last executing test programs: 9m49.482338349s ago: executing program 2 (id=299): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000001, 0x30, r0, 0xf648d000) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x28881, 0x0) write$char_usb(r5, &(0x7f0000000140)="92560a", 0x3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01072bbd70000000001a05"], 0x14}, 0x1, 0x0, 0x0, 0x4c034}, 0x0) syz_usb_connect$uac1(0x2, 0xcb, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0x3, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x996, 0x1}, [@selector_unit={0xa, 0x24, 0x5, 0x6, 0x9, "028cac37f3"}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x2, 0x1, "b0b7"}, @mixer_unit={0xa, 0x24, 0x4, 0x5, 0x6, 'tl1G_'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x4, 0x1002}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x2, 0x8, 0x2, "ed833172429e94aa"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x40, 0x1, 0xb, 0x81, "", "06d8"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8, 0x5, 0xfa, "4233086e986884"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x9, 0x9, {0x7, 0x25, 0x1, 0x2, 0x2, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x9, 0xfe, "20c09bd8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x70, 0xb, {0x7, 0x25, 0x1, 0x81, 0x0, 0x6}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x1, 0x2, 0xfc, 0x20, 0x5}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "e4399221ac9d2a72ec08af7ee52ea801"}]}, 0x3, [{0x1d, &(0x7f0000000280)=@string={0x1d, 0x3, "7e3ce95a42947a56cd9ef9ec14485dea314d18bddef1dd71e995c1"}}, {0x1b, &(0x7f0000000300)=@string={0x1b, 0x3, "888db11928d83aa91201a3d9b25ec8a784482ac2622d9e2b7e"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44d}}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r8, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect$uac1(0x1, 0xe9, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0xfa, 0x7, 0x6, 0x20, 0x2a}, 0xf2, &(0x7f0000000540)={0x5, 0xf, 0xf2, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xb3, "9cf2dae5b4bf46856a56f8d341e62c98"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x32, 0x0, 0x6, 0x1, 0x70}, @generic={0xcb, 0x10, 0xa, "0a330363d1dbca623607cbac675450db2eb2e06d9a3b03b87a04daf7440e19ab1b84e85d68110b87a396aa9cb8d44d8baf11ed3aabd259c2e4980ff7026462a0df3d391af6767b167c846cfbf12288989ac5592aef2403ab04d80aeffa602982fc5661735fe13e78e329077c82d65e220679bc92c40c77e43480db8a313d66a9e29dea011f11ebee06f44d64c815f3001814fa62cba5d364536b01011707bd9def5056b1d92a73517b43ae8bf7a643bc88b83b541cda418079c046b4ec1c7f536369cbc145b4466a"}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x813}}, {0x9f, &(0x7f0000000680)=@string={0x9f, 0x3, "decc694ae8638573af1ff4bcce189e13d62e96ac5b13121a1149a8dbcad5b7eac72bd743b94f1719c4a642364164d6b991470810f7bf567541958ed740ede124c70f2320721b41424e2db9cf6136dda88f988e36af43dada7fbe13222ab80e3e79f3e2738ffb1b4037fd7805ef1496fe9e64c31cc5b1ebef0c7d975251aabdf4659d379b3e53d5670a8ff81b61152203385cd47e8c85b0843b0da695de"}}, {0x6, &(0x7f0000000740)=@string={0x6, 0x3, "21a9fc64"}}]}) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000b94000/0x3000)=nil, 0x2) 9m48.121895835s ago: executing program 2 (id=305): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f00000020c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r0, &(0x7f00000020c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180), 0x4) syz_open_dev$sndmidi(&(0x7f0000000080), 0x3, 0x612802) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0xb14011, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 9m47.160322501s ago: executing program 2 (id=319): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a800160020000140", 0x38}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) (async) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 9m47.059799309s ago: executing program 2 (id=321): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14c491c234695a34df3d3b000000000000f100000a2800000000020101000000005e1affd5020000000900010073797a300000000008000240000000032be8000003b12a696e416a9d4f0cf20a01030000e6ff00000000020000000900010073797a300000000009000300ca05000000000000000000001100"], 0x7c}}, 0xc081) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x4048010) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 9m46.906705419s ago: executing program 2 (id=324): brk(0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c1000000a000000000000", 0x58}], 0x1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x141342, 0x0) ioprio_set$pid(0x1, 0x0, 0x4000) r3 = socket$key(0xf, 0x3, 0x2) sendfile(r2, r3, 0x0, 0x7fffeffc) 9m46.751019769s ago: executing program 2 (id=326): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x68840, 0x100) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x94f031, 0x0) r3 = creat(0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x24}}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) pipe2(0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000080)={'\x00', 0xec88, 0x2, 0xcc}) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1}, {0x2, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x4}}], 0x20) fadvise64(r0, 0x1000, 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x4580b000) futex(&(0x7f0000000000)=0x1, 0x5, 0x2, 0x0, &(0x7f0000048000), 0x2) 9m31.774066353s ago: executing program 32 (id=326): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x68840, 0x100) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x94f031, 0x0) r3 = creat(0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x24}}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) pipe2(0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$PTP_PIN_SETFUNC(r3, 0x40603d07, &(0x7f0000000080)={'\x00', 0xec88, 0x2, 0xcc}) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1}, {0x2, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x4}}], 0x20) fadvise64(r0, 0x1000, 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x4580b000) futex(&(0x7f0000000000)=0x1, 0x5, 0x2, 0x0, &(0x7f0000048000), 0x2) 7m48.994277959s ago: executing program 4 (id=1261): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1, 0x100000000, 0xca8}, {0x3}, 0xff, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x4d3, 0x6c}, 0x2, @in=@rand_addr=0x64010102, 0x3506, 0x2, 0x0, 0x6, 0x5, 0x3, 0x101}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x34ff, 0x0, 0x2, 0xf1, 0xffffffff, 0x9, 0x401}, {{@in=@remote, 0x4d2, 0x33}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3502, 0x1, 0x1, 0xc0, 0x2, 0x0, 0x200}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r2 = fanotify_init(0x200, 0x0) r3 = dup(r2) write$sndseq(r3, &(0x7f0000000440)=[{0x9, 0x0, 0x6, 0xc0, @time={0x2, 0xdaac}, {0xff, 0x3}, {0x3, 0x3}, @quote={{0x4, 0x4}, 0x6c95}}], 0x15) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4001}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x148, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) creat(&(0x7f0000001380)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 7m48.875572539s ago: executing program 4 (id=1262): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0x2, 0x81, "8a04d7", 0xe1, 0x80}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e22, 0x5, @mcast1, 0xfffffff8}}, 0x0, 0x0, 0xc, 0x0, "bb798e1c134bcd58692cdbe0e867d8013f5372a15aaa69b24a03784111fc07075c3f9c39cf05e02b7fcd7de47ed8d5bc94e28d8d296b9ac72491711ffeb7d7c50531c6e6e98ff08137ca6960e17103d9"}, 0xd8) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 7m48.736576495s ago: executing program 4 (id=1263): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x18, 0x209, 0x100, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x8054) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x100000000000205, 0x2581) fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550c, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) fadvise64(r2, 0x65f, 0x2, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x8d48e000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 7m48.723125059s ago: executing program 4 (id=1264): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000006c0)=0x15, 0x4) creat(&(0x7f0000000080)='./file0\x00', 0x2) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 7m48.663063439s ago: executing program 4 (id=1265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x80, 0x3, 0xef, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r3, 0xf648e000) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x8000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1a8) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0x12, r5, 0x45809000) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000000080)={0x4}) ioctl$COMEDI_CHANINFO(r4, 0x80306403, &(0x7f0000000040)={0x1000, 0x0, 0x0, 0x0}) 7m48.448381325s ago: executing program 4 (id=1266): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x18, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbff, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r5 = open_tree(r1, &(0x7f00000001c0)='./file1\x00', 0x89901) move_mount(r5, &(0x7f0000000100)='\x00', r5, &(0x7f00000000c0)='./file0\x00', 0x204) sendfile(r0, r0, 0x0, 0x7ffff000) 7m34.864675121s ago: executing program 1 (id=1342): creat(&(0x7f0000001380)='./file0\x00', 0x4) syz_usb_connect(0x3, 0x46, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x6b, 0x44, 0xb5, 0x10, 0x424, 0x7800, 0xdc3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0xf, 0x3, 0x40, 0x50, [{{0x9, 0x4, 0x6b, 0x8, 0x3, 0x75, 0x2b, 0xd, 0x2, [], [{{0x9, 0x5, 0x4, 0x13, 0x20, 0x7, 0x0, 0xf7}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x4, 0xc, 0x4e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x8}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x0, 0x60, 0xf8}}]}}]}}]}}, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 7m33.504353684s ago: executing program 1 (id=1348): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000100)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x4, @pix={0x0, 0x0, 0x34324d59, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}) r3 = msgget$private(0x0, 0x790) msgsnd(r3, &(0x7f0000000800)=ANY=[@ANYRES8], 0x401, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000280)={0x10000, 0x7, 0x0, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000006}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000140)=0x4cf, 0x4) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r1, 0x7dfff000) 7m33.461313303s ago: executing program 1 (id=1349): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) munlockall() r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x800) lgetxattr(0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)={0x18, 0x55, 0x1, 0x70bd2b, 0x0, {0xff}, [@typed={0x4, 0x120}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 7m33.30177145s ago: executing program 1 (id=1350): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) write$nci(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x7, 0x4400) r1 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) close(r1) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x7000000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f0000000280)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000080)=""/213, 0xd5, 0x1ff, 0x4, 0x400, 0x5, 0x2}}, 0x120) write$UHID_SET_REPORT_REPLY(r6, &(0x7f0000000180)={0xe, {0x9, 0x2, 0xf}}, 0xc) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @local}, 0x2}}, 0x2e) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0, 0x3a}, 0x1, 0x0, 0x0, 0x4000011}, 0x8010) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x5e) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r9, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x4051c6f0e9362072, r2, 0x2000) 7m32.996434887s ago: executing program 1 (id=1354): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x101800, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0xfffffffd, @mcast2, 0x9}, 0x1c) mkdir(&(0x7f00000000c0)='./file0\x00', 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x105aa) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)="2e97e3c1", 0x4, 0x24004004, 0x0, 0x0) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 7m32.872426074s ago: executing program 1 (id=1355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) munmap(&(0x7f0000b21000/0x2000)=nil, 0x2000) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f0000000400)={&(0x7f0000000880)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ca995e968b0b065f7922b761528f0199602d1e09faf0c0f1c2db040f957a34b2aa413157e3ec06fdcf6128269e6763e9c19b00d4eb026a6375a22b930a64"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb434, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000100)={'netdevsim0\x00', 0x6}) syz_usb_control_io(r4, &(0x7f0000000a40)={0x2c, &(0x7f0000000380)={0x0, 0x8, 0x8, {0x8, 0x10, "85b079cae951"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500003e080c28bdd86391000000fcdbdf25", @ANYRES32=r3, @ANYBLOB="0c00990004000000640000000a003400020202020202000008004a0020ac0f00"], 0x3c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x30, 0x1, @thr={&(0x7f0000000040)="55d99a2f94a586db47f239a82d79", &(0x7f0000000140)="b3a50b622d64e249a0825fbcc2a78b65dd9a4c8c5aabc70daadc15e2197080efbb9f9aa85e903750954a10ff64ef8f6925d50950d9217c23db59412b41ddca861e03ebdd03d1a1cf49fca8e22a45047cc0ec833a778469ca8ae6935d62b8414353b7f6f3920924b3d7525730d690751f0cf6b022e75d121cd84cceec24cab0"}}, &(0x7f0000000200)) 7m32.332284813s ago: executing program 33 (id=1266): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x18, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbff, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r5 = open_tree(r1, &(0x7f00000001c0)='./file1\x00', 0x89901) move_mount(r5, &(0x7f0000000100)='\x00', r5, &(0x7f00000000c0)='./file0\x00', 0x204) sendfile(r0, r0, 0x0, 0x7ffff000) 7m16.71069822s ago: executing program 34 (id=1355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) munmap(&(0x7f0000b21000/0x2000)=nil, 0x2000) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f0000000400)={&(0x7f0000000880)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ca995e968b0b065f7922b761528f0199602d1e09faf0c0f1c2db040f957a34b2aa413157e3ec06fdcf6128269e6763e9c19b00d4eb026a6375a22b930a64"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xb434, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000100)={'netdevsim0\x00', 0x6}) syz_usb_control_io(r4, &(0x7f0000000a40)={0x2c, &(0x7f0000000380)={0x0, 0x8, 0x8, {0x8, 0x10, "85b079cae951"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500003e080c28bdd86391000000fcdbdf25", @ANYRES32=r3, @ANYBLOB="0c00990004000000640000000a003400020202020202000008004a0020ac0f00"], 0x3c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x30, 0x1, @thr={&(0x7f0000000040)="55d99a2f94a586db47f239a82d79", &(0x7f0000000140)="b3a50b622d64e249a0825fbcc2a78b65dd9a4c8c5aabc70daadc15e2197080efbb9f9aa85e903750954a10ff64ef8f6925d50950d9217c23db59412b41ddca861e03ebdd03d1a1cf49fca8e22a45047cc0ec833a778469ca8ae6935d62b8414353b7f6f3920924b3d7525730d690751f0cf6b022e75d121cd84cceec24cab0"}}, &(0x7f0000000200)) 6m31.087466111s ago: executing program 3 (id=1816): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0}, 0x18) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_COMMENT={0xe, 0x1a, '%-}/%/^*%\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000047}, 0x40000c4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) 6m30.9027062s ago: executing program 3 (id=1818): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x395840, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='gadgetfs\x00', 0x240083, 0x0) 6m30.759391203s ago: executing program 3 (id=1821): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x800) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) r4 = socket(0x840000000002, 0x3, 0xff) timer_create(0x6, &(0x7f0000000380)={0x0, 0x2, 0x2, @thr={&(0x7f00000001c0)="c72857e89ded4f71f19026b037064e1010e62f2d72457b2f3d8f64bb21aefa730b3ccb27b24740577f95c0e428bea7c7b11422c30cbbd13d4e830598e1774c38236009f2ce655222ecb7a52424ee5269136fb120f84214e3f7d02bfe6f8040773005251c0b46b9fb", &(0x7f0000000280)="f9e1715cad4ed03fa25d6f0bc265f574848cc27ee04fac92d7e2ee8db2faa695e4410401dfcfdc2a950e5b4b7055d80aa20fd6924989c85ee2a07c65a3a90a6a892db764be351cc84896b859e8e664c11535ff548477393d15b289a34f671633795935dbb8a295627f68ec8c5afd19c8079eabf9c314d8e269884136ff7e4acbf344d69253e81a82cf9f81872a5d830854a2d4870d52c068d878e87fd33f9b68b95726de71813eca8f6191dbbbf5c55161e242125aeecaadffd873debf99a79e799973a0839063d566180830d0f82de7527f8ae726934ef09d"}}, &(0x7f00000003c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000980)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x68, 0x3, 0xa, 0xa03, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_NEWSET={0x1a4, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DESC={0x140, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x134, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff72}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x54e}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5e5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x71}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x72}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4a4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe66c}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf53}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9fe5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1000}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELSET={0x11c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x82}, @NFTA_SET_USERDATA={0xd0, 0xd, 0x1, 0x0, "5dbb3520b564cf079ebec5a3f4fb7b4e4c13c639d88ee5a775c8f94feaf096d3e81abce0eea8fa208d37e2298f8a9994927c30c212d3dc0076adf0ba72e20573eeba7ad9ffad86ce038a8a0574bd16704e9a5b26f6000486306c3a2d0f9e4a50e2448f0322defd47a1cc4377132d0966b9520ae986cc45eb9cac59b737cacf04968b987aef05ca4577232668338803daeb828496f9b245a1e96b16e6d41d33ef274f4666d2dae7e79abcefd568d97e8d7b3515aca9aeaf422bbbbcdf9fd91a2ab92e134942424c27d8753db6"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_DELRULE={0x68, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x54}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44c}, 0x1, 0x0, 0x0, 0x4000810}, 0x10004000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, r5}}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './cgroup\x00'}) fchown(r0, r5, r6) 6m30.580091008s ago: executing program 3 (id=1823): r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) read$FUSE(r6, &(0x7f00000014c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) truncate(&(0x7f0000000000)='./file0\x00', 0xc) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="940000000001010400000000000000000a000000240001801400018008000100ffffffff08000200ffffffff0c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000010000000000000000000114000400fe8000000000000000000000000000aa08000740000000001800068014000400fffffffffffffff5000000000000000135646efb2fc2d0095857bc187d2acb52a9ae4cfb707f1bf5fd644cad7fa3990c19bcba9ab4", @ANYBLOB="ce6c43434326c2214dd24d3ee6642d5be4c063af22372faae7f0adf5bb1e8935b53169ea7e7f8719401db675590320cde9e40303b199dc9e5d3e7454500b", @ANYRES16=r8, @ANYBLOB="12137d6e321d8fa578479d5bf294e613af1c98ef21e1fada0587e09ba6936b2817f56f1df94cd86769fedc2c45157a1aa3ba4abf188e8219d49962ef64e2940e0e95a825016959154b2eae5305e2a90525899a85d03e6c2b7f337e47ce67e70418eb7057579fe38575470ea89306732ea0a67607716db21ce172f39d2a2d5139f20c65246ace4faa472845cd39151b5de65925150433c4f626b8dae8c038fa038d485c81a4d68553341c0bd0f90c9907c51a339664f5db9ec7015cd7aed24c6b48c9069cebeaeca4f97ad6115220660caf5b446b53fcab32daa97d9e0718b2fd", @ANYRES16=r7, @ANYRESHEX=r2], 0x94}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="940000000001010400000000000000000a000000240001801400018008000100ffffffff08000200ffffffff0c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000010000000000000000000114000400fe8000000000000000000000000000aa08000740000000001800068014000400fffffffffffffff5000000000000000135646efb2fc2d0095857bc187d2acb52a9ae4cfb707f1bf5fd644cad7fa3990c19bcba9ab4", @ANYBLOB="ce6c43434326c2214dd24d3ee6642d5be4c063af22372faae7f0adf5bb1e8935b53169ea7e7f8719401db675590320cde9e40303b199dc9e5d3e7454500b", @ANYRES16=r8, @ANYBLOB="12137d6e321d8fa578479d5bf294e613af1c98ef21e1fada0587e09ba6936b2817f56f1df94cd86769fedc2c45157a1aa3ba4abf188e8219d49962ef64e2940e0e95a825016959154b2eae5305e2a90525899a85d03e6c2b7f337e47ce67e70418eb7057579fe38575470ea89306732ea0a67607716db21ce172f39d2a2d5139f20c65246ace4faa472845cd39151b5de65925150433c4f626b8dae8c038fa038d485c81a4d68553341c0bd0f90c9907c51a339664f5db9ec7015cd7aed24c6b48c9069cebeaeca4f97ad6115220660caf5b446b53fcab32daa97d9e0718b2fd", @ANYRES16=r7, @ANYRESHEX=r2], 0x94}}, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x3) creat(&(0x7f0000001380)='./file0\x00', 0x6) (async) creat(&(0x7f0000001380)='./file0\x00', 0x6) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='::.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='::.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r10 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000014ea000300000000000000001e000000"], 0x14}}, 0x0) 6m30.191463749s ago: executing program 3 (id=1827): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0}, 0x18) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_COMMENT={0xe, 0x1a, '%-}/%/^*%\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000047}, 0x40000c4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) 6m28.764431107s ago: executing program 3 (id=1832): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000003300), r0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0xc, 0xfe, 0x2, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}, 0x1, 0x7}, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000540)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000010) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x208000, 0x0) 6m28.329424966s ago: executing program 35 (id=1832): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000003300), r0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0xc, 0xfe, 0x2, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}, 0x1, 0x7}, 0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000540)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000010) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x208000, 0x0) 5m30.891226415s ago: executing program 5 (id=2180): ioperm(0x3, 0x7, 0x7) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x8000, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@hopopts_2292={{0x30, 0x29, 0xb, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @local}]}}}], 0x30}, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r5, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x5a, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xb, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xff7ffff8]}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r7, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) write(r8, &(0x7f0000000180)="c9c63bcd06deb6f0944d0713d2c81f46df3ca42bc035b00daf1ae1d6921feccc6b581c77144585f04b7d961c5ea73cee7410b092c859d2fe79deadb571b9030b755ff3134cf36ee5da389303dd0c800869cab145c0859d5f297b1dd081388b75168f576e47b7f2dda214e237b90062f8531bd01bd6bea1966438e404a363d8da448ce6f953886ac1bbade92e81dda215f6af24200dd63a51a4875c2eb96abe837c57a2033ddcba18c439f4f48b2b60529e767978180283455ad4556d47fdd09110297adc748a6f050b0bf4651864cf9f2a0d7a8b85e070ebc6a52ba74ab1", 0xde) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000000)={0x8000, 0x9c09, 0x7, 0x1000}) 5m30.549905987s ago: executing program 5 (id=2183): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000380)={r0, 0x6, 0x7, "2d865db85f8ed67d5a9a27128ea045ad10b59c05415ba7c697e0551fc425ba6d3a0080011de4936dd4ae7abc46105ce3d62c5e604f0b87a9160f0cb01223882e9bcf5f4a658591d8837bcafad427f9aa78e2246fdf1a1608f19d918f5720f694275939dbf099580c3ebbf0e036c5e38de3d3e6a5225701219b5b58d3fd422e2c96ac0f596c7dc15a6053919bea3754548fe760f267ff6a026991345505688d38306c2d117374b11758fb32a6cbd0119aef44f3981ea44af599fd0b8d1250af798aa897a24af9230a7ada6d2d5d128d94959c6112e5cf5e88ab78fdd83ac3243963ed1f52de7a119b7e7650aa3b444564039263506d"}) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4028000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x1008, 0x0, 0x0, 0x401, 0x3}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008400)="d6daeb4f45047ee188fd32c50f6a692091ed54b83fef423bf698e80d804a8bd856a20e9367f0d93a49814d4216c99d812a10e1f74fd7909a7dba5ef47ad0b053ba392d63a8361f8793ceff7507c46744c6b7ea06101c2f399feee0bfbda3725a4aa02b076190b9e5417a70717e7d111c93861a5899cdb0578800f6b369f8cb723afe48388f246f3516cd2da4a05cf9d44f0c619093fc71a21703392796464fe662d4287aa37eb2501175ca5636990147904b4117194d7885d2dbebf0d63401b093ef0a58b3fe6690d475f10d5625bbf93cd1acee02b779f65594eef61ef66ee03ce9ed457f7d6afeacf28e532e4efb13f046f06b4cf259c49028491d2fc4c9b3b41643a762da1b476fd49e8738746947ec67f1cc6ad7b5c2d3c4a47c0f654ced75fcb6d87eea248a31ffb1bf07ece9837f04295c28ab6d2ef2435ad381d2e9f4fa898fee4339ff43792d0eb4d80dbb669eecebfbec85d9499cd9646d643a4b128bfcb81b067e5953616e6b7a6d3526ade397aba9fd05f8e7d65516fa5f9726803ec3d206a7c94176f0fca832e1db8096da949531e3d7eed11d93ed7fdc6d1831817ae83c3037868cd04976c1838f52ca1fb0d044be341ea58bbfc51e6a1ff168ee6ba9db5ed5e52ab542567633bc568e8aacd84b15d3ad8281e5b6a9c1b41f9546cc6bc3ebb230389465e7f1aed3b1894b012189d434c48cb2a74fbd12f4154420f532010d4d88fecc0128ea94e1a4277d712ecd233d36aef1ac3761edee387c8f416d6a7fdc4ee89f423fa5b7900f98997176bfce93d049ff82cadb29f1e97933f6ae7b10dfd13768ebe90a8c8b79151549f390525a87b09d7d47a693ed069141893b31006a676246ce9f74d7cd5add00e0b5f80a49b950ec4a7cebc5f80e7c4ff22a139ad740416923982cc4fc18509120bb22de3764be314ef02303912e3bd007f83e68035e81a01c09f54444b2dfe96b81f9596070257bb1083364f6e99d6b4bb831d578195f1ffc31439c7c3b85ee08c342a80f2c6d2aabf5c06eff2f918dd2e467708509c450ae8a5606bb886ea1a75dffc05d54473bce8d7d38feb9135e747bc4078784d5017cfe8557133ca590620c4b4e85d25bd9b7f1ff1f9692371787cae1cc89ce0b24e3b98d87a9e7754e3b307022f9d3a47c8d385e9b25704b8186b6f63c38917d3c8dd5f9292405d9c02361fb6d6aa46160b20919ce563f2e2b59f1556b6ea1f7843b05801bfd34f3f93355a608b62d3a26ea4baeda24bbd0d9b6b933e22ed4eb4f9d0983d8ae7b8d80784f53be07063385c3f719ffadf012da200fff5cdd7bdeec4003c830bef8cc27bb03e4c3424dfb5b04896d308f563edca2878877b2b4d293e62b75698aa3cd3416f4b637cd60efb535f690dac3fc7a49c10e6a0cea861d6ad3ded69bef9609252204c83f5e5726573e2e67c41fed0ae989e48d3746ea2590b190110c8bc8d9c42eb93af8262c1095c79a68a4497c2a10393d6b2133af879d302e25bb75241ce4f0d2e0b57a0c4ff0da8c7b42a63e2e42baff1b225232680a637fe6314cafbb4ca20f8b2a01c543248b4be8ee3e6926cff2246e48f5687163899c9dfb737ebca05a271593a21d92a3bc9cf26f5479c435679dd583579fcd7c6690023eeabc5441507588c7b378d36e1a793275c128af842ff45f33903f6e1e6fce84a579c2065ccdb16159e38d185b33e697b637503a5563ec044f2ba493c9fa79613b8b6d561e919a92d13002a01c0fd2f06e7706f2bf5e298e8e780fc9134d62ba8df3148d9b04e4eca270a9b76c5af7e168c92a66101d616ccc9ee0f743613373ab76fed6756a833deea86c65d699e5f407f52833257c608eb311864b0dc60a37e5e0ce6b32d47ce57a4da1da3392f09d25ea07b1efc9584366be3e5cfe7b319337cb15e0d59fb9c079779a6d3698e1b8e4eb5f0e2fc8671712aed6c7c02311a2fc2ae3f988db3e73f41a5042285588bb348dab95446b3bf49f61ad42765d49239c57c9c70065d7bfcf56fb1c5bb4c52b28af353edbf846b2c05930b4614314a2577a9be8d3e52b61c9d7f29f2128889ddae4a7ee5f4e221cd0fadb115361b40194ea2b4a6dab0af5ba7d65cb7e15a95386f65b460cd8c57cc0a51c523e2593aa9fea05876b0fb2e89694ab948d0a6761687e05eeaeaa0340c91d4e95f7702228a061955122140225ae19993bfccdcf640302b4db78fdf2faf0a37aff4c020f4e7faac25c4a1933975c13013b810356e5fae15b172c403f88d0006b0bae12698b8cbcf32dd4f49297a1bde5969b2de2f6b224d5ff6ab92df006649d2b1ec6a9ed43adc4233ce8035f3e3ebe6b8e5b8cb5eb7854f432c5475fa7a4a2ee72577a433158aa8f85174bf06eabb19e1d03d98ccada850b810081fa1201be067fda9bf677d86a82e1eb8370b3859d553fac2c02e0c0a16adbf854735732485528bdc6831059a148488763b6beed8d7ecef05423550eaf60b20b818d4c5a4ae2320e17e83d434b9c9682608d3039788a6db858096cc79989b7606ee578d503c9045c8e0cdb2a8462bc5f0c5c245736aac9de07d960f19cebb50e18525053ad6336752e0aef7059d36c138fc42bf344970f1ff37ec6869d82ba73a8c20f6cdc1489e4bee3d90f6ff61c112de2f979b8d866a6f4d255b722044b35605e3681b528f7cfa08e6db1fb4b6aedf71c9973ca73c504bbb0e36be1e9a09d77b671c48acb3199927196bae387c8aeabc2ad497fd68063f4a02e390a9a59dd5ab1aead08b0194f961057e0bb5bab3bc0fb72ad6ff59e619280e1d7e6994b4803951e8a4d5d78514f282dc4b92946196b498ea87471aab179fa11bcefe5b3847b02176c3004dc1714f07a1fd6afc58acb51e44876a597f73a409773812795dc3421e660edd9ce825ab08407af6d6fe2c138bd6b7524f28cf969f18319e3b0df7bdc57ff69890c7de09cc38b3c0997bf03d3cfb61f2b78dfc9b5014ab666ac32905069474582bca3c99268cc0d09916d5b3f56ba016a1ff0462661dffe1da01f51f700470eb04889ce9434eb0944184d5a0e77cfbcb1f5c633a490218d74485de7e7bf13731776d4523a5aa6c72b03d435d4ca72ff0ccf887e8d53f2d210c808377bc219542ee9eaef815c2266de8eeb75fb6f9343a3ddfc4549352de02515d82cc75f0fd88dbc474ed62da6fa23824fa841d4ddf6dbb805073ba182b9ecef8d7913ee3196e7c925f5ab52bb4b75fdff74e9aec90a4d07b5a4decb002b58b04784dd52a34ff68032eeb11802f66312184ce8a783b52d86fa843b7025718a65c455196a06c09ee2b8100ac392cb616b13953acae57e377a60a136aa73ebee15184c502d1a98513a90c707f84de74ce80cbfc089e2d2b33b15ac365a0255c4690052d4145a8405c6aefc2151e641ba7cac7c754e36f2d88e50622e86d0d6be5331a0aa622533f32724d12214eaf5f987d72112da03ab8336695219c0f728829eac964440a78788f08e6c579cc2e8ee21f5ea30f47bf1bbd4ddbd44387f27b113ee49ac7d24bc3b727e8ab3fb30794a120cf4c53a2a839e9177f831410e909bc0f90619055ea928744b779df68409819b9a4f265c6e08164abec523e45c55a55357b02396b679239c9dc6fcbf865bd6937042f78ac199ed5713b2d088ff9c41ab15ad6b72f4e02e7ed623b1002a4fb7a4d00ee4c1df786b4f5cb222c6b3787ee5e616ada6fae95a4f8e511c568023b178e0693099a4c02f4974d05f7b7a747c291d2ea62076bca03595c5303d0a6fc5a72b39103f897f7692c018eda46acaf299f889d475b7c0fe556fec26bac2da6d7d57056f608150acd2f1d9d36dca50a12c17288b5a2086682600fcbbe5ce01baeffaebedff4211a77836b5ce369adf890e73ecea77032b3944a272f12f41c340ff6dfdc17b3ad6b102a6221bd588a4c1a7f9f3b3d9ad41f972e4b252d8093a946ff5cdd08c056b79b0f3d8ca90c895d18ad215123fb19cf101393f22464a3be390c95320b7da5a571fe2e7fb299fab71afc038a206634f5535a5e9df7683221e905356824969cf99338612c434b9173e451de4fc1557c64190440705dd1228757d5acfc477b147f010f36c1c1c81d8d3f9fdbdbcd4e99a40613726e96171dd86957606d529d5a4439bbad03655af94d58afc44a4160027612ea3cadb806fcc35062f3353b9f3ef3a5ff7a69799a6b0ef86c9a8338af9d28b3c9af9d220551739aeecd8b16e2dd3c17dd23656bd3a926abb42cf00478447d855755806b478555c368ae93b206adbba89a6d1f8c1050017729f1860e6af2dfed6d4c83605ca822c99c80cceb784307763c5fd724a008cd840053a0e77138e5b071d4b758d79b7b7c774020a8d306c70cfbe7d78a16dfb4ed2da75d0457316cdd6aa95e32ca3eabe7da48572cc8a01e1cc2dd72bee061ee318976c5ce1f29144e4ab2408493d3bb2d89444406a1d6e11ff5668eb6232b77bcd2e7d667bf1d5e48ed6ef2ca378586c443bf4487e6dd6f1541407afe9fdb3899c43e178ca0a04231abe6cd061a46739a598e005838e6b77bee1c5908ef8eeb11b1cddd94da34e3ec8b013fc18bc5729cfeffa42d74a281c000df9744c94d14157dc92f8282bcd0956430373612d003a95f4520f8ac7fbda986d63fc717e6aef54c05e5ef2e169312975cc8bbb9b737d6e770e79e1375bffefb0a73501566caf44c15467ee3dec57786080e3404bbb7bd32cf23a5089ba0792bdeb82106c02c52ab35e7a0db96ab01341afadba65adfbbcd09cf10a1b251873f8c56a6bd16491b771585f200d8374c67e80af34289a8dd9e667f9614c6c4237bd75b4d1de0fc584eea783f1070e6f4a3f78ae369d164844204f3440d648f4c776d119cc4fe9072c7cdefbaccec20b973df37e320c1c44dcf2c52be299a438a92c83a08a78e3ac568995f65d4ad0fcbbc5e6a2a2b76e6c0bebe0548b95945e3235cd307df19051278daccf2b718b8a5327f75be52a1a67b75db1bccecc6e69c3277a5923f5028a36da986810b2292a7d6249e36c3db3701e87131851e21bc828d00d65316c8bf94716aa9972b4c3989ae882c78b198f1a9b1c73c294c2fe6a2aaeb73d1ed3b676bea32c3abf9862107ceac4a0fa65c8395014ee7fe4e873f356e53a71b3ba7c1f9ad53082a03719fbec3c2fcb35eefdfe5ac4400fe35085e739c4f1cab0c001db9314f4df0cf0a8735f8233032d8896d63986f835b45d77de2ec8b7191c32ece922baf194a756a31e9f5d59febcb60d67abb2eeaa85aeb08f396e68e28451ef34db494fa61d73de89e3cd34ccddc52bbc419aca0013cb5bcf5224b148d55a333b9b89515c45607a2334216170a8d55dd48c1bd62b3c0163e09e5bd6e05999b3b6aa99d67bc7d2ef882830f8dcfe8a2fa82217df1cf77b29e70b43f3d8dc5aefcf8dfb6161bc9f20e3783ccc252289955be9415882e49bd0c3a6945ccf5b5c5ae6f62e159bed62cc54ad2d22186b1e0d4c6a10b2b601ba72fa7ddfe7351f65551df9af72e1604d199d692271f50d2637ea97a94f12bafc3708ab93723121a19d41c0ae2c2e4cd0a8fd48b9a732166c3cd508864e4569c7f73a314b04436f304ec18a980005ee1e0d8b1fde75717eca2da8b9beabfbafcd6f171764c8c5cf2147c5d904110fb80922770eb91e9d0a1fdfc91a4342b1f289b51547598105aaed8bafaae81ebb07223ba60fcad2e7e6eca2775ceabd92328e554299063b2ebf92dd8a516a1783f9ff0dfa1d92d909ec75dd8fa96fc4b8156b0b98b4abd08255e1368532b70e3c66c778e5acf2e6968f4ac7fbba6e50ecf750fe5219456c4a16b3dabce9961083f3702623eb9def42f976c41244a8eae4675ccb907b2886450e6da844260379c3682be4f05dc7c35373d2d673a50dc7c4c47c15426d7688a26199207e014242c2c67d95d1f12e5bfd4bb1bc395e3371c0f14a3ad2acfff7c506cde2fa7834c10dddcbd77325f5ebffa938699ed57918e5ee611264705a50282bfaeac77eea414b33c9c85c53472ffdb4cc20a28a1913f5603ef15c3b0083cf5d0cfb72dd0f224fa19bfd14977a5cae8e41c3c536a31dd2197e00696ec6e4ee1ad2d5c5324d7e65e9d6adf49ff304f8e4ccf9893d3f159c31a98e466986745e5adcaab8d9f916e22bf3f4ee66e977ae48809d7820fcb82108c297ca095e3bbbf0c28662840bca954d727433747bb51520748867d8c0c14d855750c47fc17e49dcad2d6eac1a24b1b757e5f4c0740484cf3d16cb5c061f703e9212f033519f9fae62a2636f076e8464e45f8e7e399cab2cf7f40ac05ac4265d96413b654efeb65aa698b36773ce5f23bd9fe7ffce1762e413194d0a2bebc3c84fc555530d2a0a64fe56634d475b783208fe7c87e14f5d4f63e58170cdfcfb486bd274f0c579519f510ee051b64860c5083b3916e3329a3b99e103f82c548c1698d52e5f9cbeccdedc024d5d37a80cf127092048e33762b9477b8f84dd492e3259eec55967b8d31a2b92d38d4f4fcda654209dff87237f7e39a5c4fc1caa086ce0093c47e7ef229bd33047603fb8bf444368a695db4521a8933ae34d429efd23a2b40d39b0a975a7fdfed9d2ef43ba4c92516d5658cb6bbeb93dd7dd71d23a1dc2f09aa090f6596506c348836a428537b777bee31ae72fea765e5cd1c0f466d5623779d3eb84b25e07b4dea0d1deb89683ba2cd95591f72d1eb8dc5b525736bcef4d1b10851426d08c583f5083ee54eead40231c16619edd3a72fc70150b1ff5484a6bf21084b1f66fe1e7c3b38fc279dd3cc3a34bc2c4025b8a6c13c2773aaaffdae7380da838671d945938b9393157ee0cfb244b9b6804487ad7c7761c976d048b7a7a980c635da30ff979c5287df7fbb5410c89656ca03ace1ceca144af0b97b15c9d8357818b79ac83d31e6b4ba46af5a0b6a4967e635e9866ea7e12d13d45add66c79ca60f47d586c31cba888d3d19654003ea98d42a1873c19e78c7464dbd9bbf4cbb62547697216d0f353fd2d12b05683173e3eda027ee4453b8c4b47cf81801c1ed6d8f270d8e2689c5541d84995acf48900a426e76f8d9e611e630fe64839ee589e6da45a8c65f680040e8da1e30d8f140ae463e658b44570f42de6009e7474bcb510017f9de203df996f0454d6c9a58ebbb1a9eb79a14188d9ed59ba19a211a1021d6a9b0ef2e0e1229af849e7d9b650708c4c806b9e84247d02811d435f084f55ff665babc81e22ef4f9f6c80125bcaf55cc6432580c776c171e8c970a50785da04beae1a1fd235010ab747d0c73fcf1e921b6d7da5af27aa81e47a99553d7570755a66acf69e938a03f84765f5baa4db84a86f0cdd497bfadae1c196f0bcb912c3b9d474148b68b532c98578d843174b345fed2d6e327afcc0de364ef83e733ada110a4adf23fdfad08eb075175c62407e6c2c542525069979e38d56cf5d9dffa7a225c0417de11b6bf661549f91b9c35d27e2316ad6c8ba21d17e3b839e856e70ea272fdc1e88f62be45dbf818e5cec9f865fdb6fa2f7466fd23cceaab429411ab85ec91a732040707113e6f2f7a3992f3b23776a443818de894565f85fca764019a4c0bc2273786bafc140607669ed323ad9571cdd2a41e498e9d87323e07ceccba82ae83356383a4e258d13f0ca49dd60491b2ee2496fab0a912f08d4e80886b0afc7b65fe9590270f075bda0d8dd75bed53d736cba2af80883c2e08dc6083927b76986a272f9f1d69603a2792226b3fe87f161b5d017c1c97ae1165c9a98d7ae0b70018d9dc6a12bd4d7049cd5f19e39a971355e35ce38163b86e29027c335fbc59985f1cd8e6d4a7ae2570e062b42492961d92909568047cf1c486a48de0bc699f8025e29c6e73381d4bf9bddc44873690b7417abd33efb66dedca06434de105f42430bf8391fb867e8c233b4ce670127eb687b91834f57b94dd54a96103e8ac7886dea4847a57f6c53f40c6aaed9277259052c16a05f6b4d36b41d2c79eeb2d7bb5afc779a46396fb27e01de9126d8454a6c710c4392f467c89fb4f2e7b4786e3bfc1004e467f5f26be558447554061b4e4cdadcebda1fb3507e0cf6d844d06a9d5c965b0ac96588961eab8322cf7c4c3730fc63e4e2bb463b0b285426e56118a6c397b6dace099a4121e57a2cb3442bb01f29381fab1bc429157a0c4b4b04e59f0fc8e939c6807b3040876cab6ba408a2e300eba86f2ee06a9f1120cae416be3ded41de3c1f05bfa85f60b67d3ef8f4082b7d5beaa41e817a1332d6b7d552bd492e71127b61ee707d3a3fe0e2a10b6484684aa4721dac0f364560335c708dc269684a97fd7ab1ab58df8e0ef33720bc325e36a4691823bbf0f27a7ada9901564e778d234284bc2bcfc41009cc004e8e465e5242e66c82071967a843f94a84a160bd8cb17db4a6db5abf424d2222d7efd8803528e36dad5beacaafce858ff8c7d870bf53479b9c5f14c6e8f929121d28877b87d73fa2b33dfbb9fe286fee77a6356b87359d320748592cd57231872e7d47880d0762e56038a21609ee00dc630be20f08823a8f9b9181c9ed5782092142590ccaf3e2414a425cbe078fa5d2230e8f4455f9dd7e063283e4c138d3c86c0820f3bd59a0069ae7d605f9f98d2b4a69f596c943fc1578f68616e82374f17fc3f3a7643f4b919d74530d610215de66a4ea7635d911bd988f67454c8b75a699ee9b9272a0174449cdf4c3286d19bad118be9088fc8b9d9af87a8cd03ec24d030cca662261613dea9a076f2945e8dd5f91d251568c619ed46aca4d1c76aafa726f0adb4f0f01d46ef3b0a556528bacea5f5dc2c97ccd62da014ff6345ea8ac0151cc05875fb2b3e9d21431f262e8dbead98383f2211d791266bbfd98904e4734c212a777cbc8929ad0e70e1fbd26aaf56a7a578df16e58d7cb1efb5a7f4207f8b157bcecf45c5a43ec0f8ebfc69c5274bf9eef68d4bd47c9e16107412a5e211f5a3f8ba839dc98c5413dab38e81d35e113ccb7aa9727aaa0db08bb8025acd157fb891ecee8ef17d9a20b0023336f79d71fd3bb919d06cb0dceb5da790c6dbae70888eb62dd49409e032e7865166f8c64d7dcdd71aec01d04f22c5479a5ab12aed9433bec72a1aa1e140bac628813150a4c3b3b789ec34fae67d546500ce6f341e4f91cf6c8a90ead0bb02a8078e738bcdbd754724c8ab280c7d33eb34a89ab691dbd93663395f11ecbf3c9710ff7a90250c95a28cae46fdeb897253bbf6237693037d5c5d88e9f802bcd634091dad2e994809e58f5806e6df590295b41e0fd9aceebaf7f705f1cb3c196cecae00e3bcfd1221710338ff8ba57b2f788e9d8b97afb3a25c7a7777084c49b5f2fb019d6c755c6c6c1466ce3e11f6e131e696f4cb3289bd9bf0d7d87e243f112a9810210dd390b92a109788ba85b6cf958a53d90bc302b9daf73df510e6a8cbc691edf90c9764ddde53f5c4f7221e7efb139dedc9485ca993612b55a04daf8254d07d0f57ca36f0c7fe8881aa1a52bf4cfd67993d8fdf39f7bc33060c40175364966ea4c982c5a2ef60785429d1550fcb5f61f8027586d4af48a91d480748afbabcd045ac427ae4590f2d02fea9857c408345cfab6ccb6ecbc8a08cf0ae527c06b249cc1c83b828e622777620a4a79e9d9eb8c4c42f370cfae5ac9ee621d9ae67ce6eecb5cf790b42c4dd3391e03b8cb2c738c108d9cd6aa77c3e678cbce89a55971c4c293fd7e2d47e52189d73fc233ef7ef84d99dafc3d9189d807b4c82d8dd0441464b62d7f29cb2d655453003e4c92ec89fbc135f6f786fe64bc77b8e92cbff4f8b14f5b2093726dbaa9326f71cde7c840ffeb0801f617c1d82291b0cd1fd7ce6fbfef603c75315ebc56360d96784bfad928f105c23ef56e0062bcaca54e283e5050b3abb9853d828f3e2e7adbef43b620d1552017bd0c3f482345cc8eb513258283580335dff9b5a795c6acc904a057dfb23407629ab8319cef44f645b94c1c496747f1082e8b7fdab737df2c77cd5117dea5c25878560c36256dba75fa62c02349281948e21c380d49b5355c4e30069257e81a8bf7e8c13ff10412cd29da241c8f6056f7ff745b32c53162f4c464bca82ef3cbd34406d585a1b5a5a302c4ca50e2e21979553311f745fc44f289ceb041ae32a2ddfe992b4a1915e9ce092ca12758cce44d072a16f71e1329b0721597ae73ac8a80e83be9de3f6dcdcfa17e009f0855b1cec33c84a5b941ffc3eb89471a22e78b3afc82aee69e9928203ff94e0bb662fc9864486ef9a9bd28a6fdf466cf0c81de4969f81cd49da8bb36450e2347ea48a3fefdfc698fbb452cbb3feff1011609239c6cf1ae10ab6fbed2170b714d5c56a414e282404b3d946fea1490c5af22653b9184f2bbe09eb8ac1675ddb79eb00a00f14e80dc4ed33abdb72af081414aa196643d6cad0c8dbe4030081b3460567e965f1be9b9f1298a5bd6d55e361fd35c1743b3897d2a3caa58235fe8007d71697559366b7d378fec2e8e7ded511792d552e928affcff5963972a6e6fbd7b9ea6c356094b6d65681cceb4fb7cb9b1b4f4a28ec4ca118fc2ec9dcf09e3d95a41712bb8c8cd5c73b57e3001bf1f764e38e251ef604c148c59826f8c932f9dabd15067b4062ae802399fd874b22c8249ccec58f31f62ac2a7061a75565f2ec171f67a172bbd6b3c5060d1a881e0d4e2233f2499916bed58c206b134c930d5eb1f1774698cdcbad0446b905371d12e4993e6219e30a5083a208ea3abd1353e01562ce1ec0ce0681f90f19949b592cfe89f3d122bdfd8ec80094a0c873ca5072059a4dd7755df21442d3398844d15ffbe7955ee130174c86a8351fcf1522f1a79d66c46445cf326434611cd7d0f0b000de2334c1eeb042a1a2a44a6128f13e109a3fac1e350661bd46b58fbfe65a74021563b831ba3fca8a5e6a7ae9f78e209848120beba2031ffcd6c025e16234c68c074d0c456fbe9d52fe285a2232c689705930525ca722724459889d75f85b44714cde732d654e31740118226ee1a15353db16b139601e3659cb3e9a11196afda060c4aae88aaea5b4f233d4ddbb071eac5678e5c00dd59b638fcd202efed5da2881997cb1421b7cb14c9e6fd945306c1d9bfb3afa7d2b784a2c60319037b27922ed97411788b9ebda1fa1ca4fdaa97d73e8d197d01fba671d8346c05c0762bc52890ebde944670c02c0b2920b9f5042ac573d3972c3b35898c43da40ae4a5e7a0c902a256e9388a1303ed0e324caea84fb1e92325106f8d9175dd62028c1873805b3bd6105ba2b46e4a05f5c0c7018fd55894fa184ca3f8bcb4e9c550bf56c53f6ca4294f9f2b804a39811948404a3443fd71c3667bdb3bd5e2ea57e99f1f17a1032f833b84571f729ebd20c7e36819bf10f2a1ca36b1bb96dd1ee6d76a5d5b0508cfb93ffd2a30c51bb8db6a1bfd4358e2d1ef62b1570b18697164d69cdb7e6ce539c9d52159e927bd113cadc22e7386f9d10030b86c037eeaec76e48c71b3b5ea87542e19dfd8a3bb8d0786f6299f91425539b4d35e6cb1e12dbc536de7f89fa7db1b30e6de8ff33eef590df015c16e43005456b70f", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x17c, {0x6, 0x0, 0x8, 0x1, 0x2, 0xe2, {0x5, 0x62, 0x4, 0x0, 0x100000001, 0x9, 0x1, 0xffffffff, 0x2, 0x8000, 0x2, r5, r6, 0xfffffffe, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000007980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r9, 0xa22, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020040}, 0x6000004) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) write$FUSE_ATTR(r3, &(0x7f00000002c0)={0x78, 0xfffffffffffffffe, r4, {0x100000000, 0x200, 0x0, {0x6, 0xa, 0x8, 0x100000000, 0xb50f, 0x2d, 0x3, 0x6, 0x8, 0xc000, 0xede, r5, r6, 0x1, 0x1}}}, 0x78) ioprio_set$pid(0x1, 0x0, 0x0) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r12, 0x0, 0x0, 0x40, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r11, r11, 0x0, 0x7ffff000) 5m29.885773056s ago: executing program 5 (id=2186): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) 5m28.508098416s ago: executing program 5 (id=2201): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0}, 0x18) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_COMMENT={0xe, 0x1a, '%-}/%/^*%\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000047}, 0x40000c4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) 5m28.253088746s ago: executing program 5 (id=2204): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000272000/0x1000)=nil, 0x1000}, 0x4}) pipe2(0x0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000090603020000000000000000000000400900020073797a3198d4917c1369bede795fb499000000000500010007000000100007"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000002c0)={0x0, 0x8, 0x0, [0xe7, 0x9, 0x10001, 0xffff], [0x7, 0xe10, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x5, 0x8, 0x1, 0x100000001, 0x8, 0x8e, 0x9, 0x7, 0x9, 0xfffffffffffffff9, 0xff, 0x5e, 0x80000000, 0x800, 0xfada, 0x101, 0x1, 0x3, 0x9a3, 0x5, 0x9542, 0x8, 0x71, 0x4, 0x2, 0x80000001, 0x28ba, 0x766e, 0x0, 0x2, 0x800, 0x5, 0x9, 0x3, 0x80000000, 0x30d88b52, 0x6, 0x8000000000000001, 0x800000, 0x5, 0x1, 0xec0, 0x4, 0xf0, 0x6, 0x2, 0x15540, 0x3, 0xa, 0x1000, 0x2, 0x6, 0x40, 0x9, 0x6, 0x2, 0x9, 0x2, 0x5f23, 0x8, 0xe, 0x100000001, 0x1, 0xfffffffffffffff8, 0x80, 0x9, 0x6, 0x7, 0x80000000, 0x6, 0x0, 0x7fffffff, 0x0, 0x9, 0x6, 0x0, 0x4, 0xa, 0x3ff, 0x100000000, 0xfffffffffffffffe, 0x10, 0x100000001, 0x101, 0x4, 0x8, 0x1, 0x0, 0x2, 0x4, 0x3, 0x0, 0x7, 0x1000, 0x1, 0xb, 0x3, 0x2, 0x7fff, 0x0, 0x7, 0xf, 0x4, 0x3, 0xfffffffffffffff9, 0x8, 0x4, 0x9, 0xffffffffffffffff, 0x566, 0x6ce, 0x9, 0x6, 0x751b]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000012c0)={{r0}, r3, 0x3a, @unused=[0xfffffffffffffafc, 0x4, 0xdb23, 0x7], @devid=r4}) madvise(&(0x7f0000b0f000/0x1000)=nil, 0x1000, 0xc) fadvise64(r0, 0x1000, 0x1, 0x2) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000700)) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x47425247}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r7, 0x3b8c, &(0x7f0000000680)={0x30, r9, 0x0, 0x0, 0xb1, 0x7, 0x271, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r6, 0x3ba0, &(0x7f0000000740)={0x48, 0x3, r9, 0x0, 0xdc7, 0x1000, &(0x7f00000022c0)="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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x4580b000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) r10 = openat$adsp1(0xffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r10, 0x500e, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, 0x0, &(0x7f0000048000), 0x2) 5m27.784522609s ago: executing program 5 (id=2205): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000040)=0x2, 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_PTP_KVM(r3, 0x4068aea3, &(0x7f0000000000)) unshare(0x22020400) r4 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r4, 0x8c5d47e95537ac9b) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, r6, 0x1, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) 5m11.515234771s ago: executing program 36 (id=2205): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000040)=0x2, 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_PTP_KVM(r3, 0x4068aea3, &(0x7f0000000000)) unshare(0x22020400) r4 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r4, 0x8c5d47e95537ac9b) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, r6, 0x1, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) 2m14.799537123s ago: executing program 8 (id=3882): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x53}) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7fffffffffffffff, 0x349100) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000080)=""/135, &(0x7f0000000140)=0x87) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000180)={0x1, 0x1f9, 0xfffffff5, 0x5}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000240)=0xe, 0x4) ioctl(r1, 0x2, &(0x7f0000000280)="88a47288bae53be940954117e2a09d42401b29f33886eb2c393444b367ea204c2bb4be88200e1160c57bae693599eb5ab8a38b6045c248d2a10da1438b2fafb7fa4b2080c77cc6ab945612ca637d690f0f83a02eeeed5ef6a16d5e0f46383d11c9081afafa88fecdfde453b037310a33a2e1789c7e2449852835d6be95f05a0778ee3ee3d95016f696e8864bff44df9af657ade5796f6490d9f7ef31db4253b7b005e9c094b1f565bba2b8d0f4b9af7112c26d1995146a37") pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4100) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000380)={0x0, 0xd7d6}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000400)={r4, 0x8, 0x3, [0x1000, 0xb, 0xd640]}, 0xe) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000440)={0x80000001, 0xfffffffffffffff8}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$NFT_BATCH(r5, &(0x7f0000005700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000056c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x4c, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x2a, 0x6, "00c7c6c93b8c0ca5f5a1b74d3d63b004b4f2452f591ed4a58a85e991efae76847778c371d03b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x35}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x50ac, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3844, 0x3, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tunnel={{0xb}, @void}}, @NFTA_SET_ELEM_USERDATA={0x8b, 0x6, 0x1, 0x0, "0e5e15eb7ba4fd666f1fe1152b67d6fd80f40b74220ca5b0291b3e59479f469af8044877266f0f1087b2f30270d0c00cdfc20378f1213924c304a5f4d5cc3eda2470444a923ad6ca39c09512dedd2dbca02987d84a973550f4aed97fe0e9e942204b82e09bf0501f4418cf29f4257f5b2b832c62706348f92c2c96ca96e04ec85aa1b96a2190c6"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x400}]}, {0x169c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x12f4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6fc37cc6590e19de}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x89, 0x1, "74f8aa56459f8f728e4aa0ed818bee11267637b857c97c4e998f60ccb8ff889bab2f75de94567aa7f8a51e8dfa1efcdfb8ac9a936359e8cd3aa5b6a22dba349cd8a150cdd548d401a8cc190daf3ec5519947dac7d39b63930d3a370ee8a83b876a2c668e357818bb7cfbd5a1da11af4a9676995e8376f9d66ecc46bd8d1bf526aebdd0ee88"}, @NFTA_DATA_VALUE={0xcb, 0x1, "53b2d254f287e75332e4f25abe74623ceea002faa2385de686029d03ab52fd5f91e330501db07a763d5603f661e69443859e8a08d16b85f33dc22d9bee713682659440429d6219c39cb4789d99039f994af4f1301a890ccf97adbfcc18402ac8c2459a254ae31d81836816b10840c6c82aafa4a251a7914a1c6663adbd7c079ef4a62c4c9acfa567ddb1bbe5982b8e81ebfd16eb583a9225f4ef3b0301f35361784ad521a4c73239bbc3efb1bc0d815c6d8431d85c1724424e29ff70a217cc6f69c5f5ab26d1c2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0x80, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7c, 0x1, "7ca57e8e93253bae53a2462ef98feda3f169c0b561fd8fa0ff19a9db1fb6e0164f5dbf1ecfc17203e6e5d77316a3f6e215d06b45b42f449f1b3b3a93c4a5be438f0581b07a3280112108ab0599a7afe98c0b07f5169dfc1d4276cc399e14e3193e857af1cc9fc018336c84b0ddf9e029e6a3b94f71919b44"}]}, @NFTA_SET_ELEM_DATA={0x238, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x43, 0x1, "71fafb5c475c1b7b8164f1fa649f92aba5f20ff6b9e371399cc2f4111cf084197a6d2b44117809c3ab674f902c4dec6dbd873c34fc4abe16c2f7e2f1d7350a"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x23, 0x1, "3276c9aac4b2739920405240b7da65c07cee039c64f3f0463574f8092b0f39"}]}, @NFTA_SET_ELEM_USERDATA={0xaf, 0x6, 0x1, 0x0, "66ec94225ead1a75ad0d4435f7d2930c5aa0cfcf9b03237ecaae0eab313e621d5a814984dd3c851f4580630d7b5551f5a81d2365f0a29d23cc353604ec7a3d5106843596da374be453a5627fad301defad233508abbeca2a8439808755bca840fe1124fdad88646a67ee4bb31d78f7d3fea539e662e71b0c13b6a82a54212e770b001966a1fa2d3ff3bcd5d94efadd57c7f9a87f329df735960239f1530698e587be0274f9b0a0729b562f"}]}, {0x1610, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x394, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xeb, 0x1, "58f67a0de738f8c522439cf9c0d9e57089f0c38861094df2d1d18eae6a68956856fbb844d38b53c8885b29abc71cc12137dd981e9df7f63fe02a1276d624e1a9cbb08e3ca125a1a097ccafcc0916716e5c24a23cdf27b392e72884d01df33fcfce392b924a8e3bae25f015fa8ac848a9d43361d6101a1d124a97c95f5c322082ef5d4668caae44cb347a2fa8734e6e003b4c2de0790196965c5a89e1d97e50a9bf6f6c308f1fcbf8c428f399f018d9b20b0ff10590f3b1b5ad418f1fa20ad1cbe6fa5e9003806df6180202385f14b82b7badb639eada15125ca95d53c8acf43a30991e556b4b03"}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "c0799865c022f5e6567f0f8295b94c33a689e5eb9a76e344019a60d2c519af10045d1e17e4457ca037c6f17fb23eedb2c3d5fce1bd65c129b049665fdcec3da5130fdd13379f4d8775067e1ec04855ee5466c658876f14b4cc71b0b06ba4530b5d972b39bdd4a8545ff79eee7c5754bfbbcd209ef06c77"}, @NFTA_DATA_VALUE={0x37, 0x1, "7714a106a8b84539722092eb002ccaf32aefad908950da7c27afd1cc2563a7ece29af8278bccda8becf2ac3b44f11b82412d03"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x67, 0x1, "5649436ba9ec330a151cb3270d8023480949ecd72df43bc6c2bc5c2cc7280ce8603a621e11988f7d13260ec7cd83ae7da8a0a81cebe62fc147970cff6fb1ed2f386559d6c16f62502ad6d532c4e06dd92fd1309521de3f16a0fb527d201b339438b04d"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x170, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5a, 0x1, "c426792769e23936d584c620d8611f31ea5649b915ea5ba9af254270bdac46d47996bd018f33876118b201ed18449e3183e8bf7c8e7887cf2ba79217358abf366c49d4c98df8f1a5c99a795ef76038ed479635df62b1"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10001}, @NFTA_SET_ELEM_KEY={0x10c8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x564, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x4cc, 0xb, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x4c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x60a}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1c}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x35c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x34c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xe0, 0x3, "111b340de9af918ce9dc68e1536c058577c9ec90c7a4256886a277c01dd1688f6cad9a56366c5b00b1cb94903816aa1ed8de215728ebdca51734c0878468344eaa62c3bd2306eba9522a6e217282c53fea74228660d9902fe93cbaf7dbea733d086dfcc70329a56480a22d4dc997dc8ad7b0b882a0d030772255d7fb963236347bae6395090d911bc58ae8ed97e3120baf7fbf2d9df01a179d7c35360f2fed01224f5ed7c347a602aaa3b12da361a6bffb7f6cd054ba136695f6de7144f371c29be062abb42aef17670edd1da1ae2400bd13f5f4a8a82af9efddf216"}, @NFTA_TARGET_INFO={0x6e, 0x3, "efa6303c35924bec2761bd1cabcf2f69ef5e6fc1b9ed650bc94527998d82d2ba76f3cda0a5f625ad2b0b2cc3eb01cf902f407b0ad9c4ffacd157dc205c212f0839a4d79ec758230ae5110dc1a884ea212012c5fc57a4084488a9a68db17766f9cdd7f49d57a1333b0ba1"}, @NFTA_TARGET_INFO={0xd8, 0x3, "dd82df7793a041c4850bf40a2c20d52bf37ebb499a8e8abd7049ad4afe182bea67eee723ec6eecabb85a4353e8ee6c8f19fc3e2f39d533a63e7cd0fa52a955b236b641e31651f67c59761d769c486d558d8940d2ab8c1e350f2b4bcc0a09e2175b9bf79ded3ea73fbcdd1b96ccf7cf0997cea3b0f8dc8ff3c8e17dde7b5c8422c8d2bc8079f37c89e449b8aca0d05664bccc6117aaf4c9e03e70fb7e8b8a930a866868403afb08084f873167d7cb350c17a4aa1d7d8b181ebf1f33955932dcbeb2ce58a6cc5fde605423267ece4649a6cf7ffd83"}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xd, 0x1, 'CONNMARK\x00'}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0xdf, 0x3, "0cb62ab5d0d66c12610130e2c73270047d7caaa5d978f98fa3e9c1bcba22e0b12030027e8e1b16da6bc6c6419e5b42239d3a803cf070ed71c0cc8de641e71bd55109f42ec3e50449fd0b186f59bc2c8d697b659eccf8e3b686bc8fdbed62d10295c8d92deb16be091377dedf5ec59c016ee1d48c8674f721a4a7878b389ed4281b3166ee5f14b313f70ae7b8d1e04e9c3e7d65777c2ccbb75050169259bd7c2f4771fe174ea0e87faedaf2e14ab00f42e59eb936f3e9d827d34aa2dd6b5fbd841381f78f0313a557f4133f6967f847be346dbb7ef5d14b7e8c593f"}]}}}, {0x4c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x84}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x7}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x17, 0x6, 0x1, 0x0, "dde270801c579913064ad90de28e01dc17db11"}]}, {0x120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x44}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xcc, 0x6, 0x1, 0x0, "b4e2ce11a3577c68b6a372cc74054e13c2af1680bb801d7ff89266db194ebb4b733342e56b5a0a97eb75b4b0cdbfd5cd4978d3dbe98c66c8ed4d6f6a3077e91d8f8fd1c73df010809cfb3e7c2808a54f466e568a9fbe4b1db21b19036be63c28b24ff033c9c4a3646982199b5a2642601bf859a3d478a950cfb480ca02a42efed027aa6d402124bd6940a4945376e90c2fbeb1e00b49aa5a777d691a0f544473cb7af5aaeec0f6850cc4d0acf17484b0b99f35ce310259c26beb836fca78be198e443ba3f1239eb5"}]}, {0xf8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa4c9}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @rt={{0x7}, @void}}, @NFTA_SET_ELEM_DATA={0x58, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfffffffb}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xb90}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_NG_TYPE={0x8}]}}}]}, {0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfff}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x8c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x40, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xe1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1947}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffff3d35}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x3c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x260, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x244, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "f9c53674bb56c8457c528c410586e253a73b6d1abf10b0f0256f2778a8ba88e147e9bcf1a4492f0fc53450426b4be532e8148efaca315135417db0bfe3597e412055072d4b3da32f4df5b96df923bf65094df319f2dc"}, @NFTA_DATA_VALUE={0x99, 0x1, "08ecafe98ced3f339ef341b8d5463a19fe0a2fa164e6cd9987c141e8c95347cb10dcf9ab6a6c98b54e9b4820a69b9469eadc3636842c856d2fcd0bf467d90716ab2c92d85795aa92dc4e4e04ff16316d65ca96789983a3ea5111791a73fd5bcb5a03946e6579e177069c9fbbf047df25a66be0045947c2133ccd6d1afaba602f59b4d81ef51ce50bfb5afc6be21b257e032420b644"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x22, 0x1, "06387a3575ae0e40a96537ee7fe78a0188e4182b3fdc10638d88d1deb65b"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x50, 0x1, "79b1ae49bea04d65f5ff168efd86825a7fc72106b73d14c64e8b6b0daf23646c1dd0af229d31b1f7663dcfda17921145e2e75b1bb3671bfd4b564f2847b55fd1349f08352e7b72782dbb8101"}, @NFTA_DATA_VALUE={0x6b, 0x1, "11e3e11058bb5f21cfc929bf375ccecbea5db1d17d691a49daedac3a0bb8cb3beb6eb9d0e9d32616afed1af4eec50d16bb7a301aab0d7cb94b4c9cf59e296f1b6f8239e08f8573f34106061070763ce141f90b69aa7c79228159bd336d18496f1ce85df6733bf7"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1808, 0x3, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0xb4, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xa4, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x20}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_INNER_EXPR={0x3c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xfffffffd}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x6a}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x4d}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}]}, {0x15f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY_END={0x1bc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf6, 0x1, "5086c715f0cfcbd0a1cdf89f83007926f81406cb4afd32ee2582413d5c4b95156cde19457bdb59a7a9b3d6b04a603ac4cd5bd9e5d5485bac2a89c60f6c31098cbb62c935679fd4b73c7ada170b3f60d849a642f6dd7833d962b0f1b54cf844ee13df479645a25835fdf7ceab11c8c12411933f5ec064bf4d689563b3ec4847971af776de05ae59f551ec1594af3f583c50308795c71649123d6f2daa48c33ed6b4cea114cf79a459a34ab3d3b5c54861f10edd325126a0037b74fe3e6b3a0c5502aad61633689dc487e9795edbfca1256aac845b766605cc108e9104402de163147e5e35f7d9e8cb754b6c66663036cf8e9a"}, @NFTA_DATA_VALUE={0x1f, 0x1, "c2d5d34fd9ab00e3fc2efdfd52abba7883eb3beb3281f310ddbf40"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_SET_ELEM_DATA={0x224, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "1b16d341e112b1ab866f82c0a5d94d0e15040008c96533654588ff72e45266a480c17ed73000003ff583d628e02fff516adddda03e5ffd881ce0af6e34d962c9da4fb6f1aa709184e0d11aa95174845c2ccd6f439a515456bf9bf9a6dc874ac43e0c7ffd1543027299044f4b85cff45bf6"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xd, 0x1, "41fe1c8016a4c4c335"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "7d56e4db8b99492f6f1cea47db1f6b8fc4c685b74f080c667f01e4df24ac8e86ae1abb6755c5beefe315adde965803f582ec5e31aa83803a4f01db0d054ad6eeeb8b7d42af49cb083ce833e69dceec88ab09ee3494339c7961f14dd3b6284e81337ac5681c48db4ab50033f2f6e3d7d29deab254ae91ee4b96fc30642c9010574195ebbed1b0707bb569d41ed1f17fc452bf0fab73e62e4b13910c6293063a6feab630c9c72cb2171cce9b652eef539c377eab48cadc921662"}, @NFTA_DATA_VALUE={0x78, 0x1, "8457f1c8c4b8bb7be399237261a18dfb3eaf6f926d42a776291ffe664ec17043df3202c400c1e3ac724b584ab97302b08d38007b059736872544f3029d8f7a8f30a12ccff184b5222e7abef88184aa12bc8547e578fe63fd53871d71b1fb6792d523c9d7272b4497c25dd78d6c6284d15bbc85c4"}]}, @NFTA_SET_ELEM_KEY_END={0x11ec, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x99, 0x1, "8fa49ff71c6bb325d2695d655699ebc69b15a4e0fbf1d391b543e569d3818d83a3e62e8b0915e38b743639c154940e6a068bb0a038af4bd462c8b66511ce613a754d239a4226a4e85a2df9e083bf3808520dd03a59bf6c077d144602ee7c126a58eb799bb902b599473f383a297a1608d81d7fe0b388e66155c1ab4d45df2616b988fef04363bc4e1eef01697df7fd245abf632d96"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x3b, 0x1, "ea9dffb3b0c64435006e92b2d135c8b64bb384287a6ac9fcc84a4497912ec081bac42461c7ce5642c7f09d72dcf782d8ead74bcb222115"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x54, 0x1, "724ede797c721a4e0b2e3c0b148ec1e676fed884616044bfaa936cc44039d13ac30f1526061e8e9eee62bcfb90bc8dea7dcc8b829f476b4b3b7a530c5c30865d757c87e11d1f1ef691d09511b5097b0c"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffff}]}, {0x144, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4d, 0x6, 0x1, 0x0, "4b4a1921eff6d9f95ee96d5a37f398517688b7d89466acc78c90de3c8c8457c883b8286ba55daa60a521c1411390a57d915f64b261c1b00a4919d8e9f4189f6154ecab1fb461a9d10f"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @match={{0xa}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @hash={{0x9}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2436da97}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_ELEM_EXPR={0x44, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x13b}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x92}]}}}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x51a0}, 0x1, 0x0, 0x0, 0x80c4}, 0x90) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000005740)={{0x1, 0x1, 0x18, r0, {0xa3}}, './file0\x00'}) ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f0000005780), &(0x7f00000057c0)=0x4) ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f0000005800)) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000005840)=0x9, 0x4) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000005880)={0x5, 0x101, 0x1, {0x7dd3fa16, 0x1, 0x9, 0xfd1d}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000058c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008, 0x10, r8, 0xf6493000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000005900)={0x73622a85, 0x1001, 0x3}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000005a00)={r4, 0xa4, &(0x7f0000005940)=[@in6={0xa, 0x4e21, 0x0, @local, 0x5}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x8001, @local, 0xbbef}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x45, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000005a40)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000005a80)=@assoc_value={r9, 0x4}, &(0x7f0000005ac0)=0x8) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r7, 0x8008f513, &(0x7f0000005b00)) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000005b40), &(0x7f0000005b80)=0xe) 2m14.733909259s ago: executing program 8 (id=3883): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40300, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_usb_disconnect(0xffffffffffffffff) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1000, @any, 0xffdd, 0x84e1c919549bde5}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x2, @none, 0xd}, 0xe) 2m13.848720461s ago: executing program 8 (id=3886): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async, rerun: 64) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async, rerun: 32) sendmmsg$inet6(r1, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)="829c", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) (async) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x42, 0xb0, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x8, 0x9, 0x4}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x2, 0x81, 0x81, 0x10, 0x5e}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x300a}}]}) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 2m13.660576638s ago: executing program 8 (id=3887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 2m13.600307098s ago: executing program 8 (id=3889): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x4, 0x5, 0x1, 0x2, 0x6, 0x0, 0x6, 0x7, 0x6, 0x401, 0x7fffffff, 0x2e, 0x80, 0x5e7, 0xe, 0x30, {0x4, 0x4}, 0x7, 0x2}}) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @bt={0x577, 0x1, 0x8, 0x3, 0x3ff, 0x8000000000000001, 0x10, 0x4}}) (async, rerun: 64) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000200)={0x2000200c}) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000240)={0x0, @reserved}) connect$netrom(r1, &(0x7f0000000300)={{0x3, @default, 0x8}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = accept$netrom(r2, &(0x7f00000003c0)={{0x3, @default}, [@netrom, @null, @netrom, @null, @netrom, @bcast, @rose, @null]}, &(0x7f0000000440)=0x48) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) poll(&(0x7f0000000480)=[{r4, 0x1004}, {r3, 0x2}, {r0, 0x1212}, {r2}], 0x4, 0x7f) r5 = syz_open_dev$sndctrl(&(0x7f00000004c0), 0x0, 0x100) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000500)={0x80, r5}, 0x0) r6 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) (async) clock_gettime(0x0, &(0x7f0000005b40)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000005a00)=[{{&(0x7f0000000540)=@generic, 0x80, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/63, 0x3f}, {&(0x7f0000000600)=""/118, 0x76}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/17, 0x11}, {&(0x7f0000000700)=""/161, 0xa1}, {&(0x7f00000007c0)=""/74, 0x4a}, {&(0x7f0000000840)=""/237, 0xed}, {&(0x7f0000000940)=""/221, 0xdd}, {&(0x7f0000000a40)=""/212, 0xd4}], 0x9}, 0x4}, {{&(0x7f0000000c00)=@nfc_llcp, 0x80, &(0x7f0000003100)=[{&(0x7f0000000c80)=""/132, 0x84}, {&(0x7f0000000d40)=""/221, 0xdd}, {&(0x7f0000000e40)=""/128, 0x80}, {&(0x7f0000000ec0)=""/146, 0x92}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/85, 0x55}, {&(0x7f0000002000)=""/28, 0x1c}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/166, 0xa6}], 0x9, &(0x7f00000031c0)=""/212, 0xd4}, 0x800}, {{&(0x7f00000032c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003340), 0x0, &(0x7f0000003380)=""/219, 0xdb}, 0x6}, {{&(0x7f0000003480)=@caif, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003500)=""/166, 0xa6}], 0x1}, 0x7}, {{&(0x7f0000003600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000058c0)=[{&(0x7f0000003680)}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/191, 0xbf}, {&(0x7f0000005780)=""/75, 0x4b}, {&(0x7f0000005800)}, {&(0x7f0000005840)=""/68, 0x44}], 0x7, &(0x7f0000005940)=""/181, 0xb5}}], 0x5, 0x43, &(0x7f0000005b80)={r7, r8+60000000}) (async) landlock_restrict_self(r2, 0x5) (async) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000005bc0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000005c00)={0x0, @reserved}) (async, rerun: 32) syz_open_dev$I2C(&(0x7f0000005cc0), 0x5, 0x105b02) (async, rerun: 32) rt_sigtimedwait(&(0x7f0000005d00)={[0x4]}, 0x0, &(0x7f0000005d40)={0x0, 0x989680}, 0x8) (async) connect$inet(r1, &(0x7f0000005d80)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r9, &(0x7f0000005dc0)={0x80002026}) (async, rerun: 32) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000005e00)) (async) ioctl$SNDRV_PCM_IOCTL_DELAY(r6, 0x80084121, &(0x7f0000005e40)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000005e80), 0x81, 0x0) ioctl$PPPIOCDISCONN(r10, 0x7439) (async) inotify_add_watch(r6, &(0x7f0000005ec0)='./file1\x00', 0x23000202) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000005f00)={0x80000000}) (async) mq_timedreceive(r6, &(0x7f0000005f40)=""/125, 0x7d, 0xc, 0x0) 2m12.862766579s ago: executing program 8 (id=3891): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000005580)=[{{&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}], 0x18}}], 0x1, 0x40000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) ioctl$BLKRRPART(r0, 0x125f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/4105, 0x1009}, {&(0x7f0000000340)=""/181, 0xb5}, {&(0x7f00000001c0)=""/86, 0x56}], 0x3}, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x105603, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)={0x0, 0x8, 0x1, "b3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r9 = dup(r8) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x7, 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r6, 0x5403) 1m57.070060567s ago: executing program 37 (id=3891): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000005580)=[{{&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}], 0x18}}], 0x1, 0x40000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) ioctl$BLKRRPART(r0, 0x125f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/4105, 0x1009}, {&(0x7f0000000340)=""/181, 0xb5}, {&(0x7f00000001c0)=""/86, 0x56}], 0x3}, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x105603, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)={0x0, 0x8, 0x1, "b3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r9 = dup(r8) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x7, 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r6, 0x5403) 6.817801712s ago: executing program 0 (id=4479): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/87, 0x57}, {&(0x7f0000000200)=""/197, 0xc5}, {&(0x7f0000000080)=""/28, 0x1c}], 0x3}, 0x22) 5.884379356s ago: executing program 0 (id=4490): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x250c40, 0x29) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0x75, 0x9, @scatter={0x2, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000180)=""/158, 0x9e}]}, &(0x7f0000000280)="0c3ca5703da49a3e77045d38966b30bf149924a052819bf298e89c94536019f59c03c55d6103c6c3fb2f75342e90fecacc3538da443fa031715c0be18324281121a8030926c8631298e81ad30ef16e87e9f9e1ceb8f029de93dd4a48ddf8c3a7a1599172ffe3edd214fa4a45c8e21170da42cf8f1a", &(0x7f0000000300)=""/99, 0x0, 0x10020, 0x0, &(0x7f0000000380)}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd91b, 0x0, "8b00000000000000faffffff55d72b4200"}) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x55) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)={0x0, 0xc, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, &(0x7f0000000500)={0x14, &(0x7f0000000440)={0x40, 0x4, 0x43, {0x43, 0x24, "a19aa2e77c8e64dbfbf740d617741e4f3eb079053ca0b6405c52a1f62c386dade52efac907f9544f24e568f84bec0ee35e57c3c7062b949e6efbe9e5fb38db03aa"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}}, &(0x7f0000000800)={0x34, &(0x7f0000000540)={0x20, 0x3, 0xb7, "a5f04c0cdcadaf68f79033c7afafb16dabc111111d2b741ac229b7c132a316fe60d26c259bab09953888b0ba0a06bb1af9e30ae66e780b0c8b8b75a965aef4ab82904d0de076c9ec93984c5fbf9d36e55cde4aa89fe5bb6d0c376e3b0598f5c6fb6ab67c6de8719fa085651b8b1d09dfcaaf63956170908afc9b9a74e8c3bf648e7abd2a982a8b14d45751b150b4cea1e7fe324b1a802567343f7a579a0ce017eb642b4b5adacda80779fd06eab750d1eeb130d32450c3"}, &(0x7f0000000600)={0x0, 0xa, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xf8}, &(0x7f0000000700)={0x20, 0x0, 0x99, {0x97, "78129c270b7cc43ec710b6765f81c58177cbac587928f0c34b26cffd4c6615b15993acdfb33cf631c89acdabd04082c35a2f74ca43bbc9b57710c5d0f3c25e79bf508a78a71d928422714b65a75c4dc90252a6b5a8f087c0356590ec7f3e8f03845293950b1fb91d449965fa505c4c4c8cf167617cd417950d9af88d828d8cb0b6000b52896ac6cd92bbbdb4d9af1888ee6188fd14b24a"}}, &(0x7f0000000680)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000007c0)={0x20, 0x0, 0x1, 0x3}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a9001800000"], 0x0}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x250c40, 0x29) (async) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0x75, 0x9, @scatter={0x2, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000180)=""/158, 0x9e}]}, &(0x7f0000000280)="0c3ca5703da49a3e77045d38966b30bf149924a052819bf298e89c94536019f59c03c55d6103c6c3fb2f75342e90fecacc3538da443fa031715c0be18324281121a8030926c8631298e81ad30ef16e87e9f9e1ceb8f029de93dd4a48ddf8c3a7a1599172ffe3edd214fa4a45c8e21170da42cf8f1a", &(0x7f0000000300)=""/99, 0x0, 0x10020, 0x0, &(0x7f0000000380)}) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd91b, 0x0, "8b00000000000000faffffff55d72b4200"}) (async) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x55) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) (async) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)={0x0, 0xc, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r4, &(0x7f0000000500)={0x14, &(0x7f0000000440)={0x40, 0x4, 0x43, {0x43, 0x24, "a19aa2e77c8e64dbfbf740d617741e4f3eb079053ca0b6405c52a1f62c386dade52efac907f9544f24e568f84bec0ee35e57c3c7062b949e6efbe9e5fb38db03aa"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}}, &(0x7f0000000800)={0x34, &(0x7f0000000540)={0x20, 0x3, 0xb7, "a5f04c0cdcadaf68f79033c7afafb16dabc111111d2b741ac229b7c132a316fe60d26c259bab09953888b0ba0a06bb1af9e30ae66e780b0c8b8b75a965aef4ab82904d0de076c9ec93984c5fbf9d36e55cde4aa89fe5bb6d0c376e3b0598f5c6fb6ab67c6de8719fa085651b8b1d09dfcaaf63956170908afc9b9a74e8c3bf648e7abd2a982a8b14d45751b150b4cea1e7fe324b1a802567343f7a579a0ce017eb642b4b5adacda80779fd06eab750d1eeb130d32450c3"}, &(0x7f0000000600)={0x0, 0xa, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xf8}, &(0x7f0000000700)={0x20, 0x0, 0x99, {0x97, "78129c270b7cc43ec710b6765f81c58177cbac587928f0c34b26cffd4c6615b15993acdfb33cf631c89acdabd04082c35a2f74ca43bbc9b57710c5d0f3c25e79bf508a78a71d928422714b65a75c4dc90252a6b5a8f087c0356590ec7f3e8f03845293950b1fb91d449965fa505c4c4c8cf167617cd417950d9af88d828d8cb0b6000b52896ac6cd92bbbdb4d9af1888ee6188fd14b24a"}}, &(0x7f0000000680)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000007c0)={0x20, 0x0, 0x1, 0x3}}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r5, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) (async) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a9001800000"], 0x0}, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) (async) 4.479435131s ago: executing program 0 (id=4499): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x64, 0x10, 0x4d, 0x20, 0x11f5, 0x5, 0x57c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc4, 0x0, 0x2, 0x10, 0x47, 0xc6, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800) lgetxattr(0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)={0x18, 0x55, 0x1, 0x70bd2b, 0x0, {0xff}, [@typed={0x4, 0x120}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.999640834s ago: executing program 9 (id=4504): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r1, 0x0, 0x12, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x11, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x3, 0x24, 0x0, 0xdf}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x26}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xf1, 0x16, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x26, 0x0, 0xfe}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r4, 0x41015500, 0x0) write$tun(r2, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x21, 0x28, 0x64, 0x0, 0x4, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x30}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x1, 0x0, 0x34}}}}, 0x36) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x1, 0x3f, 0x0, @remote}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x24044801) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x3, 0x3}}, 0xfffffffffffffead, 0x0, 0x0, 0x0, 0x0, 0x20004000}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r5, 0x540b, 0x2) r6 = socket(0x10, 0x803, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'wlan1\x00', 0x8000}) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000000a00)=""/146, 0x92}, {&(0x7f0000000080)=""/14, 0xe}], 0x21, 0x0, 0xfffffffffffffc31}, 0x7}], 0x4000000000000d6, 0x2043, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$sock_int(r6, 0x1, 0xd, &(0x7f00000000c0)=0x1, 0x4) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r8, &(0x7f0000000100)=""/107, 0x6b) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 3.648396521s ago: executing program 0 (id=4505): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x50864c3c5b6a2a38, 0xffffffffffffffff, 0x4b17e000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x10, 0x80, 0xec, 0x9, {{0xd, 0x4, 0x2, 0x1, 0x34, 0x67, 0x0, 0x54, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, {[@rr={0x7, 0x1f, 0xdb, [@loopback, @remote, @multicast1, @empty, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newchain={0x24, 0x64, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x10, 0x6}, {0x2, 0x3}, {0x3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40004) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='omfs\x00', 0x200000, 0x0) 3.647263075s ago: executing program 0 (id=4506): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000040)=""/4, 0x4}], 0x1, 0x83, 0x4) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0xbf}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80100000a0a05"], 0x1b8}, 0x1, 0x0, 0x0, 0x10000000}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r7, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r7, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000040)={0x6, 'caif0\x00', {0x2}, 0xff7f}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0xffe}, 0x2b1}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/191, 0xbf}, {&(0x7f0000000940)=""/208, 0xd0}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f00000002c0)=""/67, 0x43}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000500)=""/212, 0xd4}], 0x8}, 0x40012100) recvmsg$kcm(r8, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40010022) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000200)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0x2, &(0x7f00000001c0)={&(0x7f0000001480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002abd7000fddbdf257a00000008000300", @ANYRES32=r4, @ANYBLOB="0c0099040300000001001000"], 0x28}, 0x1, 0x0, 0x0, 0x20008840}, 0x20000044) r9 = syz_open_dev$evdev(&(0x7f0000000600), 0x5, 0x2002) ioctl$EVIOCGKEYCODE_V2(r9, 0x80284504, &(0x7f0000000640)=""/220) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 2.135500113s ago: executing program 6 (id=4512): creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) r0 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 2.044424264s ago: executing program 7 (id=4513): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x3) (async) mount(&(0x7f0000000000)=@md0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='qnx4\x00', 0x2208090, 0x0) 2.043578851s ago: executing program 6 (id=4514): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) creat(&(0x7f0000000080)='./file0\x00', 0x2) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 2.018753928s ago: executing program 7 (id=4515): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfff, 0x400001) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x4044080}, 0x4000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f00000003c0)={0xffffffff80000000, 0x8}) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000001780)=[{{&(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="b840cb83168c16388349c830ac91aa57c198d77e40534a5432b6297671a2980908475d305f7b003470352e2653d16647c7120f0c48bc08f3952f493c882e4f32e4d2c9fac764b36307ac0db5baa334d2a0c60dcf4b42b2769ad85ae29db2b3304ade0fef85bd4467d0", 0x69}], 0x2, &(0x7f00000016c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x78, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0xf3, [@loopback, @local, @loopback, @rand_addr=0x64010100, @local, @multicast2, @private=0xa010100]}, @timestamp_addr={0x44, 0x44, 0x6, 0x1, 0x6, [{@loopback, 0x100}, {@private=0xa010101, 0x2}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x1}, {@loopback, 0x1ff}, {@multicast2, 0x9}, {@broadcast, 0x9}, {@empty, 0x200}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @ra={0x94, 0x4}, @noop]}}}], 0x90}}], 0x1, 0x200048cc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000000406010400010000000000000500000100008008070000000900020073797a31000000000900020073797a30000000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20005810) mount$fuse(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x10020, 0x0) stat(&(0x7f0000000200)='./file0/../file0/file0\x00', 0x0) socket$kcm(0x29, 0x7, 0x0) r6 = socket(0x8000000010, 0x2, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) write(r6, &(0x7f00000002c0)="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", 0xfc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) 1.976089176s ago: executing program 6 (id=4516): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="8b241ad7c229087c7b5fa3404d65985d654fe6767f9f08cc88dc64442d7067a90ca4432d78344430e2e693ef5d7e74674dccf747bbb6f8188d786efce3c2b00c3dfb48c2075762cb0a2cfb45d5f5cc3d76be7ac0f83fd8", 0x57, 0x24040000, &(0x7f0000000000)={0xa, 0x4e23, 0x3ff, @remote, 0x896159c}, 0x1c) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0108fd030000000000000b00000008000300acae51749dea3ac6284094e57e31ffb89e4a06f3ea4ed0b27bef55f98314c798fa69fd00abd65dcbe4829ca9a28c7a4464b669e758f36f8ff72384cc1684d5da93aa199d299f3bb3c48bc49fac0c032ef65adb9fadcc1119236393dc6b39134647b4e138a49f519b6fc38a4f44e12d4b1d6e3336a1dd2646983493f4d0a1f54373f5a24f660b7537e32d27808c1679d917a3f9f77ebf238b82a27f30cea6fe29b3a60c1a241228b707d94d282a622e4e6f2808f3e60af5e60000f1e003a7f41d182acb3cda166d27c5e43bb637da531f419a776fbfb086a660aa70b27021", @ANYRES32=r3, @ANYBLOB="09000700c69502a7710000000800370002000000"], 0x30}}, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) 1.856414393s ago: executing program 6 (id=4517): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, r1}, 0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TCSETS(r2, 0x40204706, &(0x7f0000000040)={0x4000, 0x3, 0x5, 0x0, 0x0, "3eccd8f9d20500005a1a320900"}) 1.824931838s ago: executing program 6 (id=4518): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='exofs\x00', 0x224001e, 0x0) 1.037582995s ago: executing program 7 (id=4519): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x68, 0x22, 0x1, 0x70bd2a, 0x0, "", [@generic="cbd616f8e2e4a2a012ba2a5beccc3597d8e5c8b4dc77bcec9f5e068d221f8d7fe8453cc1ec2491af75899bb7f8615fbc9b37f74be716d04de7613ccebe33ea9f5478cb42", @typed={0x9, 0x11, 0x0, 0x0, @str='}\'/\xe2\x00'}, @typed={0x8, 0x125, 0x0, 0x0, @u32=0x9}]}, 0x68}], 0x1}, 0x80) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSID(r2, 0x5429, 0x0) (async) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x3, 0x3, 0x9}) 868.518392ms ago: executing program 7 (id=4520): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000000)={0x7fff, [0x5, 0x7], 0x3}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x0, 0x24020804, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) 868.17115ms ago: executing program 6 (id=4521): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x218800, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r1, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x40000122, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000340)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r3, 0x40096102, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f00000001c0)={0x8, 0x30000, 0x4, 0x1, 0x20, 0x5, 0x1, 0x7f, 0xffffffff, 0x5, 0x80, 0x1c, 0x0, 0x0, 0x0}) 861.352339ms ago: executing program 0 (id=4522): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x42) syz_usb_connect$cdc_ecm(0x5, 0x1b6, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a4, 0x1, 0x1, 0x7, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "72d04becf12b"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xca, 0x2, 0x8, 0x2}, [@acm={0x4, 0x24, 0x2, 0x6}, @mdlm_detail={0x53, 0x24, 0x13, 0x40, "9dde99c0c9238b6b236d4a581019bb440fe6033fb8cd22ed7732d0d64869baef0653f63d62baa2adffb251c5515acc838b3261d13422773778ecead7702e689dcc3c3563382a4b04741769b64e07f8"}, @mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x7, 0x5}, @country_functional={0x12, 0x24, 0x7, 0xf3, 0x8, [0xff, 0xfff8, 0x3, 0x7, 0x6, 0xf]}, @mdlm_detail={0xf2, 0x24, 0x13, 0x8, "064444fa745e8459fc47a55a25517612e2344fb71b370a0eccab0d8d6087fcea03db715817af5a6966b6f295b672160617a54b33d82414c7c269a500225b74ec3ed69943a43db3819e699285838546c3e7c9dbad924eec6417aeaeda7783950661ebca51d9acd580e3bb60864ab0085ad4bcd1b1af386297f40766a54add173d55067d9ed8aa19b52179df2c762afb15d03a41d4280bceef1d93eec7075c266154aa89fb54fe46ced0fba23069ad52281a3699bc89393a7cc2a528459f32eaf1700c42708694cae0dbb83c93eda79f26caf2dfd43094f62619968ea92ad8eb01f9693ac42a42afe5fbd50ef7dbc6"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x22, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x2, 0x8, 0x20, 0x7}, 0x34, &(0x7f00000002c0)={0x5, 0xf, 0x34, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x5, 0xb, 0x40}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x1, 0x6, 0x81}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x8, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0x8f, "4dd920b2c91b6f404b9c163ee82a9967"}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40a}}, {0xa0, &(0x7f0000000380)=@string={0xa0, 0x3, "d566fcf1b7372a34c8564e32b785290aabacf61d0c28f6f0def8641ade3ef836ccf567d8426136c02669c45f51bc8cec6522404669ab52fa98e9269cbab31986f52b9b94b21a8dfb8d8c4f5f86cbd2f40468f78edbf37f85f7496c6454cd6f1724ca6f2753b18bd0a1e6adfd3bf19fd3a42d4bb0adbdb58f7af235c4b394c9a3050804b9434667d818ec7f348f2a3f0223d2711a23929c1b68441a19b5ad"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44c}}, {0x7c, &(0x7f0000000480)=@string={0x7c, 0x3, "552f6fb3845eef3ecd9ae3e5b9eded9ea98835f2fd639ab102aac6247a09dc4a21102f41363a2a03665e997efff617f1e9559ea19d18de5da4a17f3aae45c6b89e21775e9439a4718c76f1ef2406fc9c899832f33c167c6694c525a7edb3dc53a620b94025cf07ceae1116a7d9b109613e804a4888c06bded3b8"}}, {0x55, &(0x7f0000000500)=@string={0x55, 0x3, "b8e6558b7b32e8823221f3ada7125cd9f0901616886cf226a9ef5c7bc32b507a40381b118d2ac05cf77bc066748ed2ca8f7b33ef8650bdb2c834fcedb4f58a0e2f222158664e37a9db4f0c1f0c4e8699c87dad"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0xc0, &(0x7f0000000600)=@string={0xc0, 0x3, "a9d551caf4954607dd8885ec2f4c4738b57301d39bed62b86a7ba3320df70e1a00a7cb77e5ece7bed5e78e1adea18ad3430b9175cdb2ac14efd40e6e02db27eb262b49ae3af2498589bee2c224f314352a005f983c9931f4eef30d15e0958d211d8babf70985a9cca6445f3a6e2a67a2fbdc7aef8ffa08c927ea2df912bc757ef143ba400217f17dc5de36b2910dfc181dd0e59228b5aa71a22c4517d9b91c37984b38d2be71aa4e5c2607e3839a3e88d955539b4b4e9034f943299bc11a"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x414}}]}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x42) (async) syz_usb_connect$cdc_ecm(0x5, 0x1b6, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a4, 0x1, 0x1, 0x7, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "72d04becf12b"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xca, 0x2, 0x8, 0x2}, [@acm={0x4, 0x24, 0x2, 0x6}, @mdlm_detail={0x53, 0x24, 0x13, 0x40, "9dde99c0c9238b6b236d4a581019bb440fe6033fb8cd22ed7732d0d64869baef0653f63d62baa2adffb251c5515acc838b3261d13422773778ecead7702e689dcc3c3563382a4b04741769b64e07f8"}, @mbim_extended={0x8, 0x24, 0x1c, 0x200, 0x7, 0x5}, @country_functional={0x12, 0x24, 0x7, 0xf3, 0x8, [0xff, 0xfff8, 0x3, 0x7, 0x6, 0xf]}, @mdlm_detail={0xf2, 0x24, 0x13, 0x8, "064444fa745e8459fc47a55a25517612e2344fb71b370a0eccab0d8d6087fcea03db715817af5a6966b6f295b672160617a54b33d82414c7c269a500225b74ec3ed69943a43db3819e699285838546c3e7c9dbad924eec6417aeaeda7783950661ebca51d9acd580e3bb60864ab0085ad4bcd1b1af386297f40766a54add173d55067d9ed8aa19b52179df2c762afb15d03a41d4280bceef1d93eec7075c266154aa89fb54fe46ced0fba23069ad52281a3699bc89393a7cc2a528459f32eaf1700c42708694cae0dbb83c93eda79f26caf2dfd43094f62619968ea92ad8eb01f9693ac42a42afe5fbd50ef7dbc6"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x22, 0x1}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x2, 0x8, 0x20, 0x7}, 0x34, &(0x7f00000002c0)={0x5, 0xf, 0x34, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x5, 0xb, 0x40}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x1, 0x6, 0x81}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x8, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0x8f, "4dd920b2c91b6f404b9c163ee82a9967"}, @ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40a}}, {0xa0, &(0x7f0000000380)=@string={0xa0, 0x3, "d566fcf1b7372a34c8564e32b785290aabacf61d0c28f6f0def8641ade3ef836ccf567d8426136c02669c45f51bc8cec6522404669ab52fa98e9269cbab31986f52b9b94b21a8dfb8d8c4f5f86cbd2f40468f78edbf37f85f7496c6454cd6f1724ca6f2753b18bd0a1e6adfd3bf19fd3a42d4bb0adbdb58f7af235c4b394c9a3050804b9434667d818ec7f348f2a3f0223d2711a23929c1b68441a19b5ad"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44c}}, {0x7c, &(0x7f0000000480)=@string={0x7c, 0x3, "552f6fb3845eef3ecd9ae3e5b9eded9ea98835f2fd639ab102aac6247a09dc4a21102f41363a2a03665e997efff617f1e9559ea19d18de5da4a17f3aae45c6b89e21775e9439a4718c76f1ef2406fc9c899832f33c167c6694c525a7edb3dc53a620b94025cf07ceae1116a7d9b109613e804a4888c06bded3b8"}}, {0x55, &(0x7f0000000500)=@string={0x55, 0x3, "b8e6558b7b32e8823221f3ada7125cd9f0901616886cf226a9ef5c7bc32b507a40381b118d2ac05cf77bc066748ed2ca8f7b33ef8650bdb2c834fcedb4f58a0e2f222158664e37a9db4f0c1f0c4e8699c87dad"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0xc0, &(0x7f0000000600)=@string={0xc0, 0x3, "a9d551caf4954607dd8885ec2f4c4738b57301d39bed62b86a7ba3320df70e1a00a7cb77e5ece7bed5e78e1adea18ad3430b9175cdb2ac14efd40e6e02db27eb262b49ae3af2498589bee2c224f314352a005f983c9931f4eef30d15e0958d211d8babf70985a9cca6445f3a6e2a67a2fbdc7aef8ffa08c927ea2df912bc757ef143ba400217f17dc5de36b2910dfc181dd0e59228b5aa71a22c4517d9b91c37984b38d2be71aa4e5c2607e3839a3e88d955539b4b4e9034f943299bc11a"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x414}}]}) (async) 748.188593ms ago: executing program 7 (id=4523): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="f00000001a00210028bd7000ffdbdf25fc010000000000000000000000000001c20000010000000000000000000000004e2200024e2300070200802067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d63200000000000000000000000000000000000000d593675000000000f9ffffffffffffff4f0200000000000001000000000000000500000000000000f43f0000000000000800000000000000b705000000000000e3d7000000000000ff00000000000000010400000000000004000000000000000600000006000000ae04000025bd7000023500000200000c4000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r2, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000002840)={0x2, 0x0, {&(0x7f0000001840)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000d80)={0x2, 0x0, {&(0x7f0000000bc0)=""/130, 0x82, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000080)=""/185, 0xb8, 0x0, 0x3, 0x2}}, 0x63) write$vhost_msg_v2(r2, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/185, 0xfffffff0, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 523.147827ms ago: executing program 9 (id=4524): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r0, 0x400, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000050) r2 = socket$can_bcm(0x1d, 0x2, 0x2) splice(r1, &(0x7f00000001c0)=0x80, r2, &(0x7f0000000200)=0x31, 0x0, 0x2) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) fcntl$setpipe(r1, 0x407, 0x5) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x9, 0x6, 0xb03, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x24000004) flistxattr(r4, &(0x7f0000000400)=""/239, 0xef) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xf0, r6, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0xd0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="51326af27109addbda3e0a2336134c39"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="156aa04cbcd211a23aa06aaa6becdad8413ed08a94ad2b94"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="dbdd5dd35623d5cb507d14d446a55b02560792b5a9e0a017"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3215baa3949916e5a5c5b4c9bf1d64a3bf9def6648c69d8bfd1be510ecfac392"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="79211f82ab59d393250ad3045ba37498359641e8823706a8bea88bf4684659db"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="08a16dad3b5843466c5ad4f25dbd904fe98ba6a91cee47a70855a53ff23e0eb3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6b7461a9b21c1456"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7ce}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x44001) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x20000, 0x6f}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000bc0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x2d4, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x50ac}, {0x8, 0xb, 0x7b}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0xa09}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x64}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xb}, {0x5}, {0x6, 0x11, 0x100}, {0x8, 0xb, 0x8001}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0x80}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xb20}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0xfa0d}, {0x8, 0xb, 0x59}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xfffe}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x88}, {0x8, 0xb, 0x101}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4004994) r8 = creat(&(0x7f0000000d00)='./file0\x00', 0x161) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000d40)={r2}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r9, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x98, 0x2, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x200}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2a}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xad}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5386a87a}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x2000c007}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x40, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x653, 0x1f}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8f30369eea6cbadb}, 0x4000094) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x38829d681e29568e}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0x88, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "00bed616b7"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "ea38d01ec5"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c75a7b26e3433f9eda9d201977"}]]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x4040040) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r9, &(0x7f0000002380)={&(0x7f0000001180), 0xc, &(0x7f0000002340)={&(0x7f00000011c0)={0x1180, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x51}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_MEASUREMENTS={0x18, 0x111, 0x0, 0x1, {0x14, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x4}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}, @NL80211_ATTR_PEER_MEASUREMENTS={0x1118, 0x111, 0x0, 0x1, {0x1114, 0x5, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x100, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x28, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x654, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x24c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd59}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6c9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfb}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x3f0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff7}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xda}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfd}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xcf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x1bc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x188, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa5e6}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x142}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x28}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}]}]}, {0x3a0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x6c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xaf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5b}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2d}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1fa3d83b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x22c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x140, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x62a}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2379}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x1e8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x15c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9b}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x50, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc58}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x230, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1f4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x16c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x68}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xea}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7240}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}]}, 0x1180}, 0x1, 0x0, 0x0, 0x4}, 0x4000044) setsockopt(0xffffffffffffffff, 0x5d, 0x7, &(0x7f00000023c0)="3dd547fb957c4c64c1c8579461a7c8a4c58a7e1ab6ec235c81f2c8b0896a204a18ea800af7969450d16f277d69aa62fca049c359c16d2e271e6cccd798fa324de6f161bb055eb134e01dde44f189c2d9795f918a4dfeb6d3368db3b0e882c6181229c6b3c00c83d3874246a24a7bfb9cdee376084c4f72e1be756dace97a1b62dbd2bdf7833297146d2a6829c41e96f31a90c359df9f2a658a26466fcaffddc5366768673ef4af70462279c9c932544a041a88258d4db58c369a5b", 0xbb) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000002480)={0x0, 0x4a5b}, &(0x7f00000024c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000002500)={r10, 0x8}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f00000025c0)={'syztnl1\x00', &(0x7f0000002540)={'erspan0\x00', 0x0, 0x8000, 0x1, 0x6, 0xcda, {{0x16, 0x4, 0x1, 0x25, 0x58, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x18}, {[@timestamp_prespec={0x44, 0x44, 0x20, 0x3, 0x1, [{@loopback, 0x2}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@loopback, 0x80000000}, {@local}, {@private=0xa010100, 0x401}, {@broadcast, 0x9}, {@private=0xa010101, 0x9}]}]}}}}}) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000002600)={0xffffffffffffffff, 0x0, 0x1, r11, 0x7}, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r9, 0x942e, 0x0) 429.430615ms ago: executing program 9 (id=4525): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x8001) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000580)={0x0, 0x2, 0x2, 0x1, 0x0, [@local]}, 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x8, @private2}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) accept4(r0, 0x0, 0x0, 0x80000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000400)=ANY=[], 0x4) ioctl$BLKRRPART(r2, 0x125f, 0x0) read$FUSE(r2, &(0x7f0000004380)={0x2020}, 0x2020) 356.468889ms ago: executing program 9 (id=4526): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, r1}, 0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TCSETS(r2, 0x40204706, &(0x7f0000000040)={0x4000, 0x3, 0x5, 0x0, 0x0, "3eccd8f9d20500005a1a320900"}) 229.523627ms ago: executing program 9 (id=4527): mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x220c000, 0x0) 36.29781ms ago: executing program 9 (id=4528): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000680)="660f290d0b0000000f30f326d9dd0f00930a000000c4e1d1f632d10066b86a008ee0c4c2d5bd4607c4e36578cffe0f01c2", 0x31}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='dax\x00', 0x20808b, 0x0) 0s ago: executing program 7 (id=4529): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x40, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x7, 0x13, [{0x6}, {0x4, 0x1}, {0x60, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) r8 = socket$inet6(0xa, 0x2, 0x1800000) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x1ff, 0x4) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) r9 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) r10 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r10, 0x107, 0x0, 0x0, 0x0) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="0000460000004300a7ea3163fdfa964e2c8d95"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000500000052"]) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) r12 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x1, 0x0, 0x1}]}, 0x10) bind$inet6(r12, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80ad}, 0x1c) write$khugepaged_scan(r0, &(0x7f0000000000), 0x8) creat(&(0x7f0000001380)='./file0\x00', 0x4) r13 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r13, 0x0, 0x6, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): isc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.253115][T20973] /dev/rnullb0: Can't lookup blockdev [ 581.270823][T14613] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 581.315112][T14613] usb 1-1: USB disconnect, device number 70 [ 581.505137][T21040] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3887'. [ 581.514423][T21040] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3887'. [ 581.525986][T21040] /dev/rnullb0: Can't lookup blockdev [ 581.612521][T21044] /dev/rnullb0: Can't lookup blockdev [ 581.925877][T14613] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 582.063638][ T5923] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 582.115644][T14613] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 582.127042][T21075] bridge0: port 3(veth0_to_bridge) entered blocking state [ 582.134354][T14613] usb 7-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 582.134467][T21075] bridge0: port 3(veth0_to_bridge) entered disabled state [ 582.149302][T14613] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.157773][T21075] veth0_to_bridge: entered allmulticast mode [ 582.171043][T21080] /dev/rnullb0: Can't lookup blockdev [ 582.182665][T14613] usb 7-1: config 0 descriptor?? [ 582.188145][T21075] veth0_to_bridge: entered promiscuous mode [ 582.195145][T21075] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.199494][T14613] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 582.218399][T21075] bridge0: port 3(veth0_to_bridge) entered blocking state [ 582.225696][T21075] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 582.245305][T21084] /dev/rnullb0: Can't lookup blockdev [ 582.251444][ T5923] usb 9-1: Using ep0 maxpacket: 32 [ 582.258559][ T5923] usb 9-1: config 0 has an invalid interface number: 101 but max is 0 [ 582.267198][ T5923] usb 9-1: config 0 has no interface number 0 [ 582.278007][ T5923] usb 9-1: too many endpoints for config 0 interface 101 altsetting 118: 101, using maximum allowed: 30 [ 582.296664][ T5923] usb 9-1: config 0 interface 101 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 582.311693][ T5923] usb 9-1: config 0 interface 101 has no altsetting 0 [ 582.319795][ T5923] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 582.329387][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.351787][ T5923] usb 9-1: config 0 descriptor?? [ 582.460980][T21100] MTD: Couldn't look up '/dev/rnullb0': -15 [ 582.606251][T21061] QAT: Invalid ioctl 1075883590 [ 582.613135][ T5923] usb 9-1: string descriptor 0 read error: -32 [ 582.623347][T21061] QAT: Invalid ioctl 1075883590 [ 582.628331][T21061] QAT: Invalid ioctl 1075883590 [ 582.634783][ T5923] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 582.641674][T21061] QAT: Invalid ioctl 1075883590 [ 582.647178][T21061] QAT: Invalid ioctl 1075883590 [ 582.652206][T21061] QAT: Invalid ioctl 1075883590 [ 582.661743][T21061] QAT: Invalid ioctl 1075883590 [ 582.668284][T21061] QAT: Invalid ioctl 1075883590 [ 582.673426][T21061] QAT: Invalid ioctl 1075883590 [ 582.679001][T21061] QAT: Invalid ioctl 1075883590 [ 583.176592][ T5923] gspca_nw80x: reg_w err -110 [ 583.181489][ T5923] nw80x 9-1:0.101: probe with driver nw80x failed with error -110 [ 583.857269][T21118] 9pnet: Could not find request transport: fdrfdno=0x000000000000000b [ 583.868262][T21118] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3904'. [ 583.918422][T21119] netlink: 'syz.0.3904': attribute type 10 has an invalid length. [ 584.044992][T21119] team0 (unregistering): Port device team_slave_0 removed [ 584.055969][T21119] team0 (unregistering): Port device team_slave_1 removed [ 584.512799][ T5923] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 584.673552][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 584.683895][ T5923] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 584.692193][ T5923] usb 1-1: config 0 has no interface number 0 [ 584.700861][ T5923] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 584.710029][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.718144][ T5923] usb 1-1: Product: syz [ 584.722315][ T5923] usb 1-1: Manufacturer: syz [ 584.731381][ T5923] usb 1-1: SerialNumber: syz [ 584.742103][ T5923] usb 1-1: config 0 descriptor?? [ 584.918725][ T5941] usb 7-1: USB disconnect, device number 72 [ 585.029596][T21178] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3906'. [ 585.041478][T21178] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3906'. [ 585.296011][ T5923] radio-si470x 1-1:0.35: this is not a si470x device. [ 585.306200][T21186] 9pnet_fd: Insufficient options for proto=fd [ 585.318667][T21186] loop8: detected capacity change from 0 to 7 [ 585.328778][ T5923] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 585.336853][ T5866] Dev loop8: unable to read RDB block 7 [ 585.342479][ T5866] loop8: unable to read partition table [ 585.351617][ T5866] loop8: partition table beyond EOD, truncated [ 585.360279][T21186] Dev loop8: unable to read RDB block 7 [ 585.365935][T21186] loop8: unable to read partition table [ 585.398267][T21186] loop8: partition table beyond EOD, truncated [ 585.406607][T21186] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 585.406607][T21186] ) failed (rc=-5) [ 586.316236][T21212] tmpfs: Bad value for 'mpol' [ 586.423758][T21215] /dev/rnullb0: Can't lookup blockdev [ 586.591009][T21219] syz.6.3914: attempt to access beyond end of device [ 586.591009][T21219] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 586.604203][T21219] SQUASHFS error: Failed to read block 0x0: -5 [ 586.615705][T21219] unable to read squashfs_super_block [ 587.492129][ T5987] usb 1-1: USB disconnect, device number 71 [ 587.555153][T21231] /dev/rnullb0: Can't lookup blockdev [ 587.733053][T21246] MTD: Couldn't look up '/dev/rnullb0': -15 [ 587.767475][T21248] MTD: Couldn't look up '/dev/rnullb0': -15 [ 588.130221][T21272] /dev/rnullb0: Can't lookup blockdev [ 588.235056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 588.247668][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 588.260170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 588.272631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 588.285117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 588.297626][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 588.310096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 588.322522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 588.334946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 588.347432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 589.633749][ T5923] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 589.783404][ T5923] usb 1-1: device descriptor read/64, error -71 [ 590.051076][ T5923] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 590.210954][ T5923] usb 1-1: device descriptor read/64, error -71 [ 590.328924][ T5923] usb usb1-port1: attempt power cycle [ 590.340304][T21306] kvm: emulating exchange as write [ 590.704305][ T5923] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 590.743183][T21318] overlay: filesystem on ./bus not supported as upperdir [ 590.752567][ T5923] usb 1-1: device descriptor read/8, error -71 [ 590.774398][T21318] evm: overlay not supported [ 591.012853][ T5923] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 591.045569][ T5923] usb 1-1: device descriptor read/8, error -71 [ 591.173484][ T5923] usb usb1-port1: unable to enumerate USB device [ 591.669096][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 591.678014][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.455995][ T5923] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 592.641198][ T5923] usb 7-1: unable to get BOS descriptor or descriptor too short [ 592.659022][ T5923] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 592.672468][ T5923] usb 7-1: can't read configurations, error -61 [ 592.688828][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 592.688884][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x20 [ 592.697301][ T5860] Bluetooth: hci2: Malformed LE Event: 0x0d [ 592.819503][ T5923] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 592.998619][ T5923] usb 7-1: unable to get BOS descriptor or descriptor too short [ 593.012767][ T5923] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 593.020486][ T5923] usb 7-1: can't read configurations, error -61 [ 593.031943][ T5923] usb usb7-port1: attempt power cycle [ 593.408473][ T5923] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 593.444680][ T5923] usb 7-1: unable to get BOS descriptor or descriptor too short [ 593.474864][ T5923] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 593.500837][ T5923] usb 7-1: can't read configurations, error -61 [ 593.589494][ C1] net_ratelimit: 15729 callbacks suppressed [ 593.589576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 593.608013][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 593.620569][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 593.633081][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 593.645623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 593.648983][ T5895] IPVS: starting estimator thread 0... [ 593.658154][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 593.667056][ T5923] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 593.675813][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 593.695351][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 593.707934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 593.720516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 593.755179][ T5923] usb 7-1: unable to get BOS descriptor or descriptor too short [ 593.769811][ T5923] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 593.793303][ T5923] usb 7-1: can't read configurations, error -61 [ 593.811189][ T5923] usb usb7-port1: unable to enumerate USB device [ 593.818019][T21365] IPVS: using max 30 ests per chain, 72000 per kthread [ 593.848211][T21367] /dev/rnullb0: Can't lookup blockdev [ 594.037729][T21375] netlink: 328 bytes leftover after parsing attributes in process `syz.7.3949'. [ 594.051773][T21375] /dev/rnullb0: Can't lookup blockdev [ 594.146843][T21380] netlink: 'syz.7.3952': attribute type 39 has an invalid length. [ 594.154716][T21380] lo: entered promiscuous mode [ 594.704289][T21395] /dev/rnullb0: Can't lookup blockdev [ 595.075236][T14613] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 595.248470][T14613] usb 1-1: Using ep0 maxpacket: 32 [ 595.266337][T14613] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 595.288373][T14613] usb 1-1: config 0 has no interface number 0 [ 595.298193][T14613] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 595.317688][T14613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.343164][T14613] usb 1-1: Product: syz [ 595.347379][T14613] usb 1-1: Manufacturer: syz [ 595.352007][T14613] usb 1-1: SerialNumber: syz [ 595.382216][T14613] usb 1-1: config 0 descriptor?? [ 595.411930][T14613] smsc95xx v2.0.0 [ 595.657938][T14613] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 595.684483][T14613] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 595.726081][T14613] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 595.769171][T14613] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 596.062969][T14613] usb 1-1: USB disconnect, device number 76 [ 596.095037][T21436] /dev/rnullb0: Can't lookup blockdev [ 596.105965][T21437] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 1, id = 0 [ 596.338368][T21448] /dev/rnullb0: Can't lookup blockdev [ 597.587558][ T5923] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 597.774028][ T5923] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 597.807164][ T5923] usb 1-1: config 0 has no interface number 0 [ 597.819678][ T5923] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 597.897917][ T5923] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 597.936416][ T5923] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 597.946691][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.025496][ T5923] usb 1-1: config 0 descriptor?? [ 598.094676][ T5923] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input36 [ 598.121523][T21509] /dev/rnullb0: Can't lookup blockdev [ 598.343166][ T5895] kernel read not supported for file /bus/input/devices (pid: 5895 comm: kworker/0:4) [ 598.937094][ T5895] usb 1-1: USB disconnect, device number 77 [ 598.945248][ C1] net_ratelimit: 14547 callbacks suppressed [ 598.945264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 598.963623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 598.976117][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 598.988542][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 599.001014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 599.013497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 599.025906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 599.038325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 599.050789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 599.063217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 599.665614][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 599.677105][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 599.685529][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 599.704755][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 599.712494][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 599.818056][T21553] 9pnet_fd: Insufficient options for proto=fd [ 599.875481][ T30] audit: type=1804 audit(1752644321.860:484): pid=21553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3988" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 599.897313][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.008869][T21558] overlayfs: missing 'lowerdir' [ 600.358528][T21583] /dev/sg0: Can't lookup blockdev [ 600.443978][ T5923] usb 9-1: USB disconnect, device number 61 [ 600.498563][ T30] audit: type=1804 audit(1752644322.468:485): pid=21588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3991" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 600.519878][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.574196][T21588] loop9: detected capacity change from 0 to 7 [ 600.608214][T21588] Dev loop9: unable to read RDB block 7 [ 600.664795][T21588] loop9: AHDI p1 p2 [ 600.690318][T21588] loop9: partition table partially beyond EOD, truncated [ 600.758242][T21588] loop9: p1 start 1835360114 is beyond EOD, truncated [ 601.058903][ T59] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.133666][T21628] /dev/rnullb0: Can't lookup blockdev [ 601.264225][T21640] /dev/rnullb0: Can't lookup blockdev [ 601.288114][T21632] /dev/rnullb0: Can't lookup blockdev [ 601.618286][ T59] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.757023][T21721] random: crng reseeded on system resumption [ 601.917536][ T5865] Bluetooth: hci4: command tx timeout [ 602.266263][ T59] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.350493][T21547] chnl_net:caif_netlink_parms(): no params data found [ 602.466308][ T59] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.777735][T21759] /dev/rnullb0: Can't lookup blockdev [ 602.900115][T21771] /dev/rnullb0: Can't lookup blockdev [ 603.086062][T21547] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.138385][T21547] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.145651][T21547] bridge_slave_0: entered allmulticast mode [ 603.212766][T21547] bridge_slave_0: entered promiscuous mode [ 603.279471][T21547] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.279575][T21547] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.279720][T21547] bridge_slave_1: entered allmulticast mode [ 603.283100][T21547] bridge_slave_1: entered promiscuous mode [ 603.348563][T21796] /dev/rnullb0: Can't lookup blockdev [ 603.764276][T21547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.806500][ T30] audit: type=1804 audit(1752644325.564:486): pid=21838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4008" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 603.839248][T21547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.107771][T21547] team0: Port device team_slave_0 added [ 604.142333][ T5865] Bluetooth: hci4: command tx timeout [ 604.184176][T21547] team0: Port device team_slave_1 added [ 604.204389][ T59] bridge_slave_1: left allmulticast mode [ 604.226126][ T59] bridge_slave_1: left promiscuous mode [ 604.251469][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.273531][T21873] /dev/rnullb0: Can't lookup blockdev [ 604.301361][ C1] net_ratelimit: 14077 callbacks suppressed [ 604.301380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 604.319705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 604.332102][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 604.344490][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 604.356878][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 604.369302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 604.381717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 604.394150][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 604.406536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 604.418962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 604.452970][ T59] bridge_slave_0: left allmulticast mode [ 604.494699][T21878] /dev/rnullb0: Can't lookup blockdev [ 604.509411][ T59] bridge_slave_0: left promiscuous mode [ 604.529040][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.756748][T21882] /dev/rnullb0: Can't lookup blockdev [ 604.822520][T21884] /dev/rnullb0: Can't lookup blockdev [ 605.148669][T21890] /dev/rnullb0: Can't lookup blockdev [ 605.463719][T21893] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4017'. [ 605.782143][T21899] /dev/rnullb0: Can't lookup blockdev [ 606.151655][T21907] /dev/rnullb0: Can't lookup blockdev [ 606.228225][T21911] /dev/rnullb0: Can't lookup blockdev [ 606.366391][ T5865] Bluetooth: hci4: command tx timeout [ 606.438899][T21913] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4023'. [ 606.510324][T21918] /dev/rnullb0: Can't lookup blockdev [ 606.652055][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.673992][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.691896][ T59] bond0 (unregistering): Released all slaves [ 606.781615][ T5895] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 606.840026][ T5855] sched: DL replenish lagged too much [ 606.973955][ T5895] usb 7-1: Using ep0 maxpacket: 8 [ 606.987593][ T5895] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 607.002882][ T5895] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 607.013328][ T5895] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 607.027758][ T5895] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.067694][ T5895] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 607.089273][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.344987][ T5895] usb 7-1: GET_CAPABILITIES returned 0 [ 607.352793][ T5895] usbtmc 7-1:16.0: can't read capabilities [ 608.420565][T21893] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.472405][T14613] usb 7-1: USB disconnect, device number 77 [ 608.559495][T21547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.583897][T21547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.617192][ T5865] Bluetooth: hci4: command tx timeout [ 608.624796][T21547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.404128][T21893] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.441305][T21547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.452925][T21547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.485441][T21547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.657166][ C1] net_ratelimit: 16567 callbacks suppressed [ 609.657185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 609.675494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 609.687800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 609.700238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 609.712707][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 609.725103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 609.737374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 609.749723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 609.761973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 609.774328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 609.961380][T21893] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.190937][T22009] /dev/rnullb0: Can't lookup blockdev [ 614.376100][ T59] hsr_slave_0: left promiscuous mode [ 614.429631][ T59] hsr_slave_1: left promiscuous mode [ 614.445556][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.476848][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.526774][T22034] /dev/rnullb0: Can't lookup blockdev [ 614.543673][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.551094][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.676558][ T59] veth1_macvtap: left promiscuous mode [ 614.698396][ T59] veth0_macvtap: left promiscuous mode [ 614.725046][ T59] veth1_vlan: left promiscuous mode [ 614.730456][ T59] veth0_vlan: left promiscuous mode [ 614.804416][T22040] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 614.811079][T22040] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 614.889397][T22040] vhci_hcd vhci_hcd.0: Device attached [ 614.994848][T22048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.013184][ C1] net_ratelimit: 18527 callbacks suppressed [ 615.013203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 615.031519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 615.043065][T22048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.044051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 615.063627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 615.066341][T22048] netlink: 1 bytes leftover after parsing attributes in process `syz.7.4037'. [ 615.076074][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 615.097145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 615.109583][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 615.122034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 615.134462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 615.146863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 615.163092][ T5895] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 615.170841][T22054] netlink: 1 bytes leftover after parsing attributes in process `syz.7.4037'. [ 616.250359][ T59] team0 (unregistering): Port device team_slave_1 removed [ 616.368985][ T59] team0 (unregistering): Port device team_slave_0 removed [ 617.783608][T21893] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.017296][T22041] vhci_hcd: connection reset by peer [ 618.042380][ T1152] vhci_hcd: stop threads [ 618.046966][ T1152] vhci_hcd: release socket [ 618.056511][T21547] hsr_slave_0: entered promiscuous mode [ 618.095962][T21547] hsr_slave_1: entered promiscuous mode [ 618.102390][ T1152] vhci_hcd: disconnect device [ 618.116411][T21547] debugfs: 'hsr0' already exists in 'hsr' [ 618.129840][T21547] Cannot create hsr debugfs directory [ 618.343721][T22118] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4040'. [ 618.546260][T12506] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.631561][T12506] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.876137][ T1152] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.992221][ T1152] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.655022][T21547] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 619.703853][T21547] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 619.731143][ T30] audit: type=1804 audit(1752644340.455:487): pid=22191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.4046" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 619.798888][T21547] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 619.862263][T21547] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 620.125302][T22213] fuse: Bad value for 'rootmode' [ 620.284223][T21547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.369264][ C1] net_ratelimit: 15183 callbacks suppressed [ 620.369284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 620.387635][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 620.400106][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 620.404608][T21547] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.412574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 620.431258][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 620.443645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 620.456010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 620.468411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 620.480860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 620.491455][T17806] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.493375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 620.500105][T17806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.560237][T22221] /dev/rnullb0: Can't lookup blockdev [ 620.619951][T17806] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.627219][T17806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.657941][ T5895] vhci_hcd: vhci_device speed not set [ 621.048473][T22231] /dev/rnullb0: Can't lookup blockdev [ 621.143985][T22226] ALSA: seq fatal error: cannot create timer (-22) [ 621.598142][T21547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.845326][T22255] MTD: Couldn't look up './cgroup': -15 [ 621.876183][T22255] ./cgroup: Can't lookup blockdev [ 622.589622][T22275] MTD: Couldn't look up '/dev/rnullb0': -15 [ 623.017510][T21547] veth0_vlan: entered promiscuous mode [ 623.112717][T21547] veth1_vlan: entered promiscuous mode [ 623.272617][T21547] veth0_macvtap: entered promiscuous mode [ 623.366981][T21547] veth1_macvtap: entered promiscuous mode [ 623.407321][T21547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.441259][T21547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.456808][ T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.514162][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.566795][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.613581][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.905661][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.934994][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.039157][ T5895] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 624.089558][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.129853][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.236188][ T5895] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 624.270902][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.304473][ T5895] usb 1-1: Product: syz [ 624.313474][ T5895] usb 1-1: Manufacturer: syz [ 624.340948][ T5895] usb 1-1: SerialNumber: syz [ 624.364502][ T5895] usb 1-1: config 0 descriptor?? [ 624.431676][ T5862] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 624.617280][T22334] /dev/rnullb0: Can't lookup blockdev [ 624.632648][ T5862] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 624.660896][T22334] /dev/rnullb0: Can't lookup blockdev [ 624.677232][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.714003][ T5862] usb 7-1: Product: syz [ 624.738618][ T5862] usb 7-1: Manufacturer: syz [ 624.769671][ T5862] usb 7-1: SerialNumber: syz [ 624.828582][ T5895] airspy 1-1:0.0: Board ID: 00 [ 624.849634][ T5862] usb 7-1: config 0 descriptor?? [ 624.869904][ T5895] airspy 1-1:0.0: Firmware version: [ 624.933704][ T5862] ch341 7-1:0.0: ch341-uart converter detected [ 625.677578][T22356] /dev/rnullb0: Can't lookup blockdev [ 625.725215][ C1] net_ratelimit: 14049 callbacks suppressed [ 625.725235][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 625.743813][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 625.756358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 625.768841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 625.781319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 625.790148][ T5862] ch341-uart ttyUSB0: break control not supported, using simulated break [ 625.793790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 625.814211][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 625.826663][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 625.839093][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 625.851554][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 625.912968][ T5895] airspy 1-1:0.0: Registered as swradio24 [ 625.945611][ T5862] usb 7-1: ch341-uart converter now attached to ttyUSB0 [ 625.975275][ T5895] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 626.032875][ T5862] usb 7-1: USB disconnect, device number 78 [ 626.109274][ T5862] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 626.186567][T22376] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4071'. [ 626.218544][T22376] /dev/rnullb0: Can't lookup blockdev [ 626.219683][T22380] /dev/rnullb0: Can't lookup blockdev [ 626.245687][ T5862] ch341 7-1:0.0: device disconnected [ 626.252314][T22380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.252682][T22380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.638430][ T5862] usb 1-1: USB disconnect, device number 78 [ 626.822152][T22414] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4074'. [ 626.963817][T22417] /dev/rnullb0: Can't lookup blockdev [ 627.074967][T22421] netlink: 'syz.7.4075': attribute type 10 has an invalid length. [ 627.127556][T22421] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 627.387900][T22431] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4076'. [ 628.539409][T22464] netlink: 'syz.7.4086': attribute type 21 has an invalid length. [ 628.630151][ T30] audit: type=1804 audit(1752644348.780:488): pid=22471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4087" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 628.687361][T22464] MTD: Couldn't look up '/dev/rnullb0': -15 [ 628.693361][T22464] /dev/rnullb0: Can't lookup blockdev [ 629.206733][T22497] /dev/rnullb0: Can't lookup blockdev [ 629.301837][T22496] binder: 22495:22496 ioctl c018620b 200000000000 returned -14 [ 629.413831][T22506] /dev/rnullb0: Can't lookup blockdev [ 629.661899][T22512] MTD: Couldn't look up '/dev/rnullb0': -15 [ 630.214170][ T5865] Bluetooth: hci2: Malformed Event: 0x02 [ 630.220469][ T5865] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 630.526921][T22535] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4099'. [ 631.081006][ C1] net_ratelimit: 14113 callbacks suppressed [ 631.081027][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 631.099493][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 631.111945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 631.124398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 631.136838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 631.149338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 631.161785][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 631.174246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 631.186776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 631.199195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 632.678082][T22599] netlink: 'syz.9.4108': attribute type 3 has an invalid length. [ 632.738742][T22599] netlink: 'syz.9.4108': attribute type 1 has an invalid length. [ 632.806179][T22599] netlink: 192 bytes leftover after parsing attributes in process `syz.9.4108'. [ 632.868689][T22599] NCSI netlink: No device for ifindex 0 [ 633.376111][T22627] dvmrp0: entered allmulticast mode [ 633.382603][T22628] /dev/rnullb0: Can't lookup blockdev [ 633.912092][T22650] /dev/rnullb0: Can't lookup blockdev [ 634.059418][T22653] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 634.788868][ T30] audit: type=1804 audit(1752644354.533:489): pid=22673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.4119" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 635.270246][T22688] /dev/rnullb0: Can't lookup blockdev [ 635.346829][T14613] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 635.455149][T22693] /dev/rnullb0: Can't lookup blockdev [ 635.549885][T14613] usb 1-1: Using ep0 maxpacket: 16 [ 635.598613][T14613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 635.656083][T22697] x_tables: unsorted entry at hook 2 [ 635.686754][T14613] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 635.701697][T22697] /dev/rnullb0: Can't lookup blockdev [ 635.729310][T14613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.764010][T22700] /dev/rnullb0: Can't lookup blockdev [ 635.798455][T14613] usb 1-1: Product: syz [ 635.802674][T14613] usb 1-1: Manufacturer: syz [ 635.867853][T14613] usb 1-1: SerialNumber: syz [ 635.929343][T14613] usb 1-1: config 0 descriptor?? [ 636.176821][T22712] dvmrp0: entered allmulticast mode [ 636.267489][T14613] usb 1-1: USB disconnect, device number 79 [ 636.437073][ C1] net_ratelimit: 15022 callbacks suppressed [ 636.437092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 636.455492][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 636.467971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 636.480473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 636.492892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 636.505343][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 636.517800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 636.530333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 636.542767][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 636.555181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 636.933949][T22753] /dev/rnullb0: Can't lookup blockdev [ 636.950897][T22756] /dev/rnullb0: Can't lookup blockdev [ 637.218057][T22764] /dev/rnullb0: Can't lookup blockdev [ 637.703304][T22779] /dev/rnullb0: Can't lookup blockdev [ 638.224617][T22790] syzkaller1: entered promiscuous mode [ 638.253116][T22790] syzkaller1: entered allmulticast mode [ 638.323084][T22795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.332068][T22796] /dev/rnullb0: Can't lookup blockdev [ 638.372868][ T5862] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 638.391462][T22795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.607419][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 638.622536][ T5862] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 638.647926][ T5862] usb 1-1: config 0 has no interface number 0 [ 638.684036][T22795] vxcan0: entered promiscuous mode [ 638.691883][ T5862] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 638.733604][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.795195][ T5862] usb 1-1: Product: syz [ 638.827608][ T5862] usb 1-1: Manufacturer: syz [ 638.879086][ T5862] usb 1-1: SerialNumber: syz [ 638.942891][ T5862] usb 1-1: config 0 descriptor?? [ 638.998677][T22817] /dev/rnullb0: Can't lookup blockdev [ 639.006104][ T5862] smsc95xx v2.0.0 [ 639.017580][ T5862] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 639.074509][ T5862] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 639.468194][T22785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.522647][T22785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.200325][T14613] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 640.342424][T22849] /dev/rnullb0: Can't lookup blockdev [ 640.383315][T14613] usb 10-1: Using ep0 maxpacket: 8 [ 640.406792][T14613] usb 10-1: unable to get BOS descriptor or descriptor too short [ 640.439023][T14613] usb 10-1: config 4 has an invalid interface number: 147 but max is 0 [ 640.473672][T14613] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 640.526716][T14613] usb 10-1: config 4 has no interface number 0 [ 640.556258][T14613] usb 10-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 640.583726][T14613] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.623867][T14613] usb 10-1: Product: syz [ 640.644019][T14613] usb 10-1: Manufacturer: syz [ 640.657139][T22853] /dev/rnullb0: Can't lookup blockdev [ 640.679622][T14613] usb 10-1: SerialNumber: syz [ 640.933040][T22840] /dev/rnullb0: Can't lookup blockdev [ 640.968506][T22859] /dev/rnullb0: Can't lookup blockdev [ 641.057342][T14613] usb 10-1: Found UVC 0.02 device syz (04f2:b746) [ 641.091685][T14613] usb 10-1: No valid video chain found. [ 641.129449][T14613] usb 10-1: USB disconnect, device number 2 [ 641.237995][T22870] /dev/rnullb0: Can't lookup blockdev [ 641.595110][T14613] usb 1-1: USB disconnect, device number 80 [ 641.793009][ C1] net_ratelimit: 14496 callbacks suppressed [ 641.793028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 641.811503][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 641.823919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 641.836353][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 641.848801][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 641.861287][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 641.873735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 641.886243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 641.898698][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 641.911200][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 642.011671][T22890] /dev/rnullb0: Can't lookup blockdev [ 642.725563][T22914] /dev/rnullb0: Can't lookup blockdev [ 643.258099][T14613] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 643.434512][T14613] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 643.494871][T14613] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.522701][T14613] usb 10-1: Product: syz [ 643.546455][T14613] usb 10-1: Manufacturer: syz [ 643.565585][T14613] usb 10-1: SerialNumber: syz [ 643.598472][T22945] netlink: 'syz.0.4159': attribute type 1 has an invalid length. [ 643.609536][T14613] usb 10-1: config 0 descriptor?? [ 643.686922][T22945] netlink: 'syz.0.4159': attribute type 101 has an invalid length. [ 643.785800][T22945] netlink: 480 bytes leftover after parsing attributes in process `syz.0.4159'. [ 643.861705][T22930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.930684][T22930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.984834][T22930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.025721][T22957] /dev/rnullb0: Can't lookup blockdev [ 644.065357][T22930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.111242][T22930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.154463][T22930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.217703][T22930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.290326][T22930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.330439][T22930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.365294][T22930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.421886][T14613] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 644.497993][ T5916] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 644.529218][T14613] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 644.607186][T14613] usb 10-1: USB disconnect, device number 3 [ 644.686711][ T5916] usb 1-1: unable to get BOS descriptor or descriptor too short [ 644.717066][ T5916] usb 1-1: not running at top speed; connect to a high speed hub [ 644.762819][ T30] audit: type=1804 audit(1752644363.868:490): pid=22984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4162" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 644.798315][ T5916] usb 1-1: config 6 has an invalid interface number: 239 but max is 0 [ 644.837080][ T5916] usb 1-1: config 6 has no interface number 0 [ 644.869504][ T5916] usb 1-1: config 6 interface 239 has no altsetting 0 [ 644.952933][ T5916] usb 1-1: New USB device found, idVendor=1b3d, idProduct=010d, bcdDevice= 5.00 [ 645.007905][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.071398][ T5916] usb 1-1: Product: syz [ 645.121192][ T5916] usb 1-1: Manufacturer: syz [ 645.154324][ T5916] usb 1-1: SerialNumber: syz [ 645.737133][T23007] /dev/rnullb0: Can't lookup blockdev [ 646.039146][T23014] /dev/rnullb0: Can't lookup blockdev [ 646.594305][T23029] /dev/rnullb0: Can't lookup blockdev [ 646.984519][T23033] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 647.148995][ C1] net_ratelimit: 15040 callbacks suppressed [ 647.149014][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 647.167372][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 647.179818][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 647.192224][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 647.204660][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 647.217173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 647.229623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 647.242083][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 647.254586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 647.266990][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 647.826052][T23051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4176'. [ 648.073442][ T5916] ftdi_sio 1-1:6.239: FTDI USB Serial Device converter detected [ 648.134414][ T5916] usb 1-1: Detected FT2232C/D [ 648.163475][ T5916] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 648.198049][ T5916] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 648.250786][ T5916] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 648.304435][ T5916] usb 1-1: USB disconnect, device number 81 [ 648.377686][ T5916] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 648.387275][ T9] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 648.435716][ T5916] ftdi_sio 1-1:6.239: device disconnected [ 648.560304][ T9] usb 7-1: device descriptor read/64, error -71 [ 648.598679][T23082] netlink: 'syz.7.4181': attribute type 8 has an invalid length. [ 648.839737][ T9] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 649.008316][ T9] usb 7-1: device descriptor read/64, error -71 [ 649.114343][T23100] /dev/rnullb0: Can't lookup blockdev [ 649.159054][ T9] usb usb7-port1: attempt power cycle [ 649.394236][ T5916] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 649.575977][ T9] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 649.583714][ T5916] usb 1-1: device descriptor read/64, error -71 [ 649.630071][ T9] usb 7-1: device descriptor read/8, error -71 [ 649.853874][ T5916] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 649.896957][ T9] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 649.958667][ T9] usb 7-1: device descriptor read/8, error -71 [ 650.035687][ T5916] usb 1-1: device descriptor read/64, error -71 [ 650.089781][ T9] usb usb7-port1: unable to enumerate USB device [ 650.155398][ T5916] usb usb1-port1: attempt power cycle [ 650.370729][ T30] audit: type=1804 audit(1752644369.125:491): pid=23152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4187" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 650.559700][ T5916] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 650.611187][ T5916] usb 1-1: device descriptor read/8, error -71 [ 650.880684][ T5916] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 650.934261][ T5916] usb 1-1: device descriptor read/8, error -71 [ 651.073194][ T5916] usb usb1-port1: unable to enumerate USB device [ 651.113310][T23161] /dev/rnullb0: Can't lookup blockdev [ 651.319521][T23165] netlink: 80 bytes leftover after parsing attributes in process `syz.9.4189'. [ 651.453951][T23177] nvme_fabrics: unknown parameter or missing value 'kWzO~b)4IET8$<f(aA_>b4&+Bz*)ƻ* !EޚRjs' in ctrl creation request [ 651.472763][ C0] vkms_vblank_simulate: vblank timer overrun [ 652.038307][T23194] /dev/rnullb0: Can't lookup blockdev [ 652.115434][ T30] audit: type=1804 audit(1752644370.753:492): pid=23196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4197" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 652.451763][ T5862] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 652.505304][ C1] net_ratelimit: 14137 callbacks suppressed [ 652.505323][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 652.523653][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.536100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.549503][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 652.561931][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.574462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.587939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 652.600437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.612159][ T5862] usb 7-1: Using ep0 maxpacket: 8 [ 652.613205][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.630893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 652.653133][ T5862] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 652.699456][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.723453][ T5862] usb 7-1: Product: syz [ 652.727666][ T5862] usb 7-1: Manufacturer: syz [ 652.735446][ T5862] usb 7-1: SerialNumber: syz [ 652.749723][ T5862] usb 7-1: config 0 descriptor?? [ 652.765180][ T5862] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 652.979682][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 653.092449][T23217] gfs2meta: Unknown parameter '/dev/video37' [ 653.106235][T23217] /dev/rnullb0: Can't lookup blockdev [ 653.162603][ T9] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 653.202446][ T9] usb 10-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 653.235307][ T9] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 653.260867][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.315313][ T9] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 653.334920][ T9] usb 10-1: invalid MIDI out EP 0 [ 653.342097][T23222] /dev/rnullb0: Can't lookup blockdev [ 653.424284][T23196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.504333][T23196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.557646][T23210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.649697][T23210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.757147][T23210] /dev/rnullb0: Can't lookup blockdev [ 653.815259][ T9] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 653.887241][T23251] ptrace attach of "./syz-executor exec"[17689] was attempted by "ԓ7E\x09Ż P /dev/rnullb0"[23251] [ 653.925110][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.939573][ T9] usb 10-1: USB disconnect, device number 4 [ 654.847727][T23274] /dev/rnullb0: Can't lookup blockdev [ 654.889758][T23277] vivid-004: disconnect [ 654.915194][T23277] vivid-004: reconnect [ 654.950496][ T5862] gspca_sonixj: reg_r err -71 [ 655.003031][ T5862] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 655.076706][ T5862] usb 7-1: USB disconnect, device number 83 [ 655.280221][T23292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4208'. [ 655.335676][T23295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.386469][T23295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.573723][T15474] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 655.698693][T23315] /dev/rnullb0: Can't lookup blockdev [ 656.126259][T23327] IPVS: set_ctl: invalid protocol: 41 10.1.1.0:20003 [ 656.666718][T23343] fuse: Bad value for 'fd' [ 656.685204][T23345] /dev/rnullb0: Can't lookup blockdev [ 657.038440][T23357] /dev/rnullb0: Can't lookup blockdev [ 657.149323][T23362] ceph: Path missing in source [ 657.367519][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 657.374078][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 657.550594][T23381] /dev/rnullb0: Can't lookup blockdev [ 657.565896][T23382] vivid-003: disconnect [ 657.571407][T23383] ALSA: mixer_oss: invalid index 100000 [ 657.582900][T23380] vivid-003: reconnect [ 657.705210][T15474] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 657.861248][ C1] net_ratelimit: 7700 callbacks suppressed [ 657.861270][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.880360][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 657.892736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.905139][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.912835][T15474] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 657.917557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.939172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 657.951589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.963774][T15474] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.963984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.986291][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 657.999500][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 658.006923][T15474] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 658.033304][T15474] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 658.052523][T15474] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 658.067643][ T10] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 658.096374][T15474] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.116839][T15474] usb 10-1: Product: Ь [ 658.130444][T15474] usb 10-1: Manufacturer: љ [ 658.142662][T15474] usb 10-1: SerialNumber: ᢩ㬇ݖ釬똝￮阜ཧ [ 658.256874][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 658.284005][ T10] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 658.294545][T23401] gadgetfs: Unknown parameter '}[[)' [ 658.319921][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.338739][T23401] random: crng reseeded on system resumption [ 658.355861][ T10] usb 7-1: Product: syz [ 658.360116][ T10] usb 7-1: Manufacturer: syz [ 658.392162][ T10] usb 7-1: SerialNumber: syz [ 658.414918][T15474] cdc_ncm 10-1:1.0: skipping garbage [ 658.440516][T15474] cdc_ncm 10-1:1.0: skipping garbage [ 658.455352][ T10] usb 7-1: config 0 descriptor?? [ 658.473979][T15474] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 658.504288][T15474] cdc_ncm 10-1:1.0: bind() failure [ 658.658271][T23374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.736692][T23374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.833391][ T10] peak_usb 7-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 658.957170][T23427] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4230'. [ 659.034798][T23374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.082912][T23374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.147179][ T9] usb 10-1: USB disconnect, device number 6 [ 659.452041][ T10] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71 [ 659.517115][ T10] usb 7-1: USB disconnect, device number 84 [ 660.128243][T23479] netlink: 'syz.0.4240': attribute type 1 has an invalid length. [ 660.136181][T23479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4240'. [ 660.147032][ T10] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 660.174567][ T30] audit: type=1804 audit(1752644378.292:493): pid=23480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4239" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 660.324986][ T10] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 660.365353][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.397615][ T10] usb 7-1: Product: syz [ 660.406622][ T10] usb 7-1: Manufacturer: syz [ 660.412162][ T10] usb 7-1: SerialNumber: syz [ 660.442910][ T10] usb 7-1: config 0 descriptor?? [ 660.476975][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 660.513976][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 660.710359][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.750687][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 660.792223][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 660.840142][ T9] usb 10-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 660.876445][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.884622][ T9] usb 10-1: Product: syz [ 660.916335][ T9] usb 10-1: Manufacturer: syz [ 660.966287][ T10] gspca_sunplus: reg_r err -71 [ 660.973166][ T9] usb 10-1: SerialNumber: syz [ 660.987186][ T10] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 661.009128][ T9] usb 10-1: config 0 descriptor?? [ 661.044919][ T9] usb 10-1: Found UVC 34.00 device syz (8086:0b5b) [ 661.054475][ T10] usb 7-1: USB disconnect, device number 85 [ 661.121836][ T9] usb 10-1: No valid video chain found. [ 661.600134][T23519] /dev/rnullb0: Can't lookup blockdev [ 661.892006][T23522] /dev/rnullb0: Can't lookup blockdev [ 662.290413][ T30] audit: type=1800 audit(1752644380.275:494): pid=23531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4246" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 663.217169][ C1] net_ratelimit: 8511 callbacks suppressed [ 663.217189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 663.235447][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.247876][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.260371][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.273572][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 663.286020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.298429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.310910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.324365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 663.336767][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.378310][T23556] /dev/rnullb0: Can't lookup blockdev [ 663.567080][T23566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4251'. [ 663.693022][T23558] overlayfs: statfs failed on './file0' [ 663.697199][T23566] netlink: 'syz.0.4251': attribute type 12 has an invalid length. [ 663.822334][ T9] usb 10-1: USB disconnect, device number 7 [ 664.428973][T23592] netlink: 196 bytes leftover after parsing attributes in process `syz.7.4256'. [ 664.531560][ T30] audit: type=1326 audit(1752644382.361:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23589 comm="syz.7.4256" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc156f8e929 code=0x0 [ 664.777621][T23607] /dev/rnullb0: Can't lookup blockdev [ 665.037533][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 665.735213][T23639] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4263'. [ 665.921943][ T9] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 665.949701][T23645] netlink: 'syz.7.4263': attribute type 12 has an invalid length. [ 665.988959][T23648] bridge0: port 3(syz_tun) entered blocking state [ 666.007832][T23630] overlayfs: statfs failed on './file0' [ 666.023320][T23648] bridge0: port 3(syz_tun) entered disabled state [ 666.058969][T23648] syz_tun: entered allmulticast mode [ 666.083692][T23649] netlink: 'syz.9.4265': attribute type 10 has an invalid length. [ 666.165273][ T9] usb 1-1: config 4 has an invalid interface number: 62 but max is 0 [ 666.174255][T23651] /dev/rnullb0: Can't lookup blockdev [ 666.193908][ T9] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 666.203092][T23648] syz_tun: entered promiscuous mode [ 666.209399][T23648] bridge0: port 3(syz_tun) entered blocking state [ 666.216500][T23648] bridge0: port 3(syz_tun) entered forwarding state [ 666.241997][ T9] usb 1-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 666.252006][ T9] usb 1-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 666.309908][T23649] bridge0: port 3(syz_tun) entered disabled state [ 666.316622][T23649] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.324323][T23649] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.354460][ T9] usb 1-1: config 4 has no interface number 0 [ 666.375511][ T9] usb 1-1: config 4 interface 62 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 666.424922][T23654] /dev/rnullb0: Can't lookup blockdev [ 666.430722][ T9] usb 1-1: config 4 interface 62 has no altsetting 0 [ 666.462191][T23649] bridge0: port 3(syz_tun) entered blocking state [ 666.468887][T23649] bridge0: port 3(syz_tun) entered forwarding state [ 666.475877][T23649] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.483208][T23649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.490797][T23649] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.497990][T23649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.551823][ T9] usb 1-1: New USB device found, idVendor=2357, idProduct=0601, bcdDevice=48.c7 [ 666.566635][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.606132][ T9] usb 1-1: Product: syz [ 666.636364][ T9] usb 1-1: Manufacturer: 텋⤮쒁嵼켄઼頙䳽閂䮅蒢辊⢨䳳鋃⪹඗௢進ꬊ䤂ꡌ屍祧췸ƀ觊娯ᱷꍖ摛鴫♈ᐢ쁌迋㦛ݦ䎳驭焰贙猒䱂ท蟙ﰪከ氄䷜㛦₩꒝쵦堈䐸뙲瓗厸彍虐ꇟꓖ墟渍꣐葅ᆄ球彇㳱ꕉ擮릣⸔ [ 666.719280][T23649] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 666.758499][ T9] usb 1-1: SerialNumber: syz [ 666.820295][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 667.293868][T23628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.354586][T23628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.399463][T15474] r8152-cfgselector 1-1: USB disconnect, device number 86 [ 667.734219][T23672] syz.9.4270 (23672): drop_caches: 2 [ 668.127828][T23697] /dev/rnullb0: Can't lookup blockdev [ 668.173656][T23700] /dev/rnullb0: Can't lookup blockdev [ 668.255334][T15474] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 668.444955][ T9] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 668.461640][T15474] usb 7-1: Using ep0 maxpacket: 8 [ 668.512713][T15474] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 668.573151][ C1] net_ratelimit: 8654 callbacks suppressed [ 668.573171][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 668.577615][T15474] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 668.579485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.613363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 668.625974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.638506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.652267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 668.664730][T15474] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 200 [ 668.664810][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.687301][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 668.689424][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 668.699997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.719765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.747110][T15474] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 668.811411][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 668.820202][T23713] /dev/rnullb0: Can't lookup blockdev [ 668.825731][ T13] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.848577][T15474] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 668.886957][ T9] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 668.914417][T15474] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.933659][ T9] usb 1-1: config 7 has no interface number 0 [ 668.960054][ T9] usb 1-1: config 7 interface 101 has no altsetting 0 [ 669.025388][ T9] usb 1-1: New USB device found, idVendor=1519, idProduct=0452, bcdDevice=d5.84 [ 669.071947][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.105745][ T9] usb 1-1: Product: syz [ 669.134447][ T9] usb 1-1: Manufacturer: syz [ 669.193173][ T9] usb 1-1: SerialNumber: syz [ 669.246344][T15474] usb 7-1: GET_CAPABILITIES returned 0 [ 669.297230][T15474] usbtmc 7-1:16.0: can't read capabilities [ 669.469038][T15474] usb 7-1: USB disconnect, device number 86 [ 669.714364][T23744] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4282'. [ 669.931954][T23753] netlink: 'syz.9.4282': attribute type 12 has an invalid length. [ 670.001017][T23731] overlayfs: statfs failed on './file0' [ 670.097685][ T9] usb 1-1: USB disconnect, device number 87 [ 671.401528][T23804] /dev/rnullb0: Can't lookup blockdev [ 672.106137][T23867] /dev/rnullb0: Can't lookup blockdev [ 672.835608][T23907] /dev/rnullb0: Can't lookup blockdev [ 673.752103][ T30] audit: type=1804 audit(1752644390.995:496): pid=23956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4296" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 673.922663][T23963] binder: 23953:23963 ioctl c018620b 200000000000 returned -14 [ 673.930567][ C1] net_ratelimit: 9474 callbacks suppressed [ 673.930605][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.949620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 673.962014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.974447][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 673.986900][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.999257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 674.012493][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 674.024855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.037355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 674.049775][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.319005][T14613] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 674.540329][T14613] usb 10-1: unable to get BOS descriptor or descriptor too short [ 674.562660][T14613] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 674.645885][T14613] usb 10-1: can't read configurations, error -71 [ 674.924501][T23994] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 674.960415][T23993] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4302'. [ 677.441591][ T30] audit: type=1804 audit(1752644394.447:497): pid=24132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4307" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 678.323935][T24184] /dev/rnullb0: Can't lookup blockdev [ 678.454201][T24186] ntfs3: Unknown parameter '-*(}' [ 678.825355][T14613] usb 1-1: new low-speed USB device number 88 using dummy_hcd [ 678.975086][T14613] usb 1-1: device descriptor read/64, error -71 [ 679.246707][T14613] usb 1-1: new low-speed USB device number 89 using dummy_hcd [ 679.285262][ C1] net_ratelimit: 9138 callbacks suppressed [ 679.285293][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 679.303682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.316146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 679.329395][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 679.341835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.354302][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 679.360436][T24204] /dev/rnullb0: Can't lookup blockdev [ 679.366814][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.384133][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 679.397463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 679.409892][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.419565][T14613] usb 1-1: device descriptor read/64, error -71 [ 679.568325][T14613] usb usb1-port1: attempt power cycle [ 679.838679][T24214] syz.9.4316: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 679.919512][T24214] CPU: 0 UID: 0 PID: 24214 Comm: syz.9.4316 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 679.919544][T24214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 679.919558][T24214] Call Trace: [ 679.919567][T24214] [ 679.919589][T24214] dump_stack_lvl+0x189/0x250 [ 679.919628][T24214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.919658][T24214] ? __pfx__printk+0x10/0x10 [ 679.919687][T24214] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 679.919717][T24214] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 679.919748][T24214] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 679.919780][T24214] warn_alloc+0x214/0x310 [ 679.919809][T24214] ? __pfx_warn_alloc+0x10/0x10 [ 679.919840][T24214] ? __get_vm_area_node+0x28f/0x300 [ 679.919872][T24214] ? packet_set_ring+0x6f4/0x2380 [ 679.919902][T24214] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 679.919954][T24214] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 679.919976][T24214] ? alloc_pages_mpol+0x3cd/0x4a0 [ 679.920010][T24214] ? packet_set_ring+0x6f4/0x2380 [ 679.920037][T24214] vzalloc_noprof+0xb2/0xf0 [ 679.920056][T24214] ? packet_set_ring+0x6f4/0x2380 [ 679.920084][T24214] packet_set_ring+0x6f4/0x2380 [ 679.920135][T24214] ? __pfx_packet_set_ring+0x10/0x10 [ 679.920182][T24214] ? _copy_from_user+0x94/0xb0 [ 679.920207][T24214] packet_setsockopt+0xc5a/0x12c0 [ 679.920237][T24214] ? __pfx_packet_setsockopt+0x10/0x10 [ 679.920261][T24214] ? futex_wait+0x285/0x360 [ 679.920287][T24214] ? __pfx_futex_wait+0x10/0x10 [ 679.920317][T24214] ? aa_sk_perm+0x81e/0x950 [ 679.920362][T24214] ? __pfx_aa_sk_perm+0x10/0x10 [ 679.920390][T24214] ? __lock_acquire+0xab9/0xd20 [ 679.920418][T24214] ? aa_sock_opt_perm+0xff/0x1b0 [ 679.920442][T24214] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 679.920467][T24214] ? __pfx_packet_setsockopt+0x10/0x10 [ 679.920495][T24214] do_sock_setsockopt+0x25a/0x3e0 [ 679.920526][T24214] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 679.920557][T24214] ? __fget_files+0x2a/0x420 [ 679.920591][T24214] __x64_sys_setsockopt+0x18b/0x220 [ 679.920623][T24214] do_syscall_64+0xfa/0x3b0 [ 679.920646][T24214] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.920668][T24214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.920688][T24214] ? clear_bhb_loop+0x60/0xb0 [ 679.920713][T24214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.920732][T24214] RIP: 0033:0x7f5ba7f8e929 [ 679.920750][T24214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.920768][T24214] RSP: 002b:00007f5ba8ea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 679.920789][T24214] RAX: ffffffffffffffda RBX: 00007f5ba81b6080 RCX: 00007f5ba7f8e929 [ 679.920804][T24214] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000005 [ 679.920817][T24214] RBP: 00007f5ba8010b39 R08: 000000000000001c R09: 0000000000000000 [ 679.920830][T24214] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 679.920843][T24214] R13: 0000000000000000 R14: 00007f5ba81b6080 R15: 00007ffe587926c8 [ 679.920874][T24214] [ 679.920883][T24214] Mem-Info: [ 680.252473][T14613] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 680.504844][T14613] usb 1-1: device descriptor read/8, error -71 [ 680.871383][T14613] usb 1-1: new low-speed USB device number 91 using dummy_hcd [ 680.924882][T14613] usb 1-1: device descriptor read/8, error -71 [ 681.060098][T14613] usb usb1-port1: unable to enumerate USB device [ 681.113281][ T9] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 681.251929][T24214] active_anon:13685 inactive_anon:8 isolated_anon:0 [ 681.251929][T24214] active_file:4560 inactive_file:52378 isolated_file:0 [ 681.251929][T24214] unevictable:770 dirty:121 writeback:0 [ 681.251929][T24214] slab_reclaimable:7359 slab_unreclaimable:99360 [ 681.251929][T24214] mapped:26978 shmem:4650 pagetables:2234 [ 681.251929][T24214] sec_pagetables:0 bounce:0 [ 681.251929][T24214] kernel_misc_reclaimable:0 [ 681.251929][T24214] free:1296254 free_pcp:24221 free_cma:0 [ 681.316387][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 681.359733][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 681.400212][ T9] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 681.423602][ T9] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 681.472505][ T9] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 681.525879][ T9] usb 7-1: config 128 has no interface number 0 [ 681.579354][T24214] Node 0 active_anon:49416kB inactive_anon:32kB active_file:18240kB inactive_file:209312kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:107912kB dirty:488kB writeback:0kB shmem:11712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13076kB pagetables:8696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 681.620858][ T9] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 681.698832][ T9] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 681.773682][ T9] usb 7-1: config 128 interface 127 has no altsetting 0 [ 681.836283][T24214] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 681.887120][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 681.929671][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.974778][ T9] usb 7-1: Product: syz [ 681.993472][ T9] usb 7-1: Manufacturer: syz [ 682.028197][ T9] usb 7-1: SerialNumber: syz [ 682.047455][T24214] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.303660][T24214] lowmem_reserve[]: 0 2496 2497 2497 2497 [ 682.367082][T24214] Node 0 DMA32 free:1302320kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41768kB inactive_anon:32kB active_file:18240kB inactive_file:208228kB unevictable:1544kB writepending:488kB present:3129332kB managed:2556488kB mlocked:0kB bounce:0kB free_pcp:68596kB local_pcp:32212kB free_cma:0kB [ 682.377652][T24233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.519289][T24214] lowmem_reserve[]: 0 0 1 1 1 [ 682.563184][T24312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.644614][T24214] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1084kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.688085][T24233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.765913][T24312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.808341][T24214] lowmem_reserve[]: 0 0 0 0 0 [ 682.885772][T24214] Node 1 Normal free:3884232kB boost:0kB min:55672kB low:69588kB high:83504kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23552kB local_pcp:9120kB free_cma:0kB [ 683.056930][T24214] lowmem_reserve[]: 0 0 0 0 0 [ 683.109409][T24214] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 683.140922][ T9] usb 7-1: USB disconnect, device number 87 [ 683.208308][T24214] Node 0 DMA32: 3244*4kB (UM) 1649*8kB (UME) 839*16kB (UME) 589*32kB (UME) 544*64kB (UME) 726*128kB (UME) 474*256kB (UE) 296*512kB (UME) 129*1024kB (UME) 14*2048kB (UM) 168*4096kB (M) = 1307976kB [ 683.309011][T22200] udevd[22200]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 683.357642][T24214] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 683.417180][T24214] Node 1 Normal: 204*4kB (UE) 63*8kB (UME) 58*16kB (UME) 158*32kB (UME) 55*64kB (UME) 13*128kB (UME) 4*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 943*4096kB (M) = 3884232kB [ 683.516582][T24214] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 683.555450][T24214] Node 0 hugepages_total=6 hugepages_free=5 hugepages_surp=4 hugepages_size=2048kB [ 683.626212][T24214] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 683.665622][T24214] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 683.711091][T24214] 58383 total pagecache pages [ 683.741935][T24214] 16 pages in swap cache [ 683.768893][T24214] Free swap = 116736kB [ 683.791741][T24214] Total swap = 124996kB [ 683.826047][T24214] 2097051 pages RAM [ 683.851072][T24214] 0 pages HighMem/MovableOnly [ 683.873883][T24214] 426015 pages reserved [ 683.891793][T24214] 0 pages cma reserved [ 684.193894][T24407] syz.6.4326: attempt to access beyond end of device [ 684.193894][T24407] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 684.641273][ C1] net_ratelimit: 8832 callbacks suppressed [ 684.641301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 684.661449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 684.673906][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.686415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 684.698967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.711435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 684.719794][T24424] /dev/rnullb0: Can't lookup blockdev [ 684.725059][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 684.741293][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.753842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 684.766368][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.035933][ T30] audit: type=1804 audit(1752644401.546:498): pid=24430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4333" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 685.091562][T24430] loop3: detected capacity change from 0 to 1 [ 685.145726][T24430] Dev loop3: unable to read RDB block 1 [ 685.186322][T24430] loop3: unable to read partition table [ 685.205917][T24430] loop3: partition table beyond EOD, truncated [ 685.360809][T24430] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 685.646333][ T5862] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 685.827418][T24454] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4337'. [ 685.847619][ T5862] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 685.863669][ T5862] usb 1-1: config 0 has no interface number 0 [ 685.874413][ T5862] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 685.887851][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.899052][ T5862] usb 1-1: Product: syz [ 685.938620][ T5862] usb 1-1: Manufacturer: syz [ 685.965127][ T5862] usb 1-1: SerialNumber: syz [ 686.010653][T24459] netlink: 'syz.9.4337': attribute type 12 has an invalid length. [ 686.021616][ T5862] usb 1-1: config 0 descriptor?? [ 686.055423][T24449] overlayfs: statfs failed on './file0' [ 686.370376][T24470] binder: 24469:24470 ioctl c018620b 200000000000 returned -14 [ 686.484035][ T5862] usb 1-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 686.719509][ T5862] usb 1-1: Firmware: build t*lF= [ 686.719509][ T5862] KO:ځқ/4sQ?H{ ~he B&u*AeIp!-@=UGP'RI , [ 686.719509][ T5862] ken^,.c>>AǙ`pxDؘ(E"׿-s p[ Y`_jaC\Sl,?Qob [ 686.932768][ T5862] usb 1-1: failed to fetch extended address, random address set [ 687.151197][T24498] netlink: 'syz.9.4346': attribute type 1 has an invalid length. [ 687.161142][T24498] netlink: 'syz.9.4346': attribute type 101 has an invalid length. [ 687.181085][T24498] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4346'. [ 687.196447][T14613] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 687.212572][T24497] /dev/rnullb0: Can't lookup blockdev [ 687.314375][ T5862] usb 1-1: USB disconnect, device number 92 [ 687.345991][T14613] usb 7-1: device descriptor read/64, error -71 [ 687.528696][T24510] /dev/rnullb0: Can't lookup blockdev [ 687.640754][T14613] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 687.683002][T24509] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 687.837697][T14613] usb 7-1: device descriptor read/64, error -71 [ 687.866611][T24519] /dev/rnullb0: Can't lookup blockdev [ 687.955981][T14613] usb usb7-port1: attempt power cycle [ 688.199458][T24532] /dev/rnullb0: Can't lookup blockdev [ 688.350876][T14613] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 688.451006][T14613] usb 7-1: device descriptor read/8, error -71 [ 688.799775][T14613] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 688.899669][T14613] usb 7-1: device descriptor read/8, error -71 [ 689.078178][T14613] usb usb7-port1: unable to enumerate USB device [ 689.997277][ C1] net_ratelimit: 8559 callbacks suppressed [ 689.997298][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.015539][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.028933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 690.041389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.053867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 690.066350][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.078821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.092113][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 690.104515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.116936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1a:62:30:b3:f8:0b, vlan:0) [ 690.377927][T24682] sctp: [Deprecated]: syz.6.4358 (pid 24682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 690.377927][T24682] Use struct sctp_sack_info instead [ 690.922415][T24680] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 690.935366][T24680] ./cgroup: Can't lookup blockdev [ 690.967954][T24702] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4360'. [ 691.245177][T24707] netlink: 'syz.7.4360': attribute type 12 has an invalid length. [ 691.590451][ T5862] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 691.696232][T24693] overlayfs: statfs failed on './file0' [ 691.778757][ T5862] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.806789][ T5862] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 691.857016][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.914883][ T5862] usb 7-1: config 0 descriptor?? [ 691.978851][ T5862] pwc: Askey VC010 type 2 USB webcam detected. [ 692.195563][ T5862] pwc: send_video_command error -71 [ 692.217793][ T5862] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 692.283651][ T5862] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 692.379461][ T5862] usb 7-1: USB disconnect, device number 92 [ 692.800333][ T5862] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 693.019790][T24802] gfs2: path_lookup on c::: returned error -2 [ 693.026182][ T5862] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.077934][ T5862] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 693.103065][T24801] syz.0.4364: attempt to access beyond end of device [ 693.103065][T24801] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 693.118764][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.180337][ T5862] usb 7-1: config 0 descriptor?? [ 693.204752][T24802] /dev/rnullb0: Can't lookup blockdev [ 693.207779][T24801] SQUASHFS error: Failed to read block 0x0: -5 [ 693.225572][T24801] unable to read squashfs_super_block [ 693.287396][ T5862] pwc: Askey VC010 type 2 USB webcam detected. [ 693.640039][T24852] /dev/rnullb0: Can't lookup blockdev [ 693.665229][ T5862] pwc: recv_control_msg error -32 req 02 val 2b00 [ 693.681645][ T5862] pwc: recv_control_msg error -32 req 02 val 2700 [ 693.764825][T24889] MTD: Couldn't look up '/dev/rnullb0': -15 [ 693.830539][ T5862] pwc: recv_control_msg error -71 req 02 val 2c00 [ 693.878458][ T5862] pwc: recv_control_msg error -71 req 04 val 1000 [ 693.892863][ T5862] pwc: recv_control_msg error -71 req 04 val 1300 [ 693.899965][T24911] /dev/rnullb0: Can't lookup blockdev [ 693.915830][ T5862] pwc: recv_control_msg error -71 req 04 val 1400 [ 693.923004][ T5862] pwc: recv_control_msg error -71 req 02 val 2000 [ 693.955651][ T5862] pwc: recv_control_msg error -71 req 02 val 2100 [ 693.976241][ T5862] pwc: recv_control_msg error -71 req 04 val 1500 [ 693.995631][ T5862] pwc: recv_control_msg error -71 req 02 val 2500 [ 694.002842][ T5862] pwc: recv_control_msg error -71 req 02 val 2400 [ 694.013860][ T5862] pwc: recv_control_msg error -71 req 02 val 2600 [ 694.029957][ T5862] pwc: recv_control_msg error -71 req 02 val 2900 [ 694.058237][ T5862] pwc: recv_control_msg error -71 req 02 val 2800 [ 694.081030][ T5862] pwc: recv_control_msg error -71 req 04 val 1100 [ 694.112716][ T5862] pwc: recv_control_msg error -71 req 04 val 1200 [ 694.143643][ T5862] pwc: Registered as video103. [ 694.153026][ T5862] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input38 [ 694.182889][ T5862] usb 7-1: USB disconnect, device number 93 [ 694.433463][T24947] /dev/rnullb0: Can't lookup blockdev [ 694.451200][T24947] /dev/rnullb0: Can't lookup blockdev [ 694.711445][T24984] MTD: Couldn't look up '/dev/rnullb0': -15 [ 694.723543][T24986] /dev/rnullb0: Can't lookup blockdev [ 695.630418][T25065] /dev/rnullb0: Can't lookup blockdev [ 695.971745][T25109] MTD: Couldn't look up '/dev/rnullb0': -15 [ 695.978360][T25109] /dev/rnullb0: Can't lookup blockdev [ 696.153457][T25120] binder: 25118:25120 ioctl c018620b 200000000000 returned -14 [ 696.361837][ T3521] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 696.390025][T15474] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 696.531647][ T3521] usb 7-1: Using ep0 maxpacket: 8 [ 696.557565][ T3521] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 696.558736][T15474] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.569466][ T3521] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 696.591065][ T3521] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 696.602608][ T3521] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 696.608504][T15474] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 696.615964][ T3521] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 696.645108][T15474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.656533][ T3521] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.665144][T15474] usb 1-1: config 0 descriptor?? [ 696.905738][T15474] usbhid 1-1:0.0: can't add hid device: -71 [ 696.909771][ T3521] usb 7-1: GET_CAPABILITIES returned 0 [ 696.914926][T15474] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 696.925140][ T3521] usbtmc 7-1:16.0: can't read capabilities [ 696.954860][T15474] usb 1-1: USB disconnect, device number 93 [ 697.144864][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.154245][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.163956][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.173094][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.182198][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.194052][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.203197][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.212263][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.221317][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.231777][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.240905][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.250011][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.259082][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.269150][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.278267][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.287334][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 697.296825][T15474] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 697.343351][ T3521] usb 7-1: USB disconnect, device number 94 [ 697.462689][T15474] usb 1-1: Using ep0 maxpacket: 16 [ 697.477148][T15474] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.499378][T15474] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 697.519415][T15474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.546811][T15474] usb 1-1: config 0 descriptor?? [ 697.672490][T25185] /dev/rnullb0: Can't lookup blockdev [ 697.691479][ T30] audit: type=1804 audit(1752644413.379:499): pid=25186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4393" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 697.802700][T15474] usbhid 1-1:0.0: can't add hid device: -71 [ 697.811638][T15474] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 697.817415][T25188] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4395'. [ 697.849224][T15474] usb 1-1: USB disconnect, device number 94 [ 698.040755][T25211] /dev/rnullb0: Can't lookup blockdev [ 698.122973][T25213] mkiss: ax0: crc mode is auto. [ 698.159214][T25209] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.4399'. [ 698.187990][T25209] net_ratelimit: 4552 callbacks suppressed [ 698.188010][T25209] netlink: zone id is out of range [ 698.200473][T25209] netlink: get zone limit has 8 unknown bytes [ 698.239525][T15474] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 698.461528][T15474] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 698.485677][ T5862] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 698.502186][T15474] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 698.546828][T15474] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 698.581122][T15474] usb 1-1: config 0 has no interface number 0 [ 698.588695][T15474] usb 1-1: config 0 has no interface number 1 [ 698.596558][T15474] usb 1-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 698.610194][T15474] usb 1-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 698.630757][T15474] usb 1-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 698.653309][ T30] audit: type=1804 audit(1752644414.286:500): pid=25286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4401" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 698.659868][T15474] usb 1-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 698.685425][ T5862] usb 7-1: Using ep0 maxpacket: 8 [ 698.693245][T15474] usb 1-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 698.714410][T15474] usb 1-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 698.727637][ T5862] usb 7-1: config 5 has an invalid interface number: 71 but max is 3 [ 698.736199][ T5862] usb 7-1: config 5 has 1 interface, different from the descriptor's value: 4 [ 698.753508][T15474] usb 1-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 698.767469][ T5862] usb 7-1: config 5 has no interface number 0 [ 698.775668][ T5862] usb 7-1: config 5 interface 71 has no altsetting 0 [ 698.786308][T15474] usb 1-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 698.799257][ T5862] usb 7-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice= 2.bf [ 698.821985][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.833928][T15474] usb 1-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 698.848686][ T5862] usb 7-1: Product: syz [ 698.857721][ T5862] usb 7-1: Manufacturer: syz [ 698.879865][ T5862] usb 7-1: SerialNumber: syz [ 698.889580][T15474] usb 1-1: config 0 interface 66 has no altsetting 0 [ 698.920456][T15474] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 698.937817][T15474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.955403][T15474] usb 1-1: Product: syz [ 698.960580][T15474] usb 1-1: Manufacturer: syz [ 698.967462][T15474] usb 1-1: SerialNumber: syz [ 698.981728][T25317] /dev/rnullb0: Can't lookup blockdev [ 699.001977][T15474] usb 1-1: config 0 descriptor?? [ 699.021711][T15474] ljca 1-1:0.84: bulk endpoints not found [ 699.244668][T15474] ljca 1-1:0.66: probe with driver ljca failed with error -71 [ 699.279781][T15474] usb 1-1: USB disconnect, device number 95 [ 699.375828][ T5862] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 699.395342][ T5862] gspca_sn9c2028: read1 error -71 [ 699.407554][ T5862] gspca_sn9c2028: read1 error -71 [ 699.419156][ T5862] gspca_sn9c2028: read1 error -71 [ 699.436944][ T5862] sn9c2028 7-1:5.71: probe with driver sn9c2028 failed with error -71 [ 699.456509][ T5862] usb 7-1: USB disconnect, device number 95 [ 699.484018][T25389] /dev/rnullb0: Can't lookup blockdev [ 699.667441][T25404] MTD: Couldn't look up '/dev/rnullb0': -15 [ 699.674759][T25404] /dev/rnullb0: Can't lookup blockdev [ 699.729189][T25407] /dev/rnullb0: Can't lookup blockdev [ 699.764991][T25410] /dev/rnullb0: Can't lookup blockdev [ 700.267691][T25475] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 700.296110][T25489] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 700.393184][T25489] /dev/rnullb0: Can't lookup blockdev [ 700.409333][T25511] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 700.420327][T25514] /dev/rnullb0: Can't lookup blockdev [ 700.441123][T25511] /dev/rnullb0: Can't lookup blockdev [ 700.510816][T25526] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 700.739802][T25562] /dev/rnullb0: Can't lookup blockdev [ 700.920861][T25593] /dev/rnullb0: Can't lookup blockdev [ 701.010087][T25593] could not allocate digest TFM handle rmd320-generic [ 701.019474][T25594] could not allocate digest TFM handle rmd320-generic [ 701.049349][T25602] /dev/rnullb0: Can't lookup blockdev [ 701.386903][T25628] netlink: 'syz.7.4429': attribute type 4 has an invalid length. [ 701.670510][T25684] /dev/rnullb0: Can't lookup blockdev [ 701.752362][T25697] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4431'. [ 702.229796][T25772] /dev/rnullb0: Can't lookup blockdev [ 702.287448][T25775] fuseblk: Unknown parameter '0x0000000000000003000000000000000000000000000000000000000001000000000000000000000' [ 702.403132][ T30] audit: type=1804 audit(1752644417.785:501): pid=25790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4436" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 702.433565][T25792] netlink: 165 bytes leftover after parsing attributes in process `syz.9.4435'. [ 702.509736][T25795] /dev/rnullb0: Can't lookup blockdev [ 702.565617][T25800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 702.580214][ T30] audit: type=1326 audit(1752644442.960:502): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=25799 comm="syz.0.4438" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f660fb8e929 code=0x0 [ 702.602421][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.812487][ T5862] hid-generic 7FFF:0004:0000.001C: item fetching failed at offset 7/105 [ 702.823691][ T5862] hid-generic 7FFF:0004:0000.001C: probe with driver hid-generic failed with error -22 [ 703.562991][T25866] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4444'. [ 703.579287][T25866] /dev/rnullb0: Can't lookup blockdev [ 703.956939][T25937] /dev/rnullb0: Can't lookup blockdev [ 704.197405][T25979] /dev/rnullb0: Can't lookup blockdev [ 704.333249][ T5862] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 704.496253][ T5862] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 704.505541][T15474] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 704.513707][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.529445][ T5862] usb 1-1: config 0 descriptor?? [ 704.545543][T26003] /dev/rnullb0: Can't lookup blockdev [ 704.550926][ T5862] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 704.609450][T26006] CIFS mount error: No usable UNC path provided in device string! [ 704.609450][T26006] [ 704.620065][T26006] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 704.679187][T15474] usb 10-1: config 0 has an invalid interface number: 128 but max is 0 [ 704.687881][T15474] usb 10-1: config 0 has no interface number 0 [ 704.694155][T15474] usb 10-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.712197][T15474] usb 10-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.712254][T15474] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 704.712304][T15474] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.727153][T15474] usb 10-1: config 0 descriptor?? [ 704.781059][T26009] tty tty2: ldisc open failed (-12), clearing slot 1 [ 704.951548][T15474] uclogic 0003:256C:006D.001D: interface is invalid, ignoring [ 704.990119][ T3521] usb 10-1: USB disconnect, device number 10 [ 705.261982][T26079] /dev/rnullb0: Can't lookup blockdev [ 705.329324][ T5862] gp8psk: usb out operation failed. [ 705.343527][ T5862] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 705.357699][ T5862] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 705.384783][ T5862] usb 1-1: USB disconnect, device number 96 [ 705.482524][T26116] program syz.6.4460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 705.603698][T26145] /dev/rnullb0: Can't lookup blockdev [ 705.953638][T26201] veth1_macvtap: left promiscuous mode [ 705.964266][T26201] macsec0: entered promiscuous mode [ 705.971954][T26201] macsec0: entered allmulticast mode [ 705.985297][T26201] veth1_macvtap: entered promiscuous mode [ 705.992935][T26201] veth1_macvtap: entered allmulticast mode [ 706.003749][T26201] macsec0: left promiscuous mode [ 706.008906][T26201] macsec0: left allmulticast mode [ 706.016296][ T5862] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 706.026227][T26201] veth1_macvtap: left allmulticast mode [ 706.055490][T26205] /dev/rnullb0: Can't lookup blockdev [ 706.182726][ T5862] usb 7-1: Using ep0 maxpacket: 8 [ 706.192279][ T5862] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 706.214316][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.236109][ T5862] usb 7-1: Product: syz [ 706.240346][ T5862] usb 7-1: Manufacturer: syz [ 706.244972][ T5862] usb 7-1: SerialNumber: syz [ 706.264729][ T5862] usb 7-1: config 0 descriptor?? [ 706.292970][ T5862] gspca_main: se401-2.14.0 probing 047d:5003 [ 706.385054][T26222] futex_wake_op: syz.0.4471 tries to shift op by -1; fix this program [ 706.574551][T26213] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 706.582797][ T5987] IPVS: starting estimator thread 0... [ 706.676556][T26242] IPVS: using max 29 ests per chain, 69600 per kthread [ 706.730393][ T5862] gspca_se401: Wrong descriptor type [ 706.951681][T26181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.976536][T26181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.993269][ T5862] usb 7-1: USB disconnect, device number 96 [ 707.385830][ T30] audit: type=1804 audit(1752644447.450:503): pid=26376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4475" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 707.484134][T26388] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4476'. [ 707.615855][T26390] netlink: 'syz.0.4476': attribute type 12 has an invalid length. [ 707.711987][ T5987] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 707.850463][ T5987] usb 10-1: device descriptor read/64, error -71 [ 707.893234][ T3521] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 708.056650][ T3521] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 708.065527][ T3521] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 708.076026][ T3521] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 708.085127][ T3521] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 708.096415][ T3521] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 708.108642][ T5987] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 708.120208][ T3521] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 708.129426][ T3521] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 708.137431][ T3521] usb 7-1: Product: syz [ 708.143756][ T3521] usb 7-1: Manufacturer: syz [ 708.154636][ T3521] cdc_wdm 7-1:1.0: skipping garbage [ 708.159906][ T3521] cdc_wdm 7-1:1.0: skipping garbage [ 708.168817][ T3521] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 708.174813][ T3521] cdc_wdm 7-1:1.0: Unknown control protocol [ 708.256690][ T5987] usb 10-1: device descriptor read/64, error -71 [ 708.305183][T26380] overlayfs: statfs failed on './file0' [ 708.362259][T26403] /dev/rnullb0: Can't lookup blockdev [ 708.386020][ T5987] usb usb10-port1: attempt power cycle [ 708.410518][ T5862] usb 7-1: USB disconnect, device number 97 [ 708.602422][ T30] audit: type=1804 audit(1752644448.591:504): pid=26427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4483" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 708.750567][ T5987] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 708.784376][ T5987] usb 10-1: device descriptor read/8, error -71 [ 708.923603][T26439] MTD: Couldn't look up '/dev/rnullb0': -15 [ 709.049640][ T5987] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 709.093612][ T5987] usb 10-1: device descriptor read/8, error -71 [ 709.093942][T26448] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4488'. [ 709.180873][T26452] /dev/rnullb0: Can't lookup blockdev [ 709.220607][ T5987] usb usb10-port1: unable to enumerate USB device [ 709.236972][T26453] netlink: 'syz.6.4488': attribute type 12 has an invalid length. [ 709.560927][ T5987] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 709.721311][ T5987] usb 1-1: Using ep0 maxpacket: 16 [ 709.728073][ T5987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.739505][ T5987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.749347][ T5987] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 709.762278][ T5987] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 709.771369][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.783063][ T5987] usb 1-1: config 0 descriptor?? [ 709.917371][T26443] overlayfs: statfs failed on './file0' [ 710.243553][T26455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.253022][T26455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.274648][ T5987] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 710.290823][ T5987] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 710.298275][ T5987] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 710.306382][ T5987] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 710.314034][ T5987] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 710.321462][ T5987] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 710.328914][ T5987] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 710.338621][ T5987] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 710.346147][ T5987] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 710.353482][ T5987] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 710.370385][ T5987] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001E/input/input39 [ 710.427179][T26484] /dev/rnullb0: Can't lookup blockdev [ 710.475167][ T5987] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 710.507378][T26455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.538068][T26455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.546104][T26496] netlink: 'syz.6.4497': attribute type 1 has an invalid length. [ 710.559512][T26496] /dev/rnullb0: Can't lookup blockdev [ 710.655377][ T5987] usb 1-1: USB disconnect, device number 97 [ 710.876078][T26527] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4500'. [ 710.981471][T26532] /dev/rnullb0: Can't lookup blockdev [ 711.043903][T26533] netlink: 'syz.6.4500': attribute type 12 has an invalid length. [ 711.059863][T26536] cgroup: Invalid name [ 711.073874][T26536] /dev/rnullb0: Can't lookup blockdev [ 711.202423][T26542] syzkaller1: entered promiscuous mode [ 711.209575][T26542] syzkaller1: entered allmulticast mode [ 711.482804][T26549] /dev/rnullb0: Can't lookup blockdev [ 711.529918][T26551] netlink: 420 bytes leftover after parsing attributes in process `syz.0.4506'. [ 711.602452][T26553] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4506'. [ 711.613036][T26553] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4506'. [ 711.622714][T26553] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4506'. [ 711.635429][T26553] /dev/rnullb0: Can't lookup blockdev [ 711.663888][T26519] overlayfs: statfs failed on './file0' [ 711.688549][ T5940] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 711.843124][T26560] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 711.883278][ T5940] usb 10-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 711.893768][ T5940] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 711.903548][ T5940] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 711.919119][ T5940] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 711.928361][ T5940] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.938265][ T5940] usb 10-1: Product: syz [ 711.942567][ T5940] usb 10-1: Manufacturer: syz [ 711.948507][ T5940] usb 10-1: SerialNumber: syz [ 712.248449][T26594] /dev/rnullb0: Can't lookup blockdev [ 713.140194][T26707] /dev/rnullb0: Can't lookup blockdev [ 713.211823][T26712] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4516'. [ 713.222543][T26712] MTD: Couldn't look up '/dev/rnullb0': -15 [ 713.230454][T26712] /dev/rnullb0: Can't lookup blockdev [ 713.256757][T26714] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4515'. [ 713.390307][T26722] netlink: 'syz.7.4515': attribute type 12 has an invalid length. [ 714.071485][T26709] overlayfs: statfs failed on './file0' [ 714.339231][T26735] /dev/rnullb0: Can't lookup blockdev [ 714.363460][T26736] netlink: 'syz.6.4521': attribute type 15 has an invalid length. [ 714.381453][T26736] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4521'. [ 714.395564][T26736] QAT: failed to copy from user cfg_data. [ 714.449780][ T5940] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 714.459545][ T5940] cdc_ncm 10-1:1.0: bind() failure [ 714.474582][ T5940] usb 10-1: USB disconnect, device number 15 [ 714.617984][T15474] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 714.660859][ T30] audit: type=1804 audit(1752644454.250:505): pid=26749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4523" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=3566 res=1 errno=0 [ 714.696206][ T3521] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 714.789161][T15474] usb 1-1: Using ep0 maxpacket: 8 [ 714.820401][T15474] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1023 [ 714.853654][T15474] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1024 [ 714.874053][T15474] usb 1-1: config 1 interface 0 has no altsetting 0 [ 714.874352][ T3521] usb 7-1: Using ep0 maxpacket: 8 [ 714.883762][T15474] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 714.901993][ T3521] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.906415][T15474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.920596][ T3521] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.948905][ T3521] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 714.950667][T15474] usb 1-1: Product: 曕㞷㐪囈㉎薷਩겫᷶⠌ᩤ㻞㛸慂쀶椦忄뱑≥䙀ꭩ禍鰦뎺蘙⯵钛᪲ﮍ貍彏쮆栄軷蕿䧷摬쵔ᝯ쨤❯녓킋ﶭ펟ⶤ끋붭辵쐵钳ꏉࠅ뤄䙃㑿⪏ȿ툣ᩱ鈣ᮜ䑨ᤚ궵 [ 714.977133][ T3521] usb 7-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 714.985866][ C0] vkms_vblank_simulate: vblank timer overrun [ 715.012760][T26767] /dev/rnullb0: Can't lookup blockdev [ 715.030211][ T3521] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.063090][ T3521] usb 7-1: config 0 descriptor?? [ 715.118093][T15474] usb 1-1: Manufacturer: Њ [ 715.143683][T15474] usb 1-1: SerialNumber: ь [ 715.173223][T26735] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 715.192039][T26735] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 715.260983][T26778] ------------[ cut here ]------------ [ 715.267104][T26778] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 5 MHz (6) [ 715.288870][T26778] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2654 at mac80211_hwsim_sta_rc_update+0x6f5/0x860, CPU#0: syz.7.4529/26778 [ 715.303050][T26778] Modules linked in: [ 715.307616][T26778] CPU: 0 UID: 0 PID: 26778 Comm: syz.7.4529 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 715.319370][T26778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 715.329849][T26778] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 715.336694][T26778] Code: 71 17 00 00 48 c7 c7 e0 1d 50 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 80 94 7f fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 cd c9 bb fa 90 0f 0b 90 e9 fe fe ff [ 715.356592][T26778] RSP: 0018:ffffc900039fefd0 EFLAGS: 00010282 [ 715.362738][T26778] RAX: 1b0f886805bad400 RBX: 0000000000000014 RCX: 0000000000080000 [ 715.364489][T26783] program syz.7.4529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 715.371653][T26778] RDX: ffffc9000c022000 RSI: 0000000000004b06 RDI: 0000000000004b07 [ 715.389749][T26778] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 715.398077][T26778] R10: dffffc0000000000 R11: fffffbfff1c7a940 R12: 0000000000000000 [ 715.406145][T26778] R13: dffffc0000000000 R14: 0000000000000006 R15: 0000000000000000 [ 715.414261][T26778] FS: 00007fc157dc76c0(0000) GS:ffff8881257b4000(0000) knlGS:0000000000000000 [ 715.423446][T26778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 715.430199][T26778] CR2: 0000200000001080 CR3: 000000004cd80000 CR4: 00000000003526f0 [ 715.438273][T26778] Call Trace: [ 715.441707][T26778] [ 715.444726][T26778] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 715.450796][T26778] mac80211_hwsim_sta_add+0xa3/0x310 [ 715.456258][T26778] drv_sta_state+0x8be/0x1840 [ 715.457853][T26785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.461020][T26778] sta_info_insert_rcu+0xd32/0x1940 [ 715.461057][T26778] ? sta_info_insert_rcu+0x2ce/0x1940 [ 715.481910][T26778] sta_info_insert+0x16/0xc0 [ 715.486424][T26785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.486689][T26778] rdev_add_station+0x105/0x290 [ 715.499554][T26778] nl80211_new_station+0x1755/0x1b70 [ 715.505029][T26778] ? __pfx_nl80211_new_station+0x10/0x10 [ 715.510736][T26778] ? netdev_run_todo+0xe1d/0xea0 [ 715.515867][T26778] ? nl80211_pre_doit+0x4f1/0x930 [ 715.520993][T26778] genl_family_rcv_msg_doit+0x212/0x300 [ 715.526735][T26778] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 715.532927][T26778] ? bpf_lsm_capable+0x9/0x20 [ 715.537745][T26778] ? security_capable+0x7e/0x2e0 [ 715.542775][T26778] genl_rcv_msg+0x60e/0x790 [ 715.547365][T26778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 715.552562][T26778] ? ref_tracker_free+0x63a/0x7d0 [ 715.553976][ T3521] nzxt-kraken2 0003:1E71:170E.001F: hidraw0: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.6-1/input0 [ 715.557650][T26778] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 715.574866][T26778] ? __pfx_nl80211_new_station+0x10/0x10 [ 715.580864][T26778] ? __pfx_nl80211_post_doit+0x10/0x10 [ 715.586979][T26778] ? __pfx_ref_tracker_free+0x10/0x10 [ 715.592949][T26778] netlink_rcv_skb+0x205/0x470 [ 715.597801][T26778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 715.603140][T26778] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 715.608541][T26778] ? down_read+0x1ad/0x2e0 [ 715.613110][T26778] genl_rcv+0x28/0x40 [ 715.617165][T26778] netlink_unicast+0x759/0x8e0 [ 715.622028][T26778] netlink_sendmsg+0x805/0xb30 [ 715.626969][T26778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.632338][T26778] ? aa_sock_msg_perm+0xf1/0x1d0 [ 715.637458][T26778] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 715.642842][T26778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.648300][T26778] __sock_sendmsg+0x219/0x270 [ 715.653076][T26778] ____sys_sendmsg+0x505/0x830 [ 715.658046][T26778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 715.663425][T26778] ? import_iovec+0x74/0xa0 [ 715.668509][T26778] ___sys_sendmsg+0x21f/0x2a0 [ 715.673293][T26778] ? __pfx____sys_sendmsg+0x10/0x10 [ 715.678725][T26778] ? __fget_files+0x2a/0x420 [ 715.683416][T26778] ? __fget_files+0x3a0/0x420 [ 715.688281][T26778] __x64_sys_sendmsg+0x19b/0x260 [ 715.693771][T26778] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 715.700010][T26778] ? rcu_is_watching+0x15/0xb0 [ 715.704892][T26778] ? do_syscall_64+0xbe/0x3b0 [ 715.709734][T26778] do_syscall_64+0xfa/0x3b0 [ 715.714335][T26778] ? lockdep_hardirqs_on+0x9c/0x150 [ 715.719710][T26778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.725866][T26778] ? clear_bhb_loop+0x60/0xb0 [ 715.730725][T26778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.736694][T26778] RIP: 0033:0x7fc156f8e929 [ 715.741287][T26778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.761036][T26778] RSP: 002b:00007fc157dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.769671][T26778] RAX: ffffffffffffffda RBX: 00007fc1571b5fa0 RCX: 00007fc156f8e929 [ 715.777826][T26778] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000009 [ 715.785984][T26778] RBP: 00007fc157010b39 R08: 0000000000000000 R09: 0000000000000000 [ 715.790793][ T3521] usb 7-1: USB disconnect, device number 98 [ 715.794104][T26778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.794126][T26778] R13: 0000000000000000 R14: 00007fc1571b5fa0 R15: 00007ffd8fbcc698 [ 715.794162][T26778] [ 715.794185][T26778] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 715.794202][T26778] CPU: 0 UID: 0 PID: 26778 Comm: syz.7.4529 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 715.794234][T26778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 715.794256][T26778] Call Trace: [ 715.794266][T26778] [ 715.794276][T26778] dump_stack_lvl+0x99/0x250 [ 715.794311][T26778] ? __asan_memcpy+0x40/0x70 [ 715.794346][T26778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 715.794383][T26778] ? __pfx__printk+0x10/0x10 [ 715.794434][T26778] vpanic+0x281/0x750 [ 715.794464][T26778] ? __pfx__printk+0x10/0x10 [ 715.794497][T26778] ? __pfx_vpanic+0x10/0x10 [ 715.794525][T26778] ? is_bpf_text_address+0x292/0x2b0 [ 715.794554][T26778] ? is_bpf_text_address+0x26/0x2b0 [ 715.794596][T26778] panic+0xb9/0xc0 [ 715.794624][T26778] ? __pfx_panic+0x10/0x10 [ 715.794673][T26778] __warn+0x334/0x4c0 [ 715.794699][T26778] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 715.794734][T26778] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 715.794763][T26778] report_bug+0x2be/0x4f0 [ 715.794788][T26778] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 715.794818][T26778] ? mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 715.794849][T26778] ? mac80211_hwsim_sta_rc_update+0x6f7/0x860 [ 715.794877][T26778] handle_bug+0x84/0x160 [ 715.794909][T26778] exc_invalid_op+0x1a/0x50 [ 715.794941][T26778] asm_exc_invalid_op+0x1a/0x20 [ 715.794963][T26778] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860 [ 715.794995][T26778] Code: 71 17 00 00 48 c7 c7 e0 1d 50 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 80 94 7f fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 cd c9 bb fa 90 0f 0b 90 e9 fe fe ff [ 715.795017][T26778] RSP: 0018:ffffc900039fefd0 EFLAGS: 00010282 [ 715.795040][T26778] RAX: 1b0f886805bad400 RBX: 0000000000000014 RCX: 0000000000080000 [ 715.795058][T26778] RDX: ffffc9000c022000 RSI: 0000000000004b06 RDI: 0000000000004b07 [ 715.795076][T26778] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 715.795091][T26778] R10: dffffc0000000000 R11: fffffbfff1c7a940 R12: 0000000000000000 [ 715.795109][T26778] R13: dffffc0000000000 R14: 0000000000000006 R15: 0000000000000000 [ 715.795152][T26778] ? mac80211_hwsim_sta_rc_update+0x73/0x860 [ 715.795188][T26778] mac80211_hwsim_sta_add+0xa3/0x310 [ 715.795221][T26778] drv_sta_state+0x8be/0x1840 [ 715.795274][T26778] sta_info_insert_rcu+0xd32/0x1940 [ 715.795303][T26778] ? sta_info_insert_rcu+0x2ce/0x1940 [ 715.795342][T26778] sta_info_insert+0x16/0xc0 [ 715.795368][T26778] rdev_add_station+0x105/0x290 [ 715.795401][T26778] nl80211_new_station+0x1755/0x1b70 [ 715.795445][T26778] ? __pfx_nl80211_new_station+0x10/0x10 [ 715.795466][T26778] ? netdev_run_todo+0xe1d/0xea0 [ 715.795532][T26778] ? nl80211_pre_doit+0x4f1/0x930 [ 715.795574][T26778] genl_family_rcv_msg_doit+0x212/0x300 [ 715.795619][T26778] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 715.795669][T26778] ? bpf_lsm_capable+0x9/0x20 [ 715.795691][T26778] ? security_capable+0x7e/0x2e0 [ 715.795737][T26778] genl_rcv_msg+0x60e/0x790 [ 715.795781][T26778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 715.795813][T26778] ? ref_tracker_free+0x63a/0x7d0 [ 715.795839][T26778] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 715.795871][T26778] ? __pfx_nl80211_new_station+0x10/0x10 [ 715.795893][T26778] ? __pfx_nl80211_post_doit+0x10/0x10 [ 715.795929][T26778] ? __pfx_ref_tracker_free+0x10/0x10 [ 715.795969][T26778] netlink_rcv_skb+0x205/0x470 [ 715.795999][T26778] ? __pfx_genl_rcv_msg+0x10/0x10 [ 715.796034][T26778] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 715.796082][T26778] ? down_read+0x1ad/0x2e0 [ 715.796116][T26778] genl_rcv+0x28/0x40 [ 715.796148][T26778] netlink_unicast+0x759/0x8e0 [ 715.796186][T26778] netlink_sendmsg+0x805/0xb30 [ 715.796225][T26778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.796265][T26778] ? aa_sock_msg_perm+0xf1/0x1d0 [ 715.796292][T26778] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 715.796322][T26778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.796350][T26778] __sock_sendmsg+0x219/0x270 [ 715.796393][T26778] ____sys_sendmsg+0x505/0x830 [ 715.796431][T26778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 715.796475][T26778] ? import_iovec+0x74/0xa0 [ 715.796503][T26778] ___sys_sendmsg+0x21f/0x2a0 [ 715.796540][T26778] ? __pfx____sys_sendmsg+0x10/0x10 [ 715.796615][T26778] ? __fget_files+0x2a/0x420 [ 715.796647][T26778] ? __fget_files+0x3a0/0x420 [ 715.796691][T26778] __x64_sys_sendmsg+0x19b/0x260 [ 715.796727][T26778] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 715.796772][T26778] ? rcu_is_watching+0x15/0xb0 [ 715.796813][T26778] ? do_syscall_64+0xbe/0x3b0 [ 715.796845][T26778] do_syscall_64+0xfa/0x3b0 [ 715.796870][T26778] ? lockdep_hardirqs_on+0x9c/0x150 [ 715.796894][T26778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.796917][T26778] ? clear_bhb_loop+0x60/0xb0 [ 715.796948][T26778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.796971][T26778] RIP: 0033:0x7fc156f8e929 [ 715.797012][T26778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 715.797033][T26778] RSP: 002b:00007fc157dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.797059][T26778] RAX: ffffffffffffffda RBX: 00007fc1571b5fa0 RCX: 00007fc156f8e929 [ 715.797079][T26778] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000009 [ 715.797096][T26778] RBP: 00007fc157010b39 R08: 0000000000000000 R09: 0000000000000000 [ 715.797113][T26778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.797129][T26778] R13: 0000000000000000 R14: 00007fc1571b5fa0 R15: 00007ffd8fbcc698 [ 715.797170][T26778] [ 715.800509][T26778] Kernel Offset: disabled