684][T12829] mxl111sf_ctrl_msg+0x160/0x2f0 [ 592.932683][T12829] mxl111sf_write_reg+0xa9/0x1b0 [ 592.937664][T12829] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 592.943248][T12829] mxl111sf_i2c_xfer+0x463/0x5060 [ 592.948294][T12829] ? lock_acquire+0x115/0x350 [ 592.953016][T12829] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 592.958498][T12829] ? kernel_text_address+0xa5/0xe0 [ 592.963646][T12829] ? __kernel_text_address+0xd/0x30 [ 592.968888][T12829] ? unwind_get_return_address+0x4d/0x90 [ 592.974569][T12829] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 592.980765][T12829] ? arch_stack_walk+0xfb/0x150 [ 592.985675][T12829] ? stack_trace_save+0xa9/0x100 [ 592.990661][T12829] ? __pfx_stack_trace_save+0x10/0x10 [ 592.996067][T12829] ? stack_depot_save_flags+0x33/0x7f0 [ 593.001563][T12829] ? kasan_save_track+0x4f/0x80 [ 593.006458][T12829] ? kasan_save_track+0x3e/0x80 [ 593.011332][T12829] ? __kasan_kmalloc+0x93/0xb0 [ 593.016132][T12829] ? __kmalloc_node_track_caller_noprof+0x4af/0x720 [ 593.022746][T12829] ? memdup_user+0x2b/0xd0 [ 593.027191][T12829] ? look_up_lock_class+0x57/0x110 [ 593.032331][T12829] ? register_lock_class+0x31/0x2e0 [ 593.037556][T12829] ? __lock_acquire+0x747/0x2de0 [ 593.042532][T12829] ? do_raw_spin_lock+0x12b/0x2f0 [ 593.047602][T12829] __i2c_transfer+0x7bf/0x1fe0 [ 593.052404][T12829] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 593.058255][T12829] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 593.064102][T12829] ? rt_mutex_lock_nested+0x149/0x1c0 [ 593.069505][T12829] ? i2c_transfer+0xc7/0x2d0 [ 593.074133][T12829] i2c_transfer+0x1cb/0x2d0 [ 593.078673][T12829] i2cdev_ioctl_rdwr+0x460/0x740 [ 593.083654][T12829] i2cdev_ioctl+0x6a5/0x880 [ 593.088200][T12829] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 593.093266][T12829] ? __fget_files+0x2a/0x420 [ 593.097900][T12829] ? bpf_lsm_file_ioctl+0x9/0x20 [ 593.102873][T12829] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 593.107931][T12829] __se_sys_ioctl+0xfc/0x170 [ 593.112555][T12829] do_syscall_64+0x166/0x520 [ 593.117176][T12829] ? trace_irq_disable+0x3b/0x140 [ 593.122229][T12829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.128320][T12829] ? clear_bhb_loop+0x70/0xc0 [ 593.133028][T12829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.138955][T12829] RIP: 0033:0x7f5f7639f559 [ 593.143405][T12829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.163041][T12829] RSP: 002b:00007f5f771f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 593.171495][T12829] RAX: ffffffffffffffda RBX: 00007f5f76625fa0 RCX: 00007f5f7639f559 [ 593.179499][T12829] RDX: 0000200000000480 RSI: 0000000000000707 RDI: 0000000000000004 [ 593.187500][T12829] RBP: 00007f5f76436b20 R08: 0000000000000000 R09: 0000000000000000 [ 593.195497][T12829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.203496][T12829] R13: 00007f5f76626038 R14: 00007f5f76625fa0 R15: 00007f5f7674fa48 [ 593.211500][T12829] [ 593.214558][T12829] Modules linked in: [ 593.219892][T12829] ---[ end trace 0000000000000000 ]--- [ 593.226479][ T8367] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 593.252590][T12829] RIP: 0010:__mutex_lock+0x143/0x15a0 [ 593.252630][T12829] Code: c0 00 75 c8 9b 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 8d 12 00 00 83 3d 5b e8 c6 0f 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 b2 ed 3d f6 4d 39 64 24 58 0f 85 a0 11 00 00 [ 593.252650][T12829] RSP: 0000:ffffc9000554f460 EFLAGS: 00010206 [ 593.252671][T12829] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9bc87503 [ 593.252687][T12829] RDX: 0000000000000000 RSI: ffffffff8e926c63 RDI: 00000000000000c0 [ 593.252703][T12829] RBP: ffffc9000554f5f8 R08: ffffc9000554f567 R09: 0000000000000000 [ 593.252720][T12829] R10: ffffc9000554f540 R11: fffff52000aa9ead R12: 0000000000000068 [ 593.252735][T12829] R13: 0000000000000000 R14: 1ffff92000aa9ea0 R15: 0000000000000000 [ 593.252751][T12829] FS: 00007f5f771f76c0(0000) GS:ffff88812362d000(0000) knlGS:0000000000000000 [ 593.252772][T12829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 593.252786][T12829] CR2: 000000110c2ae10b CR3: 00000000754a2000 CR4: 00000000003526f0 [ 593.252808][T12829] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 593.252822][T12829] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 593.252863][T12829] Kernel panic - not syncing: Fatal exception [ 593.378352][T12829] Kernel Offset: disabled [ 593.382700][T12829] Rebooting in 86400 seconds..