last executing test programs: 1m1.514289711s ago: executing program 4 (id=312): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0xfffffffffffffff9}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x40080) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000100)="812be6db", 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a06030000002300"/49], 0xfdef) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 59.38134112s ago: executing program 4 (id=318): socket(0x11, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x62}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x4, 0x0, 0x0, {[@fastopen={0x22, 0x6, "d9deea2a"}]}}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000640)=ANY=[]) read$FUSE(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}}, 0x10000, 0x6, 0x0, 0x6, 0x8}, &(0x7f00000000c0)=0x98) 58.330825066s ago: executing program 4 (id=321): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000500)={'comedi_test\x00', [0xa, 0x7fe, 0x1, 0x0, 0x0, 0x80000000, 0x8, 0xb, 0xa, 0xfc, 0x4, 0x8, 0xa, 0x4, 0x3, 0x80, 0x1, 0x1a449, 0x3, 0x40000007, 0x100, 0x2, 0xf27, 0x6, 0x2, 0x0, 0x5, 0x7, 0x4, 0x10000, 0x8]}) ioctl$COMEDI_SETRSUBD(r0, 0x6410) syz_io_uring_setup(0x3ae3, &(0x7f0000000000)={0x0, 0x3c6e, 0x0, 0x2, 0x1d0}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x100000e, 0x13, 0xffffffffffffffff, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x65, 0x0, @fd=r0, 0x23f62d6f, 0x0, 0x97, 0x1, 0x0, {0x0, r3}}) 57.974801206s ago: executing program 4 (id=323): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) sendmmsg$inet6(r0, &(0x7f0000000dc0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="140000000000000029000000340000000300000000000000180000000000000029000000360100002f00000000000000"], 0x30}}], 0x2, 0x4044404) 57.862303568s ago: executing program 4 (id=324): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc4c85513, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x4, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') listen(r0, 0xa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x22000, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000000) 56.263436752s ago: executing program 4 (id=331): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x4, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000040)=[@dead_binder_done], 0x44, 0x0, &(0x7f0000000080)="c1707a83862cef972c68380cdb23adb0230eac6707e5f5d8fe3637abf60f43e40e571c860e5096a8ced5f3d93c97ce655f00be7042c1a1aba4b54c4504f106cf78f572a1"}) (async) r1 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) (async) r2 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000240), 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0xc5d, 0xdd9, 0x4d06, 0x5, 0xf, 0xc, 0x6c}, &(0x7f0000000340)=0x9c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000380)={r4, 0x10000}, 0x8) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r2) (async, rerun: 32) ioctl$DRM_IOCTL_GET_UNIQUE(r5, 0xc0106401, &(0x7f0000000440)={0x2b, &(0x7f0000000400)=""/43}) (async, rerun: 32) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) r6 = syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x100) ioctl$BLKRASET(r6, 0x1262, &(0x7f00000004c0)=0x6) (async) r7 = syz_open_dev$MSR(&(0x7f0000000500), 0x7, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, &(0x7f0000000580)=""/171, &(0x7f0000000640)=0xab) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000680)={0xa, 0x0, [{0x80000001, 0xfffffff8, 0x4, 0x0, 0x48cc, 0x8001, 0x6}, {0x80000008, 0xb, 0x5, 0x1, 0x1, 0xfffff0be, 0xa}, {0x7, 0x9, 0x4, 0x0, 0x1ff, 0xff80000, 0x7fffffff}, {0x80000001, 0x0, 0x1, 0xa17, 0x5, 0x1, 0x8}, {0x80000008, 0x9, 0x5, 0x6, 0x10000, 0x8}, {0xd, 0x639, 0x5, 0x6, 0x7, 0x7fffffff, 0xffff}, {0x2, 0x77839051, 0x7, 0x2, 0x1, 0x0, 0x401}, {0xc0000000, 0x80, 0x1, 0xc, 0x0, 0x8, 0xffff91d2}, {0xa, 0x6f6e, 0x7, 0x1ac6, 0xfffffffc, 0x8, 0x400}, {0x80000000, 0x0, 0x5, 0x1152f79f, 0x7622a4f, 0x2}]}) (async, rerun: 64) inotify_add_watch(r5, &(0x7f0000000840)='./file0\x00', 0x8) (async, rerun: 64) unlinkat(r5, &(0x7f0000000880)='./file0\x00', 0x200) (async) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000008c0)={0x0, 0x3, 0x1, "801276823a5ede4eeb5bba50e816cf58f8e2ce14a34994b8d231a64cfea3ae6a", 0x32315241}) (async, rerun: 64) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r7, 0xf501, 0x0) (async, rerun: 64) connect$tipc(r5, &(0x7f0000000900)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x1}}, 0x10) (async) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000980)=0x14) recvmsg$kcm(r5, &(0x7f0000001b40)={&(0x7f00000009c0)=@can, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1, &(0x7f0000001a80)=""/153, 0x99}, 0x40000000) 40.884265872s ago: executing program 32 (id=331): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x4, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000040)=[@dead_binder_done], 0x44, 0x0, &(0x7f0000000080)="c1707a83862cef972c68380cdb23adb0230eac6707e5f5d8fe3637abf60f43e40e571c860e5096a8ced5f3d93c97ce655f00be7042c1a1aba4b54c4504f106cf78f572a1"}) (async) r1 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) (async) r2 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000240), 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0xc5d, 0xdd9, 0x4d06, 0x5, 0xf, 0xc, 0x6c}, &(0x7f0000000340)=0x9c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000380)={r4, 0x10000}, 0x8) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r2) (async, rerun: 32) ioctl$DRM_IOCTL_GET_UNIQUE(r5, 0xc0106401, &(0x7f0000000440)={0x2b, &(0x7f0000000400)=""/43}) (async, rerun: 32) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) r6 = syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x100) ioctl$BLKRASET(r6, 0x1262, &(0x7f00000004c0)=0x6) (async) r7 = syz_open_dev$MSR(&(0x7f0000000500), 0x7, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) getsockopt$inet6_tcp_buf(r5, 0x6, 0x21, &(0x7f0000000580)=""/171, &(0x7f0000000640)=0xab) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000680)={0xa, 0x0, [{0x80000001, 0xfffffff8, 0x4, 0x0, 0x48cc, 0x8001, 0x6}, {0x80000008, 0xb, 0x5, 0x1, 0x1, 0xfffff0be, 0xa}, {0x7, 0x9, 0x4, 0x0, 0x1ff, 0xff80000, 0x7fffffff}, {0x80000001, 0x0, 0x1, 0xa17, 0x5, 0x1, 0x8}, {0x80000008, 0x9, 0x5, 0x6, 0x10000, 0x8}, {0xd, 0x639, 0x5, 0x6, 0x7, 0x7fffffff, 0xffff}, {0x2, 0x77839051, 0x7, 0x2, 0x1, 0x0, 0x401}, {0xc0000000, 0x80, 0x1, 0xc, 0x0, 0x8, 0xffff91d2}, {0xa, 0x6f6e, 0x7, 0x1ac6, 0xfffffffc, 0x8, 0x400}, {0x80000000, 0x0, 0x5, 0x1152f79f, 0x7622a4f, 0x2}]}) (async, rerun: 64) inotify_add_watch(r5, &(0x7f0000000840)='./file0\x00', 0x8) (async, rerun: 64) unlinkat(r5, &(0x7f0000000880)='./file0\x00', 0x200) (async) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000008c0)={0x0, 0x3, 0x1, "801276823a5ede4eeb5bba50e816cf58f8e2ce14a34994b8d231a64cfea3ae6a", 0x32315241}) (async, rerun: 64) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r7, 0xf501, 0x0) (async, rerun: 64) connect$tipc(r5, &(0x7f0000000900)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x1}}, 0x10) (async) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000980)=0x14) recvmsg$kcm(r5, &(0x7f0000001b40)={&(0x7f00000009c0)=@can, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1, &(0x7f0000001a80)=""/153, 0x99}, 0x40000000) 29.942968932s ago: executing program 3 (id=422): r0 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r0, r0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) getpgid(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000080)=r4, 0x4) write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000140)='2\x00', 0x2) r5 = socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fffffff}, {0xa, 0x4e21, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xb, 0x3, 0xffffffff]}}, 0x5c) fsopen(&(0x7f0000000300)='jfs\x00', 0x0) 28.561224826s ago: executing program 3 (id=424): r0 = syz_usb_connect(0x3, 0x1cb, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000125d0d4071040403dfe400f60c050902b901010000003f0914", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1, @ANYRES64=r2, @ANYRESHEX=r1, @ANYRES16, @ANYRESOCT=r4, @ANYRES16, @ANYRESDEC=r1, @ANYRES32=r0, @ANYRES16=r2], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000001c0)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r6, &(0x7f0000000080)=""/186, 0xba) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000104010200000000000000000a00000105000100e80000"], 0x24}, 0x1, 0x0, 0x0, 0x24000844}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) 25.090288969s ago: executing program 3 (id=435): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0xfffffffffffffff9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) getrlimit(0x3, &(0x7f0000000000)) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/vlan/config\x00') preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x3fe, 0x0) write$P9_RSTAT(r1, &(0x7f00000000c0)={0x59, 0x7d, 0x1, {0x0, 0x52, 0x7, 0x7, {0x93, 0x4, 0x3}, 0x92040000, 0xffffff3f, 0x7, 0x1, 0xd, '/dev/net/tun\x00', 0xd, '/dev/net/tun\x00', 0x0, '', 0x5, ')#.)}'}}, 0x59) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x40080) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x208500, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="050300000000000000000700000008000380", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044080) 24.661683009s ago: executing program 3 (id=436): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000740)={0x0, 0x96}) syz_open_procfs(r0, &(0x7f00000001c0)='map_files\x00') r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = accept$ax25(r1, &(0x7f0000000000)={{0x3, @default}, [@rose, @remote, @default, @rose, @netrom, @remote, @remote, @bcast]}, &(0x7f0000000140)=0x48) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)={0x38, r5, 0x1, 0x70bd2a, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000019480)={{}, 0x0, 0x8, @inherit={0x58, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000ea4f600014addba10b843f642a0000000840000000000000000000000000000000c18a000000000000080000000000000045feffffffffffff0200000000000000f9ffffffffffffff4c0b00000000eaffffff0100000000000700000000000000"]}, @devid=r3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000580)={r3, 0x6, 0x1, [0x2, 0xa93, 0x6, 0x5, 0x9], [0x7, 0x9, 0x2, 0x2, 0x9, 0x8, 0x3ff, 0xa1a5, 0x4, 0x2, 0x6, 0x7, 0x6, 0x43fb, 0xffff, 0x2, 0x2, 0x8000, 0x101, 0x100000000, 0xb, 0x1, 0x9, 0x5, 0x6, 0x4d, 0x0, 0x8, 0xfffffffffffffffc, 0xffffffff, 0xfffffffffffffffa, 0x8, 0x7, 0x10, 0x75d8, 0xbf, 0x7, 0x5, 0x7f, 0x5, 0x60d, 0x96e4, 0x26fc, 0x2, 0x0, 0x8, 0x8, 0xfffffffffffffff0, 0x8, 0x5, 0x40, 0x3c2, 0x1, 0x4, 0xfffffffffffff001, 0x7fffffff, 0x1, 0x1, 0x2, 0x4, 0x6, 0x401, 0x1, 0x7, 0x8, 0x5, 0x2db, 0x0, 0x8, 0x9, 0x2, 0xff, 0x1, 0x10, 0x5, 0x7f, 0x6, 0x80, 0x37d, 0x7, 0xfff, 0x7fffffffffffffff, 0x7, 0x81, 0x6, 0x3ff, 0x0, 0x7fffffffffffffff, 0xdb, 0x4, 0x7, 0x8000000000000001, 0x6, 0x100000001, 0x8, 0xffffffffffffff80, 0x8001, 0x1, 0x7, 0x8, 0xc377, 0x3, 0x3, 0x1000, 0x8001, 0x9, 0x2, 0x8000000000000000, 0x7fff, 0xffffffffffff8000, 0xdab, 0x8, 0x9, 0x8, 0x0, 0x3, 0x4, 0xffff, 0x81, 0x70f6, 0xf]}) lseek(r1, 0x0, 0x4) 23.442106428s ago: executing program 3 (id=440): socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000019380)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 23.138646388s ago: executing program 3 (id=443): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={r2, 0x2, &(0x7f0000000000)=[0x140, 0x4], &(0x7f0000000040)=[0x101, 0x1, 0x67a2, 0x3, 0x1, 0xf437, 0xfff], &(0x7f00000000c0)=[0x7c, 0xfffd, 0x100, 0x1]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000200)={r7, 0x3, 0x6, 0x0, 0x0}) 22.289470218s ago: executing program 33 (id=443): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000100)={r2, 0x2, &(0x7f0000000000)=[0x140, 0x4], &(0x7f0000000040)=[0x101, 0x1, 0x67a2, 0x3, 0x1, 0xf437, 0xfff], &(0x7f00000000c0)=[0x7c, 0xfffd, 0x100, 0x1]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000200)={r7, 0x3, 0x6, 0x0, 0x0}) 8.373840304s ago: executing program 0 (id=487): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x9, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r2 = syz_open_dev$vcsu(&(0x7f0000000580), 0x8ab, 0x422140) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1c00000009000000030000000000000069000100", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000003000000000000000000000000000000000000002df037035b59da389040ea84f1eb6732faf71229f9c36c6cbc41614b6b89a2eb3ff74da5b877c687d7ac54abe8281492b15d0478fd821e7765bc078fc6170441b5ff23b3950d324847edf265d1c79aab779bf54013000000000000004a1cbacab99fa3f85633ec375622b958a82ccb45d79d484ec355", @ANYRES32=r2, @ANYBLOB], 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1ff, 0x0, r3, 0x0, '\x00', r4, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) personality(0xfe47fef9f5ff7379) uname(&(0x7f0000000000)=""/123) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002480)={&(0x7f00000013c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x3c, r6, 0x1, 0x1070bd2c, 0x25dfdbfd, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x46}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000200)=0x8, 0x4) 8.234802649s ago: executing program 0 (id=488): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0xb, @win={{0x4, 0x7ff, 0x6, 0x8001}, 0x0, 0x0, &(0x7f0000000100)={{0x7, 0x400, 0x7, 0x4}, &(0x7f00000000c0)={{0xfffffffd, 0x5, 0x5, 0x1}, &(0x7f0000000080)={{0xc3feef09, 0x7, 0x9}}}}, 0x9, &(0x7f00000002c0)="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", 0x2}}) (async) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000140)={0xb, @win={{0x4, 0x7ff, 0x6, 0x8001}, 0x0, 0x0, &(0x7f0000000100)={{0x7, 0x400, 0x7, 0x4}, &(0x7f00000000c0)={{0xfffffffd, 0x5, 0x5, 0x1}, &(0x7f0000000080)={{0xc3feef09, 0x7, 0x9}}}}, 0x9, &(0x7f00000002c0)="429f65d9a3c487a728076bd57a48c7a3983ad2e7db1fc36b3e0027053827cd5f9e784e64af5c7890e8739674fd488f26e03ff3f255bdaede301a766aec97f28e212b4f82c4255cc4d8cf6ad249624035bde2d02fc0c4f910e7cf92a5670d5e73b900039dcbae916f59ff9f6dd3502d5b09313b3a6b1a9f60eb9a0142313bcfa2aec237b074c9d3ba585717fe779243943a2cbdc75cb64df33295fb894feda56feb36a388a723658a3de28c2f41eaa253aaaec0589838cbb62661e3237104213dabb58cb9415c786050dee05e0a4fdfee3c53743f51883841c6c54c9c36ffd6bac153ec9fcebf89c91d5404a3189ee12cea0ea5d3659fd86761ad3f0d5445c7d6d0e1aa02999e6c75ce09b33d658cf6eed60e6df6c0cb18c1ab63286b0796ce228e7ccaebd44b487146b188835de976e7e3e196af67cf4f59e3b88f64273d69140a9036252e69d191ac57f830f9fa2a45d242c5d1b0a3be7cb1b66c09a756c709985ed10a3424c8ad4ae4b3517f0267a248b253246929382b5cd2d106d7eb94b81a76158d5355886ff91b9a7f58b97e9b47a53ea98cb1323cdd3872d2f6cc6e7c8b2485c8771cd598716ec22d668465c580b995139cae3107492704845f33223dbb178c2b125b1b3f531295af34e87ea706dd9101f402d33582b0fd3ab33690f6b6e94164a7b636386266f7dd7ae2d7fdd1db5a2312aa812d23fde1285efea58975ce222dbe507543cd0823ea5d15e82f8f489591b17fcb99c7dab69aa3a517ec6c20cfaf996cfdf26e99f1a3d6733ded393123fd31604b7fbe3686ca62523f81679c7e0b852c9ec1ac7284728b2df1d6873377333e69894e6c6fe08e8461db6ce4371c6996374be7831d8ce6526ffa5f436b45ac29f89006ae71e9ec784c61061a96160380e1b9209ff347ce4f671274f80e686b4a0133b88a708586174b479fc6962702cfe9760a0c480abc3437022b5f5c53468c712dbc6704132a3bc5f81ec5835760c12e1d8a06e995d8d58c8f2c6ff652f746b2bc06d95554c7eb038b2d693e8d05cbc7bd2b8d99ae75cdf6cbca2273b19e1af5aa69cd5ef046ca1f51c234746401477734bf10b02d2312015150383527bb6589069ca5b12b94ef7e5394e41c01d6ee29df1c77a738c1e982935340e05f2138d2aec3b7ba3528a2ac2dfe4125d1f1bcbb2969d4c3da9e69437f2a900c6fe3ab5e93006feb7fd9b75203c1b7313511d2aade58571fac461a7a4fb27b512edd35aef9f74aab88947d209188dc0e5619f7726ad7b836f447d5ef3445e7b1467dd2cf3a9dd92e586f0bb87c1d052f3397d51c92e01082a07e8141901ae28c67d8a68e6527c17852b213fc419b8a3066886b551f77a11b55922ca26740d019a8c18afa597a5dd7f06dc36a45aaa28584a54dcf22b52173d5ad81699fd2d3a7e819b6fd049b64ff6ba5413c7256eea83c29bbef8d1bd7908c57cb30e4d27cc98701af787e7ee615358d57353f0d67c4613a1681c85aae3b615f7d6e265a71751ef6d9c15f62cd74e2ecf77a78493d824507d76e0a112aae98af0a79aaffd99b48e39c3ee84d66b6eb399c0fcdf5f9b2392e3320a1610892d6ddefa08193094cc3e7909d43a6320eb950eb3167bcd24a01c84a32a068903c4f5f07ba0ecaba000b877943f2280e3e01579915709be166bdccaa7191e60f5da0e39cfd8f03507c6272015e6afe4ff01125e05cae7552fef6fd10f175e9444e5fa4220d5b8506cfdc9081fb5bcde88a07cedf8ea982d7e71c28a2431bf86da4a53fd4d6df3db80bf0cfa68188ac25a7faecf8c8096669fbaab7032c0810e36ebba0dd4468d1b342eec89ae8acf420eabac71cc44ea956d429492fcd0384687ced0a19e662ae04b9bca8edd388a2b002024c63089b8f98fe7ae9be96edecfc7ce9b0e3c2459bbdee215ffc82d7d8701bf463cf5c3cde733e9c905ad0fdf9fd94d9fe3aee60052b206d9fb73abc46133326c65b423466af0b23b11070baba4e6bcfa3d37f85a89d326b399af8f65723c664f20c35b84ff08bf1c743a3acc6ece8dc6b9a184001a85049682a3e7101d28f375836a0be4635868d341cdfb6c21efc372b9f2f0f29c780db2bac0ae8bf95cde2dcc5b39538935ce8d303ebd21404ddd1ddbd14d491341d65eff8dde1f427c514b1f851f3e46ceca2c5eb3961982fc6257c2e89e3ecf2d1d350456854c9893521cf9c1fdff20219cb591eba604d10757de76a84041fc2fe95b3438947605b58e9b1755e900433885e09770f88a91685af83b603db6f37811831e7c23151ec68222bec56193343f917dc4f899eaf68fd72c093b32eb8a7fb3f4c08d94fe40e3221303479fbc7ca8c5b842080956a827493a434829ca6dccd01fc7270d2872f3057c61d4cc9c32be23943a8a50a2106bb766f6bb63492ea396e8d062bf1137cd722797a680e39b4e27f7c89cb9f7a93a96c26f8b833c893f86d1ed26086e8d0d84c225d07ece173c849255d4c7279fce42dea96d47e4f389fe46217f514e05305346bf32eb0b5f7f2e90f608ac4f152c7a9b0ae87554461cf5fa3245538b18940eb06d9dcfe35eae9cfe441bb519917e8da43dcf8a4e5c1dea94c557a8748d717445c751407dc07df2638f75e82b4050198be87549c490f2457058affbcae511171a84cbf69446ae2391b5ef0d315c0a808ff6f5428cc7632c2b2c5fb7ebe9923c48f84e25d848cd0456e190b5db761fb3d3b169628008186344857a823456d84c0f7acd01235a456b7bf935f5dce0318e03b8962e786b24c4135c5807e7b3cfb1e45cba794a8d087c9c95e0324efa755d65c67da6d395a228137b74512b2aeba70c8692d1ee3d3b6aa7e8e8d1bd4549f7b1fa1e3af8914df02e31e54a4953f60d639204f236edb2a672706c3bb00c93070cf84342f5806405a144dd28b97808920e0516dce8acaee047b83db1757aec06b8b35e806c6b6c6147bee2a7ae767fac59ff771303742aab2ad38288e8c26a9f502714aa53bfa6dce1e16d853a97a19b3900f7a380836b2ea433fec97eb75778e9f312fab5c163d327f84b2b95c4ae177a51e4f462ae6428ce06c25498e34170a2f1389022082218489f8606cb9104aacb29aa79b5b89e090ac57e0523aca1d0876fa883f49b6bc889e82c5b149372644cc91a3962b80ca2991be632fe778aebbb2f9fa603ca40fd4d1a2aee83222c8850bd663a238c6b5a6a2b74db09427415ea44a06d3fab0d5b31cef61144a05ab66996b6ba6da6c4d22ab892975aa51b6cf42f055e10ea749b86d53f8d638d8eca9eb37926ee33a85bde3e0ed4c1e41edb0199885366283380dd7dc0ac4e72ffbe2c99222ca798fffec72c861a376cb94e45b7375c169d6270dc9a24c09e2915b14e93021ff9d2ee47c2fa9dbcaa57124ca611864be99d895560e98789e202b607d677c30659645e522743ad64bd1442524539dc2350809908fe25bf46e21a6787480431b6509ffa95a7be87a1571bba809330736f1ab7fe1e51aab148fa34c3cc5553663cda92cefd8e68e55da71f24025b321b96f0d5d437cee8c3c21c90a3d3d4094567eec0ce97eeddd0066492e5f049ca1fe6323befbfefe4adb931e19e7390b755c3c78516895467c4c301863e5e7effc53f15827ae83e82b07a4b1a66ffb9aea85fdb2957113167078e77e8dae4911c5a5cbc805bcbc7529f2a0fad9b1b51946b7680a192db79b64f7de1887aa1a84ac41abde5991e30bc66df6e3d7a2ce04ab97e49c933d4e148c5e4cd312022b991d607906de88f8ca0134724a2e91041bcfe6ef8988dc11dae9b0cf4ce197ebb35082f61b5d5a60109fb4bdb2cc09c41bc5cefa77b2bb3dc70ae98195ca9b7be5cae9576076cdc870543b238f8b6e3919ae403f275d6924250743ff041adadcf785e2c0e3e75e6e5c9848b1245269e5440267e4564fea24e914d6cb56e0156c51c99676010e9172764e4ab97694da129e443d5aec034fa756df9d165d3b225e3394b4a6f335d907170b2e96673ea7b27892937e7223503f424c5aef1c5f6122f5944ac1a2c16942b5c559ab0a4713b91f7468dd917eac5e74c2da87c73c375600201ab219dfcc4aa6fd7842e3c4ed4486ef531c172c7c3d6d343c184899a6e4be5a8ca58ce64baba20c639624bfbced632b8b44b38b9b6cd8b84e52b437dfaa9da0054873c196b3eee4ae98fe47c4607dd51afc861b4acd2972422b8947b06538918637d19ec084df1414cb12f0df85ab06ca878544f3fd714b1fe094b455d0517d6dda17bcb478bd9da5642b6597415828ea7905c809d3a832e41af54977bd8307386fede6dfcc7fde82f771ce5596b06c2f9f75aa680d5af063bc741f9d0e19d535e8dacde969536a6e41629a01779597615ed2e20dbf966ce69f88a7645bd33202a0dcb69f3fcc7f6d23f9599da2b64b1337ce8b405720b52ba2d9694bb05b1ed88b9c8d7caba95055f9a1af7543cb5d5c9204817413c7f22d91a6c9abdc40dae1ac43c5af646875d9edbeb89541ce43573e3bfdf9621c1af4e124d308cdb308f7544a70481196cb58492c66edf8f155080f61a1783117e5c2c61fa862480dbf80f95517ff5594966926022b15b510d07623cb0fedd4113e61e7de141c78a20c80d0650e3dbdffa5be690f26b9709f376df762f4ce8e626d6cf245c2504a91da1f06d660291a725def97e7ff0e92835101af22a823a7d6695f18c10d493a619ac38f164373d8629513f347e358b6bc5a145c4644f10f719769735b3c76f9fc7757454631516a58df1d0bf2f28da95e3b1658f0c6da8953a24ac4040fc6ee6b4cc115455ffdb6a66b6fa237b47ce9f49879c58feb34d38a4666b334c30ea9d780034fc7dd888b1ff58994d04e7c236fd45854cf9305f2b0c364f54d20da8ad61905f900a540af2775c5fe28388d28421be689d3f7cebdd37153208663bded190b0822ee2eeb1f2f9028a68a0cede93860dc9825d1556c8ad0aeb1bfa910d4109d75020917ba90e075d486a69a027fa32e51345c007a15754df872a1efd15611a480e0b8f8a7bc7210056a3a0923ce20acd7a522212d538db58978de986547240989d34ee22d03bbeb347208a192f5412b2149d40940e4248176a8a79cb3aa342a342c19fabdaeac17fb94d8f37ecf21e7f05d0d5005fa9c3cf9135469b010b096ab043fd0925968d699bb9259a5775b9bec37bfae6c58a70927e4c2d4c296be298053927955883df888c84d363aa34138ded632d49d1ef70594123c35aa4f567274350a6fd3d1711ee75e4eeac290d5ea50d38540fc616453189f6873e8e8461ba7831650a2770d296af4cffca7894a759e0ca36342b2125c22ce6f35e92ec41a0c1f5ed535bde163be6c6955ebdf1768dcb1000279d6aad457f859af68b5889b839ba4a41211e1ce9724d98ee7c2ac1ab4e282312abfa235d625139d52308ea0a52cbd2177c1e9f6db8ca4f44e76179a2d54e23cb63f411cd2138725193502c2fb865711c73f8ae2eb86ce610d53e1a1219620e7891f1c190a4157293e0fa941edc7bd376b77588cd4e01263fc3361b246cdac627769c3c8ee5bc8dc9406111f2b037b3287ceeebbfd6ec71a8b7ff0d386c7988488c71fa76ce405c42f371a987d2508843ff5fd15108704c9de088b6ccb65fbe5f82673bbe2eb6d15d92edd97ff963283f7a3ccd4f64f53e45ddc81c0e0366f4b232cbe74dd9fb7dda67e094ec565ea2cef61a79bf1f21deb5959021c6edcb363c8e68146590b8c43dfc2f81c62dd5640b1a14b70d27f30e6d7abd06f245692", 0x2}}) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="000103"], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="000103"], 0x0, 0x0}) 8.101684952s ago: executing program 1 (id=489): socket$isdn(0x22, 0x2, 0x23) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') (async) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) syz_usb_connect(0x0, 0x24, &(0x7f0000002500)={{0x12, 0x1, 0x0, 0xeb, 0xe4, 0x45, 0x20, 0x93a, 0x2603, 0x5301, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x96, 0xf3, 0x0, 0xd, 0x80, 0xde}}]}}]}}, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(r3, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000340)="9fd7cd64fcb1a5c98c9fa0be2013ee15cfa7090a7ccf8b712b5b028dd41c23bf14a47e200bf8d8e6636737d82a7e3161e582b84e8431", 0x36}, {&(0x7f0000000540)="08272fefd7342af91f839fe095fb371e267aff64ca5cff829a9a9203530a0d8aa65d", 0x22}], 0x3, 0x3, 0x3) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_usb_connect$uac1(0x3, 0xbd, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x3, 0x1, 0x1, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xd, 0xffb0, 0x1, "a6ec2be09fa105"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0x9, 0xb, {0x7, 0x25, 0x1, 0x0, 0x6, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x4, 0x1}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xef, 0x3, 0x4, "a9cd"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x8, 0x3, 0x2, 0x2, 'F'}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x7d, 0x4, 0xb, 0x6, "14559680a3300a0ba8"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xffff, 0x7fff, 0x1, "c6327e1f52d55d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x6, 0x10, {0x7, 0x25, 0x1, 0x1, 0x3, 0x40}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x0, 0xb1, 0x7, 0xf9, 0x30006ad53a7fe2e5, 0x1}, 0xe2, &(0x7f0000000700)={0x5, 0xf, 0xe2, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xda, "9d2887a65a0d84e39b0200e657aabe7c"}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x7, 0x11f00, 0x1000, [0xffc00f, 0x3ff0, 0xff0000, 0x7f8000, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x5, 0x5, 0x7, 0xcf}, @wireless={0xb, 0x10, 0x1, 0xc, 0x82, 0x3, 0xb9, 0x2, 0xb}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x8, 0x7}, @generic={0x89, 0x10, 0xa, "0aad234b32d31636cb563b0212865a00ef0202adeaa92c71ab3a6a96d363dcb3adf87aea42a2e79835c2dd96e90b8e690aca74b2830a787aaf2acfca509c1c1ffc4630735d4b316464357291c82b4141b6325dac9e36d79bee6ad00c2ed15a72e52c0316c85278f194589af843a3342754900b256cabde1f9c0cd2b45786e7d2cabe1f62b864"}]}, 0x1, [{0xda, &(0x7f0000000880)=ANY=[@ANYBLOB="da0377f27ed9f282ca0c845668e7ef8159407ba37f2a629e6052cd46f0d23290c3b8c2e840bb4916962378955bc37ff341654d291677eb27e59d0c4078d669ee544647c8a8ee2530760fa8fd7750ca5694769d4ac66a50d583037bdb301f864df611c16cb9cc03ea04507f0da350c0dd84bfad366553194a0ff75c720fba10958e5412749e6d1fbc6db91cddcfc0232d6724e44176a857c23f40ac15dc44763e4af52c5d6d1db8002c6953e94fa596d453c0aca7d0fdf3d1d5e0d5554e8e61a0d9e1fe3affe859c07f947107b279e32bdef2c6ab9426a1000000"]}]}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) unlinkat(r0, &(0x7f00000001c0)='./bus\x00', 0x200) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1) (async) r6 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x6693, 0x800, 0x8, 0x77}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0xa0, 0xb4, 0xc4, 0x10, 0x458, 0x704a, 0x3a55, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x4, 0xc0}}]}}]}}, 0x0) 6.471504637s ago: executing program 2 (id=491): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000180)={0x0, 0x55, 0x400, 0xffffffff, 0x18, 0x1, 0x8}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="c4000000", @ANYRESDEC=r5, @ANYRES16=r1], 0xc4}}, 0x400c4) bind$xdp(r0, &(0x7f00000001c0), 0x10) 6.232004516s ago: executing program 1 (id=492): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) (async) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x2a0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084524, 0x0) (async) close(0xffffffffffffffff) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) (async) openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x880) (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x4f, 0x43]}, 0x76) (async) getpid() (async) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7}) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000c80)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x54, r7}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) (async) r8 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc2604110, &(0x7f0000003ac0)={0x0, [[0x3, 0x2, 0x0, 0x0, 0x1, 0xffffffff], [0x7f7f, 0x800, 0xfffffff7, 0x759, 0x0, 0x0, 0xffff], [0x1, 0x10]], '\x00', [{0x0, 0x20, 0x0, 0x1}, {0x9, 0x1ff}, {0x0, 0x1000}, {0x0, 0x200000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2000}, {0x54f}, {0x80000000}, {}, {}, {0x0, 0x7}], '\x00', 0xff}) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 6.108245816s ago: executing program 5 (id=493): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10022, 0x0) 5.874025127s ago: executing program 2 (id=494): syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x54, 0x0, &(0x7f0000000600)="4bb16fc96dcf827965e297e4bcdc4cc27c7f5cce42d3404ebf85cb80c1e0f1800190544fb4577f9c7b137beb432502670dac13efbd760cd34255de3bf80391ae67bfe4a9e6cef0df81e89597f675b813d1ba2a46"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58e40000", @ANYRESHEX=r5, @ANYBLOB="01002abd700001dcdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000000830000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8041}, 0x8054) 5.508605414s ago: executing program 0 (id=495): mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f0000000080)={[{@inode32}], [{@seclabel}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@dont_measure}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc0200, 0x125) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x4002, 0x0, 0x2}, 0x18) renameat2(r0, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000200)='./file0\x00', 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x1, 0x7, 0x81, 0xfffffc01, {{0x8, 0x4, 0x3, 0x5, 0x20, 0x68, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @remote, {[@ssrr={0x89, 0xb, 0x54, [@dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010102]}]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x4800, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file1\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x9, 0x2, &(0x7f0000000240)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xbb5, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000280)='GPL\x00', 0xba3c, 0x6, &(0x7f00000002c0)=""/6, 0x41100, 0x20, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x7, 0xe57f153b, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000580)=[r4, r5, r6, r7], &(0x7f00000005c0)=[{0x1, 0x3, 0xb, 0x1}, {0x2, 0x5, 0x6, 0x5}, {0x5, 0x2, 0x6, 0x9}, {0x1, 0x2, 0x7, 0x4}, {0x0, 0x1, 0x8, 0x8}, {0x0, 0x5, 0x5, 0x2}], 0x10, 0x3}, 0x94) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) r8 = syz_usb_connect(0x5, 0x6ed, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0xf0, 0xf0, 0xcf, 0x40, 0x1843, 0x200, 0xabf3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6db, 0x1, 0x1, 0x2, 0x100, 0x7, [{{0x9, 0x4, 0x3b, 0xcb, 0x10, 0x4, 0x85, 0x80, 0x0, [@hid_hid={0x9, 0x21, 0x28b, 0x3, 0x1, {0x22, 0xcea}}], [{{0x9, 0x5, 0x8, 0x1c, 0x40, 0x2, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0xc1}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x5, 0xd0, 0x85, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xe00c}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x7, 0xf, 0xb, [@generic={0x9f, 0x23, "5f1bfc02c401e56af9f05247d22e58682356379040b27aafe445f0b3f00397421692a5f9f8c469503c9ceabf0202800cad124a3a2f944d39956dfc38f8e0015a188a237568eb4f20736098459c653f2fc8949678ad9492257f3ceaa5fde38a99c2119f2716780e217cd10cac3369b76e50a5ec3a1d5d64c6533df9068c9ad0d0ab3628dd7c1152f6015e591c4b5524a5dccae639c1a462a06e4ba9f089"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x9}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x3, 0xb, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xfffb}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xfffc}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x7, 0x40, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x4}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0x7, 0xd, 0x6, [@generic={0x27, 0x5, "f065e9c1baaaf53f3354bf01ad67211b2b0e04f4a892ea473a2f1bff7bcbe6a0ef11cd1083"}, @generic={0xe4, 0x1, "13cf09fed256b5e732f05e9377b7d9c2c5a61a85701cd28b6d1b6d626f5b5307506a18197e395781fe3039aeda2c78eb050d5275474a418ca1270719617309c27d7a26926fb9fd49c024e49f5063a5f998e480c734a408a59885e046a54c7cacc98daa3cc4b2d17ab0feeeb25be692e4fd6d9caba6702d84c148e384b0ac66a78472b73c4d33aa0865de9506697bd8dd4d1e6c81a8f5146e8d150075531da46f60c22e9ccfe2924b297951e8f74109988d233b158d42b67aed6178c44f3a7449fc0398a1e096c4dd50a77fa24c331044b1a9c1e78f7718b2994f0dc6966cbf8429ac"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x9, 0x2, 0xef, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0xa}, @generic={0x98, 0x6, "82038d707c421202420545721e52981b2db79c9ff0a040e6d71551761958db17bb5d234317c80c796debbbe3af81bb6abb9d920e089ce7fdb711386c9d87e2823583c767dbb31b14b68c73670dc014e82acd81c3a9e1721dcba342504ca24b5b35178fd8f7e4dbfeccf5c8f1c5512a9e13c9bd7151c848f2be602dd64efc38503492b5957cb299680bdf60eb89ea8d158ae603969f5a"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x81, 0x1, 0xe, [@generic={0xdd, 0x23, "d1deb1f5d8eee1eab741c75e8e13f439bda0fef5ecc1826dd15c685782485b9a372ce6fcacfc597e74261b8463860fa83fd90ee8f6377601e2e7f4328c28fff1e89db60eb5c702ba4dc4589ba3379e12bd24b930f1fe7fec3fbb3a43b6f3a8ee062cc847d74e82769d4c57c15b11e61a461fab432251eb7923bfe2aeac697fb9cb678ce20dc292585c9e1b6bf1fb8967ee54d0784116ad3ba029a159359a26a846f37adc814b9a29d4cafa4b8b3649dd9ad14bd3840a104307c3fdf22d7313400a7e677932b7743dc733ce436e852d1a2a1f0f211df085f55b8f14"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0x14, 0xf7, 0x3, [@generic={0x5f, 0x22, "749d1ad8c65e67bce7d4a634964209ac15d9448f8ade575dc2948ee5cb10bbea4d2c2e13f561149f1141bc2a861e173e2c8355604d95f49a880cb43fbf7914525ebac66f60ba87b0752be4f7ca2d0995b5c6ee5d8e571435cb9175025c"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x85, 0xdd, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x4}, @generic={0x5c, 0xa, "de1380ebad4cc13b7d18fb45a41db7e23ca39c3adf98c7988b950938e73a19740ae023a088c0f6f2ad628ee22d535bd0cf7760192ef7f08b39d234d04a8246631bcbfb80bd9ab7b2029256a0b7edd10eaa294da6a4a6912aa50b"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x81, 0x4, 0xfa, [@generic={0x4b, 0x9, "b01c99f2f66fe0fa121295c41d94edd9742ef7f1ab70a77337ba439ddb65ab3f6b64329890590653895f71ef7b15fef3d49c402e3bbf2caaee9da1266f3cb3d2360beab44399da7467"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0x8, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x4}, @generic={0x6d, 0x7, "9d51f86e1e3c814b1ffe6b707b6b6f167a32e3d8f226f3974529e6c58fdf62e48caf8486703666f10abacedfa236cfb47a5b51123d7e7ce0dfd2fa5e7c6e4794c728a62161cf0cc784e8abee872a43a803dc57177268e0c3744fea990c0626563565b2bdd6ad40bcfd4e8e"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x5, 0x7, 0xe8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x400}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0x2, 0x26, 0x7, [@generic={0xf1, 0x23, "3c5b0cdf6037a7053fa18546b7adcb2bbf9fc86f36324d167655290b7bab2fd06aaadb5d70dc9cab82045fda1a464ff0c9d05f68d31c8ae320980c123529dc2f84a927ab67dea8bdd842daa7eea13c4c0e228eb1c7ca95d3e1500a263aa73009407f354259f159b8e5031a8043882db10909de4071ee4800754ff875d0a9e76ca026884c21933a5416051ba30d168225a2105e3d6f7e27c8b7d1e144bd458103b7111b59f48035567f4912f69152963eeb74cabae2134728a7ef0bdcbbc84c029c8ad03d37e4fe26175aeecbd7c005dea141647ec0e948a32e07a3d94f5614243a750b9b9d9a1fb99d14eb784ad9fa"}, @generic={0x52, 0x23, "a4125e989c9eebc0c64ebc643991a6788ffc69668579ae496b29d937728a9fa30b38d832de4d0b362a9cae1bde6e2a06ea57a490e938269acc71901a17114213a7953648f8b58fad0bb7153fa13349af"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3d7, 0x0, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0x9, 0xdcd33f6f0b026288, 0x200, 0x9, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xfffb}]}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x110, 0x6, 0x1, 0x3, 0x20, 0x9}, 0xc, &(0x7f0000000e40)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1a, 0x8, 0x5, 0x8}]}, 0x4, [{0xca, &(0x7f0000000e80)=@string={0xca, 0x3, "ed12c2007314c92f317ea8369ef5f3f5d40677290d9484d7239a9660b145f093c9a644587848f73c1ca47f44bc241b53db88aa065c7395b3d068b81d02ec6131711e463b99bc7f49c2f538a76948a5515cb90ca6944f2736fc0724e148d18e9de62ec983b8b53265a94e7208bbefc02d49f9f46a40407780ace3f503cb140d250473b07950cbfe984990a3f15835be3f18c5794bc3c32d1d8dd2a41fbd71a9fc03630899d8b65ea3215639e6c51fb484163864d858c9d0ae39d0164343a7283708afe46804bfa3b7"}}, {0x7f, &(0x7f0000000f80)=@string={0x7f, 0x3, "1ea1d90e63c0ace1a903eb662de4459d6f16f09dce91ae40d0a36e6b227edc5338966f1b6336e647574678c7c62fc337e9a863a879c00bb0367b2251c45b40a0198edead58a8f4d6489bbcb93b0e3a7183a0917dc5113e5c2734abdec5ef71566590e632f847662ea11c76fedff5f4d658e15f915e772644251611aa9f"}}, {0x66, &(0x7f0000001000)=@string={0x66, 0x3, "956914258d847f103dcfdde15f9324672f9761b6964bb21e234b919d8180d32ab4fa67d558b86926c3ed0a98889b7d3fe58c6e4827681e712b971c11951b1c9d98869d3f1c84f28df76135e04145329f63ecd47fbaf9c3fa3eab63075d699071ff4bf866"}}, {0xf9, &(0x7f0000001080)=@string={0xf9, 0x3, "9cda665f7c45fde7539f3f424e2b8eda834ca828916c5ae6bed03e77a56205e497a95a4098e9b1628d5a36b593f98cee2e85abd524c586c2c2f2a83e89c1a8c631ea1db66608aff99a1ef6b871f9dc36b57521a26243611ea07bd033f06b136eea4e817aa94c306f1e135fe94b0af84c5fd12a2d2f96e4c1fae6d50b72a78db48e3b86ad03a5e2237094dfa9c178e4ef97006104d15d9a82f03fc6a88f784ae62ec87658edcc028451225727e88ef794da6d005c8a9632195b256b682ebf5946a3fa6f2b33e132181a48c40d19b131b11e000aae18cc58a25a3967f7f32ec49206de6784c9b31e08ffc9f7bb86581daf0c41242a19e9af"}}]}) syz_usb_control_io$lan78xx(r8, &(0x7f0000001340)={0x14, &(0x7f0000001200)={0x20, 0x7, 0x3a, {0x3a, 0x4, "9d31272fd32d6dbf0284b5d18500eda781e93936b86bce5104f88b1d94376ff3e3d4b2271eb2d1e22ff2ebe38a41e721cd73fc2fdebd4f1b"}}, &(0x7f0000001240)={0x0, 0x3, 0xd4, @string={0xd4, 0x3, "82f76bbef50b46239a5e25d50c73f04dcecfae1e342e1d4a52a60663aff1b9a6870847d8837f18586fd312a13b61e7176ad2492c7720962db4fc37c5ff0f72cc05fbb298b467bab2773023fa5e058957dd79928cf7159008d02a675ec791c7084643e698b886b43faec5087f8cd2998de59063ff7b001cbfd6935093a80e96fb19d2aad9eb7da78ae78df282c05e9d8a47c2ff4d400b7448524d281de0ffa3ee253901ec98de1e3754dba4b07eb1375acbb37214ef844006685b7ee92284be3d50de12a66bdfd93d7fb15eb41129ebfe6a65"}}}, &(0x7f0000001500)={0x34, &(0x7f0000001380)={0x20, 0x1, 0x2, "6e15"}, &(0x7f00000013c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001440)={0xc0, 0xa1, 0x4, 0xfffff4f3}, &(0x7f0000001480)={0x40, 0xa0, 0x4, 0x7f}, &(0x7f00000014c0)={0xc0, 0xa2, 0x2f, "71e60ab5824263244580feaf37398b3488b9ed34216fee618259ab24d5f2af8b405d138c45d8865029e21d3c067c6c"}}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x3) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000001540)={'filter\x00', 0x4}, 0x68) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000015c0)={r5, r2, 0x25, 0x6, @void}, 0x10) lsetxattr$security_evm(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640), &(0x7f0000001680)=@v2={0x3, 0x3, 0x17, 0x4, 0x30, "c3037fadb756def601845837ea4e8921b15d3d711579c7942756681e82a31a096b7d39df1dd6c93bd712389b42c87f46"}, 0x39, 0x3) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), r5) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000001b00)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001740)={0x35c, r9, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xdc6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x81, @mcast1, 0x80}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8ffa}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5cb1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_NODE={0x20c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf1, 0x3, "139fc738d5ca9256d2a055f26d68c8ed655ce1e4ef7ae2e3076379114d9e6f92f43f213747a488dc8931559113ce7305c2d36bb7820647201dd9335daa29e51c11fbfb29b2b06d8e47fd77eef84e110dd73706f5748fd7ce5ca109f4106b18023e68182c1d24377bc882c9c61326fea110a1942597875f2c337364ca84ac1003884481a320ed8bf36b5a90c988b803f449da22274a3eef11e18b3f0e7ada3f11149d42b2fc670c6cf6676e060618d46da21e30689649335767477b816b4c20ea64fc89efd7302ffd7c0a37f4c8efb1410c79acfc5683c25813135cbaa0e015941315e4a7ea5ffd64192a507e82"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "3a7c392b912cb188a43b47f0c035002aa82ed596d1afd7cebca82538fc65"}}, @TIPC_NLA_NODE_ID={0xb0, 0x3, "2a797a71c1686df88c7215eb5df80cbe420da101b7df8dd3f9a8e9ff4293898035ba6bb8be276a23a0cf159089d6884d11f1301e656c51dccbb62d87b3adf15d9e8884e383c4fb644969432510d51248cf2a86adefb61d2df94730a20ed4c525c2a857c1ff67fb6bf15b81ea6b65078fc471a2050e4b414f4b81455fdca0add4d8919eddb596083c9889e9860d937fe51a93f3c9eedfcdd7f4e9680b5cbc50c76bb16e914b11f6bd4e86e94f"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x4004004}, 0x24008080) fremovexattr(r6, &(0x7f0000001b40)=@random={'btrfs.', '^MAY_WRITE'}) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x2) r10 = syz_open_dev$ndb(&(0x7f0000001b80), 0x0, 0x50000) pread64(r10, &(0x7f0000001bc0)=""/57, 0x39, 0x7) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000001c00)=[@timestamp, @mss={0x2, 0x80000000}, @window={0x3, 0x5, 0xfff8}, @mss={0x2, 0xd9}], 0x4) syz_create_resource$binfmt(&(0x7f0000001c40)='./file1\x00') socket(0x28, 0xa, 0x5) r11 = syz_open_dev$vcsa(&(0x7f0000001c80), 0xe, 0x20302) ioctl$CEC_TRANSMIT(r11, 0xc0386105, &(0x7f0000001cc0)={0x9, 0x8000, 0x9, 0x9, 0x7, 0x100, "03abb0e7271e34140ab11a52f6225231", 0x7, 0xf2, 0x1, 0x6, 0x6, 0x6, 0xd}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001e80)={{{@in6=@mcast2, @in6=@remote, 0x4e24, 0x0, 0x4e22, 0x6, 0x2, 0x20, 0x80, 0x2e}, {0x7, 0xc, 0x7, 0x7, 0xffffffffffff956a, 0xffffffffffffffff, 0x7, 0x5}, {0x23, 0x3, 0xe, 0x80}, 0x8001, 0x6e6bb6, 0x1, 0x0, 0x5, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x3c}, 0x2, @in=@loopback, 0x3503, 0x1, 0x3, 0x9, 0x40, 0xe4a, 0x119}}, 0xe8) 5.462451679s ago: executing program 2 (id=496): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x14000}) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c) r3 = socket(0x1e, 0x1, 0x0) listen(r3, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4(r3, 0x0, 0x0, 0x80000) listen(r2, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000200)=""/212, 0xd4) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x6020480) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, 0x0, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) r4 = syz_io_uring_setup(0x7465, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0xc, 0x2, 0x0, @multicast}, 0x10) recvmmsg(r7, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x1f, 0x22}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) 5.322255484s ago: executing program 5 (id=497): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES8=r3, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000034) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @broadcast}, 0x2, 0x0, 0x1}}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='devlink_health_recover_aborted\x00', r0, 0x0, 0xafe}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='net/if_inet6\x00') connect$tipc(r8, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x5}}, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r9, 0x8983, &(0x7f00000000c0)={0x1, 'bond_slave_0\x00', {}, 0x8}) sendmmsg$inet(r8, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="96cb9dfd0c61d5ed863c5a35109d427201da53416c37631f95451a170fdb734214157996b04630903a7ad20aca669b5120871c47c6ef4e5975222b9676223895144ae5c2898ba0e94642e43e374bf9515c7e840e62021f25181401bda4c4d2d77867390c0a05af019adabfe896d7824f0dcb1724c64da40478808059ea83fa60145e108809ca25edf6ab820f23a5ce2b1779aa8c037a26d99df56f39ff5beca1c1e0cbfd69e415971a02f5115f6da0ba6da9be9772efa870aa6b62774ce009e7bcca4b4a7a910aab97e7f3da899eaaf573ac8a926a7be9b5875b3bb707ae9124ead39e70948bcf654b6b4342043f756323494e4ec559866c5a480c3b156c0427f1cc1d373b77424ea38e3697e36dcefd261575e5516bfcedc7baa8cbebed0ce49dd27e6291dd6f968eaf37f13313ba0bd22b6a63496be04a42df10fef87386434103b5ef819a969e8792a7765dc52c310fbe89851eaf8b2eabcf27bd487f817d48a54b0c7e8b151f0941a6f4adcf6a4486f96f8d18a2928829db333ec08bffe029f4840fdc0433d75157e80b33c3041f193e5c3fb1b7c13d1d7d7a8fe3122ddef181a6534232731c8f91dae42d9a66b9c2e0c6de6da74c24752b53d344b3c9a48ed62705c3e93f7e346c0379a6ec672b3a73dcfc159a79a77bd7b9edd013e3e9832d4dca6f9f973d63d5d235c7e22822e012e4181e102e68b03bdec323db739968061a7ba6fcf9589bd2975520fe9f1b44e52489bf5f5b0125b14bc894f4ff1ad2ba817dad6ab1654a2cacce1cc5160ea4bf3d7011cbf16ad0389b6511448c4186da0a7a55be54031a6d2773ac33aab5d533e7bb213309193f2ca3970e8fffc2fdacbc96e6f49c116b0505385a8bf282589be6b844e2aaaa652459b5d021127f59009020d34932cd03fbe5fea45bdc1f68463c4afe2b5ea8f97dee5e2e6b58196aff00e5ca51a0087f02bcb1dbdd638a5c7590095561578c30904f7ea80072de21fcedd0e41da8e7fe3514eaabc603d770a6fbed5367edb7feb5c5edfda04c7b8a4bfce5c73b876f52fde7dc929f3ffa632eb9514596793533d20fd191b484e902ab104dfc34a8486ba64d3e31c495e043279d8d6b4e6ca3c3fd4ae43529e55be690309e1bc90af2e9188cd5673eea73c75d4decf8972039c086e4b47caee900e1422fd2fbe0303dd5147a9fa487a7b08ad529d0d3db2bae4b26a83de0b15b9b82f26b23336481aca875c48605dc8d25d872920d01e2e163cc13d1f026666f8f54d6fe7895b47939599d168dc98a2de4aac463d98cb39375ac13fadd722b9f1e221d35bde594c9e53aa0f34b235a9d68d8f4841f9455804cd8a7bf05315c5bab2fa8820e956a8161cdd685fc4e1344f9d89189057376a5d1c23273d475aaa72ccbf4b5d8f2863f3f0fe7c0f8b001c065bae68aad9d8878a5edcd8dcbeec07d317c0a81fc84b8b208c60db73c6cf86d46cac98a7df449581d74be7991f1fa6924b76a2d6077aacca10fc777f0d09c5420cfc38c4638957086c9a2065ce94a286da01527bd8b8fd5830f93bcab97a4d0ca13c55b4ee32a49e078b4d79e7b17200fb6a550cfcccd33c681e37bc83c7fcda081a67c2a828e65a75df33e587a05f75fe05aef4078b3482c9078e2edb63c74134f92461044871e4a71f40228d156cbb3beb53eb898e0b6ade2d486a7111ce074510ad957f0eeae0812dd3802db231d9a15948a6b133167eb51dde0199023dfb3471661c7f13f14e786278c551d60929ef969b15d4ea544a9cda830183052ca1072083fb304502f38bcfd46ef64091a2a64bacc55ff3e91f8a7a97f69a9524bdaa60c14d75ddb44e399158c603cded78f42b79a6e9b9c30575289a92558f4d1d9cbb35780c86462cb56d5b474901c17df6ccba95481c004c384b17f99fb29458c9c59666c5305c508561e654d5f1b8ed375231358828b73b487c5f3096211f863375333bb1d3970f7c4cbc7b0f122dbb330b24498f38d804ec0e9c8a5976578bfbc2e46e8d898ec08b3742d5f9ba03d56567f6541f075c4f45eec94a6af78065689e8851294c48f02d48b1266586db86266bd2d0cbb729b567ed7643edf6849f50ca7a28b4ef59433ff22ce0680ffb3348a458ff77b6a796e849cb456df4b443d625d423d10e21bf0bcc785a243cf70ed2ea7c52548cd366ad9af486a4a0171f21ee9d961aa808a69a066aeb0c605fe7a83291ba942df3d11ba1e12da7381d7af20ccbd0de5416ef389c65d1fd0ff209dce808c490707a371b317ce65765082d1c5f67846ddfa65f291117d6e5a795ac2961d56eb24060d8b160d5bd146cd61589c00a108a1dba9e8730157e403cc35b0cd64b3aa66eada80be3bbb974d4642aa76bdf87c2d63134af1c646b1f0bfd218d4e4ebd277ad1cfc9b6f20c4036c6a511cb1ce486c3a563ca9368b10bed088bcfcdab752e0c78a10e550544ee6250d3908e3e7b09b2119f94abc2fdf43d7c82a4ffce81a3f962124ace1108443f41202c6d055d37e99b4eb6287c485acabff03f3a115db1ec790fdc5436e97bf2443c2f707ffb513f6d6494812b2238d679c8787a854ec92126bdc4681803ed4a5b84590e4f00ce956c6c3394773303b0620d118d2290cb229ea3b9bb9de8d719a0f92a50d34909a363f5f6ff906326f917be78c914c78846ef30c9b107b26c0a55401ceabf5b3c669eaa7a1a36d97b01d5da410366e3da5d232fb711d26afd9d4a5016425e47c0ec9b6305673af4cb46526af752011793c322797fb706042da364b6e723b513fd73db6721b00bd80e0923fe075300951d4dfefdd029c3fed21b734bf102f96d58b50bf4edcad014670c2d93eeb4d7bda3d1b70d9e21262c644bb96855895e4c0b32c9ed599d940ac24814b69812c124648428e13d7f72d74feb30288eb78b4a99fadc96589d8a9c7047787aa802514ba28af4d5520ac50928cd75ca92e2934a2e126456bfe1587003e87d9428b1fdb6b7662c44a5fee9d537b7f43822e5b103aeece1aa603215c215de2873e3a6b327c5ed0a0190fb7645034e1839ad165f3f7f80fd793734ac1412bbe20d82aea543792047ba5c5b37ee11988cd7e71cd43547e13c6bbc1ce3cf6aff9727381f06feb83b23b694724d9259d3736eba6ee66ee73a224b8a978debbbc35f8e28cc8267646e5c8cd8076d2044d41eadce01738ab2c7dc763de5a8042b957680223c4d9fdbf65d17e8998444e8db36c50fbe3c9a83e506661a029c4538617d46b6a43675c6dcf283a45b99e44188fd2681a50747e819e7f37496207ec448670fe62a3cb94712abeafb5dd2690ec12b18f8d67d5b0db41a897124f8b94695501aba517447338034bf14d0f99cbf5518aa013e1f35a052b4d27d1247349ff7a83362444372f017fcbdfe972b91c46a0a57f4639204673341ae92bc2dbf2b8d1680b432552850964eb1e14f38995e7e404b1bd1bf63d8d58c7b4ec38e3b9e73959e6509ad9f67d684f62759f5cae90bf8c1781b5800922c312aa634e5748b6181fc37df267eb5c66afc0c9249f9f601136c78d817beddf308c6970ee0e8221abe6fa124f55de7e5e78398004095a175f58cc270840e8c6759627f139e4f9b3b362e2700c5d06da66e862d1016c9f89d18646a6bb823f992342433b03397ed7586f489824a1495d707c81d3885029a47845802ef97856e530789a5cb7239752c6509cdd094212cb4b1b8baa7416cf5000db59418ad7f7a0d7d8e4cb8ebbbe4c40ba0ccc25283b9c933e251fff9871fc01026fafd8eed7ddcbe454b79339be93cd4b25a55af449f5c0893a957c5468c9147a973478c834ac4ecfea339cf3", 0xa9b}], 0x7}}], 0x300, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 5.150226816s ago: executing program 1 (id=498): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x80, 0x2, 0x4, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0xc0403d11, 0x0) 5.072778227s ago: executing program 6 (id=445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x100001, 0x80001) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x8840) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff2b, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000abe000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00008a7000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1010040, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000088000000000000000000000000000100000000001890780400000000008000"/102], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x4, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000380)={0x0, r2, 0x1}) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 4.654149562s ago: executing program 1 (id=499): socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x8050) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x8050) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x822b01) syz_clone(0xa908080, 0x0, 0x0, 0x0, 0x0, 0x0) 4.446655461s ago: executing program 2 (id=500): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000400"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000060000000000000000000000000000000000000000000000000000feffffff0000000000000000000002000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 4.287148943s ago: executing program 5 (id=501): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}, @printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000080)={r5, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x3, 0xa}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.494446222s ago: executing program 5 (id=502): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x3, 0x0, 0x0, 0x2}, {0xfffffffffffffffb, 0x1, 0x40000000001, 0x200000000000}, {0x0, 0x0, 0x6, 0x2}, 0x6, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xefffffb, 0x6}}, 0xe8) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 3.411118162s ago: executing program 2 (id=503): r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80600, 0x0) mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x4010, r0, 0xc2dcc000) socket$packet(0x11, 0x3, 0x300) futex(&(0x7f0000000040)=0x2, 0x8, 0x2, 0x0, &(0x7f0000000100)=0xfffffffd, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x9, 0xdc}}, './file0\x00'}) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(r1) futex(&(0x7f0000000000)=0x2, 0xa, 0x2, 0x0, &(0x7f0000000140), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00 \x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r7, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f00000010c0)={0x0, @hci={0x1f, 0x3, 0x4}, @phonet={0x23, 0x95, 0xeb, 0x3}, @qipcrtr={0x2a, 0x3}, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2b57, 0x40, 0xfff7}) getsockopt$bt_hci(r5, 0x84, 0x80, 0x0, &(0x7f0000001080)) r9 = syz_usb_connect(0x0, 0x48, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.288006914s ago: executing program 5 (id=504): syz_clone3(&(0x7f0000000340)={0x3000000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0x28}, &(0x7f0000000180)=""/78, 0x4e, &(0x7f0000000200)=""/249, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) sched_setscheduler(r0, 0x0, &(0x7f00000003c0)=0x200) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008050bbe1a000000020001094224fa0000000000000000010203000100092103001001220500090581030002122000"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa103eb359876016f, "dbd3140a"}]}}, 0x0}, 0x0) syz_clone3(&(0x7f0000000340)={0x3000000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x28}, &(0x7f0000000180)=""/78, 0x4e, &(0x7f0000000200)=""/249, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) (async) sched_setscheduler(r0, 0x0, &(0x7f00000003c0)=0x200) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008050bbe1a000000020001094224fa0000000000000000010203000100092103001001220500090581030002122000"], 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa103eb359876016f, "dbd3140a"}]}}, 0x0}, 0x0) (async) 2.27666522s ago: executing program 0 (id=505): r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x41, 0x0, &(0x7f0000000000)="06f4d854b47faff20ce69b7f54b50578e90e4b9672d9ea7deaec7713b6a7610f25b0c32c81cd80a5d21fed29ccf08730e293", {0x0, 0x5, 0x39565559, 0x9, 0x3, 0x7, 0x6, 0x8}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000100)={@empty, @private, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @private}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x1, 0xd3d, {{0x26, 0x4, 0x2, 0x0, 0x98, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast2, {[@end, @generic={0x82, 0x3, '7'}, @timestamp_prespec={0x44, 0x2c, 0xca, 0x3, 0x6, [{@multicast2, 0x9}, {@loopback, 0xd8}, {@remote, 0x716}, {@broadcast, 0x8}, {@multicast2, 0xffff}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4c, 0xb4, 0x1, 0x6, [{@remote, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe}, {@local, 0x5}, {@multicast1, 0xfffffff9}, {@broadcast, 0x3}, {@local, 0x5}, {@local, 0xda}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xffff, 0x9, {{0xc, 0x4, 0x0, 0x8, 0x30, 0x67, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, {[@rr={0x7, 0x7, 0xc5, [@multicast2]}, @rr={0x7, 0x13, 0x42, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r0, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x144, r1, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x24008000}, 0x6000900) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000006c0)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000740)={r8, 0x2, r0, 0x7fff, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000780)=r8) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000008c0)=@buf={0xd0, &(0x7f00000007c0)="35c40f9290f830c900bc99ff8b680f805832fb8b2c6e251369c6648de532895b6e7dd9d2f2dcedd5ddb8596af5c854b9d35e23bd2b707122eed85587124bc2f0edbcfbc7092267c60ce37016d24efb7d4915b3c3e752c1a0e0959bfe1cfbe1f1b11a797c5068d5283cc82aa136a8b39966715f5b7e51b74c9ea3edc08f09866f78ab42f19ab5dd14651bf73ca4cbe3b7949ee31cc67a4c49e7f117a178a7a8c8f4369ad2fc07c8866a64ab1e71f170d016b933bb530375af5520e1daae66d92166d65cbc82b3f4a77011958ee27072ff"}) clock_gettime(0x0, &(0x7f0000001580)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000014c0)=[{{&(0x7f0000000900)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000980)=""/107, 0x6b}, {&(0x7f0000000a00)=""/113, 0x71}, {&(0x7f0000000a80)=""/178, 0xb2}], 0x3, &(0x7f0000000b80)=""/232, 0xe8}, 0x9}, {{&(0x7f0000000c80), 0x80, &(0x7f0000001000)=[{&(0x7f0000000d00)=""/88, 0x58}, {&(0x7f0000000d80)=""/65, 0x41}, {&(0x7f0000000e00)=""/40, 0x28}, {&(0x7f0000000e40)=""/149, 0x95}, {&(0x7f0000000f00)=""/20, 0x14}, {&(0x7f0000000f40)=""/169, 0xa9}], 0x6, &(0x7f0000001080)=""/105, 0x69}, 0x5}, {{&(0x7f0000001100)=@nl=@unspec, 0x80, &(0x7f0000001400)=[{&(0x7f0000001180)=""/92, 0x5c}, {&(0x7f0000001200)=""/254, 0xfe}, {&(0x7f0000001300)=""/237, 0xed}], 0x3, &(0x7f0000001440)=""/78, 0x4e}, 0x200}], 0x3, 0x10020, &(0x7f00000015c0)={r10, r11+10000000}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001600)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f00000016c0)=0x84) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0xa4, r1, 0xb00, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x40000845) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000019c0)={'broute\x00', 0x0, 0x3, 0xc5, [0x6, 0x2, 0x0, 0x4, 0x80000001, 0x8], 0x3, &(0x7f0000001880)=[{}, {}, {}], &(0x7f00000018c0)=""/197}, &(0x7f0000001a40)=0x78) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000003bc0)={&(0x7f0000001a80), 0xc, &(0x7f0000003b80)={&(0x7f0000001b00)={0x2048, r12, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x51}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_MEASUREMENTS={0xab4, 0x111, 0x0, 0x1, {0xab0, 0x5, 0x0, 0x1, [{0x5d4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x170, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x67}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x298d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x76}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x62}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x372}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x25c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8e72}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23c}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x170, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xce}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfd}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x8c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x198}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x204, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xbe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x61}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x114, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xba}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30e}]}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2cb}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x1dc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x134, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8a8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x23}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x8d8652425c454fab}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3eb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x109}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x600, 0x111, 0x0, 0x1, {0x5fc, 0x5, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x311}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}]}, {0x350, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x144, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x140, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x208, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8642}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xef}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}]}]}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x53}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x4}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x98}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x353}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1e8f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0xf68, 0x111, 0x0, 0x1, {0xf64, 0x5, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x68, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc00}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa353}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}]}, {0x698, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x271}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x168, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x621}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xce}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2eb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x360, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x140, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2f8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x90}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa443}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x23f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5a}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x128, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5d5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}]}]}, {0x250, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x266}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fe}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x220, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x55}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc346}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xce64}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x804}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xce}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdaf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa46}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x308, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x264, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x184, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x79}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0x244, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x208, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x814}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x31}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}]}, 0x2048}, 0x1, 0x0, 0x0, 0x80000}, 0xc080) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000003c00)={0x8000, r0}) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000003c80), r13) sendmsg$DEVLINK_CMD_RATE_SET(r13, &(0x7f0000003d40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x3c, r14, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x10001}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x15) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000003d80)={0x4, r13}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000004000)={0x2c, &(0x7f0000003dc0)={0x20, 0xe, 0xf1, {0xf1, 0x2, "01e37dd7462021067e3c1e4a189e35f23dc20333f7166c93d5cc0559e1f261ac07d928b1cd273b1b161c443f4b397f0fa9f40904b7589e4291bc10c1f4059732c29a333e2720066b0cf9c7c5ad45b52c07d597896fead60692b97ae76c3a75170194309f1c539b0287012e55c1639ee9222a1cf1e381f95032b4ea965abc73b0abfa93ab8a4e498a64682816cfd736800092e2e35c9280553b859ee4a57785cfe9a77310088577b6579f70dca9c2c998761c6c9223c926b3633787c281472ce1abd2490c583986ce0808f8c98ffce1487aedd3e5181981757db3a439875291554c150edfe10d6dc199e4a29a5c25da"}}, &(0x7f0000003ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, &(0x7f0000003f00)={0x0, 0xf, 0x5f, {0x5, 0xf, 0x5f, 0x1, [@generic={0x5a, 0x10, 0x0, "97f379a158c3df5be7e95bb5c6cc122eae3d09049e0191fde69388d8515e342f016af1c511dce65c3b9ba482b2e2a90a2c5b6411fa0fadacfbd40f0108c44c7f1da3f78de2ebb9333738541428460d71166302bddb7f8e"}]}}, &(0x7f0000003f80)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x2, 0x5, 0x23, "4dfa09e3", "7eb7418a"}}, &(0x7f0000003fc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x4, 0x2, 0x1, 0xa9, 0x7fff, 0x5}}}, &(0x7f0000004540)={0x84, &(0x7f0000004040)={0x20, 0x11, 0xff, "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"}, &(0x7f0000004180)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000041c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000004200)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000004240)={0x20, 0x0, 0x4, {0x1c00, 0x20}}, &(0x7f0000004280)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000042c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000004300)={0x40, 0xb, 0x2, "dddb"}, &(0x7f0000004340)={0x40, 0xf, 0x2, 0x1c6a}, &(0x7f0000004380)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, &(0x7f00000043c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000004400)={0x40, 0x19, 0x2, "647f"}, &(0x7f0000004440)={0x40, 0x1a, 0x2, 0xe031}, &(0x7f0000004480)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000044c0)={0x40, 0x1e, 0x1, 0xfd}, &(0x7f0000004500)={0x40, 0x21, 0x1, 0x2}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000004700)={@fallback=r13, 0xe, 0x1, 0x33c, &(0x7f0000004600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000004640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004680)=[0x0, 0x0], &(0x7f00000046c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$sock_ifreq(r15, 0x8992, &(0x7f0000004740)={'tunl0\x00', @ifru_hwaddr}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000004780)=0x4, 0x4) prlimit64(r9, 0x3, &(0x7f00000047c0)={0x800, 0x9}, 0x0) 2.129220703s ago: executing program 1 (id=506): r0 = syz_open_dev$rtc(&(0x7f0000000240), 0x0, 0x80000) ioctl$RTC_PIE_OFF(r0, 0x7006) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)='syzkaller\x00'}, 0x94) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x307000, 0x0) 2.084582155s ago: executing program 6 (id=507): fsopen(&(0x7f0000000300)='jfs\x00', 0x0) (fail_nth: 7) 1.594652986s ago: executing program 1 (id=508): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) accept$unix(r2, 0x0, &(0x7f0000000300)) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2], 0xa0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000880)="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"/485, 0x1e5}, {0x0}], 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/net\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) 1.470730923s ago: executing program 0 (id=509): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000000, 0x13, r0, 0x0) r1 = syz_clone(0x1000000, &(0x7f00000000c0)="e7a11aaccb04c940b021297c780ea61957b93e8ba8040dfc99c53f5e6cf05fd6b0a1b9fd8fa516b09e30ab96d7072e0d73a4cae13fa789f48e37af579db0fe2a4644708bf4fcc83ac0464fb63a76f1204a4a7be19931c95bd521890aa25e85ab7bfee607aa09e3b9cedf4aee3d4d817f500b38b53b8aed86cacd90c0ac94fce08d3c251a7705053b49ba42295277a9e24df1c3f6c04614eefb6b213017e26429e1554273b221c95b8235f4abdf27bb0e57ff9d1ef4e53f1d9451b97de11db6f78f77a5f93a887d5fd6185434cfcf3a27fa12c509806d88e5888b98e94312669608abbd953ff462b93ce0d0965b9ef14826bb", 0xf2, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)="acc22e9e45494310f31e7ebd4300f0144a828a037b61c49f9665d2078208ca7fc2739998eb809dced113274c39f485e06924f258cbdfe172a329132eba6d5521dd97a037718e00f2801695ed393920cf6c82b9f0090e2723b96fe7e658587ba65c95d5b4728c5e114e39e4067de76e873fd507f714bfe0a3b49b67e6bd6a720beecc7ef89fcb41f95ca01b6baf85fc") r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) kcmp(r1, r2, 0x0, r0, r0) 1.45275087s ago: executing program 6 (id=510): syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xaa, 0x77, 0x4e, 0x20, 0xdba, 0x3000, 0x196f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0xf0, 0xfc, 0x0, 0x58, 0x3, 0xbe, 0x4}}]}}]}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x20800) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 914.115059ms ago: executing program 0 (id=511): socket$inet6(0xa, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x10000}) (async) read$FUSE(r2, 0x0, 0x0) (async) write$vhost_msg_v2(r2, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) (async) sched_setattr(0x0, 0x0, 0x0) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8, 0x42032, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, @in={0x2, 0x4e21, @remote}], 0x20) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334844d232279ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f448128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r7 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 125.67042ms ago: executing program 5 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) io_setup(0x7, &(0x7f0000000280)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_submit(r1, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r0, 0x0}]) (fail_nth: 1) 0s ago: executing program 2 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) io_setup(0x7, &(0x7f0000000280)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_submit(r1, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r0, 0x0}]) kernel console output (not intermixed with test programs): s not exist [ 137.878605][ T1617] usb 4-1: unit 5: unexpected type 0x0b [ 137.891405][ T1617] usb 4-1: USB disconnect, device number 13 [ 137.915752][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.981686][ T5928] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 138.111138][ T5928] usb 3-1: device descriptor read/64, error -71 [ 138.232197][ T5928] usb usb3-port1: attempt power cycle [ 138.431964][ T6270] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 138.551318][ T5898] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.581278][ T5928] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 138.601536][ T6270] usb 1-1: Using ep0 maxpacket: 16 [ 138.607011][ T5928] usb 3-1: device descriptor read/8, error -71 [ 138.615109][ T6270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.626818][ T6270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.637972][ T6270] usb 1-1: New USB device found, idVendor=1fd2, idProduct=5ffe, bcdDevice= 0.00 [ 138.647119][ T6270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.659520][ T6270] usb 1-1: config 0 descriptor?? [ 138.701124][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 138.707693][ T5898] usb 5-1: config 8 has an invalid interface number: 203 but max is 0 [ 138.716646][ T5898] usb 5-1: config 8 has no interface number 0 [ 138.723332][ T5898] usb 5-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 138.737361][ T5898] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 138.747602][ T5898] usb 5-1: config 8 interface 203 altsetting 1 endpoint 0xB has invalid wMaxPacketSize 0 [ 138.757450][ T5898] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 0 [ 138.767335][ T5898] usb 5-1: config 8 interface 203 has no altsetting 0 [ 138.776968][ T5898] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 138.786075][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.794110][ T5898] usb 5-1: Product: syz [ 138.798267][ T5898] usb 5-1: Manufacturer: syz [ 138.803037][ T5898] usb 5-1: SerialNumber: syz [ 138.810531][ T6746] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 138.861210][ T5928] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 139.018218][ T5928] usb 3-1: device descriptor read/8, error -71 [ 139.344785][ T6751] netlink: 196 bytes leftover after parsing attributes in process `syz.0.190'. [ 139.489221][ T5928] usb usb3-port1: unable to enumerate USB device [ 140.404990][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 140.475884][ T6758] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 140.826571][ T6758] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 140.837878][ T6758] overlayfs: failed to look up (tracing) for ino (-66) [ 141.339845][ T30] audit: type=1400 audit(1766249835.060:449): avc: denied { mount } for pid=6752 comm="syz.3.193" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 141.890754][ T30] audit: type=1400 audit(1766249835.090:450): avc: denied { mounton } for pid=6752 comm="syz.3.193" path="/35/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 141.914309][ T6270] usbhid 1-1:0.0: can't add hid device: -71 [ 141.920277][ T6270] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 141.930469][ T6270] usb 1-1: USB disconnect, device number 9 [ 141.931642][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.977507][ T30] audit: type=1400 audit(1766249836.600:451): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 141.994324][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 142.039418][ T5898] port100 5-1:8.203: NFC: Could not get supported command types [ 142.084161][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.102999][ T5898] usb 5-1: USB disconnect, device number 8 [ 142.210127][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 142.237404][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.245900][ T24] usb 2-1: Product: syz [ 142.250073][ T24] usb 2-1: Manufacturer: syz [ 142.256072][ T24] usb 2-1: SerialNumber: syz [ 142.266680][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 142.268971][ T30] audit: type=1400 audit(1766249836.890:452): avc: denied { create } for pid=6772 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.311769][ T24] usb 2-1: config 0 descriptor?? [ 142.343863][ T30] audit: type=1400 audit(1766249836.910:453): avc: denied { ioctl } for pid=6772 comm="syz.0.199" path="socket:[12646]" dev="sockfs" ino=12646 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.370688][ T30] audit: type=1400 audit(1766249836.910:454): avc: denied { bind } for pid=6772 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.410522][ T30] audit: type=1400 audit(1766249836.910:455): avc: denied { setopt } for pid=6772 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.437877][ T30] audit: type=1400 audit(1766249836.910:456): avc: denied { accept } for pid=6772 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.458026][ T30] audit: type=1400 audit(1766249836.910:457): avc: denied { read } for pid=6772 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.521102][ T5898] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 142.641087][ T5942] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 142.651515][ T24] usb 2-1: USB disconnect, device number 5 [ 142.683050][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 142.693442][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.716521][ T5898] usb 1-1: unable to get BOS descriptor or descriptor too short [ 142.725221][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.744198][ T5898] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 142.755450][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.767440][ T5898] usb 1-1: Product: syz [ 142.772772][ T5898] usb 1-1: Manufacturer: syz [ 142.778649][ T5898] usb 1-1: SerialNumber: syz [ 142.789068][ T5898] usb 1-1: config 0 descriptor?? [ 142.817978][ T5942] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 142.835118][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.851351][ T5898] comedi comedi5: Wrong number of endpoints [ 142.871861][ T5898] ni6501 1-1:0.0: driver 'ni6501' failed to auto-configure device. [ 142.883947][ T5942] usb 5-1: config 0 descriptor?? [ 143.062062][ T30] audit: type=1400 audit(1766249837.690:458): avc: denied { create } for pid=6772 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 143.065980][ T5898] usb 1-1: USB disconnect, device number 10 [ 143.145397][ T6783] netlink: 40 bytes leftover after parsing attributes in process `syz.4.201'. [ 143.241378][ T6270] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 143.252818][ T6791] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.421370][ T6270] usb 4-1: Using ep0 maxpacket: 32 [ 143.429198][ T6270] usb 4-1: config 0 has an invalid interface number: 71 but max is 0 [ 143.445047][ T5942] ath6kl: Failed to submit usb control message: -71 [ 143.451459][ T6270] usb 4-1: config 0 has no interface number 0 [ 143.461116][ T5942] ath6kl: unable to send the bmi data to the device: -71 [ 143.471436][ T5942] ath6kl: Unable to send get target info: -71 [ 143.478810][ T6270] usb 4-1: config 0 interface 71 has no altsetting 0 [ 143.487799][ T5942] ath6kl: Failed to init ath6kl core: -71 [ 143.496361][ T5942] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 143.509344][ T5942] usb 5-1: USB disconnect, device number 9 [ 143.516292][ T6270] usb 4-1: New USB device found, idVendor=185b, idProduct=d001, bcdDevice=dc.ab [ 143.541485][ T6270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.582652][ T6270] usb 4-1: Product: syz [ 143.654345][ T6270] usb 4-1: Manufacturer: syz [ 143.659039][ T6270] usb 4-1: SerialNumber: syz [ 143.815890][ T6270] usb 4-1: config 0 descriptor?? [ 143.877260][ T6270] dvb-usb: found a 'Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb)' in warm state. [ 144.048990][ T6270] dvb-usb: bulk message failed: -22 (3/0) [ 144.212226][ T6270] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 144.815167][ T6270] dvbdev: DVB: registering new adapter (Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb)) [ 144.828500][ T6270] usb 4-1: media controller created [ 144.853182][ T6270] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.888921][ T6270] dvb-usb: bulk message failed: -22 (6/0) [ 144.903219][ T6270] dvb-usb: no frontend was attached by 'Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb)' [ 144.927118][ T6270] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 144.943121][ T6270] dvb-usb: schedule remote query interval to 150 msecs. [ 144.952490][ T6270] dvb-usb: bulk message failed: -22 (3/0) [ 144.971061][ T6270] dvb-usb: Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb) successfully initialized and connected. [ 144.993173][ T6270] usb 4-1: USB disconnect, device number 14 [ 145.149778][ T6270] dvb-usb: Compro Videomate DVB-U2000 - DVB-T USB1 successfully deinitialized and disconnected. [ 145.161605][ T5956] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 145.321116][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 145.337986][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.375494][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.395929][ T5956] usb 5-1: New USB device found, idVendor=1fd2, idProduct=5ffe, bcdDevice= 0.00 [ 145.413190][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.426205][ T5956] usb 5-1: config 0 descriptor?? [ 145.740641][ T6270] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 145.902052][ T6270] usb 3-1: Using ep0 maxpacket: 16 [ 145.935084][ T6270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.947212][ T6270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.091733][ T6270] usb 3-1: New USB device found, idVendor=1fd2, idProduct=5ffe, bcdDevice= 0.00 [ 146.113981][ T6270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.448093][ T6833] netlink: 196 bytes leftover after parsing attributes in process `syz.4.206'. [ 146.587795][ T6270] usb 3-1: config 0 descriptor?? [ 146.944844][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 146.944859][ T30] audit: type=1400 audit(1766249841.570:468): avc: denied { read } for pid=6838 comm="syz.3.214" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 147.011134][ T1617] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 147.045513][ T30] audit: type=1400 audit(1766249841.570:469): avc: denied { open } for pid=6838 comm="syz.3.214" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 147.128953][ T6842] netlink: 196 bytes leftover after parsing attributes in process `syz.2.211'. [ 147.388534][ T30] audit: type=1400 audit(1766249841.630:470): avc: denied { ioctl } for pid=6838 comm="syz.3.214" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 147.533913][ T30] audit: type=1400 audit(1766249842.140:471): avc: denied { bind } for pid=6838 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.586948][ T30] audit: type=1400 audit(1766249842.150:472): avc: denied { connect } for pid=6838 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.641216][ T1617] usb 1-1: Using ep0 maxpacket: 16 [ 147.649865][ T1617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.661665][ T1617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.676431][ T1617] usb 1-1: New USB device found, idVendor=1fd2, idProduct=5ffe, bcdDevice= 0.00 [ 147.686019][ T1617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.698915][ T1617] usb 1-1: config 0 descriptor?? [ 147.944996][ T5956] usbhid 5-1:0.0: can't add hid device: -71 [ 148.617544][ T6849] netlink: 196 bytes leftover after parsing attributes in process `syz.0.213'. [ 148.831442][ T5956] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 148.831617][ T6270] usbhid 3-1:0.0: can't add hid device: -71 [ 148.848373][ T5956] usb 5-1: USB disconnect, device number 10 [ 148.859446][ T30] audit: type=1400 audit(1766249843.480:473): avc: denied { create } for pid=6851 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.880157][ T6270] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 148.893574][ T6270] usb 3-1: USB disconnect, device number 14 [ 148.902130][ T30] audit: type=1400 audit(1766249843.490:474): avc: denied { setopt } for pid=6851 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.105200][ T30] audit: type=1400 audit(1766249843.590:475): avc: denied { bind } for pid=6851 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.710592][ T1617] usbhid 1-1:0.0: can't add hid device: -71 [ 149.728988][ T1617] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 149.874102][ T5956] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 150.433730][ T1617] usb 1-1: USB disconnect, device number 11 [ 150.522126][ T11] block nbd4: Possible stuck request ffff888026340000: control (read@0,1024B). Runtime 30 seconds [ 150.533540][ T11] block nbd4: Possible stuck request ffff888026340200: control (read@1024,1024B). Runtime 30 seconds [ 150.545382][ T11] block nbd4: Possible stuck request ffff888026340400: control (read@2048,1024B). Runtime 30 seconds [ 150.556572][ T11] block nbd4: Possible stuck request ffff888026340600: control (read@3072,1024B). Runtime 30 seconds [ 150.638584][ T30] audit: type=1400 audit(1766249845.260:476): avc: denied { create } for pid=6862 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.970987][ T5956] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 151.014641][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.019726][ T30] audit: type=1400 audit(1766249845.290:477): avc: denied { getopt } for pid=6862 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.100428][ T5956] usb 5-1: Product: syz [ 151.140225][ T5956] usb 5-1: Manufacturer: syz [ 151.166187][ T5956] usb 5-1: SerialNumber: syz [ 151.191693][ T5956] usb 5-1: config 0 descriptor?? [ 152.244149][ T5956] airspy 5-1:0.0: usb_control_msg() failed -110 request 09 [ 152.281939][ T5956] airspy 5-1:0.0: Could not detect board [ 152.302035][ T5956] airspy 5-1:0.0: probe with driver airspy failed with error -110 [ 152.780281][ T6601] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 152.951075][ T6601] usb 4-1: Using ep0 maxpacket: 16 [ 152.968575][ T6601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.981082][ T5956] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.008906][ T6601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.039294][ T6601] usb 4-1: New USB device found, idVendor=1fd2, idProduct=5ffe, bcdDevice= 0.00 [ 153.069968][ T6601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.110333][ T6601] usb 4-1: config 0 descriptor?? [ 153.151291][ T5942] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 153.183048][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.206534][ T5956] usb 2-1: config 0 has no interfaces? [ 153.220111][ T5956] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 153.239468][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.264850][ T5956] usb 2-1: config 0 descriptor?? [ 153.437986][ T5942] usb 1-1: Using ep0 maxpacket: 32 [ 153.487497][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.513663][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.856212][ T6898] netlink: 196 bytes leftover after parsing attributes in process `syz.3.226'. [ 153.923135][ T5942] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 153.944663][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.968678][ T5942] usb 1-1: config 0 descriptor?? [ 153.979168][ T5942] hub 1-1:0.0: USB hub found [ 154.113916][ T5898] usb 2-1: USB disconnect, device number 6 [ 154.188086][ T5942] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 154.348396][ T6906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.374379][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 154.374402][ T30] audit: type=1400 audit(1766249849.000:479): avc: denied { create } for pid=6905 comm="syz.2.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 154.631093][ T5942] hid-generic 0003:046D:C31C.0002: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 154.667816][ T6270] usb 5-1: USB disconnect, device number 11 [ 154.759286][ T30] audit: type=1400 audit(1766249849.380:480): avc: denied { write } for pid=6910 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.813008][ T30] audit: type=1400 audit(1766249849.430:481): avc: denied { write } for pid=6908 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.878831][ T30] audit: type=1400 audit(1766249849.500:482): avc: denied { create } for pid=6917 comm="syz.4.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 154.911685][ T6916] team0: No ports can be present during mode change [ 154.935662][ T30] audit: type=1400 audit(1766249849.530:483): avc: denied { bind } for pid=6893 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 154.986916][ T30] audit: type=1400 audit(1766249849.550:484): avc: denied { ioctl } for pid=6893 comm="syz.0.228" path="socket:[12894]" dev="sockfs" ino=12894 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.551905][ T6601] usbhid 4-1:0.0: can't add hid device: -71 [ 155.622005][ T6601] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 155.745866][ T6601] usb 4-1: USB disconnect, device number 15 [ 155.789611][ T5942] usb 1-1: USB disconnect, device number 12 [ 155.920103][ T30] audit: type=1400 audit(1766249849.550:485): avc: denied { setopt } for pid=6893 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 155.940568][ T30] audit: type=1400 audit(1766249849.760:486): avc: denied { setopt } for pid=6917 comm="syz.4.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 156.543695][ T6929] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 156.579557][ T6929] FAULT_INJECTION: forcing a failure. [ 156.579557][ T6929] name failslab, interval 1, probability 0, space 0, times 1 [ 156.593395][ T6929] CPU: 1 UID: 0 PID: 6929 Comm: syz.3.236 Not tainted syzkaller #0 PREEMPT(full) [ 156.593422][ T6929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.593438][ T6929] Call Trace: [ 156.593444][ T6929] [ 156.593450][ T6929] dump_stack_lvl+0x16c/0x1f0 [ 156.593477][ T6929] should_fail_ex+0x512/0x640 [ 156.593498][ T6929] ? fs_reclaim_acquire+0xae/0x150 [ 156.593519][ T6929] should_failslab+0xc2/0x120 [ 156.593538][ T6929] __kmalloc_noprof+0xeb/0x910 [ 156.593560][ T6929] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 156.593583][ T6929] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 156.593601][ T6929] tomoyo_realpath_from_path+0xc2/0x6e0 [ 156.593623][ T6929] ? tomoyo_profile+0x47/0x60 [ 156.593649][ T6929] tomoyo_path_number_perm+0x245/0x580 [ 156.593667][ T6929] ? tomoyo_path_number_perm+0x237/0x580 [ 156.593688][ T6929] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 156.593709][ T6929] ? find_held_lock+0x2b/0x80 [ 156.593757][ T6929] ? find_held_lock+0x2b/0x80 [ 156.593781][ T6929] ? hook_file_ioctl_common+0x144/0x410 [ 156.593814][ T6929] ? __fget_files+0x20e/0x3c0 [ 156.593852][ T6929] security_file_ioctl+0x9b/0x240 [ 156.593878][ T6929] __x64_sys_ioctl+0xb7/0x210 [ 156.593900][ T6929] do_syscall_64+0xcd/0xf80 [ 156.593931][ T6929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.593949][ T6929] RIP: 0033:0x7fbcafb8f749 [ 156.593963][ T6929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.593979][ T6929] RSP: 002b:00007fbcb094a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.594003][ T6929] RAX: ffffffffffffffda RBX: 00007fbcafde5fa0 RCX: 00007fbcafb8f749 [ 156.594015][ T6929] RDX: 0000000000000000 RSI: 0000000000006410 RDI: 0000000000000003 [ 156.594025][ T6929] RBP: 00007fbcb094a090 R08: 0000000000000000 R09: 0000000000000000 [ 156.594036][ T6929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.594047][ T6929] R13: 00007fbcafde6038 R14: 00007fbcafde5fa0 R15: 00007ffc202c92b8 [ 156.594074][ T6929] [ 156.594086][ T6929] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.086623][ T6270] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 157.300751][ T30] audit: type=1326 audit(1766249851.720:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6932 comm="syz.2.237" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f571b18f749 code=0x0 [ 157.591109][ T6270] usb 5-1: Using ep0 maxpacket: 32 [ 158.142679][ T6270] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 158.151952][ T30] audit: type=1400 audit(1766249852.770:488): avc: denied { mounton } for pid=6941 comm="syz.3.239" path="/proc/183" dev="proc" ino=13000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 158.173985][ T6270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.186003][ T6270] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 158.236501][ T6942] Invalid ELF header magic: != ELF [ 158.623604][ T6933] Set syz1 is full, maxelem 65536 reached [ 158.652750][ T6944] openvswitch: netlink: IPv4 tunnel dst address is zero [ 158.702200][ T6270] gspca_nw80x: reg_w err -110 [ 158.707907][ T6270] nw80x 5-1:3.0: probe with driver nw80x failed with error -110 [ 158.723138][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 158.731951][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 158.961977][ T6270] usb 5-1: USB disconnect, device number 12 [ 159.192987][ T6964] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 159.750649][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 159.767160][ T6978] SELinux: Context system_u:object_r:auditd_etc_t:s0 is not valid (left unmapped). [ 159.773759][ T30] audit: type=1400 audit(1766249854.370:491): avc: denied { ioctl } for pid=6977 comm="syz.1.247" path="socket:[12107]" dev="sockfs" ino=12107 ioctlcmd=0x942a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 159.836771][ T5956] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 159.870182][ T30] audit: type=1400 audit(1766249854.390:492): avc: denied { getopt } for pid=6977 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 159.961650][ T30] audit: type=1400 audit(1766249854.390:493): avc: denied { relabelfrom } for pid=6977 comm="syz.1.247" name="ROSE" dev="sockfs" ino=13038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 159.990464][ T30] audit: type=1400 audit(1766249854.400:494): avc: denied { relabelto } for pid=6977 comm="syz.1.247" name="ROSE" dev="sockfs" ino=13038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rose_socket permissive=1 trawcon="system_u:object_r:auditd_etc_t:s0" [ 160.017893][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 160.049167][ T5956] usb 5-1: unable to get BOS descriptor or descriptor too short [ 160.050620][ T30] audit: type=1400 audit(1766249854.440:495): avc: denied { open } for pid=6977 comm="syz.1.247" path="/dev/ttyq7" dev="devtmpfs" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 160.085751][ T30] audit: type=1400 audit(1766249854.490:496): avc: denied { write } for pid=6977 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 160.092427][ T5956] usb 5-1: config 7 has an invalid interface number: 58 but max is 0 [ 160.105520][ T30] audit: type=1400 audit(1766249854.570:497): avc: denied { bind } for pid=6985 comm="syz.2.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.183831][ T5956] usb 5-1: config 7 has no interface number 0 [ 160.189986][ T5956] usb 5-1: config 7 interface 58 altsetting 3 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 160.260211][ T5956] usb 5-1: config 7 interface 58 altsetting 3 endpoint 0x85 has invalid maxpacket 49589, setting to 1024 [ 160.391447][ T5956] usb 5-1: config 7 interface 58 altsetting 3 bulk endpoint 0x85 has invalid maxpacket 1024 [ 160.401641][ T5956] usb 5-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.414509][ T5956] usb 5-1: config 7 interface 58 has no altsetting 0 [ 160.423560][ T5956] usb 5-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 160.433270][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.448264][ T5956] usb 5-1: Product: syz [ 160.453068][ T5956] usb 5-1: Manufacturer: syz [ 160.457659][ T5956] usb 5-1: SerialNumber: syz [ 160.491348][ T6971] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.912145][ T30] audit: type=1400 audit(1766249855.540:498): avc: denied { setopt } for pid=7001 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.232968][ T5956] usb 5-1: USB disconnect, device number 13 [ 162.239222][ T30] audit: type=1400 audit(1766249856.860:499): avc: denied { append } for pid=7014 comm="syz.1.256" name="pfkey" dev="proc" ino=4026532921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 162.365451][ T30] audit: type=1400 audit(1766249856.940:500): avc: denied { read write } for pid=7014 comm="syz.1.256" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 162.690348][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 162.771325][ T5942] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 162.944196][ T5942] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 162.953217][ T5942] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.963839][ T5942] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.976122][ T5942] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.987271][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.996278][ T5942] usb 5-1: Product: ㊆訋ᒑ [ 163.003296][ T5942] usb 5-1: Manufacturer: 쭸⦹봓㾟艵劝鲐䧸曮鰨楉ꦐ䒓ခ䵭䮸钏喢恣읳츀扉듪碀싫␭첆洤ꏷ吠Ķ鰢菲⨊촘悳靬ꯍ䭅푳匜㭹檱ꓤ圀Ⰼ枎ᤍ涻甽샕╜ [ 163.023780][ T5942] usb 5-1: SerialNumber: syz [ 163.101144][ T7012] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 163.131080][ T5877] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 163.252747][ T5942] usb 5-1: 0:2 : does not exist [ 163.261092][ T7012] usb 1-1: Using ep0 maxpacket: 8 [ 163.276329][ T7012] usb 1-1: unable to get BOS descriptor or descriptor too short [ 163.287408][ T7039] Bluetooth: MGMT ver 1.23 [ 163.289020][ T5942] usb 5-1: USB disconnect, device number 14 [ 163.299386][ T975] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 163.302160][ T5877] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 163.332463][ T7012] usb 1-1: config 4 interface 0 has no altsetting 0 [ 163.339312][ T5877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.342845][ T7012] usb 1-1: string descriptor 0 read error: -22 [ 163.356145][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.356796][ T7012] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 163.381637][ T5877] usb 2-1: config 0 has no interface number 0 [ 163.383477][ T7012] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 163.387761][ T5877] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 16152, setting to 64 [ 163.409711][ T7012] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 163.430739][ T5877] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 163.453515][ T5877] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 163.463160][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.466021][ T7012] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 163.471872][ T5877] usb 2-1: Product: syz [ 163.482346][ T975] usb 3-1: Using ep0 maxpacket: 32 [ 163.486442][ T5877] usb 2-1: Manufacturer: syz [ 163.502729][ T5877] usb 2-1: SerialNumber: syz [ 163.504181][ T7012] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 163.525521][ T975] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 163.526622][ T5877] usb 2-1: config 0 descriptor?? [ 163.539938][ T975] usb 3-1: config 0 has no interface number 0 [ 163.543322][ T7032] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 163.546790][ T7012] usb 1-1: media controller created [ 163.564497][ T975] usb 3-1: config 0 interface 89 has no altsetting 0 [ 163.565779][ T5877] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 163.573419][ T975] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 163.583081][ T5877] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 163.607417][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.682784][ T5877] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 163.686926][ T7012] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.712580][ T975] usb 3-1: Product: syz [ 163.981519][ T5877] usb 2-1: USB disconnect, device number 7 [ 163.990397][ T975] usb 3-1: Manufacturer: syz [ 163.996220][ T975] usb 3-1: SerialNumber: syz [ 164.002795][ T5877] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 164.029492][ T7046] netlink: 830 bytes leftover after parsing attributes in process `syz.0.261'. [ 164.043382][ T5877] cyberjack 2-1:0.69: device disconnected [ 164.049480][ T975] usb 3-1: config 0 descriptor?? [ 164.053453][ T7046] bond_slave_0: entered promiscuous mode [ 164.060352][ T7046] bond_slave_1: entered promiscuous mode [ 164.073174][ T975] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 164.106000][ T7047] devpts: Unknown parameter '"' [ 164.119801][ T975] em28xx 3-1:0.89: Video interface 89 found: bulk [ 164.767340][ T975] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 165.146671][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 165.146686][ T30] audit: type=1400 audit(1766249859.770:505): avc: denied { getopt } for pid=7076 comm="syz.1.271" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.175437][ T7077] netlink: 'syz.1.271': attribute type 2 has an invalid length. [ 165.195435][ T5877] usb 1-1: USB disconnect, device number 13 [ 165.385931][ T30] audit: type=1400 audit(1766249860.000:506): avc: denied { create } for pid=7080 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 165.446279][ T30] audit: type=1400 audit(1766249860.000:507): avc: denied { create } for pid=7080 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 165.481913][ T30] audit: type=1400 audit(1766249860.000:508): avc: denied { write } for pid=7080 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 165.507557][ T30] audit: type=1400 audit(1766249860.000:509): avc: denied { read } for pid=7080 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.761661][ T975] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 165.773546][ T975] em28xx 3-1:0.89: board has no eeprom [ 165.832193][ T975] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 165.852385][ T975] em28xx 3-1:0.89: analog set to bulk mode. [ 165.877335][ T7012] em28xx 3-1:0.89: Registering V4L2 extension [ 165.907316][ T975] usb 3-1: USB disconnect, device number 15 [ 165.949783][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.957404][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.969564][ T975] em28xx 3-1:0.89: Disconnecting em28xx [ 166.079652][ T7012] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 166.105160][ T7012] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 166.121117][ T7012] em28xx 3-1:0.89: No AC97 audio processor [ 166.131096][ T5991] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 166.141590][ T7012] usb 3-1: Decoder not found [ 166.149695][ T7012] em28xx 3-1:0.89: failed to create media graph [ 166.157385][ T7012] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 166.237167][ T7012] em28xx 3-1:0.89: Registering snapshot button... [ 166.276302][ T7012] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input19 [ 166.294053][ T7089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.301067][ T5991] usb 1-1: Using ep0 maxpacket: 8 [ 166.306369][ T7089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.328643][ T5991] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.353664][ T7012] em28xx 3-1:0.89: Remote control support is not available for this card. [ 166.373894][ T5991] usb 1-1: config 8 has an invalid interface number: 255 but max is 0 [ 166.444842][ T975] em28xx 3-1:0.89: Closing input extension [ 166.453888][ T5991] usb 1-1: config 8 has no interface number 0 [ 166.498721][ T975] em28xx 3-1:0.89: Deregistering snapshot button [ 166.507279][ T5991] usb 1-1: config 8 interface 255 has no altsetting 0 [ 166.531862][ T7101] netlink: 'syz.1.278': attribute type 3 has an invalid length. [ 166.532271][ T5991] usb 1-1: string descriptor 0 read error: -22 [ 166.558445][ T975] em28xx 3-1:0.89: Freeing device [ 166.564061][ T5991] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 166.572306][ T30] audit: type=1400 audit(1766249861.190:510): avc: denied { read write } for pid=7105 comm="syz.2.279" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 166.577759][ T5991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.667588][ T7111] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 166.725777][ T30] audit: type=1400 audit(1766249861.230:511): avc: denied { open } for pid=7105 comm="syz.2.279" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 166.821849][ T30] audit: type=1400 audit(1766249861.280:512): avc: denied { read append } for pid=7102 comm="syz.4.280" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 166.912328][ T30] audit: type=1400 audit(1766249861.290:513): avc: denied { open } for pid=7102 comm="syz.4.280" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 167.289124][ T6147] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.375887][ T6147] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.415951][ T6147] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.418787][ T6270] libceph: connect (1)[c::]:6789 error -101 [ 167.432047][ T6270] libceph: mon0 (1)[c::]:6789 connect error [ 167.445256][ T6270] libceph: connect (1)[c::]:6789 error -101 [ 167.451363][ T6270] libceph: mon0 (1)[c::]:6789 connect error [ 167.459198][ T30] audit: type=1400 audit(1766249862.080:514): avc: denied { setattr } for pid=7113 comm="syz.1.281" name="secretmem" dev="secretmem" ino=14469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 167.543108][ T7119] ceph: No mds server is up or the cluster is laggy [ 167.716578][ T6270] libceph: connect (1)[c::]:6789 error -101 [ 167.835461][ T6270] libceph: mon0 (1)[c::]:6789 connect error [ 167.875536][ T6147] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.892665][ T5991] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.0-1, 00:00:00:00:00:00. [ 167.912904][ T7125] program syz.2.283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.131178][ T5991] usb 1-1: USB disconnect, device number 14 [ 168.231350][ T5942] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 168.381216][ T5942] usb 4-1: device descriptor read/64, error -71 [ 169.141087][ T5942] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 169.178858][ T7156] netlink: 176 bytes leftover after parsing attributes in process `syz.1.287'. [ 169.471102][ T5942] usb 4-1: device descriptor read/64, error -71 [ 170.046603][ T5942] usb usb4-port1: attempt power cycle [ 170.156104][ T5991] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 170.321200][ T6270] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 170.350440][ T5991] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.385648][ T5991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 170.402430][ T5942] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 170.432492][ T5991] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.453955][ T5942] usb 4-1: device descriptor read/8, error -71 [ 170.474615][ T5991] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 170.502127][ T5991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.511048][ T6270] usb 2-1: Using ep0 maxpacket: 16 [ 170.523651][ T6270] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.534023][ T5991] usb 3-1: Product: syz [ 170.544169][ T6270] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 170.553210][ T5991] usb 3-1: Manufacturer: syz [ 170.553231][ T5991] usb 3-1: SerialNumber: syz [ 170.555480][ T5991] usb 3-1: config 0 descriptor?? [ 170.578277][ T6270] usb 2-1: config 1 has no interface number 1 [ 170.590010][ T6270] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 170.619582][ T6270] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 170.667266][ T6270] usb 2-1: config 1 interface 2 has no altsetting 0 [ 170.695690][ T6270] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.701109][ T5942] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 170.711034][ T6270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.730562][ T6270] usb 2-1: Product: syz [ 170.748606][ T6270] usb 2-1: Manufacturer: syz [ 170.753553][ T5942] usb 4-1: device descriptor read/8, error -71 [ 170.757967][ T6270] usb 2-1: SerialNumber: syz [ 170.883949][ T5942] usb usb4-port1: unable to enumerate USB device [ 170.932599][ T5991] usb 3-1: USB disconnect, device number 16 [ 171.009995][ T6270] usb 2-1: selecting invalid altsetting 0 [ 171.013206][ T7183] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 171.720967][ T6270] usb 2-1: USB disconnect, device number 8 [ 173.079794][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 173.079812][ T30] audit: type=1400 audit(1766249867.350:532): avc: denied { create } for pid=7203 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 173.392459][ T5942] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 173.488610][ T30] audit: type=1400 audit(1766249868.110:533): avc: denied { append } for pid=7216 comm="syz.1.300" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 173.664224][ T30] audit: type=1400 audit(1766249868.110:534): avc: denied { read write } for pid=7216 comm="syz.1.300" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.376506][ T7225] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-/": -EINTR [ 174.673120][ T5942] usb 3-1: descriptor type invalid, skip [ 174.912193][ T5942] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 174.921288][ T30] audit: type=1400 audit(1766249868.110:535): avc: denied { open } for pid=7216 comm="syz.1.300" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 174.923389][ T5942] usb 3-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.959026][ T6270] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 174.969118][ T5956] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 174.997506][ T30] audit: type=1400 audit(1766249868.270:536): avc: denied { mount } for pid=7218 comm="syz.4.301" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 175.008170][ T5942] usb 3-1: config 1 interface 0 has no altsetting 0 [ 175.052720][ T5942] usb 3-1: string descriptor 0 read error: -22 [ 175.062230][ T5942] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.40 [ 175.079135][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.129422][ T7209] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 175.141066][ T6270] usb 1-1: Using ep0 maxpacket: 8 [ 175.150350][ T5956] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.0d [ 175.169814][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.188373][ T5956] usb 5-1: Product: syz [ 175.194099][ T6270] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 175.211111][ T6270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.219282][ T5956] usb 5-1: Manufacturer: syz [ 175.239709][ T5956] usb 5-1: SerialNumber: syz [ 175.249678][ T6270] usb 1-1: Product: syz [ 175.260159][ T6270] usb 1-1: Manufacturer: syz [ 175.275021][ T6270] usb 1-1: SerialNumber: syz [ 175.301432][ T6270] usb 1-1: config 0 descriptor?? [ 175.433934][ T5942] usbhid 3-1:1.0: can't add hid device: -71 [ 175.439922][ T5942] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 175.473397][ T7219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.515808][ T7219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.523988][ T5942] usb 3-1: USB disconnect, device number 17 [ 175.534418][ T7235] No such timeout policy "syz1" [ 175.546924][ T5826] Bluetooth: hci4: unknown advertising packet type: 0x17 [ 175.546960][ T5826] Bluetooth: hci4: Malformed LE Event: 0x02 [ 175.584122][ T6270] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 175.617002][ T5956] usb 5-1: USB disconnect, device number 15 [ 176.250661][ T7245] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 176.259669][ T7245] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 176.964601][ T7255] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 176.981090][ T5956] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 177.100918][ T30] audit: type=1400 audit(1766249871.720:537): avc: denied { bind } for pid=7257 comm="syz.4.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.148559][ T30] audit: type=1400 audit(1766249871.720:538): avc: denied { name_bind } for pid=7257 comm="syz.4.309" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 177.176637][ T5956] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 177.197134][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.220939][ T30] audit: type=1400 audit(1766249871.720:539): avc: denied { node_bind } for pid=7257 comm="syz.4.309" saddr=ff01::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 177.257972][ T5956] usb 3-1: config 0 descriptor?? [ 177.273599][ T7264] vivid-007: disconnect [ 177.289589][ T5956] cp210x 3-1:0.0: cp210x converter detected [ 177.376303][ T7257] vivid-007: reconnect [ 177.818077][ T7248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=201 sclass=netlink_route_socket pid=7248 comm=syz.2.306 [ 177.978302][ T6270] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 178.549887][ T6270] usb 1-1: USB disconnect, device number 15 [ 178.681497][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.306'. [ 178.737454][ T5956] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 178.872593][ T5956] cp210x 3-1:0.0: querying part number failed [ 178.911491][ T5956] usb 3-1: cp210x converter now attached to ttyUSB0 [ 178.940778][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 178.977599][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 179.211237][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 179.393714][ T24] usb 4-1: device descriptor read/64, error -71 [ 179.532072][ T30] audit: type=1400 audit(1766249874.160:540): avc: denied { write } for pid=7293 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.600324][ T30] audit: type=1400 audit(1766249874.220:541): avc: denied { bind } for pid=7293 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.635875][ T30] audit: type=1400 audit(1766249874.230:542): avc: denied { node_bind } for pid=7293 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 179.656261][ T30] audit: type=1400 audit(1766249874.270:543): avc: denied { write } for pid=7293 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 179.661102][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 179.863742][ T24] usb 4-1: device descriptor read/64, error -71 [ 180.268795][ T30] audit: type=1400 audit(1766249874.850:544): avc: denied { mount } for pid=7299 comm="syz.0.319" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 180.419378][ T24] usb usb4-port1: attempt power cycle [ 180.532354][ T975] usb 3-1: USB disconnect, device number 18 [ 180.546686][ T975] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 180.553512][ T11] block nbd4: Possible stuck request ffff888026340000: control (read@0,1024B). Runtime 60 seconds [ 180.565170][ T11] block nbd4: Possible stuck request ffff888026340200: control (read@1024,1024B). Runtime 60 seconds [ 180.576225][ T11] block nbd4: Possible stuck request ffff888026340400: control (read@2048,1024B). Runtime 60 seconds [ 180.579133][ T975] cp210x 3-1:0.0: device disconnected [ 180.591427][ T11] block nbd4: Possible stuck request ffff888026340600: control (read@3072,1024B). Runtime 60 seconds [ 180.749529][ T7308] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 180.811480][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 180.851707][ T24] usb 4-1: device descriptor read/8, error -71 [ 181.111426][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 181.157149][ T24] usb 4-1: device descriptor read/8, error -71 [ 181.272531][ T24] usb usb4-port1: unable to enumerate USB device [ 181.307991][ T7323] overlayfs: missing 'lowerdir' [ 181.371989][ T30] audit: type=1400 audit(1766249875.980:545): avc: denied { listen } for pid=7319 comm="syz.4.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 182.312492][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 182.461290][ T24] usb 4-1: device descriptor read/64, error -71 [ 182.712597][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 182.803589][ T30] audit: type=1400 audit(1766249877.430:546): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 182.864634][ T30] audit: type=1400 audit(1766249877.460:547): avc: denied { getopt } for pid=7343 comm="syz.4.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 182.917602][ T30] audit: type=1400 audit(1766249877.470:548): avc: denied { ioctl } for pid=7341 comm="syz.1.330" path="socket:[13776]" dev="sockfs" ino=13776 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.003112][ T30] audit: type=1400 audit(1766249877.470:549): avc: denied { connect } for pid=7341 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.014954][ T975] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 183.030613][ T24] usb 4-1: device descriptor read/64, error -71 [ 183.067732][ T7353] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 183.513691][ T24] usb usb4-port1: attempt power cycle [ 183.592168][ T975] usb 3-1: not running at top speed; connect to a high speed hub [ 183.607778][ T975] usb 3-1: config 5 has an invalid interface number: 148 but max is 0 [ 183.619386][ T975] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 183.629808][ T975] usb 3-1: config 5 has no interface number 0 [ 183.636127][ T975] usb 3-1: config 5 interface 148 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 183.646288][ T975] usb 3-1: config 5 interface 148 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.659376][ T975] usb 3-1: config 5 interface 148 has no altsetting 0 [ 183.677101][ T975] usb 3-1: New USB device found, idVendor=05ac, idProduct=d181, bcdDevice=b4.a2 [ 183.688434][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.742675][ T975] usb 3-1: Product: syz [ 183.749890][ T975] usb 3-1: Manufacturer: syz [ 183.756625][ T975] usb 3-1: SerialNumber: syz [ 183.871407][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 183.896828][ T24] usb 4-1: device descriptor read/8, error -71 [ 183.991680][ T90] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 184.116000][ T975] ipheth 3-1:5.148: Unable to find endpoints [ 184.134517][ T975] usb 3-1: USB disconnect, device number 19 [ 184.161106][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 184.181685][ T24] usb 4-1: device descriptor read/8, error -71 [ 184.213301][ T90] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.223600][ T90] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 184.233279][ T90] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.248403][ T90] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 184.257557][ T7012] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 184.265331][ T90] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.273403][ T90] usb 2-1: Product: syz [ 184.277889][ T90] usb 2-1: Manufacturer: syz [ 184.282560][ T90] usb 2-1: SerialNumber: syz [ 184.288887][ T90] usb 2-1: config 0 descriptor?? [ 184.294279][ T24] usb usb4-port1: unable to enumerate USB device [ 184.421060][ T7012] usb 1-1: Using ep0 maxpacket: 32 [ 184.427535][ T7012] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.440209][ T7012] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 184.449492][ T7012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.457514][ T7012] usb 1-1: Product: syz [ 184.461695][ T7012] usb 1-1: Manufacturer: syz [ 184.466291][ T7012] usb 1-1: SerialNumber: syz [ 184.473754][ T7012] usb 1-1: config 0 descriptor?? [ 184.482826][ T7012] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 184.525720][ T90] usb 2-1: USB disconnect, device number 9 [ 184.766354][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 184.775343][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 184.799650][ T7375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.336'. [ 184.835491][ T6270] IPVS: starting estimator thread 0... [ 184.872770][ T7375] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 185.061119][ T7376] IPVS: using max 38 ests per chain, 91200 per kthread [ 185.085429][ T6270] usb 1-1: USB disconnect, device number 16 [ 185.400081][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 185.400095][ T30] audit: type=1400 audit(1766249880.020:551): avc: denied { execute } for pid=7379 comm="syz.1.341" path="/73/blkio.bfq.io_merged" dev="tmpfs" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 186.011068][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 186.211261][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 186.217897][ T24] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 104, changing to 10 [ 186.229540][ T24] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x2 has an invalid bInterval 74, changing to 10 [ 186.240859][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 186.249498][ T24] usb 3-1: string descriptor 0 read error: -22 [ 186.256151][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0713, bcdDevice= 0.40 [ 186.265376][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.319439][ T30] audit: type=1400 audit(1766249880.940:552): avc: denied { block_suspend } for pid=7396 comm="syz.1.347" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 186.355269][ T7397] batadv_slave_1: entered promiscuous mode [ 186.363749][ T7397] batman_adv: batadv0: Adding interface: macvlan0 [ 186.370164][ T7397] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.396452][ T7397] batman_adv: batadv0: Interface activated: macvlan0 [ 186.401391][ T6270] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 186.503037][ T30] audit: type=1400 audit(1766249881.130:553): avc: denied { mount } for pid=7398 comm="syz.1.348" name="/" dev="ramfs" ino=15178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 186.641063][ T6270] usb 4-1: Using ep0 maxpacket: 16 [ 186.648139][ T6270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.664735][ T6270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.675575][ T6270] usb 4-1: New USB device found, idVendor=1fd2, idProduct=5ffe, bcdDevice= 0.00 [ 186.777214][ T30] audit: type=1400 audit(1766249881.400:554): avc: denied { ioctl } for pid=7385 comm="syz.2.343" path="/62/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 186.807622][ T6270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.822075][ T6270] usb 4-1: config 0 descriptor?? [ 186.865672][ T24] usbhid 3-1:1.0: can't add hid device: -71 [ 186.879918][ T24] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 186.906101][ T24] usb 3-1: USB disconnect, device number 20 [ 187.034045][ T30] audit: type=1400 audit(1766249881.660:555): avc: denied { map } for pid=7407 comm="syz.0.350" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 187.491828][ T7411] netlink: 196 bytes leftover after parsing attributes in process `syz.3.345'. [ 188.202226][ T5884] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 188.288047][ T7421] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 188.323722][ T30] audit: type=1400 audit(1766249882.950:556): avc: denied { ioctl } for pid=7415 comm="syz.0.352" path="socket:[14042]" dev="sockfs" ino=14042 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 188.373593][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.402726][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 188.435305][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.480364][ T5884] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 188.506785][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.511556][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 188.533793][ T5884] usb 2-1: Product: syz [ 188.543285][ T5884] usb 2-1: Manufacturer: syz [ 188.554831][ T5884] usb 2-1: SerialNumber: syz [ 188.571821][ T5884] usb 2-1: config 0 descriptor?? [ 188.681051][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 188.688806][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 188.698298][ T24] usb 3-1: config 5 has an invalid interface number: 52 but max is 0 [ 188.708077][ T24] usb 3-1: config 5 has no interface number 0 [ 188.714737][ T24] usb 3-1: config 5 interface 52 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 188.724898][ T24] usb 3-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 188.737818][ T24] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 188.747459][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.755580][ T24] usb 3-1: Product: syz [ 188.760244][ T24] usb 3-1: Manufacturer: syz [ 188.766652][ T24] usb 3-1: SerialNumber: syz [ 188.844879][ T5884] usb 2-1: USB disconnect, device number 10 [ 188.918452][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.996756][ T24] aircable 3-1:5.52: aircable converter detected [ 189.021727][ T24] usb 3-1: aircable converter now attached to ttyUSB0 [ 189.074739][ T24] usb 3-1: USB disconnect, device number 21 [ 189.097237][ T24] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 189.121429][ T24] aircable 3-1:5.52: device disconnected [ 189.212544][ T6270] usbhid 4-1:0.0: can't add hid device: -71 [ 189.219610][ T6270] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 189.235810][ T6270] usb 4-1: USB disconnect, device number 28 [ 190.568023][ T30] audit: type=1400 audit(1766249885.100:557): avc: denied { mount } for pid=7443 comm="syz.2.358" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 190.961605][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.359'. [ 191.126048][ T30] audit: type=1400 audit(1766249885.750:558): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 191.360706][ T30] audit: type=1400 audit(1766249885.930:559): avc: denied { append } for pid=7450 comm="syz.1.360" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 191.446165][ T30] audit: type=1400 audit(1766249885.970:560): avc: denied { read } for pid=7434 comm="syz.3.356" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 191.537556][ T30] audit: type=1400 audit(1766249885.970:561): avc: denied { ioctl } for pid=7434 comm="syz.3.356" path="/dev/sg0" dev="devtmpfs" ino=764 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 191.615249][ T30] audit: type=1400 audit(1766249885.980:562): avc: denied { read } for pid=7434 comm="syz.3.356" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 191.662942][ T30] audit: type=1400 audit(1766249885.980:563): avc: denied { open } for pid=7434 comm="syz.3.356" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 191.702176][ T30] audit: type=1400 audit(1766249885.980:564): avc: denied { ioctl } for pid=7434 comm="syz.3.356" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 191.754224][ T7462] syzkaller0: entered promiscuous mode [ 191.777520][ T7462] syzkaller0: entered allmulticast mode [ 191.903767][ T1617] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 192.062601][ T1617] usb 3-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 192.071791][ T1617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.118723][ T1617] ums-cypress 3-1:1.0: USB Mass Storage device detected [ 192.646801][ T6270] usb 3-1: USB disconnect, device number 22 [ 192.683997][ T30] audit: type=1400 audit(1766249887.310:565): avc: denied { mounton } for pid=7476 comm="syz.0.367" path="/proc/283/cgroup" dev="proc" ino=14202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 192.905236][ T30] audit: type=1400 audit(1766249887.520:566): avc: denied { mounton } for pid=7476 comm="syz.0.367" path="/proc/283/cgroup" dev="nsfs" ino=4026532793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 193.096839][ T7486] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 193.998666][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.006924][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.642117][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 194.662733][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.376'. [ 195.021883][ T7523] syzkaller1: entered promiscuous mode [ 195.028329][ T7528] xt_nfacct: accounting object `syz1' does not exist [ 195.036857][ T7523] syzkaller1: entered allmulticast mode [ 195.193081][ T7535] netlink: 96 bytes leftover after parsing attributes in process `syz.1.382'. [ 195.211769][ T975] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 195.383012][ T975] usb 4-1: unable to get BOS descriptor or descriptor too short [ 195.402039][ T975] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.421074][ T975] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.444077][ T975] usb 4-1: config 1 interface 0 has no altsetting 0 [ 195.465251][ T975] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.491192][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.499240][ T975] usb 4-1: Product: Ь [ 195.509380][ T975] usb 4-1: Manufacturer: 肔㒁◁䪈∳ᓋ급ⓨ舾㝨Ώ䪌侤䣅㝉콺莩뢬౬詧尦鼣㎫훴霈緇쓒쵇膲б䝧䋲﷮퓎멖⢓믇纭￪ᢤ㱚惔崣㷃ｌ벲．瓳⫗䀒푶⛄铧迒흩鴂ꆍ䇙᷏䀱餏촠ᖣ冊﯍쇉鳢莪无 [ 195.534074][ T6270] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 195.561324][ T975] usb 4-1: SerialNumber: syz [ 195.701062][ T6270] usb 1-1: Using ep0 maxpacket: 16 [ 195.707720][ T6270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.720124][ T6270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.730006][ T6270] usb 1-1: New USB device found, idVendor=1fd2, idProduct=5ffe, bcdDevice= 0.00 [ 195.739076][ T6270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.749153][ T6270] usb 1-1: config 0 descriptor?? [ 195.784639][ T975] usb 4-1: bad CDC descriptors [ 195.793918][ T975] usb 4-1: USB disconnect, device number 29 [ 196.409017][ T7542] netlink: 196 bytes leftover after parsing attributes in process `syz.0.384'. [ 196.601120][ T1617] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 196.911183][ T1617] usb 2-1: Using ep0 maxpacket: 32 [ 196.918308][ T1617] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 196.926628][ T1617] usb 2-1: config 0 has no interface number 0 [ 196.934210][ T1617] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 196.947442][ T1617] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 196.956570][ T1617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.964741][ T1617] usb 2-1: Product: syz [ 196.969041][ T1617] usb 2-1: Manufacturer: syz [ 196.973798][ T1617] usb 2-1: SerialNumber: syz [ 196.980481][ T1617] usb 2-1: config 0 descriptor?? [ 196.986488][ T7541] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 197.199685][ T7541] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 197.410158][ T1617] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 197.433397][ T1617] asix 2-1:0.188: probe with driver asix failed with error -61 [ 197.534084][ T7550] Falling back ldisc for ttyS3. [ 197.781229][ T975] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 197.941136][ T975] usb 4-1: Using ep0 maxpacket: 8 [ 197.953380][ T975] usb 4-1: unable to get BOS descriptor or descriptor too short [ 197.963597][ T975] usb 4-1: too many configurations: 16, using maximum allowed: 8 [ 197.975673][ T975] usb 4-1: config 4 interface 0 has no altsetting 0 [ 197.984164][ T975] usb 4-1: config 4 interface 0 has no altsetting 0 [ 197.991927][ T975] usb 4-1: config 4 interface 0 has no altsetting 0 [ 197.999543][ T975] usb 4-1: config 4 interface 0 has no altsetting 0 [ 198.008637][ T975] usb 4-1: config 4 interface 0 has no altsetting 0 [ 198.016522][ T975] usb 4-1: config 4 interface 0 has no altsetting 0 [ 198.026064][ T975] usb 4-1: config 4 interface 0 has no altsetting 0 [ 198.062399][ T975] usb 4-1: config 4 interface 0 has no altsetting 0 [ 198.075639][ T975] usb 4-1: string descriptor 0 read error: -22 [ 198.091878][ T975] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 198.093518][ T7554] netlink: 68 bytes leftover after parsing attributes in process `syz.2.388'. [ 198.100939][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.144146][ T975] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 198.175662][ T975] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 198.195458][ T975] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 198.205656][ T975] usb 4-1: media controller created [ 198.225852][ T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.284004][ T6270] usbhid 1-1:0.0: can't add hid device: -71 [ 198.301186][ T6270] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 198.313977][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 198.322989][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 198.331991][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 198.342875][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 198.350408][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 198.362453][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 198.362467][ T30] audit: type=1400 audit(1766249892.990:585): avc: denied { mounton } for pid=7557 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 198.372652][ T7550] usb 4-1: dvb_usb_au6610: wlen=0, aborting [ 198.399647][ T6270] usb 1-1: USB disconnect, device number 17 [ 198.553256][ T975] zl10353_read_register: readreg error (reg=127, ret==0) [ 199.217108][ T975] usb 4-1: USB disconnect, device number 30 [ 199.284401][ T5956] usb 2-1: USB disconnect, device number 11 [ 199.464353][ T7573] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 199.513047][ T7573] xt_nfacct: accounting object `syz1' does not exist [ 199.610951][ T30] audit: type=1400 audit(1766249894.230:586): avc: denied { connect } for pid=7582 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 199.656762][ T7557] chnl_net:caif_netlink_parms(): no params data found [ 199.732772][ T30] audit: type=1400 audit(1766249894.360:587): avc: denied { bind } for pid=7591 comm="syz.3.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 199.845434][ T30] audit: type=1400 audit(1766249894.470:588): avc: denied { setopt } for pid=7591 comm="syz.3.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.214184][ T30] audit: type=1400 audit(1766249894.520:589): avc: denied { read } for pid=7593 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 200.344968][ T7557] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.360595][ T7557] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.376621][ T7557] bridge_slave_0: entered allmulticast mode [ 200.391075][ T5827] Bluetooth: hci5: command tx timeout [ 200.400938][ T7557] bridge_slave_0: entered promiscuous mode [ 200.419561][ T7557] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.437356][ T7557] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.470530][ T7557] bridge_slave_1: entered allmulticast mode [ 200.511172][ T7557] bridge_slave_1: entered promiscuous mode [ 200.551163][ T5877] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 200.662852][ T7557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.731060][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 200.732149][ T7557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.758592][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.784384][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.795787][ T5877] usb 2-1: New USB device found, idVendor=1fd2, idProduct=5ffe, bcdDevice= 0.00 [ 200.806157][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.824145][ T5877] usb 2-1: config 0 descriptor?? [ 200.886648][ T7557] team0: Port device team_slave_0 added [ 200.907581][ T7557] team0: Port device team_slave_1 added [ 201.003288][ T7557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.010325][ T7557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.235895][ T1617] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 201.236606][ T7557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.542726][ T7625] netlink: 196 bytes leftover after parsing attributes in process `syz.1.400'. [ 201.613503][ T7557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.666030][ T7557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.727178][ T7557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.732463][ T1617] usb 4-1: Using ep0 maxpacket: 16 [ 201.764426][ T1617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.789100][ T1617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.813344][ T1617] usb 4-1: New USB device found, idVendor=1fd2, idProduct=5ffe, bcdDevice= 0.00 [ 201.856828][ T1617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.223746][ T1617] usb 4-1: config 0 descriptor?? [ 202.253376][ T7557] hsr_slave_0: entered promiscuous mode [ 202.270174][ T7557] hsr_slave_1: entered promiscuous mode [ 202.287742][ T7557] debugfs: 'hsr0' already exists in 'hsr' [ 202.301036][ T7557] Cannot create hsr debugfs directory [ 202.551244][ T5827] Bluetooth: hci5: command tx timeout [ 203.012849][ T7635] netlink: 196 bytes leftover after parsing attributes in process `syz.3.404'. [ 203.253478][ T5877] usbhid 2-1:0.0: can't add hid device: -71 [ 203.259492][ T5877] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 203.293559][ T5877] usb 2-1: USB disconnect, device number 12 [ 203.490070][ T30] audit: type=1400 audit(1766249898.110:590): avc: denied { read } for pid=7642 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 204.121573][ T5877] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 204.186285][ T7557] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 204.228206][ T7557] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 204.293959][ T7557] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 204.344222][ T7557] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 204.352614][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 204.368611][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.508012][ T1617] usbhid 4-1:0.0: can't add hid device: -71 [ 204.531033][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.541444][ T1617] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 204.561087][ T5877] usb 2-1: New USB device found, idVendor=1fd2, idProduct=5ffe, bcdDevice= 0.00 [ 204.570145][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.581222][ T1617] usb 4-1: USB disconnect, device number 31 [ 204.634435][ T5827] Bluetooth: hci5: command tx timeout [ 204.644561][ T5877] usb 2-1: config 0 descriptor?? [ 204.816173][ T7557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.934502][ T7557] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.216559][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.223755][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.569822][ T7682] netlink: 196 bytes leftover after parsing attributes in process `syz.1.410'. [ 205.706257][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.713476][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.392658][ T30] audit: type=1400 audit(1766249901.020:591): avc: denied { accept } for pid=7688 comm="syz.0.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 206.506491][ T7692] netlink: 'syz.0.414': attribute type 10 has an invalid length. [ 206.617542][ T7692] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.654933][ T7692] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.751199][ T5827] Bluetooth: hci5: command tx timeout [ 206.929651][ T7692] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.937137][ T7692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.944940][ T7692] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.952341][ T7692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.968492][ T7692] bridge0: entered promiscuous mode [ 206.975181][ T7692] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 207.129205][ T7698] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 207.187751][ T5877] usbhid 2-1:0.0: can't add hid device: -71 [ 207.211127][ T5877] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 207.266064][ T5877] usb 2-1: USB disconnect, device number 13 [ 207.435726][ T7557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.618782][ T30] audit: type=1400 audit(1766249902.240:592): avc: denied { write } for pid=7708 comm="syz.3.419" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 207.684914][ T7711] process 'syz.2.418' launched './file0' with NULL argv: empty string added [ 207.747026][ T30] audit: type=1400 audit(1766249902.350:593): avc: denied { execute_no_trans } for pid=7707 comm="syz.2.418" path="/80/file0" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 207.795030][ T7012] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 207.966045][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 207.983084][ T7012] usb 2-1: Using ep0 maxpacket: 16 [ 208.002776][ T7012] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.016753][ T7012] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.051119][ T7012] usb 2-1: New USB device found, idVendor=1fd2, idProduct=5ffe, bcdDevice= 0.00 [ 208.091137][ T7012] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.121805][ T7012] usb 2-1: config 0 descriptor?? [ 208.154546][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.185852][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.217007][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 208.224349][ T7557] veth0_vlan: entered promiscuous mode [ 208.266841][ T7557] veth1_vlan: entered promiscuous mode [ 208.321434][ T5877] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 208.349494][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 208.358041][ T24] usb 4-1: SerialNumber: syz [ 208.572002][ T7557] veth0_macvtap: entered promiscuous mode [ 208.848221][ T7725] netlink: 196 bytes leftover after parsing attributes in process `syz.1.417'. [ 208.962747][ T7557] veth1_macvtap: entered promiscuous mode [ 209.019125][ T24] usb 4-1: 0:2 : does not exist [ 209.044556][ T24] usb 4-1: unit 5: unexpected type 0x09 [ 209.150413][ T5877] usb 3-1: string descriptor 0 read error: -22 [ 209.162028][ T7557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.165911][ T24] usb 4-1: USB disconnect, device number 32 [ 209.189081][ T5877] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 209.415684][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.440620][ T7557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.707283][ T5877] usb 3-1: config 0 descriptor?? [ 209.728450][ T1131] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.730067][ T5877] usbtest 3-1:0.0: FX2 device [ 209.780266][ T5877] usbtest 3-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 209.781200][ T1131] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.853378][ T1131] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.902639][ T1131] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.592330][ T7012] usbhid 2-1:0.0: can't add hid device: -71 [ 210.615062][ T7012] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 210.659644][ T11] block nbd4: Possible stuck request ffff888026340000: control (read@0,1024B). Runtime 90 seconds [ 210.670346][ T11] block nbd4: Possible stuck request ffff888026340200: control (read@1024,1024B). Runtime 90 seconds [ 210.681473][ T11] block nbd4: Possible stuck request ffff888026340400: control (read@2048,1024B). Runtime 90 seconds [ 210.694690][ T11] block nbd4: Possible stuck request ffff888026340600: control (read@3072,1024B). Runtime 90 seconds [ 210.741444][ T7012] usb 2-1: USB disconnect, device number 14 [ 210.798448][ T5956] usb 3-1: USB disconnect, device number 23 [ 210.871986][ T4100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.905997][ T4100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.971878][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.991089][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 211.101271][ T7012] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 211.195301][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.219644][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.224886][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.259753][ T30] audit: type=1400 audit(1766249905.880:594): avc: denied { mounton } for pid=7557 comm="syz-executor" path="/root/syzkaller.wZhPz3/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 211.292732][ T7012] usb 2-1: Using ep0 maxpacket: 16 [ 211.311932][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.360200][ T7012] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 211.379532][ T30] audit: type=1400 audit(1766249905.900:595): avc: denied { mounton } for pid=7557 comm="syz-executor" path="/root/syzkaller.wZhPz3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=17374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 211.440383][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.471306][ T7012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.506930][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.511442][ T30] audit: type=1400 audit(1766249905.910:596): avc: denied { mounton } for pid=7557 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 211.517953][ T7012] usb 2-1: Product: syz [ 211.578330][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.639460][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.660891][ T30] audit: type=1400 audit(1766249905.910:597): avc: denied { mount } for pid=7557 comm="syz-executor" name="/" dev="gadgetfs" ino=7140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 211.690454][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.729597][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.730402][ T7012] usb 2-1: Manufacturer: syz [ 211.745704][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.753731][ T30] audit: type=1400 audit(1766249905.950:598): avc: denied { mounton } for pid=7557 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 211.771108][ T7012] usb 2-1: SerialNumber: syz [ 211.792056][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.814903][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 211.849148][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 211.870259][ T24] usb 4-1: New USB device strings: Mfr=0, Product=246, SerialNumber=12 [ 211.881544][ T1617] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 211.896917][ T24] usb 4-1: Product: syz [ 211.905628][ T24] usb 4-1: SerialNumber: syz [ 211.921074][ T5928] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 211.930093][ T24] usb 4-1: config 0 descriptor?? [ 212.041068][ T1617] usb 3-1: Using ep0 maxpacket: 32 [ 212.043990][ T7012] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.048029][ T1617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.085161][ T5928] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 212.101200][ T5928] usb 6-1: config 1 has an invalid descriptor of length 83, skipping remainder of the config [ 212.111862][ T5928] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 212.120911][ T1617] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 212.130181][ T5928] usb 6-1: config 1 has no interface number 1 [ 212.136406][ T7012] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 212.137493][ T1617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.167664][ T5928] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 212.184329][ T7012] usb 2-1: USB disconnect, device number 15 [ 212.187766][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.212423][ T5928] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.223473][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.234050][ T30] audit: type=1400 audit(1766249906.860:599): avc: denied { setopt } for pid=7753 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.253733][ T1617] usb 3-1: config 0 descriptor?? [ 212.270458][ T5928] usb 6-1: Product: syz [ 212.284125][ T5928] usb 6-1: Manufacturer: syz [ 212.288792][ T5928] usb 6-1: SerialNumber: syz [ 212.493000][ T30] audit: type=1400 audit(1766249907.120:600): avc: denied { load_policy } for pid=7758 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 212.507576][ T7759] SELinux: failed to load policy [ 212.521275][ T7759] !: renamed from dummy0 (while UP) [ 212.598849][ T5928] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.606427][ T5928] usb 6-1: MIDIStreaming interface descriptor not found [ 212.656245][ T5928] usb 6-1: USB disconnect, device number 2 [ 212.704328][ T1617] magicmouse 0003:05AC:0265.0003: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 212.754046][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.904815][ T7765] netlink: 'syz.0.429': attribute type 5 has an invalid length. [ 213.034425][ T7772] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 213.077638][ T24] usb 3-1: USB disconnect, device number 24 [ 213.181236][ T1156] Bluetooth: Error in BCSP hdr checksum [ 213.443407][ T1156] Bluetooth: Error in BCSP hdr checksum [ 213.590082][ T30] audit: type=1400 audit(1766249908.210:601): avc: denied { ioctl } for pid=7779 comm="syz.5.433" path="socket:[17531]" dev="sockfs" ino=17531 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 213.692756][ T7782] netlink: 'syz.5.433': attribute type 8 has an invalid length. [ 213.704208][ T1156] Bluetooth: Error in BCSP hdr checksum [ 213.811764][ T24] usb 4-1: USB disconnect, device number 33 [ 214.231709][ T1156] Bluetooth: Error in BCSP hdr checksum [ 214.261373][ T5928] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 214.401374][ T5928] usb 3-1: device descriptor read/64, error -71 [ 214.461879][ T64] Bluetooth: Error in BCSP hdr checksum [ 214.651083][ T5928] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 214.721417][ T1131] Bluetooth: Error in BCSP hdr checksum [ 214.792849][ T5928] usb 3-1: device descriptor read/64, error -71 [ 214.841276][ T1617] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 214.942651][ T5928] usb usb3-port1: attempt power cycle [ 214.953264][ T5826] Bluetooth: hci6: command 0x1003 tx timeout [ 214.960941][ T5827] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 215.041330][ T1617] usb 6-1: Using ep0 maxpacket: 16 [ 215.077011][ T1617] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 215.100125][ T30] audit: type=1326 audit(1766249909.720:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.3.436" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcafb8f749 code=0x0 [ 215.107806][ T1617] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 215.205203][ T1617] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 215.261655][ T1617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.276661][ T1617] usb 6-1: Product: syz [ 215.285335][ T1617] usb 6-1: Manufacturer: syz [ 215.293120][ T1617] usb 6-1: SerialNumber: syz [ 215.306217][ T5928] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 215.319451][ T1617] usb 6-1: config 0 descriptor?? [ 215.333094][ T1617] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 215.342708][ T1617] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 215.350269][ T5928] usb 3-1: device descriptor read/8, error -71 [ 215.597936][ T5928] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 215.631748][ T5928] usb 3-1: device descriptor read/8, error -71 [ 215.757504][ T5928] usb usb3-port1: unable to enumerate USB device [ 215.764732][ T1617] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 216.003143][ T1617] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 216.164053][ T1617] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 216.201047][ T1617] em28xx 6-1:0.0: No AC97 audio processor [ 216.280623][ T1617] usb 6-1: USB disconnect, device number 3 [ 216.322085][ T1617] em28xx 6-1:0.0: Disconnecting em28xx [ 216.360873][ T1617] em28xx 6-1:0.0: Freeing device [ 216.544634][ T7820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.652138][ T1617] kernel write not supported for file /uinput (pid: 1617 comm: kworker/0:2) [ 216.937734][ T36] bridge_slave_1: left allmulticast mode [ 216.978002][ T36] bridge_slave_1: left promiscuous mode [ 217.279931][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.152799][ T36] bridge_slave_0: left allmulticast mode [ 218.190388][ T36] bridge_slave_0: left promiscuous mode [ 218.221697][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.231303][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.275733][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.287085][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.297315][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.308354][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.405818][ T30] audit: type=1400 audit(1766249913.030:603): avc: denied { ioctl } for pid=7838 comm="syz.5.449" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 218.883602][ T5884] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 219.009561][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.020162][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.030195][ T36] bond0 (unregistering): Released all slaves [ 219.047675][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'. [ 219.058070][ T5884] usb 6-1: Using ep0 maxpacket: 32 [ 219.082122][ T5884] usb 6-1: unable to get BOS descriptor or descriptor too short [ 219.099736][ T5884] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 219.125092][ T5884] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 219.150284][ T5884] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.208236][ T5884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.238718][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.435742][ T5884] usb 6-1: Product: syz [ 219.448081][ T5884] usb 6-1: Manufacturer: syz [ 219.461143][ T5884] usb 6-1: SerialNumber: syz [ 219.816912][ T5884] cdc_ncm 6-1:1.0: skipping garbage [ 219.822646][ T5884] cdc_ncm 6-1:1.0: skipping garbage [ 219.828102][ T5884] cdc_ncm 6-1:1.0: skipping garbage [ 219.868380][ T5884] cdc_ncm 6-1:1.0: skipping garbage [ 219.881911][ T5884] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 219.912961][ T5884] cdc_ncm 6-1:1.0: bind() failure [ 219.937972][ T5884] usb 6-1: USB disconnect, device number 4 [ 219.976285][ T30] audit: type=1400 audit(1766249914.600:604): avc: denied { module_load } for pid=7859 comm="syz.0.452" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=17877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 220.154253][ T36] hsr_slave_0: left promiscuous mode [ 220.176022][ T36] hsr_slave_1: left promiscuous mode [ 220.193314][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.275026][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.392533][ T5827] Bluetooth: hci2: command tx timeout [ 220.581412][ T7878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.455'. [ 220.606149][ T30] audit: type=1400 audit(1766249915.200:605): avc: denied { write } for pid=7871 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 221.367239][ T30] audit: type=1400 audit(1766249915.990:606): avc: denied { ioctl } for pid=7874 comm="syz.2.456" path="socket:[18541]" dev="sockfs" ino=18541 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 221.471125][ T30] audit: type=1400 audit(1766249916.020:607): avc: denied { setopt } for pid=7881 comm="syz.5.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 221.848701][ T30] audit: type=1400 audit(1766249916.210:608): avc: denied { ioctl } for pid=7885 comm="syz.0.458" path="socket:[18555]" dev="sockfs" ino=18555 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 221.927120][ T7894] netlink: 36 bytes leftover after parsing attributes in process `syz.5.459'. [ 221.927120][ T7893] netlink: 36 bytes leftover after parsing attributes in process `syz.5.459'. [ 222.141114][ T5884] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 222.320051][ T36] team0 (unregistering): Port device team_slave_1 removed [ 222.341114][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 222.372550][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.384896][ T36] team0 (unregistering): Port device team_slave_0 removed [ 222.406343][ T5884] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 222.451045][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.471218][ T5827] Bluetooth: hci2: command tx timeout [ 222.476921][ T5884] usb 1-1: Product: syz [ 222.490161][ T5884] usb 1-1: Manufacturer: syz [ 222.533598][ T5884] usb 1-1: SerialNumber: syz [ 222.559541][ T5884] usb 1-1: config 0 descriptor?? [ 222.986163][ T5884] usb 1-1: USB disconnect, device number 18 [ 223.798329][ T30] audit: type=1400 audit(1766249918.370:609): avc: denied { connect } for pid=7920 comm="syz.1.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 223.900428][ T30] audit: type=1400 audit(1766249918.470:610): avc: denied { setopt } for pid=7920 comm="syz.1.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 223.943495][ T7925] bond2 (unregistering): Released all slaves [ 224.313091][ T7836] chnl_net:caif_netlink_parms(): no params data found [ 224.337790][ T5884] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 225.219851][ T7942] netlink: 'syz.2.466': attribute type 10 has an invalid length. [ 225.227653][ T7942] netlink: 228 bytes leftover after parsing attributes in process `syz.2.466'. [ 225.248153][ T5827] Bluetooth: hci2: command tx timeout [ 225.272768][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 225.297920][ T5884] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 225.326666][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.424300][ T5884] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 225.484075][ T5884] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 225.702974][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.840834][ T30] audit: type=1400 audit(1766249920.420:611): avc: denied { mount } for pid=7953 comm="syz.0.468" name="/" dev="autofs" ino=18757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 225.992552][ T5884] usb 2-1: Product: syz [ 225.996748][ T5884] usb 2-1: Manufacturer: syz [ 226.054274][ T5884] usb 2-1: SerialNumber: syz [ 226.063800][ T5884] usb 2-1: config 0 descriptor?? [ 226.136355][ T7836] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.152872][ T7836] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.160148][ T7836] bridge_slave_0: entered allmulticast mode [ 226.172054][ T7836] bridge_slave_0: entered promiscuous mode [ 226.195774][ T7836] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.203471][ T7836] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.210662][ T7836] bridge_slave_1: entered allmulticast mode [ 226.219154][ T7836] bridge_slave_1: entered promiscuous mode [ 226.277967][ T5884] usb 2-1: USB disconnect, device number 16 [ 226.292996][ T7836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.327051][ T7836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.528788][ T30] audit: type=1400 audit(1766249921.150:612): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 227.284203][ T5827] Bluetooth: hci2: command tx timeout [ 227.319174][ T7836] team0: Port device team_slave_0 added [ 227.343837][ T7836] team0: Port device team_slave_1 added [ 227.385930][ T7970] netlink: 48 bytes leftover after parsing attributes in process `syz.0.471'. [ 227.485489][ T30] audit: type=1400 audit(1766249922.110:613): avc: denied { mount } for pid=7973 comm="syz.5.472" name="/" dev="pstore" ino=3513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 227.563374][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.571377][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.692394][ T7836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.705445][ T5928] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 227.745930][ T7984] mmap: syz.1.473 (7984) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 227.798533][ T7836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.832729][ T7836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.881201][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 227.888936][ T5928] usb 3-1: config index 0 descriptor too short (expected 1316, got 36) [ 227.924522][ T7836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.935315][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.961030][ T5928] usb 3-1: config 0 has no interfaces? [ 227.966539][ T5928] usb 3-1: New USB device found, idVendor=05a4, idProduct=7bc0, bcdDevice= 0.00 [ 227.975717][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.004076][ T5928] usb 3-1: config 0 descriptor?? [ 228.109229][ T7836] hsr_slave_0: entered promiscuous mode [ 228.123741][ T7836] hsr_slave_1: entered promiscuous mode [ 228.151807][ T7836] debugfs: 'hsr0' already exists in 'hsr' [ 228.157572][ T7836] Cannot create hsr debugfs directory [ 228.602255][ T5928] usb 3-1: USB disconnect, device number 29 [ 229.396795][ T30] audit: type=1400 audit(1766249923.930:614): avc: denied { setattr } for pid=8007 comm="syz.5.475" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 229.431433][ T8030] virtiofs: Unknown parameter 'always 1 V3 [ 229.431433][ T8030] 010000E0 1 0:00000000 0 [ 229.431433][ T8030] 18 nlmon0 : 1 V3 [ 229.431433][ T8030] 010000E0 1 0:00000000 0 [ 229.431433][ T8030] 20 batadv0 : 1 V3 [ 229.431433][ T8030] 010000E0 1 0:00000000 0 [ 229.431433][ T8030] 21 vxcan0 : 1 V3 [ 229.431433][ T8030] 010000E0 1 0:00000000 0 [ 229.431433][ T8030] 22 vxcan1 : 1 V3 [ 229.431433][ T8030] 010000E0 1 0:00000000 0 [ 229.431433][ T8030] 23 veth0 : 1 V3 [ 229.431433][ T8030] 010000E0 1 0:00000000 0 [ 229.431433][ T8030] 24 veth1 : 1 V3 [ 229.431433][ T8030] 010000E0 1 0:00000000 0 [ 229.431433][ T8030] 25 wg0 : 1 V3 [ 229.431433][ T8030] 010000E0 1 0:00000000 0 [ 229.431433][ T8030] 26 wg1 : 1 V3 [ 229.431433][ T8030] 010000E0 1 0:00000000 0 [ 229.431433][ T8030] 27 wg2 : 1 ' [ 229.613829][ T5991] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 229.790895][ T7836] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 229.812478][ T5991] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.825007][ T5991] usb 2-1: config 0 interface 0 has no altsetting 0 [ 229.846191][ T5991] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 229.855631][ T5991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.863924][ T7836] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 229.879087][ T7836] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 229.886599][ T5991] usb 2-1: Product: syz [ 229.899550][ T5991] usb 2-1: Manufacturer: syz [ 229.905757][ T5991] usb 2-1: SerialNumber: syz [ 229.911064][ T5884] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 229.914509][ T7836] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 229.935235][ T5991] usb 2-1: config 0 descriptor?? [ 230.100096][ T7836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.111632][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.125406][ T7836] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.139302][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.140192][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.156236][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.160058][ T5884] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 230.198765][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.220387][ T5884] usb 6-1: config 0 descriptor?? [ 230.228545][ T5991] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 230.258311][ T5991] imon 2-1:0.0: unable to initialize intf0, err -19 [ 230.297296][ T5991] imon:imon_probe: failed to initialize context! [ 230.302897][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.310762][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.326725][ T5991] imon 2-1:0.0: unable to register, err -19 [ 230.348839][ T5991] usb 2-1: USB disconnect, device number 17 [ 230.695155][ T30] audit: type=1400 audit(1766249925.320:615): avc: denied { setopt } for pid=8078 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 230.814369][ T7836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.871142][ T30] audit: type=1400 audit(1766249925.480:616): avc: denied { write } for pid=8035 comm="syz.5.481" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 230.928655][ T30] audit: type=1400 audit(1766249925.480:617): avc: denied { open } for pid=8035 comm="syz.5.481" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 230.989559][ T30] audit: type=1400 audit(1766249925.480:618): avc: denied { mounton } for pid=8035 comm="syz.5.481" path="/15/file0" dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 231.261246][ T5942] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 231.261556][ T5928] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 231.350831][ T30] audit: type=1400 audit(1766249925.750:619): avc: denied { lock } for pid=8035 comm="syz.5.481" path="socket:[19014]" dev="sockfs" ino=19014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 231.472973][ T5942] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.491382][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 231.499917][ T5928] usb 2-1: config 0 has an invalid interface number: 150 but max is 0 [ 231.510355][ T5942] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 231.530288][ T5928] usb 2-1: config 0 has no interface number 0 [ 231.545946][ T5928] usb 2-1: config 0 interface 150 has no altsetting 0 [ 231.547020][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.689265][ T5942] usb 1-1: config 0 descriptor?? [ 231.703548][ T5942] pwc: Askey VC010 type 2 USB webcam detected. [ 231.704360][ T5928] usb 2-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01 [ 232.228146][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.248919][ T5928] usb 2-1: Product: syz [ 232.256763][ T5928] usb 2-1: Manufacturer: syz [ 232.264082][ T5928] usb 2-1: SerialNumber: syz [ 232.286922][ T5928] usb 2-1: config 0 descriptor?? [ 232.301482][ T5928] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 232.372970][ T7836] veth0_vlan: entered promiscuous mode [ 232.408249][ T7836] veth1_vlan: entered promiscuous mode [ 232.458331][ T7836] veth0_macvtap: entered promiscuous mode [ 232.477429][ T5942] pwc: recv_control_msg error -32 req 02 val 2b00 [ 232.490825][ T7836] veth1_macvtap: entered promiscuous mode [ 232.500960][ T5942] pwc: recv_control_msg error -32 req 02 val 2700 [ 232.508786][ T5942] pwc: recv_control_msg error -32 req 02 val 2c00 [ 232.516026][ T5942] pwc: recv_control_msg error -32 req 04 val 1000 [ 232.525810][ T5942] pwc: recv_control_msg error -32 req 04 val 1300 [ 232.535560][ T5942] pwc: recv_control_msg error -32 req 04 val 1400 [ 232.556796][ T5942] pwc: recv_control_msg error -32 req 02 val 2000 [ 232.581670][ T5942] pwc: recv_control_msg error -32 req 02 val 2100 [ 232.590320][ T5942] pwc: recv_control_msg error -32 req 04 val 1500 [ 232.616213][ T5942] pwc: recv_control_msg error -32 req 02 val 2500 [ 232.671685][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.704196][ T5928] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 232.713367][ T8088] delete_channel: no stack [ 232.730739][ T7836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.761101][ T5928] pac7311 2-1:0.150: probe with driver pac7311 failed with error -71 [ 232.788738][ T5884] hid-led 0003:27B8:01ED.0004: probe with driver hid-led failed with error -71 [ 232.806629][ T1156] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.821485][ T5928] usb 2-1: USB disconnect, device number 18 [ 232.841384][ T5942] pwc: recv_control_msg error -71 req 02 val 2900 [ 232.850016][ T5884] usb 6-1: USB disconnect, device number 5 [ 232.865302][ T1156] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.881679][ T5942] pwc: recv_control_msg error -71 req 02 val 2800 [ 232.897715][ T5942] pwc: recv_control_msg error -71 req 04 val 1100 [ 232.920082][ T1156] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.933625][ T5942] pwc: recv_control_msg error -71 req 04 val 1200 [ 232.983745][ T1156] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.007077][ T5942] pwc: Registered as video103. [ 233.031600][ T5942] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 233.144881][ T5942] usb 1-1: USB disconnect, device number 19 [ 233.281183][ T30] audit: type=1400 audit(1766249927.910:620): avc: denied { ioctl } for pid=8135 comm="syz.2.494" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 233.324484][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.352843][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.394459][ T30] audit: type=1400 audit(1766249927.940:621): avc: denied { set_context_mgr } for pid=8135 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 233.495845][ T30] audit: type=1400 audit(1766249927.990:622): avc: denied { map } for pid=8135 comm="syz.2.494" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 233.586223][ T30] audit: type=1400 audit(1766249928.010:623): avc: denied { call } for pid=8135 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 233.660184][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.691095][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.961147][ T5942] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 234.124258][ T5942] usb 1-1: config 1 has an invalid interface number: 59 but max is 0 [ 234.146329][ T5942] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 234.168529][ T5942] usb 1-1: config 1 has no interface number 0 [ 234.180236][ T5942] usb 1-1: config 1 interface 59 altsetting 203 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 234.192983][ T5942] usb 1-1: config 1 interface 59 altsetting 203 has an invalid descriptor for endpoint zero, skipping [ 234.329999][ T5942] usb 1-1: config 1 interface 59 altsetting 203 has a duplicate endpoint with address 0x8, skipping [ 234.359306][ T5942] usb 1-1: config 1 interface 59 altsetting 203 has a duplicate endpoint with address 0xF, skipping [ 234.399434][ T5942] usb 1-1: config 1 interface 59 altsetting 203 has an invalid descriptor for endpoint zero, skipping [ 234.458841][ T5942] usb 1-1: config 1 interface 59 altsetting 203 has a duplicate endpoint with address 0xF, skipping [ 234.576768][ T5942] usb 1-1: config 1 interface 59 altsetting 203 has a duplicate endpoint with address 0xD, skipping [ 234.619050][ T5942] usb 1-1: config 1 interface 59 altsetting 203 has a duplicate endpoint with address 0xF, skipping [ 234.699743][ T5942] usb 1-1: config 1 interface 59 altsetting 203 has a duplicate endpoint with address 0x8, skipping [ 234.865446][ T5942] usb 1-1: config 1 interface 59 altsetting 203 has a duplicate endpoint with address 0xF, skipping [ 235.335421][ T5942] usb 1-1: config 1 interface 59 altsetting 203 has an invalid descriptor for endpoint zero, skipping [ 235.347061][ T5942] usb 1-1: config 1 interface 59 altsetting 203 has a duplicate endpoint with address 0x8, skipping [ 235.381184][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 235.381198][ T30] audit: type=1400 audit(1766249930.000:629): avc: denied { listen } for pid=8183 comm="syz.5.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 235.630650][ T5942] usb 1-1: config 1 interface 59 altsetting 203 has an invalid descriptor for endpoint zero, skipping [ 235.730870][ T5942] usb 1-1: config 1 interface 59 altsetting 203 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 235.825790][ T5942] usb 1-1: config 1 interface 59 altsetting 203 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 235.959994][ T5942] usb 1-1: config 1 interface 59 has no altsetting 0 [ 236.029931][ T5942] usb 1-1: New USB device found, idVendor=1843, idProduct=0200, bcdDevice=ab.f3 [ 236.063903][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.113371][ T5942] usb 1-1: Product: 榕└蒍ၿ켽鍟朤霯뙡䮖Ẳ䬣鶑肁⫓華핧롘♩頊鮈㽽賥䡮栧焞霫ᄜᮕ鴜蚘㾝萜跲懷䕁鼲翔了遲ꬾݣ楝熐䯿書 [ 236.147824][ T5884] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 236.299822][ T5942] usb 1-1: Manufacturer: ꄞ໙쁣Ω曫鵅ᙯ鷰野䂮ꏐ歮縢叜阸᭯㙣䟦䙗인⿆㟃꣩ꡣ쁹뀋笶儢寄ꁀ踙귞ꡘ훴魈림฻焺ꂃ綑ᇅ尾㐧噱遥㋦䟸⹦Სﹶ훴酟睞䐦ᘥꨑ [ 236.351066][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 236.359416][ T5942] usb 1-1: SerialNumber: 彦䕼齓䈿⭎䲃⢨沑킾眾报ꦗ䁚抱媍딶煉蔮햫씤슆㺨솉욨똝ࡦ羚ẚ룶辰㛜疵ꈡ䍢ṡ箠㏐毰渓仪突䲩漰ጞੋ䳸텟⴪阯쇤௕ꝲ뒍㮎궆ꔃ⏢鑰꧟磁—ѡ巑芚㿰꣆碏젮塶쳭萂≑❗軨铷淚尀隊ᤲ╛桫뼮䙙画⭯ᠲ䠚හ넙넱긊찘ꉘ㥚⻳鋄葧돉ࠞ짿믷墆꼝䄌⨤ [ 236.418922][ T5884] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 236.472740][ T5884] usb 6-1: can't read configurations, error -61 [ 236.504658][ T8143] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 236.624750][ T5942] cp210x 1-1:1.59: cp210x converter detected [ 236.661103][ T5884] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 236.694391][ T5942] cp210x 1-1:1.59: failed to get vendor val 0x370b size 1: -71 [ 236.743911][ T5942] cp210x 1-1:1.59: querying part number failed [ 236.810371][ T5942] usb 1-1: cp210x converter now attached to ttyUSB0 [ 236.851638][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 236.907929][ T5884] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 236.910556][ T5942] usb 1-1: USB disconnect, device number 20 [ 236.987715][ T5884] usb 6-1: can't read configurations, error -61 [ 237.028026][ T5942] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 237.039831][ T8210] FAULT_INJECTION: forcing a failure. [ 237.039831][ T8210] name failslab, interval 1, probability 0, space 0, times 0 [ 237.065447][ T5942] cp210x 1-1:1.59: device disconnected [ 237.073253][ T5884] usb usb6-port1: attempt power cycle [ 237.104137][ T8210] CPU: 0 UID: 0 PID: 8210 Comm: syz.6.507 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.104167][ T8210] Tainted: [L]=SOFTLOCKUP [ 237.104174][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.104181][ T8210] Call Trace: [ 237.104185][ T8210] [ 237.104190][ T8210] dump_stack_lvl+0x16c/0x1f0 [ 237.104212][ T8210] should_fail_ex+0x512/0x640 [ 237.104229][ T8210] ? kmem_cache_alloc_noprof+0x62/0x770 [ 237.104242][ T8210] should_failslab+0xc2/0x120 [ 237.104257][ T8210] kmem_cache_alloc_noprof+0x83/0x770 [ 237.104267][ T8210] ? alloc_empty_file+0x55/0x1e0 [ 237.104280][ T8210] ? alloc_empty_file+0x55/0x1e0 [ 237.104289][ T8210] alloc_empty_file+0x55/0x1e0 [ 237.104300][ T8210] alloc_file_pseudo+0x13a/0x230 [ 237.104311][ T8210] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 237.104322][ T8210] ? _raw_spin_unlock+0x28/0x50 [ 237.104334][ T8210] ? alloc_fd+0x471/0x7d0 [ 237.104350][ T8210] __anon_inode_getfile+0xe8/0x280 [ 237.104364][ T8210] __anon_inode_getfd+0x5c/0x160 [ 237.104377][ T8210] __x64_sys_fsopen+0x18b/0x240 [ 237.104390][ T8210] do_syscall_64+0xcd/0xf80 [ 237.104405][ T8210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.104417][ T8210] RIP: 0033:0x7f9eeed8f749 [ 237.104426][ T8210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.104436][ T8210] RSP: 002b:00007f9eefc89038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 237.104447][ T8210] RAX: ffffffffffffffda RBX: 00007f9eeefe5fa0 RCX: 00007f9eeed8f749 [ 237.104454][ T8210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 237.104460][ T8210] RBP: 00007f9eefc89090 R08: 0000000000000000 R09: 0000000000000000 [ 237.104467][ T8210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.104473][ T8210] R13: 00007f9eeefe6038 R14: 00007f9eeefe5fa0 R15: 00007ffdcbec1df8 [ 237.104488][ T8210] [ 237.731079][ T5884] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 237.756972][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 237.764888][ T5884] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 237.773033][ T5884] usb 6-1: can't read configurations, error -61 [ 237.789790][ T30] audit: type=1400 audit(1766249932.410:630): avc: denied { accept } for pid=8212 comm="syz.1.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 237.881059][ T5942] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 237.941139][ T5884] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 237.961510][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 237.968595][ T5884] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 237.988213][ T5884] usb 6-1: can't read configurations, error -61 [ 238.017657][ T5884] usb usb6-port1: unable to enumerate USB device [ 238.031034][ T5942] usb 7-1: Using ep0 maxpacket: 32 [ 238.084125][ T5942] usb 7-1: config 0 has an invalid interface number: 240 but max is 0 [ 238.136946][ T5942] usb 7-1: config 0 has no interface number 0 [ 238.168775][ T5942] usb 7-1: config 0 interface 240 has no altsetting 0 [ 238.219102][ T5942] usb 7-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=19.6f [ 238.255409][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.302971][ T5942] usb 7-1: Product: syz [ 238.323215][ T5942] usb 7-1: Manufacturer: syz [ 238.347543][ T5942] usb 7-1: SerialNumber: syz [ 238.378716][ T5942] usb 7-1: config 0 descriptor?? [ 238.971107][ T8248] FAULT_INJECTION: forcing a failure. [ 238.971107][ T8248] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 238.985265][ T8248] CPU: 0 UID: 0 PID: 8248 Comm: syz.5.512 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.985283][ T8248] Tainted: [L]=SOFTLOCKUP [ 238.985287][ T8248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.985293][ T8248] Call Trace: [ 238.985297][ T8248] [ 238.985302][ T8248] dump_stack_lvl+0x16c/0x1f0 [ 238.985329][ T8248] should_fail_ex+0x512/0x640 [ 238.985359][ T8248] _copy_from_user+0x2e/0xd0 [ 238.985386][ T8248] io_submit_one+0xbb/0x1e70 [ 238.985400][ T8248] ? __lock_acquire+0x436/0x2890 [ 238.985414][ T8248] ? lockdep_hardirqs_on+0x7c/0x110 [ 238.985429][ T8248] ? __pfx_io_submit_one+0x10/0x10 [ 238.985445][ T8248] ? __might_fault+0xe3/0x190 [ 238.985459][ T8248] ? __might_fault+0x13b/0x190 [ 238.985483][ T8248] ? __x64_sys_io_submit+0x1a9/0x370 [ 238.985502][ T8248] __x64_sys_io_submit+0x1a9/0x370 [ 238.985524][ T8248] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 238.985543][ T8248] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 238.985560][ T8248] do_syscall_64+0xcd/0xf80 [ 238.985574][ T8248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.985585][ T8248] RIP: 0033:0x7f8659d8f749 [ 238.985594][ T8248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.985612][ T8248] RSP: 002b:00007f865acc3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 238.985630][ T8248] RAX: ffffffffffffffda RBX: 00007f8659fe5fa0 RCX: 00007f8659d8f749 [ 238.985643][ T8248] RDX: 0000200000000b40 RSI: 0000000000000001 RDI: 00007f865aca2000 [ 238.985654][ T8248] RBP: 00007f865acc3090 R08: 0000000000000000 R09: 0000000000000000 [ 238.985666][ T8248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.985676][ T8248] R13: 00007f8659fe6038 R14: 00007f8659fe5fa0 R15: 00007ffda03bfa78 [ 238.985692][ T8248] [ 343.430950][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 343.437987][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P38/1:b..l [ 343.446165][ C1] rcu: (detected by 1, t=10503 jiffies, g=25133, q=1561 ncpus=2) [ 343.453976][ C1] task:khugepaged state:R running task stack:27080 pid:38 tgid:38 ppid:2 task_flags:0x200040 flags:0x00080000 [ 343.468097][ C1] Call Trace: [ 343.471382][ C1] [ 343.474315][ C1] ? __schedule+0x10b9/0x6150 [ 343.478986][ C1] __schedule+0x1139/0x6150 [ 343.483485][ C1] ? __pfx___schedule+0x10/0x10 [ 343.488331][ C1] ? folio_batch_move_lru+0x278/0x3a0 [ 343.493683][ C1] ? __pfx_lru_add+0x10/0x10 [ 343.498308][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 343.503673][ C1] preempt_schedule_common+0x44/0xc0 [ 343.508940][ C1] preempt_schedule_thunk+0x16/0x30 [ 343.514112][ C1] ? __folio_batch_add_and_move+0x5d0/0xc30 [ 343.519986][ C1] ? __folio_batch_add_and_move+0x5dd/0xc30 [ 343.525865][ C1] __folio_batch_add_and_move+0x5e2/0xc30 [ 343.531562][ C1] ? __pfx_lru_add+0x10/0x10 [ 343.536125][ C1] ? const_folio_flags+0x5b/0x100 [ 343.541128][ C1] folio_putback_lru+0x1c/0xd0 [ 343.545885][ C1] collapse_huge_page+0x22b7/0x3420 [ 343.551078][ C1] ? __pfx_collapse_huge_page+0x10/0x10 [ 343.556605][ C1] ? __pte_offset_map_lock+0x174/0x310 [ 343.562036][ C1] ? find_held_lock+0x2b/0x80 [ 343.566691][ C1] ? hpage_collapse_scan_pmd+0xd0b/0x13d0 [ 343.572389][ C1] hpage_collapse_scan_pmd+0xd4b/0x13d0 [ 343.577919][ C1] ? __pfx_hpage_collapse_scan_pmd+0x10/0x10 [ 343.583872][ C1] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 343.589741][ C1] ? __pfx___might_resched+0x10/0x10 [ 343.594998][ C1] khugepaged+0x1228/0x1690 [ 343.599480][ C1] ? __pfx_khugepaged+0x10/0x10 [ 343.604315][ C1] ? __lock_acquire+0x436/0x2890 [ 343.609246][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 343.615297][ C1] ? find_held_lock+0x2b/0x80 [ 343.619961][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 343.625310][ C1] ? __kthread_parkme+0x19e/0x250 [ 343.630306][ C1] ? __pfx_khugepaged+0x10/0x10 [ 343.635139][ C1] kthread+0x3c5/0x780 [ 343.639184][ C1] ? __pfx_kthread+0x10/0x10 [ 343.643746][ C1] ? rcu_is_watching+0x12/0xc0 [ 343.648477][ C1] ? __pfx_kthread+0x10/0x10 [ 343.653036][ C1] ret_from_fork+0x983/0xb10 [ 343.657594][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 343.662673][ C1] ? __switch_to+0x7af/0x10d0 [ 343.667319][ C1] ? __pfx_kthread+0x10/0x10 [ 343.671879][ C1] ret_from_fork_asm+0x1a/0x30 [ 343.676639][ C1] [ 343.679648][ C1] rcu: rcu_preempt kthread starved for 10449 jiffies! g25133 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 343.690826][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 343.700766][ C1] rcu: RCU grace-period kthread stack dump: [ 343.706620][ C1] task:rcu_preempt state:R running task stack:28440 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 343.720065][ C1] Call Trace: [ 343.723319][ C1] [ 343.726224][ C1] ? __schedule+0x10b9/0x6150 [ 343.730883][ C1] __schedule+0x1139/0x6150 [ 343.735364][ C1] ? __pfx___schedule+0x10/0x10 [ 343.740187][ C1] preempt_schedule_irq+0x51/0x90 [ 343.745183][ C1] irqentry_exit+0x1d8/0x8c0 [ 343.749749][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.755701][ C1] RIP: 0010:preempt_schedule_common+0x50/0xc0 [ 343.761750][ C1] Code: 6d 39 08 65 8b 05 00 6d 39 08 25 ff ff ff 7f 83 f8 01 74 29 bf 01 00 00 00 e8 2c 99 ff ff 65 ff 0d e5 6c 39 08 80 3b 00 75 5f <48> 8b 45 00 a8 10 75 ca 5b 5d 41 5c 41 5d e9 3d f0 01 00 4c 8b 64 [ 343.781330][ C1] RSP: 0018:ffffc90000157978 EFLAGS: 00000246 [ 343.787373][ C1] RAX: 0000000000000000 RBX: ffffed1003b53000 RCX: 1ffff9200002af1c [ 343.795314][ C1] RDX: 0000000000000000 RSI: ffffffff8bf2b300 RDI: ffffffff8dd7bf28 [ 343.803254][ C1] RBP: ffff88801da98000 R08: 0000000000000000 R09: fffffbfff211167a [ 343.811210][ C1] R10: ffffffff9088b3d7 R11: ffff88801da98b30 R12: ffffffff812c06c6 [ 343.819157][ C1] R13: ffff88801da98000 R14: ffff8880b84262c0 R15: 00000000ffffffff [ 343.827103][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 343.832455][ C1] ? preempt_schedule_common+0x44/0xc0 [ 343.837903][ C1] preempt_schedule_thunk+0x16/0x30 [ 343.843090][ C1] _raw_spin_unlock_irqrestore+0x61/0x80 [ 343.848702][ C1] __mod_timer+0x8ed/0xd30 [ 343.853095][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 343.858699][ C1] ? __pfx___mod_timer+0x10/0x10 [ 343.863610][ C1] ? lockdep_init_map_type+0x5c/0x270 [ 343.868958][ C1] add_timer+0x62/0x90 [ 343.873001][ C1] schedule_timeout+0x11e/0x290 [ 343.877820][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 343.883159][ C1] ? __pfx_process_timeout+0x10/0x10 [ 343.888417][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 343.894455][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 343.899886][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 343.904623][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 343.909878][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 343.915046][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 343.919953][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 343.925037][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 343.930816][ C1] rcu_gp_kthread+0x26d/0x380 [ 343.935466][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 343.940634][ C1] ? rcu_is_watching+0x12/0xc0 [ 343.945364][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 343.950534][ C1] ? __kthread_parkme+0x19e/0x250 [ 343.955527][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 343.960698][ C1] kthread+0x3c5/0x780 [ 343.964753][ C1] ? __pfx_kthread+0x10/0x10 [ 343.969314][ C1] ? rcu_is_watching+0x12/0xc0 [ 343.974064][ C1] ? __pfx_kthread+0x10/0x10 [ 343.978636][ C1] ret_from_fork+0x983/0xb10 [ 343.983214][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 343.988305][ C1] ? __switch_to+0x7af/0x10d0 [ 343.992957][ C1] ? __pfx_kthread+0x10/0x10 [ 343.997524][ C1] ret_from_fork_asm+0x1a/0x30 [ 344.002275][ C1] [ 344.005289][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 344.011625][ C1] CPU: 1 UID: 0 PID: 8250 Comm: syz.2.513 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.022359][ C1] Tainted: [L]=SOFTLOCKUP [ 344.026651][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.036679][ C1] RIP: 0010:lock_release+0x183/0x2d0 [ 344.041942][ C1] Code: 0f c1 05 48 01 19 12 83 f8 01 0f 85 03 01 00 00 9c 58 f6 c4 02 0f 85 ee 00 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 dd b9 18 12 0f 85 32 01 00 00 48 83 c4 18 5b 41 5c 41 [ 344.061522][ C1] RSP: 0018:ffffc90000a08540 EFLAGS: 00000206 [ 344.067565][ C1] RAX: 7410f1f66a6d2d00 RBX: ffffffff8e3c9620 RCX: ffffc90000a0854c [ 344.075505][ C1] RDX: 0000000000000002 RSI: ffffffff8daa7d80 RDI: ffffffff8bf2b380 [ 344.083448][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 00000000d7d2bc4e [ 344.091390][ C1] R10: 0000000000000002 R11: 000000000001288f R12: ffffffff816cb9a4 [ 344.099336][ C1] R13: 0000000000000206 R14: ffff888053b54980 R15: 0000000000000003 [ 344.107276][ C1] FS: 00007f571bfb76c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 344.116176][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.122732][ C1] CR2: 0000200000000058 CR3: 0000000055280000 CR4: 00000000003526f0 [ 344.130673][ C1] Call Trace: [ 344.133926][ C1] [ 344.136746][ C1] unwind_next_frame+0x3f9/0x20b0 [ 344.141746][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 344.146759][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 344.152901][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 344.159031][ C1] arch_stack_walk+0x94/0x100 [ 344.163689][ C1] ? kmem_cache_alloc_node_noprof+0x298/0x800 [ 344.169733][ C1] stack_trace_save+0x8e/0xc0 [ 344.174390][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 344.179736][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 344.185083][ C1] ? stack_depot_save_flags+0x29/0x9b0 [ 344.190515][ C1] ? stack_trace_save+0x8e/0xc0 [ 344.195335][ C1] kasan_save_stack+0x33/0x60 [ 344.199988][ C1] ? kasan_save_stack+0x33/0x60 [ 344.204807][ C1] ? kasan_save_track+0x14/0x30 [ 344.209626][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 344.214639][ C1] kasan_save_track+0x14/0x30 [ 344.219285][ C1] __kasan_slab_alloc+0x89/0x90 [ 344.224108][ C1] kmem_cache_alloc_node_noprof+0x298/0x800 [ 344.229972][ C1] ? __alloc_skb+0x156/0x410 [ 344.234554][ C1] ? __alloc_skb+0x156/0x410 [ 344.239118][ C1] __alloc_skb+0x156/0x410 [ 344.243509][ C1] ? __alloc_skb+0x35d/0x410 [ 344.248069][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 344.252979][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 344.257977][ C1] skb_copy+0x1c9/0x3a0 [ 344.262106][ C1] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb6e/0x13c0 [ 344.268758][ C1] ? lock_acquire+0x179/0x330 [ 344.273404][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl.isra.0+0x10/0x10 [ 344.280489][ C1] ? read_tsc+0x9/0x20 [ 344.284533][ C1] ? mac80211_hwsim_monitor_rx+0x1e8/0x8a0 [ 344.290310][ C1] mac80211_hwsim_tx_frame+0x1f1/0x2a0 [ 344.295742][ C1] mac80211_hwsim_beacon_tx+0x595/0xa40 [ 344.301272][ C1] __iterate_interfaces+0x2e5/0x650 [ 344.306454][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 344.312506][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 344.318547][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 344.324320][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 344.331330][ C1] mac80211_hwsim_beacon+0x105/0x1b0 [ 344.336612][ C1] __hrtimer_run_queues+0x202/0xc40 [ 344.341789][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 344.347484][ C1] ? read_tsc+0x9/0x20 [ 344.351535][ C1] hrtimer_run_softirq+0x17d/0x350 [ 344.356624][ C1] handle_softirqs+0x219/0x950 [ 344.361379][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 344.366648][ C1] __irq_exit_rcu+0x109/0x170 [ 344.371299][ C1] irq_exit_rcu+0x9/0x30 [ 344.375526][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 344.381132][ C1] [ 344.384038][ C1] [ 344.386942][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 344.392896][ C1] RIP: 0010:__might_sleep+0x10/0x150 [ 344.398148][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 <65> 4c 8b 25 20 5e 28 12 55 89 f5 53 48 89 fb 49 8d 7c 24 18 48 89 [ 344.417722][ C1] RSP: 0018:ffffc900053d7aa8 EFLAGS: 00000202 [ 344.423755][ C1] RAX: dffffc0000000000 RBX: ffffffff8b86f660 RCX: ffffffff820b9392 [ 344.431694][ C1] RDX: ffff888053b54980 RSI: 0000000000000097 RDI: ffffffff8b86f660 [ 344.439633][ C1] RBP: 0000000000000097 R08: 0000000000000005 R09: 0000000000000000 [ 344.447570][ C1] R10: 0000000000000000 R11: 000000000007fffc R12: 0000000000000000 [ 344.455511][ C1] R13: ffff888053b56380 R14: ffff888053b56384 R15: ffff888053b54980 [ 344.463456][ C1] ? __might_fault+0x62/0x190 [ 344.468115][ C1] __might_fault+0x83/0x190 [ 344.472583][ C1] ? copy_fpstate_to_sigframe+0x2c3/0xad0 [ 344.478275][ C1] copy_fpstate_to_sigframe+0x822/0xad0 [ 344.483793][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 344.488798][ C1] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 344.494839][ C1] ? irqentry_exit+0x1dd/0x8c0 [ 344.499575][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 344.504741][ C1] ? x86_task_fpu+0x5f/0x90 [ 344.509218][ C1] get_sigframe+0x4a8/0x9c0 [ 344.513694][ C1] ? __pfx_get_sigframe+0x10/0x10 [ 344.518692][ C1] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 344.524644][ C1] ? _raw_spin_unlock_irq+0x29/0x50 [ 344.529813][ C1] ? siginfo_layout+0x177/0x290 [ 344.534640][ C1] x64_setup_rt_frame+0x129/0xcf0 [ 344.539641][ C1] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 344.545164][ C1] arch_do_signal_or_restart+0x5da/0x7e0 [ 344.550773][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 344.556901][ C1] ? __pfx_restore_altstack+0x10/0x10 [ 344.562258][ C1] ? restore_signal_shadow_stack+0x63/0x460 [ 344.568139][ C1] exit_to_user_mode_loop+0x8c/0x540 [ 344.573412][ C1] do_syscall_64+0x4ee/0xf80 [ 344.577978][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.583848][ C1] RIP: 0033:0x7f571b18f747 [ 344.588239][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 344.607827][ C1] RSP: 002b:00007f571bfb70e8 EFLAGS: 00000246 [ 344.613879][ C1] RAX: 00000000000000ca RBX: 00007f571b3e5fa8 RCX: 00007f571b18f749 [ 344.621826][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f571b3e5fa8 [ 344.629771][ C1] RBP: 00007f571b3e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 344.637716][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.645659][ C1] R13: 00007f571b3e6038 R14: 00007ffd2992dd70 R15: 00007ffd2992de58 [ 344.653614][ C1] [ 344.700639][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 344.707004][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 344.716774][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 344.723174][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 345.078857][ T5942] usb 7-1: Invalid firmware size=18. [ 345.201176][ T31] INFO: task syz.4.331:7347 blocked for more than 156 seconds. [ 345.208757][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to send rpc fd=3 want=800 sent=0 n=-1 (errno 32: Broken pipe) [ 345.491311][ T30] audit: type=1400 audit(1766250040.120:631): avc: denied { write } for pid=5802 comm="syz-executor" path="pipe:[5173]" dev="pipefs" ino=5173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 345.541035][ T11] block nbd4: Possible stuck request ffff888026340000: control (read@0,1024B). Runtime 120 seconds [ 345.554903][ T11] block nbd4: Possible stuck request ffff888026340200: control (read@1024,1024B). Runtime 120 seconds [ 345.566638][ T11] block nbd4: Possible stuck request ffff888026340400: control (read@2048,1024B). Runtime 120 seconds [ 345.578036][ T11] block nbd4: Possible stuck request ffff888026340600: control (read@3072,1024B). Runtime 120 seconds [ 345.650978][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 345.659667][ T31] task:syz.4.331 state:D stack:28808 pid:7347 tgid:7343 ppid:5824 task_flags:0x400040 flags:0x00080002 [ 345.971118][ T31] Call Trace: [ 345.974437][ T31] [ 345.977363][ T31] ? __schedule+0x10b9/0x6150 [ 345.991820][ T31] __schedule+0x1139/0x6150 [ 345.996363][ T31] ? __lock_acquire+0x436/0x2890 [ 346.001462][ T31] ? __pfx___schedule+0x10/0x10 [ 346.006313][ T31] ? find_held_lock+0x2b/0x80 [ 346.011112][ T31] ? schedule+0x2d7/0x3a0 [ 346.015452][ T31] schedule+0xe7/0x3a0 [ 346.019529][ T31] schedule_preempt_disabled+0x13/0x30 [ 346.030996][ T31] __mutex_lock+0xc69/0x1ca0 [ 346.035607][ T31] ? bdev_open+0x41a/0xe40 [ 346.040037][ T31] ? find_held_lock+0x2b/0x80 [ 346.044769][ T31] ? find_held_lock+0x2b/0x80 [ 346.049454][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 346.054539][ T31] ? bdev_open+0x41a/0xe40 [ 346.058956][ T31] bdev_open+0x41a/0xe40 [ 346.063247][ T31] ? iput+0x35/0x40 [ 346.067055][ T31] blkdev_open+0x34e/0x4f0 [ 346.123144][ T31] do_dentry_open+0x748/0x1590 [ 346.127957][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 346.233996][ T31] vfs_open+0x82/0x3f0 [ 346.238113][ T31] path_openat+0x2078/0x3140 [ 346.311121][ T31] ? __pfx_path_openat+0x10/0x10 [ 346.316124][ T31] do_filp_open+0x20b/0x470 [ 346.320639][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 346.411242][ T31] ? alloc_fd+0x471/0x7d0 [ 346.415627][ T31] do_sys_openat2+0x121/0x290 [ 346.420298][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 346.491160][ T31] ? count_memcg_events+0x122/0x290 [ 346.496413][ T31] __x64_sys_openat+0x174/0x210 [ 346.541258][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 346.571916][ T31] ? do_user_addr_fault+0x843/0x1370 [ 346.577260][ T31] do_syscall_64+0xcd/0xf80 [ 346.608237][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.621233][ T31] RIP: 0033:0x7f9408d8df90 [ 346.630717][ T31] RSP: 002b:00007f9409cbeb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 346.651019][ T31] RAX: ffffffffffffffda RBX: 0000000000000100 RCX: 00007f9408d8df90 [ 346.659005][ T31] RDX: 0000000000000100 RSI: 00007f9409cbec10 RDI: 00000000ffffff9c [ 346.681154][ T31] RBP: 00007f9409cbec10 R08: 0000000000000000 R09: 002364626e2f7665 [ 346.689155][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 346.715772][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 346.720995][ T31] R13: 00007f9408fe6218 R14: 00007f9408fe6180 R15: 00007ffd8e658ca8 [ 346.725397][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 346.729741][ T31] [ 346.751487][ T31] [ 346.751487][ T31] Showing all locks held in the system: [ 346.766565][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 346.861061][ T31] #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 346.942697][ T31] 3 locks held by kworker/1:0/24: [ 346.947748][ T31] #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 346.970354][ T31] #1: ffffc900001e7c90 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 346.998852][ T31] #2: ffffffff8e3d4d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 347.027290][ T31] 1 lock held by khungtaskd/31: [ 347.051103][ T31] #0: ffffffff8e3c9620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 347.091068][ T31] 3 locks held by kworker/u8:2/36: [ 347.096235][ T31] 2 locks held by getty/5577: [ 347.100904][ T31] #0: ffff888030f020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 347.125458][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 347.136490][ T31] 6 locks held by kworker/u9:4/5825: [ 347.171022][ T31] #0: ffff888055384948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 347.185483][ T31] #1: ffffc9000261fc90 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 347.206136][ T31] #2: ffff88807b6a8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x470 [ 347.230351][ T31] #3: ffff88807b6a80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb20 [ 347.240101][ T31] #4: ffffffff903bec88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x14f/0x360 [ 347.249908][ T31] #5: ffff888078ef1b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x760 [ 347.259264][ T31] 4 locks held by kworker/u9:5/5826: [ 347.264552][ T31] #0: ffff88807909c948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 347.275158][ T31] #1: ffffc9000214fc90 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 347.287186][ T31] #2: ffff888055980ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x470 [ 347.297063][ T31] #3: ffff8880559800c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb20 [ 347.306895][ T31] 1 lock held by udevd/6260: [ 347.313379][ T31] #0: ffff8880262b3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 347.324000][ T31] 1 lock held by syz.4.331/7347: [ 347.328953][ T31] #0: ffff8880262b3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 347.338297][ T31] 1 lock held by syz.1.508/8218: [ 347.343242][ T31] #0: ffffffff90141a28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 347.352210][ T31] 1 lock held by syz.0.511/8234: [ 347.357126][ T31] #0: ffff88802c4aa0e0 (&type->s_umount_key#72){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 347.367495][ T31] 1 lock held by dhcpcd/8241: [ 347.372171][ T31] #0: ffff888055c6c708 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 347.382697][ T31] 1 lock held by dhcpcd/8242: [ 347.387353][ T31] #0: ffff88806adb2488 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 347.397945][ T31] 2 locks held by dhcpcd/8243: [ 347.402754][ T31] #0: ffff88806adb4148 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 347.413356][ T31] #1: ffffffff8e3d4d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 347.423563][ T31] 1 lock held by dhcpcd/8244: [ 347.429090][ T31] #0: ffff888055c6aa48 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 347.445888][ T31] [ 347.448219][ T31] ============================================= [ 347.448219][ T31] [ 347.462191][ T31] NMI backtrace for cpu 0 [ 347.462208][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 347.462235][ T31] Tainted: [L]=SOFTLOCKUP [ 347.462241][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.462251][ T31] Call Trace: [ 347.462258][ T31] [ 347.462265][ T31] dump_stack_lvl+0x116/0x1f0 [ 347.462293][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 347.462326][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 347.462348][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 347.462378][ T31] sys_info+0x133/0x180 [ 347.462401][ T31] watchdog+0xe66/0x1180 [ 347.462426][ T31] ? rcu_is_watching+0x12/0xc0 [ 347.462444][ T31] ? __pfx_watchdog+0x10/0x10 [ 347.462461][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 347.462484][ T31] ? __kthread_parkme+0x19e/0x250 [ 347.462504][ T31] ? __pfx_watchdog+0x10/0x10 [ 347.462522][ T31] kthread+0x3c5/0x780 [ 347.462544][ T31] ? __pfx_kthread+0x10/0x10 [ 347.462567][ T31] ? rcu_is_watching+0x12/0xc0 [ 347.462584][ T31] ? __pfx_kthread+0x10/0x10 [ 347.462605][ T31] ret_from_fork+0x983/0xb10 [ 347.462626][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 347.462649][ T31] ? __switch_to+0x7af/0x10d0 [ 347.462671][ T31] ? __pfx_kthread+0x10/0x10 [ 347.462693][ T31] ret_from_fork_asm+0x1a/0x30 [ 347.462733][ T31] [ 347.462739][ T31] Sending NMI from CPU 0 to CPUs 1: [ 347.611759][ C1] NMI backtrace for cpu 1 [ 347.611776][ C1] CPU: 1 UID: 0 PID: 5171 Comm: syslogd Tainted: G L syzkaller #0 PREEMPT(full) [ 347.611803][ C1] Tainted: [L]=SOFTLOCKUP [ 347.611808][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.611818][ C1] RIP: 0010:__kernel_text_address+0xd/0x40 [ 347.611843][ C1] Code: e8 68 98 a2 00 e9 6a ff ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 53 48 89 fb e8 e3 fe ff ff <85> c0 75 1b 48 81 fb 00 90 06 92 72 0c 31 c0 48 81 fb 6a b8 28 92 [ 347.611858][ C1] RSP: 0018:ffffc90003eff538 EFLAGS: 00000286 [ 347.611871][ C1] RAX: 0000000000000001 RBX: ffffffff8228bf0b RCX: ffffc90003eff4b4 [ 347.611882][ C1] RDX: 1ffff920007dfeb5 RSI: ffffffff8daa7d80 RDI: ffffffff8228bf0b [ 347.611892][ C1] RBP: ffffc90003eff5a8 R08: ffffffff912fbc54 R09: 00000000fce29622 [ 347.611903][ C1] R10: 0000000000000002 R11: 000000000001288a R12: ffffffff81a960d0 [ 347.611913][ C1] R13: ffffc90003eff620 R14: 0000000000000000 R15: ffff88807c310000 [ 347.611923][ C1] FS: 00007f875aacec80(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 347.611938][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.611948][ C1] CR2: 00005650be4930c8 CR3: 0000000032ec1000 CR4: 00000000003526f0 [ 347.611958][ C1] Call Trace: [ 347.611963][ C1] [ 347.611968][ C1] unwind_get_return_address+0x59/0xa0 [ 347.611990][ C1] arch_stack_walk+0xa6/0x100 [ 347.612011][ C1] ? kasan_save_free_info+0x3b/0x60 [ 347.612036][ C1] stack_trace_save+0x8e/0xc0 [ 347.612053][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 347.612070][ C1] ? __lock_acquire+0x436/0x2890 [ 347.612088][ C1] kasan_save_stack+0x33/0x60 [ 347.612104][ C1] ? kasan_save_stack+0x33/0x60 [ 347.612120][ C1] ? kasan_save_track+0x14/0x30 [ 347.612156][ C1] kasan_save_track+0x14/0x30 [ 347.612172][ C1] kasan_save_free_info+0x3b/0x60 [ 347.612194][ C1] __kasan_slab_free+0x5f/0x80 [ 347.612211][ C1] kfree+0x2f8/0x6e0 [ 347.612224][ C1] ? sock_wfree+0x11c/0x850 [ 347.612237][ C1] ? skb_free_head+0x114/0x210 [ 347.612261][ C1] ? skb_free_head+0x114/0x210 [ 347.612280][ C1] skb_free_head+0x114/0x210 [ 347.612301][ C1] skb_release_data+0x795/0x9e0 [ 347.612319][ C1] consume_skb+0xbf/0x100 [ 347.612335][ C1] __unix_dgram_recvmsg+0x779/0xc30 [ 347.612361][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 347.612388][ C1] ? dummy_timer+0x1d4a/0x3ad0 [ 347.612410][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 347.612432][ C1] sock_recvmsg+0x1f9/0x250 [ 347.612451][ C1] sock_read_iter+0x2b9/0x3b0 [ 347.612469][ C1] ? __pfx_sock_read_iter+0x10/0x10 [ 347.612492][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 347.612507][ C1] ? security_file_permission+0x71/0x210 [ 347.612528][ C1] ? rw_verify_area+0xcf/0x6c0 [ 347.612546][ C1] vfs_read+0xa98/0xcf0 [ 347.612566][ C1] ? __pfx_vfs_read+0x10/0x10 [ 347.612585][ C1] ? find_held_lock+0x2b/0x80 [ 347.612608][ C1] ? __irq_exit_rcu+0x109/0x170 [ 347.612629][ C1] ? lockdep_softirqs_on+0xbb/0x130 [ 347.612648][ C1] ksys_read+0x1f8/0x250 [ 347.612665][ C1] ? __pfx_ksys_read+0x10/0x10 [ 347.612686][ C1] do_syscall_64+0xcd/0xf80 [ 347.612706][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.612722][ C1] RIP: 0033:0x7f875ac1e407 [ 347.612734][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 347.612748][ C1] RSP: 002b:00007ffe562940a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 347.612762][ C1] RAX: ffffffffffffffda RBX: 00007f875aacec80 RCX: 00007f875ac1e407 [ 347.612772][ C1] RDX: 00000000000000ff RSI: 0000557cb2db5300 RDI: 0000000000000000 [ 347.612782][ C1] RBP: 0000557cb2db52c0 R08: 0000000000000000 R09: 0000000000000000 [ 347.612791][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557cb2db534e [ 347.612805][ C1] R13: 0000000000000000 R14: 0000557cb2db5300 R15: 0000557c9c1b0d98 [ 347.612822][ C1] [ 348.142107][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 348.148986][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 348.159653][ T31] Tainted: [L]=SOFTLOCKUP [ 348.163949][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.173971][ T31] Call Trace: [ 348.177219][ T31] [ 348.180120][ T31] dump_stack_lvl+0x3d/0x1f0 [ 348.184687][ T31] vpanic+0x640/0x6f0 [ 348.188639][ T31] panic+0xca/0xd0 [ 348.192329][ T31] ? __pfx_panic+0x10/0x10 [ 348.196714][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 348.202663][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 348.208790][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 348.214930][ T31] ? watchdog+0xe83/0x1180 [ 348.219316][ T31] ? watchdog+0xe76/0x1180 [ 348.223701][ T31] watchdog+0xe94/0x1180 [ 348.227924][ T31] ? rcu_is_watching+0x12/0xc0 [ 348.232655][ T31] ? __pfx_watchdog+0x10/0x10 [ 348.237297][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 348.242468][ T31] ? __kthread_parkme+0x19e/0x250 [ 348.247466][ T31] ? __pfx_watchdog+0x10/0x10 [ 348.252120][ T31] kthread+0x3c5/0x780 [ 348.256160][ T31] ? __pfx_kthread+0x10/0x10 [ 348.260719][ T31] ? rcu_is_watching+0x12/0xc0 [ 348.265448][ T31] ? __pfx_kthread+0x10/0x10 [ 348.270008][ T31] ret_from_fork+0x983/0xb10 [ 348.274570][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 348.279651][ T31] ? __switch_to+0x7af/0x10d0 [ 348.284299][ T31] ? __pfx_kthread+0x10/0x10 [ 348.288865][ T31] ret_from_fork_asm+0x1a/0x30 [ 348.293609][ T31] [ 348.296927][ T31] Kernel Offset: disabled [ 348.301230][ T31] Rebooting in 86400 seconds..