last executing test programs:

3.867785526s ago: executing program 3 (id=1062):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x70, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@weak_binder={0x77622a85, 0x100b, 0x3}, @flat=@handle={0x73682a85, 0xa}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @enter_looper, @decrefs, @dead_binder_done], 0xae, 0x0, &(0x7f0000000240)="30d136c8c6ef5b7a107c056a42bc13ad03e3285f9286cee3128cb790783bd8bbaef5d9d4c8cbcc5b6ffca9ee79dfbe11e011646ca365b4a8ade75c44b94b22b2012d4fc96998c4e8df0a2d4cfbfb9386f8e697f86a94cdd7e6d30fe0e73d4236768a857994abc882c30a55a51ef455c93b28bd9bb03607eec91cb74a713ac44644ee437176d6cbf853cc06622ecd90ee8d9a43dded53829f8d48296970e502a272e787ab372edba82cb161af588a"}) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
ioctl$FICLONE(r2, 0x40049409, r2) (async)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async)
keyctl$assume_authority(0x10, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.046322751s ago: executing program 3 (id=1071):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008)
pipe2$9p(&(0x7f0000000580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000140)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}]}})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000000))
pread64(r3, &(0x7f0000000200)=""/4087, 0xff7, 0xd37)

1.04086535s ago: executing program 3 (id=1086):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) (async)
ppoll(&(0x7f0000000040)=[{r0, 0x14}], 0x1, 0x0, 0x0, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$FIONCLEX(r1, 0x5450) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x8, &(0x7f0000001b80), &(0x7f00000004c0)=0x80)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_GET_CPUID2(r6, 0xc008ae91, &(0x7f0000000580)) (async)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$netlink(r7, 0x10e, 0x8, &(0x7f0000000040)=""/60, &(0x7f0000000080)=0x3c) (async)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) (async)
socket(0xa, 0x3, 0x0)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x802, 0x0)
r10 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r9, 0x3)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000000)={0x38, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r10}, @clear_death={0x400c630f, 0x2}, @request_death, @dead_binder_done], 0x0, 0x0, 0x0}) (async)
signalfd(r6, &(0x7f00000001c0)={[0x976d]}, 0x8)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer={0x40086303, r10}], 0x0, 0x0, 0x0}) (async)
clock_gettime(0x0, &(0x7f0000000040)={<r11=>0x0, <r12=>0x0})
timerfd_settime(r1, 0x2, &(0x7f0000000080)={{0x0, 0x3938700}, {r11, r12+10000000}}, &(0x7f00000000c0))

988.942831ms ago: executing program 3 (id=1090):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f00007cc000/0x3000)=nil)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000ffc000/0x1000)=nil)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a7870c000000fddbdf250b000000040001802f"], 0x18}, 0x1, 0x0, 0x0, 0x8814}, 0x0)
syslog(0x4, &(0x7f0000005480)=""/85, 0x55)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x14, 0x52, 0x101, 0x100000, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r5)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r5)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket(0x80000000000000a, 0x2, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="0a0088a801bb88f7"], 0x12)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r6, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008075}, 0x0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f00000045c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004580)={&(0x7f0000005500)={0x21f0, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x49}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_MEASUREMENTS={0x89c, 0x111, 0x0, 0x1, {0x898, 0x5, 0x0, 0x1, [{0x204, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x184, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4d}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xe8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}]}, {0x578, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfe}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x264, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x30}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x164, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x10c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x134, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f3c}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0xb10, 0x111, 0x0, 0x1, {0xb0c, 0x5, 0x0, 0x1, [{0x1d4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x164}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x35d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x67a0}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3c}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x182}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x44, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x1c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x19c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xcb}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x87cf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ed}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}]}]}]}, {0x228, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x262}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x11c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xda}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}]}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x330, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x290, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x37f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x40, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4000}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}]}]}, {0x170, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x67}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x118, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x18, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0xe10, 0x111, 0x0, 0x1, {0xe0c, 0x5, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2cf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ba}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}]}, {0x3f0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1af}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x211cdf54}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x234}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x90, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x43}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x50}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x200, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9621}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x320}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x28c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1550}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7d}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x97ec4d4fd8bdc286}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2ce}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x138, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xb0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xe1ffe8a081e72403}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x39}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xab}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb3c9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0x1b4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1b0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xaf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}]}]}]}, {0x130, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xd4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x260}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x118, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}]}]}]}, {0x1b4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x216}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x6c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xcf1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x1}]}, 0x21f0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000080)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x44d0, &(0x7f0000000500)={0x0, 0x1ff5f, 0x2, 0x0, 0x295}, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14)

853.831294ms ago: executing program 0 (id=1099):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008)
pipe2$9p(&(0x7f0000000580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000001200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}]}})
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r3, &(0x7f0000000200)=""/4087, 0xff7, 0xd37)

793.695015ms ago: executing program 0 (id=1100):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x100880, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3)
mmap(&(0x7f0000700000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x3e0b000)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[<Y4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\x80\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x85\xa4r\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\xbaY\xf3\x8ai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9')
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000340)='wg1\x00', 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
execve(0x0, &(0x7f00000000c0), 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10)
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')

734.145666ms ago: executing program 3 (id=1101):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil)
socket(0x25, 0x80000, 0xc)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f00000000c0)=0x100000001, 0x4)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000f5, 0x0, 0xff000000000c0000}]})
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)

578.507249ms ago: executing program 3 (id=1102):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2101819, 0x0)
fdatasync(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = gettid()
fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2})
sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}]}, 0x74}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000180)='bridge0\x00')
r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
keyctl$invalidate(0x15, r5)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)

353.473724ms ago: executing program 2 (id=1103):
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x400)
ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000100)=""/215)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000380)=""/237)
mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0)
setxattr$incfs_size(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), &(0x7f0000000140)=0xfffffffffffff905, 0x8, 0x1)

334.798623ms ago: executing program 2 (id=1104):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000200)='\xc2\xedE\\\xe3\xd5>\x8c\x1b\xa7\bj\xa4\xc4\xde\xd8\x15\xa6|,\xfdD\xcc\x8a\r_H!\x11t\xfc\xac\xe0s\x81\xf8\xae\x98It\x12&\x12\xd6&\xc3\xe4\x11\x8b\xae\xc1#B\x11\xa2\xb2\xf9\x90\xff0\x1e]\x8a]n`\xff\x97\xdf\xe3|i\xd0\xe4Z^\x8cD\x82\x92\xfd\x84\x13\x83n\xc2VW>4\x06\xe6j\x1d\x05\xfc\xa5o\xbc\x93\xcd\x8cSg\xa9\xefo\x11|\x10\xe6\x1b\x02/m\xcd\xdeN\xcb\xb1\xfel\x0f\xeb\xc5\xefF\xa85\x99D\xb0\xf2]\xdf\x93\xc4Z\xf1\xb3\xce\xcc\xe2qc\xc6\x1c\x0e\x12\xbdx\x01\xe8\x0e\x13\xe3r\x9csAJV\x99\xe6qN>$\xb3V\x12Kd\xb7\xc8\xd3\xcb\x88S\x90j^\\x\x1f\v\xc9\xc2{e\x82{\tEH\x90\xa8\x18\x0fG\xeb\xf8\xde\x91\x99\xaf\xe1\x88q\x81IQN\x92h\x980\x03+\xf3\x1a\xd1}\xf7\x87\xd1\xe5@4l\xdci\xd5\x1f\x7f\xaa\xb3k\x8a\xba\x12\x91^\xcb3H\xf00\x8b\x11\x1b\xfcR\xc3\x11\xe2\x8dU\x01\xee\x8eU\xf2\xd8Y>\x86+') (async)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000)

278.683285ms ago: executing program 2 (id=1105):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x1d, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

277.258985ms ago: executing program 2 (id=1106):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001f01010411000000000000000200fffd"], 0x14}}, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
recvmmsg(r2, &(0x7f0000003300)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)=""/166, 0xa6}, {&(0x7f0000000200)=""/111, 0x6f}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000280)=""/98, 0x62}, {&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/49, 0x31}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x7}, 0x4b99}, {{&(0x7f0000000480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002580)=""/249, 0xf9}, {&(0x7f0000002680)=""/236, 0xec}, {&(0x7f0000002780)=""/249, 0xf9}, {&(0x7f0000002880)=""/245, 0xf5}, {&(0x7f0000002980)=""/146, 0x92}, {&(0x7f0000000500)=""/15, 0xf}], 0x6, &(0x7f0000002ac0)=""/9, 0x9}, 0x40000}, {{&(0x7f0000002b00)=@vsock, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002b80)=""/153, 0x99}, {&(0x7f0000002c40)=""/128, 0x80}, {&(0x7f0000002cc0)=""/227, 0xe3}, {&(0x7f0000002dc0)=""/67, 0x43}, {&(0x7f0000002e40)=""/128, 0x80}, {&(0x7f0000002ec0)=""/238, 0xee}], 0x6, &(0x7f0000003040)=""/136, 0x88}, 0xfffff000}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000003100)=""/102, 0x66}], 0x1, &(0x7f00000031c0)=""/3, 0x3}, 0x6}, {{&(0x7f0000003200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003280), 0x0, &(0x7f00000032c0)=""/47, 0x2f}, 0xd1b3}], 0x5, 0x21, &(0x7f0000003440)={0x0, 0x989680})
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x400001000001fe)
socket(0x2c, 0x3, 0xbe76)
ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xc, 0x13, r1, 0xca639000)

276.609965ms ago: executing program 2 (id=1107):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000008400)=ANY=[@ANYBLOB="902800003b0001"], 0x2890}], 0x1}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
lseek(r1, 0x401, 0x3)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000040)={0x2, 0x0, @ioapic={0x1000, 0xe, 0xffffffff, 0xffff2c44, 0x0, [{0x0, 0x42, 0x7, '\x00', 0x5}, {0x2, 0x8, 0x8}, {0x7, 0xc, 0xf7, '\x00', 0x3}, {0xa, 0x4, 0x2, '\x00', 0x9}, {0x3, 0x5, 0x1, '\x00', 0x9}, {0x1}, {0x3, 0x2, 0x6}, {0x7, 0x6, 0xc, '\x00', 0xd}, {0x4, 0x9, 0x3, '\x00', 0xea}, {0xd, 0xc, 0x9, '\x00', 0x40}, {0x40, 0x10, 0x4, '\x00', 0xe}, {0xc, 0x5, 0x2, '\x00', 0xf9}, {0x7f, 0x44, 0x6, '\x00', 0x6}, {0xff, 0x81, 0x81, '\x00', 0x5}, {0x9, 0x6, 0x5, '\x00', 0x4}, {0x9, 0x7, 0x9, '\x00', 0x9}, {0x1, 0xd, 0x2, '\x00', 0x9f}, {0x1, 0x8, 0x8, '\x00', 0x6f}, {0x5, 0x5, 0x5, '\x00', 0xfd}, {0xa, 0xed, 0xd, '\x00', 0x9}, {0x3, 0x8, 0xc}, {0x3, 0xf7, 0x6, '\x00', 0x9}, {0x3, 0x3, 0xff, '\x00', 0x1}, {0x4, 0x9, 0x5c}]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$inet(0x2, 0x801, 0x0) (async)
r2 = socket$inet(0x2, 0x801, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e03, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
splice(r2, 0x0, r3, 0x0, 0x9, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) (async)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r4, &(0x7f0000000300)=@unlock_all, 0xb) (async)
write$vga_arbiter(r4, &(0x7f0000000300)=@unlock_all, 0xb)
write$vga_arbiter(r4, &(0x7f0000000280)=ANY=[], 0xe)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f00005ec000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/88, 0x58, 0x1, &(0x7f0000000340)=""/50, 0x32}, &(0x7f00000003c0)=0x40)
r5 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r1)
sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r6, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) (async)
sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r6, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x1)

275.163345ms ago: executing program 2 (id=1108):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x1000400, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@verity_require}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0xeeee0000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x10, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x0, 0x8000000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x100000, 0x4, 0x8, 0x80, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x9}, {0x0, 0x1000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7, 0x5}, {0x2000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x120, 0x8, 0x9000, 0x2000, [0xdd41, 0x0, 0x2]})
read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020)

272.238034ms ago: executing program 0 (id=1109):
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="e8881b94288c6d2fc0575de69413065b4e3041e5d1750748c0d3eb6dfedc4bb0daa0e221d0f5c61e9b0e48085c9ec5b23b20e52a9bb51e2fa746835e50d7d79b6cd8aac70677a159a3c5ea020e459a3071cb10ec3835723bcb0ed6", 0x5b}], 0x1)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r1, 0x4, 0x42000) (async)
read$FUSE(r1, &(0x7f0000001400)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x2b, 0x7, 0x1408800, 0x9, 0x9, 0x81, 0xe3, 0x0, 0x0, 0x10, 0x2ea8}}, 0x50) (async)
r3 = socket$packet(0x11, 0x3, 0x300) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) (async)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
pipe2(&(0x7f0000000000), 0x880) (async, rerun: 64)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 64)
setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000040)=0x4, 0x4) (async, rerun: 32)
recvmmsg(r4, &(0x7f0000001280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/157, 0x9d}, 0x8}], 0x1, 0x45833af92e4b39ff, 0x0) (async, rerun: 32)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r5=>0x0}) (rerun: 64)
sendto$packet(r3, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 64)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async, rerun: 64)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00') (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)

192.765646ms ago: executing program 0 (id=1110):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6c00, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x12, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

178.023106ms ago: executing program 0 (id=1111):
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffff3)
mmap(&(0x7f0000700000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x3e0b000)
r0 = socket$inet6(0xa, 0x2, 0x0)
accept$inet6(r0, 0x0, &(0x7f0000000080))
setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
sendto$inet6(r0, &(0x7f0000001380)="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", 0x587, 0x0, &(0x7f0000000180)={0xa, 0x5e64, 0x100000, @mcast2, 0x4}, 0x1c)
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[<Y4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\x80\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x85\xa4r\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\xbaY\xf3\x8ai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9')
ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0)
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')

158.623217ms ago: executing program 0 (id=1112):
syz_extract_tcp_res$synack(&(0x7f00000003c0), 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000002f8000100000000000000000000000008000440000000000000f43ce9ed0b9d2ea06cf2391ef6221196a04ba05df597a35b9de0aa437992f786ddaa3c9b726d77a53ef12a7d7862c020010d0d723ef1cca112ad9149bde7428c3c229f7bae8b74c5dec577a7ddabbe3dd3e03aa0a537723cf40afd6f2823fb8e85922c13fc9ef002908f4f5b448230b9bf05bf8bc9d32e47f97ecd41c7c76d01dcb8ea734e195f57b384e986f336bf8e80ab46f3b343c05e216ade74af4991808513b1823abfb6"], 0x2c}}, 0x814)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200000, 0x40)
r3 = openat$incfs(r2, &(0x7f00000002c0)='.pending_reads\x00', 0x0, 0x12)
fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), &(0x7f00000001c0)='./cgroup\x00', 0x9, 0x3)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)
mlockall(0x7)
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffd, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8)
r4 = syz_io_uring_setup(0x1727, &(0x7f00000002c0)={0x0, 0x7f9d, 0x4000, 0x1, 0xba}, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000240))
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000100)={0x7ff, {{0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {{0xa, 0x4e20, 0x700, @dev={0xfe, 0x80, '\x00', 0xb}, 0x800}}}, 0x108)
keyctl$set_reqkey_keyring(0xe, 0x6)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xa)
ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000380)={r6})
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b"], 0x0)
close_range(r5, r1, 0x0)

76.867409ms ago: executing program 1 (id=1114):
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=<r0=>0x0)
setuid(r0)
r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x80000)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0}, &(0x7f0000000100)=0xc)
mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x6000, &(0x7f0000000200)={'trans=unix,', {[{@cachetag={'cachetag', 0x3d, '/'}}, {@access_uid={'access', 0x3d, r3}}, {@cache_mmap}, {@ignoreqv}, {@cache_readahead}, {@fscache}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@dont_measure}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}})
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x4, 0x1, 0x4, 0x2}}, 0x26)
r5 = syz_open_procfs(r2, &(0x7f0000000300)='net/ip_vs\x00')
setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000340)=0x1, 0x4)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(r5, 0x4004af77, &(0x7f0000000380)=0x1)
r6 = getpgrp(r2)
capset(&(0x7f00000003c0)={0x20071026, r6}, &(0x7f0000000400)={0x5, 0x0, 0x1, 0x80000000, 0x8, 0x8})
setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000440)={{0x88, @rand_addr=0x64010101, 0x4e24, 0x3, 'sh\x00', 0x8, 0x3, 0x3c}, {@multicast2, 0x4e20, 0x2, 0x7, 0xbf, 0xca4}}, 0x44)
r7 = socket$inet6(0xa, 0xa, 0xdf8)
syz_pidfd_open(r6, 0x0)
syz_pidfd_open(r2, 0x0)
sendto$inet(r5, &(0x7f00000004c0)="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", 0x1000, 0x20040054, &(0x7f00000014c0)={0x2, 0x4e21, @remote}, 0x10)
recvmsg(r1, &(0x7f0000001640)={&(0x7f0000001500)=@ax25={{0x3, @null}, [@remote, @null, @remote, @rose, @netrom, @netrom, @netrom, @null]}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001580)=""/51, 0x33}, {&(0x7f00000015c0)=""/38, 0x26}], 0x2}, 0xb1)
write$P9_RGETLOCK(r5, &(0x7f0000001680)={0x25, 0x37, 0x1, {0x1, 0x4, 0x7, r2, 0x7, 'fscache'}}, 0x25)
r8 = syz_open_procfs(r6, &(0x7f00000016c0)='attr/exec\x00')
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000001700)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x7fffffff, 0x2, 0x1, 0x2, 0x0, 0x4}, 0x20)
capset(&(0x7f0000001740)={0x20071026, r2}, &(0x7f0000001780)={0x6, 0x0, 0x9, 0x8, 0x8, 0x8})
r9 = dup2(r4, r7)
getsockopt$inet6_tcp_int(r9, 0x6, 0x22, &(0x7f00000017c0), &(0x7f0000001800)=0x4)
ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000001840)={0x5, 0x7d, 0x1})
syz_genetlink_get_family_id$fou(&(0x7f0000001880), 0xffffffffffffffff)
r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r10, 0x0, 0x20, &(0x7f00000018c0)="51b4975efc9781336a4bfaf440452ea7242412916d98d8d4906748e7dfd1488ed1826b935c5e37078e0002ce2778ffccbe9f764fa2f491b20edfd3da90e1af1a55dc8d1ddd84a1aff6ce2145cc8739b97734c8327ab5bc6b316fd23a600427698aaeee90746077a36d98d9e557f8689d1820461ce73a52361d4f2207841466f66ba4a5312242761575426a3cf28912d6243008c8e7dd6e", 0x97)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3e)
setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000001980), 0x4)

76.591859ms ago: executing program 1 (id=1115):
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x5)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
r3 = dup(r1)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x2, 0xc1, 0x2, 0x38c}, {0x9, 0x10, 0x1, 0x4000}, {0x7f, 0xeb, 0x3, 0x80000000}, {0x3, 0xe, 0x1}, {0x0, 0x4, 0x4, 0x1ef4}]})
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64, @ANYBLOB="f4b02b86df87851e7be7b383760d80"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x200004, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="20e49f7bae0a3cd6cf8a756a7d0d060b342bb4ab1cb589c11da384431115867440ffef2f549c8a67b534f7196f5f0ce78b0bddf99644565bc503a93f1afc23964ea8f138268663e22e0409eeb4b1d304789c5445f35534e59d87eccb9d9c2dac4c694df5dbd23db98466efa39dfd7dd11c588de5f70c4ba08b41fea0048196", @ANYRESHEX=r1, @ANYBLOB=',cache=fscache,\x00'])
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/meminfo\x00', 0x0, 0x0)
fgetxattr(r5, &(0x7f0000000380)=@known='user.incfs.metadata\x00', &(0x7f0000000440)=""/219, 0xdb)
ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x4080, 0x0)
ioctl$HIDIOCINITREPORT(r8, 0x4805, 0x0)
ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x512)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r6, 0x98b2f000)

10.58133ms ago: executing program 1 (id=1116):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r3)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd70ff7f000025010000001400020077673000000000000000000000000000080005000000000008000100", @ANYRES32=0x0], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040814)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x280, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
socket$inet6(0xa, 0xa, 0x4)

10.41588ms ago: executing program 1 (id=1117):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
umount2(0x0, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x11)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x305)
ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0)

9.90715ms ago: executing program 1 (id=1118):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x3})

0s ago: executing program 1 (id=1119):
getresuid(&(0x7f0000000840), 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x47)
r3 = dup2(r0, 0xffffffffffffffff)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000480)={{0x88, @broadcast, 0x4e20, 0x0, 'fo\x00', 0x0, 0x7, 0x24}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x4e1d, 0x2000, 0x8, 0x1, 0xa245}}, 0x44)
cachestat(r2, &(0x7f0000000040)={0x1, 0x8}, 0x0, 0x20)
sendto$inet(r0, &(0x7f0000000140)="d3367f6b7353a6d0b667e57a3111b82831708b314ed5121ac2e8eaa2f2e5d7143668015018fe503231afbc4283c285a3bc86b82e3a9d92453fd10986e0d18ba71fbb729d62728ce9bdcd6292f80db2a57b5c4aedd18e4a00ad69d21b6a12b327ac479865adbfa9491ceae5bfb7429514364173398f9758ad7ea8c44a70e6c3d90ec852ab85ca91759fe80d859a152e5affb0d5ab80b3bb4da004f67e935394a6895852724165d6e7296e84d3b6499787ee37e5627cc71fddc8e7a880cacc518a5cfee09893829b74f0f32ca5f6febfe79419e095f7d95f", 0xd7, 0x4008000, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, &(0x7f0000000340)=0x10, 0x4, 0x5)
r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x10010, r5, 0x0)
clock_gettime(0x0, &(0x7f0000000a40)={<r6=>0x0, <r7=>0x0})
recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000640)=""/76, 0x4c}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x3, &(0x7f0000000bc0)=""/220, 0xdc}, 0x944}, {{&(0x7f0000000880)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000780)}], 0x1}, 0xfffffff7}], 0x2, 0x100, &(0x7f0000000a80)={r6, r7+60000000})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_CAPBSET_DROP(0x18, 0x1a)
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="000001250001080006040001aaaaaaaaaa5f6524aaac1414bb000200000000e0"], 0x20)
mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000540)='fusectl\x00', 0x160035, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x15)
ioctl$TCFLSH(r8, 0x400455cb, 0x6800000000000000)
unshare(0x400)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000b80)={0x1f, 0xfbff, 0x1}, 0x6)
read$FUSE(r9, &(0x7f00000014c0)={0x2020}, 0x2020)
write$binfmt_misc(r9, &(0x7f0000000300), 0x6)
fcntl$getownex(r2, 0x10, &(0x7f0000000280))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts.
[   25.527048][   T36] audit: type=1400 audit(1759512540.630:64): avc:  denied  { mounton } for  pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   25.528538][  T282] cgroup: Unknown subsys name 'net'
[   25.549781][   T36] audit: type=1400 audit(1759512540.630:65): avc:  denied  { mount } for  pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   25.577052][   T36] audit: type=1400 audit(1759512540.660:66): avc:  denied  { unmount } for  pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   25.577442][  T282] cgroup: Unknown subsys name 'devices'
[   25.780922][  T282] cgroup: Unknown subsys name 'hugetlb'
[   25.786607][  T282] cgroup: Unknown subsys name 'rlimit'
[   25.943204][   T36] audit: type=1400 audit(1759512541.050:67): avc:  denied  { setattr } for  pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   25.966446][   T36] audit: type=1400 audit(1759512541.050:68): avc:  denied  { mounton } for  pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   25.977616][  T284] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   25.991556][   T36] audit: type=1400 audit(1759512541.050:69): avc:  denied  { mount } for  pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   26.023521][   T36] audit: type=1400 audit(1759512541.110:70): avc:  denied  { relabelto } for  pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.048958][   T36] audit: type=1400 audit(1759512541.110:71): avc:  denied  { write } for  pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.067713][  T282] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   26.074533][   T36] audit: type=1400 audit(1759512541.180:72): avc:  denied  { read } for  pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.108999][   T36] audit: type=1400 audit(1759512541.180:73): avc:  denied  { open } for  pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.004159][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.011612][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.018949][  T292] bridge_slave_0: entered allmulticast mode
[   27.025278][  T292] bridge_slave_0: entered promiscuous mode
[   27.033411][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.040509][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.047814][  T289] bridge_slave_0: entered allmulticast mode
[   27.054228][  T289] bridge_slave_0: entered promiscuous mode
[   27.060601][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.067661][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.074826][  T291] bridge_slave_0: entered allmulticast mode
[   27.081329][  T291] bridge_slave_0: entered promiscuous mode
[   27.087723][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.094969][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.102151][  T292] bridge_slave_1: entered allmulticast mode
[   27.108597][  T292] bridge_slave_1: entered promiscuous mode
[   27.116341][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.123640][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.130777][  T289] bridge_slave_1: entered allmulticast mode
[   27.137153][  T289] bridge_slave_1: entered promiscuous mode
[   27.143456][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.150582][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.158083][  T291] bridge_slave_1: entered allmulticast mode
[   27.164474][  T291] bridge_slave_1: entered promiscuous mode
[   27.215036][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.222214][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.229398][  T290] bridge_slave_0: entered allmulticast mode
[   27.235661][  T290] bridge_slave_0: entered promiscuous mode
[   27.242146][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.249394][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.256481][  T290] bridge_slave_1: entered allmulticast mode
[   27.262904][  T290] bridge_slave_1: entered promiscuous mode
[   27.413334][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.420533][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.427887][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.434988][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.464935][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.472238][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.479909][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.487204][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.506747][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.514057][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.521811][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.529151][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.562281][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.569377][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.576863][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.584016][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.608537][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.616304][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.623887][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.632103][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.639572][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.646949][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.654353][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.661791][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.672418][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.679498][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.690790][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.697853][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.708400][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.715928][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.732485][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.739573][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.751170][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.758697][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.773326][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.780436][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.805034][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.812215][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.825207][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.832298][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.858388][  T291] veth0_vlan: entered promiscuous mode
[   27.876624][  T291] veth1_macvtap: entered promiscuous mode
[   27.891867][  T290] veth0_vlan: entered promiscuous mode
[   27.917111][  T289] veth0_vlan: entered promiscuous mode
[   27.925659][  T292] veth0_vlan: entered promiscuous mode
[   27.944741][  T289] veth1_macvtap: entered promiscuous mode
[   27.956479][  T290] veth1_macvtap: entered promiscuous mode
[   27.964513][  T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   27.997172][  T292] veth1_macvtap: entered promiscuous mode
[   28.048816][  T333] netlink: 37 bytes leftover after parsing attributes in process `syz.3.4'.
[   28.060467][  T333] __vm_enough_memory: pid: 333, comm: syz.3.4, bytes: 18014402804453376 not enough memory for the allocation
[   28.077422][  T338] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   28.147057][  T355] rust_binder: Write failure EFAULT in pid:9
[   28.185647][  T360] =======================================================
[   28.185647][  T360] WARNING: The mand mount option has been deprecated and
[   28.185647][  T360]          and is ignored by this kernel. Remove the mand
[   28.185647][  T360]          option from the mount to silence this warning.
[   28.185647][  T360] =======================================================
[   28.228634][  T360] binder: Unknown parameter 'context����[7�'
[   28.236474][  T360] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   28.308738][  T330] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   28.348261][  T370] capability: warning: `syz.2.12' uses deprecated v2 capabilities in a way that may be insecure
[   28.360087][  T370] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   28.438533][  T330] usb 2-1: device descriptor read/64, error -71
[   28.489054][  T393] cgroup: Bad value for 'name'
[   28.598538][   T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   28.612367][  T396] syz.2.21: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0
[   28.627244][  T396] CPU: 1 UID: 0 PID: 396 Comm: syz.2.21 Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b
[   28.627275][  T396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   28.627297][  T396] Call Trace:
[   28.627305][  T396]  <TASK>
[   28.627313][  T396]  __dump_stack+0x21/0x30
[   28.627358][  T396]  dump_stack_lvl+0x10c/0x190
[   28.627389][  T396]  ? __cfi_dump_stack_lvl+0x10/0x10
[   28.627424][  T396]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   28.627458][  T396]  dump_stack+0x19/0x20
[   28.627490][  T396]  warn_alloc+0x1bc/0x2a0
[   28.627523][  T396]  ? stack_depot_save_flags+0x399/0x800
[   28.627551][  T396]  ? __cfi_warn_alloc+0x10/0x10
[   28.627584][  T396]  ? kasan_save_track+0x4f/0x80
[   28.627609][  T396]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[   28.627634][  T396]  ? xskq_create+0x68/0x2a0
[   28.627666][  T396]  ? xsk_init_queue+0xb6/0x120
[   28.627698][  T396]  ? xsk_setsockopt+0x43f/0x6f0
[   28.627729][  T396]  ? do_sock_setsockopt+0x26a/0x400
[   28.627761][  T396]  ? __x64_sys_setsockopt+0x1b8/0x250
[   28.627793][  T396]  ? x64_sys_call+0x2adc/0x2ee0
[   28.627830][  T396]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   28.627871][  T396]  __vmalloc_node_range_noprof+0x135/0x1420
[   28.627914][  T396]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[   28.627951][  T396]  ? avc_has_perm+0x1f2/0x220
[   28.627985][  T396]  ? kasan_save_alloc_info+0x40/0x50
[   28.628020][  T396]  ? __kasan_kmalloc+0x96/0xb0
[   28.628047][  T396]  vmalloc_user_noprof+0x77/0x90
[   28.628091][  T396]  ? xskq_create+0xdb/0x2a0
[   28.628125][  T396]  xskq_create+0xdb/0x2a0
[   28.628158][  T396]  xsk_init_queue+0xb6/0x120
[   28.628191][  T396]  xsk_setsockopt+0x43f/0x6f0
[   28.628223][  T396]  ? __cfi_xsk_setsockopt+0x10/0x10
[   28.628255][  T396]  ? do_futex+0x309/0x500
[   28.628281][  T396]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[   28.628313][  T396]  ? security_socket_setsockopt+0x33/0xd0
[   28.628335][  T396]  ? __cfi_xsk_setsockopt+0x10/0x10
[   28.628367][  T396]  do_sock_setsockopt+0x26a/0x400
[   28.628400][  T396]  ? __cfi_do_sock_setsockopt+0x10/0x10
[   28.628436][  T396]  __x64_sys_setsockopt+0x1b8/0x250
[   28.628475][  T396]  x64_sys_call+0x2adc/0x2ee0
[   28.628511][  T396]  do_syscall_64+0x58/0xf0
[   28.628540][  T396]  ? clear_bhb_loop+0x50/0xa0
[   28.628565][  T396]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   28.628604][  T396] RIP: 0033:0x7fa90c18eec9
[   28.628632][  T396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   28.628654][  T396] RSP: 002b:00007fa90cfcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   28.628682][  T396] RAX: ffffffffffffffda RBX: 00007fa90c3e5fa0 RCX: 00007fa90c18eec9
[   28.628702][  T396] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[   28.628719][  T396] RBP: 00007fa90c211f91 R08: 0000000000000004 R09: 0000000000000000
[   28.628736][  T396] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   28.628754][  T396] R13: 00007fa90c3e6038 R14: 00007fa90c3e5fa0 R15: 00007ffe64c8f8d8
[   28.628775][  T396]  </TASK>
[   28.663168][  T397] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.666072][  T396] Mem-Info:
[   28.673921][  T397] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   28.677133][  T396] active_anon:4955 inactive_anon:0 isolated_anon:0
[   28.677133][  T396]  active_file:5686 inactive_file:2221 isolated_file:0
[   28.677133][  T396]  unevictable:0 dirty:1362 writeback:0
[   28.677133][  T396]  slab_reclaimable:3736 slab_unreclaimable:70584
[   28.677133][  T396]  mapped:23807 shmem:163 pagetables:715
[   28.677133][  T396]  sec_pagetables:0 bounce:0
[   28.677133][  T396]  kernel_misc_reclaimable:0
[   28.677133][  T396]  free:1548439 free_pcp:4312 free_cma:0
[   28.682361][  T397] rust_binder: Write failure EFAULT in pid:38
[   28.685605][  T396] Node 0 active_anon:19820kB inactive_anon:0kB active_file:22744kB inactive_file:8884kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:95228kB dirty:5448kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4928kB pagetables:2860kB sec_pagetables:0kB all_unreclaimable? no
[   28.691751][  T330] usb 2-1: device descriptor read/64, error -71
[   28.696149][  T396] DMA32 free:2952148kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:13788kB local_pcp:3040kB free_cma:0kB
[   28.948511][  T330] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   28.951075][  T396] lowmem_reserve[]:
[   29.077310][   T45] usb 4-1: Using ep0 maxpacket: 8
[   29.078654][  T396]  0
[   29.084850][   T45] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[   29.090760][  T396]  3921
[   29.097154][   T45] usb 4-1: config 179 has no interface number 0
[   29.098845][  T396]  3921
[   29.100151][   T45] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   29.106354][  T396] 
[   29.109656][   T45] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   29.121690][  T396] Normal free:3243436kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19720kB inactive_anon:0kB active_file:22744kB inactive_file:8884kB unevictable:0kB writepending:5448kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:1612kB local_pcp:504kB free_cma:0kB
[   29.122701][   T45] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 114, changing to 10
[   29.134350][  T396] lowmem_reserve[]:
[   29.167073][   T45] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   29.181240][  T330] usb 2-1: device descriptor read/64, error -71
[   29.183370][   T45] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   29.195715][  T396]  0
[   29.213019][   T45] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   29.213318][  T396]  0
[   29.215799][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.225618][  T396]  0
[   29.229950][  T368] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   29.241574][  T396] 
[   29.251565][  T396] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 4*2048kB (M) 717*4096kB (M) = 2952148kB
[   29.272307][  T396] Normal: 27*4kB (ME) 26*8kB (ME) 18*16kB (ME) 46*32kB (UME) 92*64kB (UME) 92*128kB (UME) 48*256kB (UME) 25*512kB (UME) 9*1024kB (UM) 8*2048kB (UME) 775*4096kB (M) = 3244828kB
[   29.291237][  T396] 8141 total pagecache pages
[   29.296095][  T396] 0 pages in swap cache
[   29.300814][  T396] Free swap  = 124996kB
[   29.305190][  T396] Total swap = 124996kB
[   29.321302][  T396] 2097051 pages RAM
[   29.325247][  T396] 0 pages HighMem/MovableOnly
[   29.330287][  T396] 351537 pages reserved
[   29.339488][  T407] netlink: 37 bytes leftover after parsing attributes in process `syz.0.25'.
[   29.348381][  T396] 0 pages cma reserved
[   29.359318][  T396] Memory allocations:
[   29.364953][  T396]          0 B        0 init/main.c:1370 func:do_initcalls
[   29.369556][  T412] 9pnet: p9_errstr2errno: server reported unknown error 
[   29.379724][  T396]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[   29.388053][  T396]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[   29.396071][  T396]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[   29.405245][  T396]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[   29.416071][  T396]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[   29.425807][  T414] overlayfs: missing 'lowerdir'
[   29.426058][  T396]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[   29.438781][  T330] usb 2-1: device descriptor read/64, error -71
[   29.445171][  T396]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[   29.453362][  T396]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[   29.461544][  T396]          0 B        0 init/initramfs.c:101 func:find_link
[   29.479463][  T419] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   29.490395][  T419] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   29.499429][  T419] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   29.507426][  T419] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   29.544393][  T343] Bluetooth: hci0: Frame reassembly failed (-84)
[   29.548995][  T330] usb usb2-port1: attempt power cycle
[   29.680823][  T368] rust_binder: Write failure EFAULT in pid:15
[   29.788506][   T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   29.888554][  T330] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   29.909736][  T330] usb 2-1: device descriptor read/8, error -71
[   29.971183][   T45] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   29.980612][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.988778][   T45] usb 1-1: Product: syz
[   29.993485][   T45] usb 1-1: Manufacturer: syz
[   29.998331][   T45] usb 1-1: SerialNumber: syz
[   30.039734][  T330] usb 2-1: device descriptor read/8, error -71
[   30.190778][   T10] usb 4-1: USB disconnect, device number 2
[   30.190824][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   30.205830][    C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?
[   30.209687][  T431] rust_binder: Write failure EFAULT in pid:17
[   30.254762][  T436] can0: slcan on ptm1.
[   30.278527][  T330] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   30.300901][  T330] usb 2-1: device descriptor read/8, error -71
[   30.430021][  T330] usb 2-1: device descriptor read/8, error -71
[   30.538595][  T330] usb usb2-port1: unable to enumerate USB device
[   30.588842][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   30.739881][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   30.750204][   T10] usb 4-1: config 0 has no interfaces?
[   30.755713][   T10] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[   30.765184][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.773978][   T10] usb 4-1: config 0 descriptor??
[   30.981003][   T45] usb 4-1: USB disconnect, device number 3
[   31.019812][  T436] can0 (unregistered): slcan off ptm1.
[   31.052669][   T36] kauditd_printk_skb: 108 callbacks suppressed
[   31.052688][   T36] audit: type=1400 audit(1759512546.160:182): avc:  denied  { create } for  pid=461 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   31.081039][   T36] audit: type=1400 audit(1759512546.170:183): avc:  denied  { sys_admin } for  pid=461 comm="syz.1.33" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   31.104853][   T36] audit: type=1400 audit(1759512546.200:184): avc:  denied  { remount } for  pid=461 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   31.543963][   T36] audit: type=1400 audit(1759512546.650:185): avc:  denied  { ioctl } for  pid=482 comm="syz.3.34" path="socket:[3866]" dev="sockfs" ino=3866 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   31.569695][  T429] Bluetooth: hci0: command 0x1003 tx timeout
[   31.575836][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   31.614699][   T36] audit: type=1400 audit(1759512546.720:186): avc:  denied  { read write } for  pid=487 comm="syz.2.36" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   31.640080][   T36] audit: type=1400 audit(1759512546.720:187): avc:  denied  { open } for  pid=487 comm="syz.2.36" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   31.664972][   T36] audit: type=1400 audit(1759512546.780:188): avc:  denied  { ioctl } for  pid=487 comm="syz.2.36" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   31.694827][  T489] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=489 comm=syz.2.36
[   31.727379][  T492] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2
[   31.742432][  T492] rust_binder: Write failure EINVAL in pid:45
[   32.476975][  T330] usb 1-1: USB disconnect, device number 2
[   32.581503][  T494] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.585585][   T36] audit: type=1400 audit(1759512547.690:189): avc:  denied  { connect } for  pid=495 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   32.586249][  T496] tipc: Started in network mode
[   32.617544][   T36] audit: type=1400 audit(1759512547.690:190): avc:  denied  { write } for  pid=495 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   32.647635][  T496] tipc: Node identity 4e55927de037, cluster identity 4711
[   32.660418][  T496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   32.665203][  T505] raw_sendmsg: syz.2.42 forgot to set AF_INET. Fix it!
[   32.674241][   T36] audit: type=1400 audit(1759512547.750:191): avc:  denied  { bind } for  pid=497 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   32.696941][  T496] tipc: Disabling bearer <eth:syzkaller0>
[   32.726204][  T510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   32.726237][  T510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:54
[   32.750769][  T512] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[   32.760680][  T512] rust_binder: Error while translating object.
[   32.769564][  T512] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   32.775762][  T512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56
[   32.801548][  T516] 9pnet_fd: Insufficient options for proto=fd
[   32.846799][  T523] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   32.854411][  T523] rust_binder: Failed to allocate buffer. len:64, is_oneway:false
[   32.866234][  T526] netlink: 'syz.0.52': attribute type 11 has an invalid length.
[   32.887077][  T526] netlink: 'syz.0.52': attribute type 2 has an invalid length.
[   32.895605][  T526] rust_binder: Error while translating object.
[   32.895647][  T526] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   32.896732][  T528] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.901895][  T526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:38
[   32.911744][  T359] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   32.960153][  T528] rust_binder: 62: no such ref 0
[   32.970021][  T535] binder: Bad value for 'max'
[   32.975451][  T528] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   32.992643][  T528] rust_binder: Write failure EINVAL in pid:62
[   33.036868][  T551] SELinux: security_context_str_to_sid () failed with errno=-22
[   33.098514][  T359] usb 4-1: Using ep0 maxpacket: 8
[   33.107311][  T359] usb 4-1: config 21 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   33.118944][  T359] usb 4-1: config 21 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[   33.131092][  T359] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 255, changing to 11
[   33.142871][  T359] usb 4-1: config 21 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 26123, setting to 1024
[   33.146716][  T556] process 'syz.0.60' launched './file0' with NULL argv: empty string added
[   33.155178][  T359] usb 4-1: config 21 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   33.178421][  T359] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[   33.187574][  T359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   33.195669][  T359] usb 4-1: Product: syz
[   33.199941][  T359] usb 4-1: Manufacturer: syz
[   33.204539][  T359] usb 4-1: SerialNumber: syz
[   33.211568][  T506] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   33.220082][  T359] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:21.0/input/input4
[   33.268533][  T330] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   33.340402][  T570] can0: slcan on ptm0.
[   33.408521][  T330] usb 2-1: device descriptor read/64, error -71
[   33.427216][  T506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.437716][  T506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   33.448394][    T9] usb 4-1: USB disconnect, device number 4
[   33.608604][  T584] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   33.658548][  T330] usb 2-1: device descriptor read/64, error -71
[   33.759776][  T584] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   33.770122][  T584] usb 1-1: config 0 has no interfaces?
[   33.775629][  T584] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[   33.785039][  T584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.794674][  T584] usb 1-1: config 0 descriptor??
[   33.908518][  T330] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   33.986271][  T589] rust_binder: Error while translating object.
[   33.986314][  T589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   33.992715][  T589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:32
[   34.004003][  T400] usb 1-1: USB disconnect, device number 3
[   34.038527][  T330] usb 2-1: device descriptor read/64, error -71
[   34.069780][  T570] can0 (unregistered): slcan off ptm0.
[   34.288496][  T330] usb 2-1: device descriptor read/64, error -71
[   34.408624][  T330] usb usb2-port1: attempt power cycle
[   34.735395][  T620] KVM: debugfs: duplicate directory 620-4
[   34.768567][  T330] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   34.801951][  T330] usb 2-1: device descriptor read/8, error -71
[   34.950001][  T330] usb 2-1: device descriptor read/8, error -71
[   35.020799][  T626] netlink: 8540 bytes leftover after parsing attributes in process `syz.3.73'.
[   35.033471][  T626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'.
[   35.054737][  T633] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[   35.063016][  T636] rust_binder: 624 RLIMIT_NICE not set
[   35.188528][  T330] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   35.219564][  T330] usb 2-1: device descriptor read/8, error -71
[   35.349694][  T330] usb 2-1: device descriptor read/8, error -71
[   35.458652][  T330] usb usb2-port1: unable to enumerate USB device
[   35.872458][  T648] 9pnet_fd: Insufficient options for proto=fd
[   35.875078][  T649] 9pnet_fd: Insufficient options for proto=fd
[   35.886064][  T648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68
[   36.087578][   T36] kauditd_printk_skb: 58 callbacks suppressed
[   36.087609][   T36] audit: type=1400 audit(1759512551.190:250): avc:  denied  { write } for  pid=669 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   36.134133][   T36] audit: type=1400 audit(1759512551.240:251): avc:  denied  { execute } for  pid=680 comm="syz.2.86" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   36.155768][   T36] audit: type=1400 audit(1759512551.240:252): avc:  denied  { execute_no_trans } for  pid=680 comm="syz.2.86" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   36.185736][   T36] audit: type=1400 audit(1759512551.270:253): avc:  denied  { create } for  pid=682 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   36.209063][  T685] rust_binder: Failed copying remainder into alloc: EFAULT
[   36.209089][  T685] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   36.223243][   T36] audit: type=1400 audit(1759512551.320:254): avc:  denied  { block_suspend } for  pid=684 comm="syz.1.88" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   36.229118][  T685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   36.256378][  T685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:26
[   36.295277][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.312527][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.322382][   T36] audit: type=1400 audit(1759512551.430:255): avc:  denied  { associate } for  pid=676 comm="syz.3.85" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   36.343565][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.351930][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.351930][   T36] audit: type=1326 audit(1759512551.460:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=700 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019cb8eec9 code=0x7ffc0000
[   36.351963][   T36] audit: type=1326 audit(1759512551.460:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=700 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019cb8eec9 code=0x7ffc0000
[   36.360434][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.389987][   T36] audit: type=1326 audit(1759512551.500:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=700 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f019cb8d710 code=0x7ffc0000
[   36.406545][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.414188][   T36] audit: type=1326 audit(1759512551.500:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=700 comm="syz.1.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f019cb8d710 code=0x7ffc0000
[   36.438655][  T701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:32
[   36.445701][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.490799][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.498857][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.506986][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.515018][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.522943][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.530842][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.538725][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.546529][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.554557][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.562407][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.570326][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.578174][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.586092][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.593984][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.601887][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.609755][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.617589][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.625451][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.633312][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.641163][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.649079][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.656881][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.664760][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.672674][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.680710][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.688668][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.696509][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.704446][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.712342][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.720601][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.728628][   T45] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[   36.729191][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.745015][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.752997][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.760870][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.768748][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.776544][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.784413][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.792769][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.800877][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.808761][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.816582][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.824501][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.832417][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.840273][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.848110][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.856677][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.864579][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.872472][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.880361][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.888220][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.896298][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.904580][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.909959][   T45] usb 2-1: unable to get BOS descriptor or descriptor too short
[   36.912487][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.921121][   T45] usb 2-1: not running at top speed; connect to a high speed hub
[   36.928203][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.943673][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.946859][   T45] usb 2-1: config 7 has an invalid interface number: 4 but max is 1
[   36.955319][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.960194][   T45] usb 2-1: config 7 has an invalid interface number: 4 but max is 1
[   36.967705][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.979603][   T45] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2
[   36.988642][  T695] binder: Binderfs stats mode cannot be changed during a remount
[   36.992733][   T45] usb 2-1: config 7 has no interface number 0
[   37.006433][   T45] usb 2-1: config 7 interface 4 has no altsetting 0
[   37.011976][  T710] netlink: 56 bytes leftover after parsing attributes in process `syz.2.97'.
[   37.013335][   T45] usb 2-1: config 7 interface 4 has no altsetting 1
[   37.030498][   T45] usb 2-1: New USB device found, idVendor=0840, idProduct=0082, bcdDevice= 0.01
[   37.039629][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.047650][   T45] usb 2-1: Product: syz
[   37.051881][   T45] usb 2-1: Manufacturer: syz
[   37.056492][   T45] usb 2-1: SerialNumber: syz
[   37.124758][  T718] binder: Unknown parameter 'statsْ�
bal'
[   37.170532][  T720] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[   37.262827][  T704] netlink: 'syz.1.95': attribute type 1 has an invalid length.
[   37.279106][   T45] usb-storage 2-1:7.4: USB Mass Storage device detected
[   37.296829][   T45] usb-storage 2-1:7.4: Quirks match for vid 0840 pid 0082: 10
[   37.305026][  T728] FAT-fs (rnullb0): bogus number of reserved sectors
[   37.311915][  T728] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   37.333139][   T45] usb 2-1: USB disconnect, device number 10
[   37.372388][  T733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.105'.
[   37.960028][  T744] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[   38.215065][  T751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=751 comm=syz.1.113
[   38.287543][  T760] overlayfs: failed to clone lowerpath
[   38.314682][  T762] netlink: 104 bytes leftover after parsing attributes in process `syz.2.117'.
[   38.639040][  T772] batadv_slave_0: entered promiscuous mode
[   38.652804][  T771] batadv_slave_0: left promiscuous mode
[   39.119858][  T809] 9pnet_fd: Insufficient options for proto=fd
[   39.132103][  T810] Zero length message leads to an empty skb
[   39.148294][  T809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'.
[   39.448518][   T45] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   39.599673][   T45] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   39.609746][   T45] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   39.622801][   T45] usb 2-1: config 0 interface 0 has no altsetting 0
[   39.629613][   T45] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[   39.638872][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.647710][   T45] usb 2-1: config 0 descriptor??
[   40.056723][   T45] a4tech 0003:09DA:000A.0001: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.1-1/input0
[   40.117109][  T840] netlink: 44 bytes leftover after parsing attributes in process `syz.0.143'.
[   40.182358][  T854] usb usb9: usbfs: process 854 (syz.0.146) did not claim interface 5 before use
[   40.243027][  T855] __vm_enough_memory: pid: 855, comm: syz.0.146, bytes: 18014402804453376 not enough memory for the allocation
[   40.258343][  T400] usb 2-1: USB disconnect, device number 11
[   40.578560][   T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   40.729907][   T45] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[   40.740896][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   40.751869][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   40.761749][   T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   40.780441][   T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[   40.789586][   T45] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[   40.797682][   T45] usb 4-1: Manufacturer: syz
[   40.802935][   T45] usb 4-1: config 0 descriptor??
[   41.173734][  T920] netlink: 'syz.0.168': attribute type 13 has an invalid length.
[   41.210440][   T45] appleir 0003:05AC:8243.0002: unknown main item tag 0x0
[   41.218144][   T45] appleir 0003:05AC:8243.0002: No inputs registered, leaving
[   41.231736][   T45] appleir 0003:05AC:8243.0002: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[   41.250497][   T45] usb 4-1: USB disconnect, device number 7
[   41.265324][   T36] kauditd_printk_skb: 54 callbacks suppressed
[   41.265344][   T36] audit: type=1400 audit(1759512556.370:314): avc:  denied  { write } for  pid=923 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   41.293173][   T36] audit: type=1400 audit(1759512556.370:315): avc:  denied  { read } for  pid=925 comm="syz.0.170" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   41.330534][  T928] fido_id[928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   41.330977][   T36] audit: type=1400 audit(1759512556.370:316): avc:  denied  { open } for  pid=925 comm="syz.0.170" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   41.501333][  T932] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[   41.648520][  T943] netlink: 'syz.3.175': attribute type 19 has an invalid length.
[   41.656426][  T943] netlink: 5 bytes leftover after parsing attributes in process `syz.3.175'.
[   41.883573][  T959] netlink: 316 bytes leftover after parsing attributes in process `syz.1.180'.
[   41.894067][  T959] netlink: 316 bytes leftover after parsing attributes in process `syz.1.180'.
[   41.915577][  T962] binder: Binderfs stats mode cannot be changed during a remount
[   41.997084][  T969] overlayfs: failed to clone lowerpath
[   42.064704][  T976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=976 comm=syz.2.186
[   42.127570][  T977] sock: sock_set_timeout: `syz.2.186' (pid 977) tries to set negative timeout
[   42.158827][   T36] audit: type=1400 audit(1759512557.270:317): avc:  denied  { create } for  pid=979 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   42.187895][   T36] audit: type=1400 audit(1759512557.290:318): avc:  denied  { unmount } for  pid=979 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   42.282519][  T983] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.289581][  T983] rust_binder: Error in use_page_slow: ESRCH
[   42.289605][  T983] rust_binder: use_range failure ESRCH
[   42.295707][  T983] rust_binder: Failed to allocate buffer. len:200, is_oneway:false
[   42.295817][  T984] rust_binder: Error in use_page_slow: ESRCH
[   42.301340][  T983] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   42.309437][  T984] rust_binder: use_range failure ESRCH
[   42.315844][  T983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:153
[   42.325085][  T984] rust_binder: Failed to allocate buffer. len:200, is_oneway:false
[   42.325107][  T984] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   42.325129][  T984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:153
[   42.415751][   T36] audit: type=1400 audit(1759512557.520:319): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   42.499613][   T36] audit: type=1400 audit(1759512557.610:320): avc:  denied  { mounton } for  pid=989 comm="syz.0.190" path="/56/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[   42.499672][  T990] incfs: Error accessing: ./file0.
[   42.528659][  T990] incfs: mount failed -20
[   42.535694][  T990] overlay: ./file0 is not a directory
[   42.610421][  T993] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   42.610580][  T993] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:118
[   42.664369][  T997] rust_binder: 164: no such ref 1
[   42.678660][  T997] rust_binder: 164: no such ref 2
[   42.683709][  T997] rust_binder: 164: no such ref 0
[   42.780329][ T1003] netlink: 124 bytes leftover after parsing attributes in process `syz.0.195'.
[   42.789441][ T1003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.195'.
[   42.798380][ T1003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.195'.
[   42.833643][  T995] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   42.841148][  T995] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   43.677587][   T36] audit: type=1400 audit(1759512558.780:321): avc:  denied  { execute } for  pid=1027 comm="syz.1.202" path="/net_prio.prioidx" dev="ramfs" ino=7264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[   43.702354][ T1028] netlink: 'syz.1.202': attribute type 7 has an invalid length.
[   43.718498][  T584] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   43.728612][   T36] audit: type=1400 audit(1759512558.830:322): avc:  denied  { connect } for  pid=1029 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   43.754346][   T36] audit: type=1400 audit(1759512558.860:323): avc:  denied  { mount } for  pid=1031 comm="syz.1.204" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   43.781872][ T1034] fuse: Bad value for 'fd'
[   43.878508][  T584] usb 4-1: device descriptor read/64, error -71
[   43.927255][ T1038] fuse: Unknown parameter '�;�0x0000000000000005'
[   44.118516][  T584] usb 4-1: device descriptor read/64, error -71
[   44.220901][ T1069] tmpfs: Bad value for 'nr_blocks'
[   44.298564][  T330] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   44.355845][ T1087] /dev/loop0: Can't lookup blockdev
[   44.358567][  T584] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   44.448963][  T330] usb 1-1: no configurations
[   44.453715][  T330] usb 1-1: can't read configurations, error -22
[   44.498558][  T584] usb 4-1: device descriptor read/64, error -71
[   44.588550][  T330] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   44.738553][  T584] usb 4-1: device descriptor read/64, error -71
[   44.745310][  T330] usb 1-1: no configurations
[   44.750202][  T330] usb 1-1: can't read configurations, error -22
[   44.756575][  T330] usb usb1-port1: attempt power cycle
[   44.848648][  T584] usb usb4-port1: attempt power cycle
[   44.907494][ T1094] 9pnet_fd: p9_fd_create_unix (1094): problem connecting socket: ./file0: -111
[   45.083673][ T1100] overlayfs: failed to clone lowerpath
[   45.098665][  T330] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   45.119252][  T330] usb 1-1: no configurations
[   45.124353][  T330] usb 1-1: can't read configurations, error -22
[   45.125398][ T1108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65310 sclass=netlink_route_socket pid=1108 comm=syz.2.228
[   45.188541][  T584] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   45.209689][  T584] usb 4-1: device descriptor read/8, error -71
[   45.268530][  T330] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   45.289192][  T330] usb 1-1: no configurations
[   45.293837][  T330] usb 1-1: can't read configurations, error -22
[   45.300295][  T330] usb usb1-port1: unable to enumerate USB device
[   45.361613][  T584] usb 4-1: device descriptor read/8, error -71
[   45.668521][  T584] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   45.689608][  T584] usb 4-1: device descriptor read/8, error -71
[   45.792907][ T1147] netlink: 'syz.1.242': attribute type 1 has an invalid length.
[   45.819514][  T584] usb 4-1: device descriptor read/8, error -71
[   45.853533][ T1148] 9pnet_fd: Insufficient options for proto=fd
[   45.928652][  T584] usb usb4-port1: unable to enumerate USB device
[   45.936365][ T1151] erofs: dax options not supported
[   46.484412][ T1153] netlink: 188 bytes leftover after parsing attributes in process `syz.3.243'.
[   46.493924][ T1153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   46.493950][ T1153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131
[   46.583921][   T36] kauditd_printk_skb: 12 callbacks suppressed
[   46.583942][   T36] audit: type=1400 audit(1759512561.690:336): avc:  denied  { append } for  pid=1160 comm="syz.3.247" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   46.878017][ T1170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:178
[   47.097280][   T36] audit: type=1400 audit(1759512562.200:337): avc:  denied  { read write } for  pid=1173 comm="syz.3.252" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   47.109360][ T1174] KVM: debugfs: duplicate directory 1174-8
[   47.130563][   T36] audit: type=1400 audit(1759512562.200:338): avc:  denied  { open } for  pid=1173 comm="syz.3.252" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   47.160748][   T36] audit: type=1400 audit(1759512562.200:339): avc:  denied  { ioctl } for  pid=1173 comm="syz.3.252" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   47.258180][ T1179] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   47.288520][  T584] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   47.289647][ T1184] overlay: ./file0 is not a directory
[   47.296194][ T1185] syz.2.256 uses obsolete (PF_INET,SOCK_PACKET)
[   47.309752][ T1184] fuseblk: Unknown parameter 'fowner<00000000000000060929'
[   47.383710][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.383748][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.390059][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.396410][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.402697][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.408947][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.415181][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.421392][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.427615][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.433920][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.440222][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.446399][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.452611][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.458861][  T584] usb 1-1: Using ep0 maxpacket: 16
[   47.468538][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.470364][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.476732][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.483246][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.489577][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.495900][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.502198][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.508459][  T584] usb 1-1: config 8 has an invalid interface number: 138 but max is 0
[   47.523137][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.523168][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.529395][  T584] usb 1-1: config 8 has no interface number 0
[   47.541730][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.541762][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.547971][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.554516][  T584] usb 1-1: config 8 interface 138 has no altsetting 0
[   47.567626][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.567658][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.573975][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.580307][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.586647][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.593125][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.599557][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.605847][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.612301][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.618609][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.624880][  T584] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=40.9e
[   47.640244][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.640277][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.646497][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.652746][  T584] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.666995][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.667025][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.673243][  T584] usb 1-1: Product: syz
[   47.678532][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.679443][  T584] usb 1-1: Manufacturer: syz
[   47.685897][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.689941][  T584] usb 1-1: SerialNumber: syz
[   47.702191][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.708524][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.714928][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.721329][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.727646][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.734094][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.740399][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.746844][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.753148][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.759601][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.765951][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.772396][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.785659][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.791960][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.798408][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.804760][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.811291][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.817546][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.824022][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.830316][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.836765][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.843035][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.849462][ T1197] rust_binder: Write failure EFAULT in pid:154
[   47.906317][   T36] audit: type=1400 audit(1759512563.010:340): avc:  denied  { map } for  pid=1206 comm="syz.3.262" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   47.930290][ T1209] overlayfs: failed to clone upperpath
[   47.971696][   T36] audit: type=1400 audit(1759512563.050:341): avc:  denied  { listen } for  pid=1171 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   47.991248][   T36] audit: type=1400 audit(1759512563.050:342): avc:  denied  { accept } for  pid=1171 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   48.018479][ T1210] netlink: 188 bytes leftover after parsing attributes in process `syz.3.262'.
[   48.027635][   T36] audit: type=1400 audit(1759512563.060:343): avc:  denied  { ioctl } for  pid=1208 comm="syz.2.264" path="socket:[7658]" dev="sockfs" ino=7658 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   48.145468][   T36] audit: type=1400 audit(1759512563.250:344): avc:  denied  { map } for  pid=1213 comm="syz.1.265" path="socket:[7671]" dev="sockfs" ino=7671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   48.448496][   T65] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   48.608506][   T65] usb 4-1: Using ep0 maxpacket: 16
[   48.614955][   T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   48.625822][   T65] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[   48.640787][   T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40
[   48.650625][   T65] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   48.659275][   T65] usb 4-1: Product: syz
[   48.663677][   T65] usb 4-1: Manufacturer: syz
[   48.671858][   T65] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[   48.872100][   T65] usb 4-1: USB disconnect, device number 12
[   48.947585][ T1219] tipc: Started in network mode
[   48.954980][ T1219] tipc: Node identity f6d2f994868f, cluster identity 4711
[   48.962592][ T1219] tipc: Enabled bearer <eth:xfrm0>, priority 10
[   49.488491][   T36] audit: type=1400 audit(1759512564.590:345): avc:  denied  { append } for  pid=1221 comm="syz.3.267" name="pfkey" dev="proc" ino=4026532610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   49.595052][ T1226] can0: slcan on ptm0.
[   49.858520][   T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   50.029514][   T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   50.041901][   T45] usb 4-1: config 0 has no interfaces?
[   50.051784][   T45] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[   50.069866][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   50.087949][   T45] usb 4-1: config 0 descriptor??
[   50.093070][   T65] tipc: Node number set to 1885206932
[   50.179601][ T1260] netlink: 104 bytes leftover after parsing attributes in process `syz.2.276'.
[   50.311631][  T584] snd-usb-audio 1-1:8.138: probe with driver snd-usb-audio failed with error -71
[   50.314584][   T65] usb 4-1: USB disconnect, device number 13
[   50.325367][  T584] usb 1-1: USB disconnect, device number 8
[   50.369569][ T1226] can0 (unregistered): slcan off ptm0.
[   50.478633][ T1286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:190
[   50.478874][ T1286] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   50.497831][ T1286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:190
[   50.648040][ T1295] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   50.657286][ T1295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:192
[   50.928951][ T1317] rust_binder: Write failure EFAULT in pid:169
[   51.159869][ T1318] can0: slcan on ptm0.
[   51.227821][ T1351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'.
[   51.258792][ T1351] bridge_slave_1: left allmulticast mode
[   51.264491][ T1351] bridge_slave_1: left promiscuous mode
[   51.280223][ T1351] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.306941][ T1351] bridge_slave_0: left allmulticast mode
[   51.325309][ T1351] bridge_slave_0: left promiscuous mode
[   51.348944][ T1351] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.422191][ T1353] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   51.438593][   T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   51.540178][ T1403] overlayfs: failed to clone upperpath
[   51.548499][ T1404] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   51.548520][ T1404] rust_binder: Read failure Err(EFAULT) in pid:202
[   51.599580][   T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   51.608945][ T1415] cgroup: Unknown subsys name 'pcr'
[   51.616537][   T45] usb 1-1: config 0 has no interfaces?
[   51.627643][   T45] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[   51.637512][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.646280][   T45] usb 1-1: config 0 descriptor??
[   51.676210][   T36] kauditd_printk_skb: 6 callbacks suppressed
[   51.676229][   T36] audit: type=1400 audit(1759512566.780:352): avc:  denied  { write } for  pid=1414 comm="syz.1.318" path="socket:[8266]" dev="sockfs" ino=8266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   51.683079][ T1417] netlink: 104 bytes leftover after parsing attributes in process `syz.1.318'.
[   51.705501][   T36] audit: type=1400 audit(1759512566.790:353): avc:  denied  { nlmsg_read } for  pid=1414 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   51.853340][  T584] usb 1-1: USB disconnect, device number 9
[   51.913651][ T1318] can0 (unregistered): slcan off ptm0.
[   52.000861][ T1440] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   52.150378][   T36] audit: type=1400 audit(1759512567.260:354): avc:  denied  { setopt } for  pid=1456 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   52.179224][   T36] audit: type=1400 audit(1759512567.290:355): avc:  denied  { connect } for  pid=1461 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   52.438484][   T36] audit: type=1326 audit(1759512567.540:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019cb8eec9 code=0x7fc00000
[   52.475504][   T36] audit: type=1326 audit(1759512567.540:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f019cb8eec9 code=0x7fc00000
[   52.483891][ T1473] incfs: Options parsing error. -22
[   52.498965][   T36] audit: type=1326 audit(1759512567.540:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019cb8eec9 code=0x7fc00000
[   52.508814][ T1473] incfs: mount failed -22
[   52.527870][   T36] audit: type=1326 audit(1759512567.540:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019cb8eec9 code=0x7fc00000
[   52.557613][   T36] audit: type=1326 audit(1759512567.540:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019cb8eec9 code=0x7fc00000
[   52.581410][   T36] audit: type=1326 audit(1759512567.540:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1414 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019cb8eec9 code=0x7fc00000
[   52.658505][  T584] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[   53.018523][   T45] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   53.148596][   T45] usb 1-1: device descriptor read/64, error -71
[   53.295998][ T1513] overlayfs: failed to clone upperpath
[   53.307363][ T1514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1514 comm=syz.2.345
[   53.388545][   T45] usb 1-1: device descriptor read/64, error -71
[   53.409941][ T1525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.438651][ T1525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.466949][ T1525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.488631][ T1525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.563624][ T1532] netlink: 44 bytes leftover after parsing attributes in process `syz.2.351'.
[   53.572795][ T1532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'.
[   53.581891][ T1532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'.
[   53.608253][ T1536] netlink: 328 bytes leftover after parsing attributes in process `syz.2.352'.
[   53.628490][   T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   53.644228][ T1540] 9pnet_fd: Insufficient options for proto=fd
[   53.778516][   T45] usb 1-1: device descriptor read/64, error -71
[   53.917851][ T1550] veth0_virt_wifi: entered allmulticast mode
[   53.924106][ T1549] veth0_virt_wifi: left allmulticast mode
[   54.018502][   T45] usb 1-1: device descriptor read/64, error -71
[   54.128604][   T45] usb usb1-port1: attempt power cycle
[   54.478516][   T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   54.499483][   T45] usb 1-1: device descriptor read/8, error -71
[   54.544513][ T1577] netlink: 'syz.1.366': attribute type 27 has an invalid length.
[   54.574473][ T1577] can: request_module (can-proto-0) failed.
[   54.629886][   T45] usb 1-1: device descriptor read/8, error -71
[   54.669319][  T584] usb 4-1: device descriptor read/64, error -71
[   54.681716][ T1579] netlink: 76 bytes leftover after parsing attributes in process `syz.2.367'.
[   54.721497][ T1582] overlayfs: failed to clone lowerpath
[   54.724839][ T1583] overlayfs: failed to clone lowerpath
[   54.755843][ T1587] fuse: Invalid rootmode
[   54.888563][   T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   54.909828][   T45] usb 1-1: device descriptor read/8, error -71
[   54.938518][  T584] usb 4-1: Using ep0 maxpacket: 32
[   54.944812][  T584] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   54.955985][  T584] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   54.965798][  T584] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   54.978680][  T584] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   54.987762][  T584] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.996822][  T584] usb 4-1: config 0 descriptor??
[   55.039627][   T45] usb 1-1: device descriptor read/8, error -71
[   55.148653][   T45] usb usb1-port1: unable to enumerate USB device
[   55.216624][  T584] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0003/input/input7
[   55.231666][  T584] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0003/input/input8
[   55.259271][  T584] kye 0003:0458:5011.0003: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0
[   55.283475][  T584] usb 4-1: USB disconnect, device number 14
[   55.306715][ T1607] fido_id[1607]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[   55.357883][ T1609] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active
[   55.718538][  T584] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[   55.869927][  T584] usb 4-1: config 0 has an invalid interface number: 239 but max is 0
[   55.878379][  T584] usb 4-1: config 0 has no interface number 0
[   55.888925][ T1624] rust_binder: Error while translating object.
[   55.888969][ T1624] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   55.895098][  T584] usb 4-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64
[   55.895695][ T1624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:223
[   55.907265][  T584] usb 4-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 511, setting to 64
[   55.939606][  T584] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[   55.951820][ T1626] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch
[   55.956334][  T584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.969162][  T584] usb 4-1: Product: syz
[   55.973417][  T584] usb 4-1: Manufacturer: syz
[   55.978104][  T584] usb 4-1: SerialNumber: syz
[   55.985556][  T584] usb 4-1: config 0 descriptor??
[   56.071870][ T1630] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   56.071903][ T1630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:228
[   56.081630][ T1629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   56.090835][ T1629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:228
[   56.191459][ T1613] 9pnet_fd: p9_fd_create_unix (1613): problem connecting socket: ./file0: -111
[   56.216994][ T1636] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[   56.221140][  T584] asix 4-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   56.248569][  T584] asix 4-1:0.239: probe with driver asix failed with error -71
[   56.260527][  T584] usb 4-1: USB disconnect, device number 15
[   56.430954][ T1649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.391'.
[   56.491641][ T1659] rust_binder: Write failure EINVAL in pid:246
[   56.512930][ T1663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:248
[   56.790531][ T1693] binder: Bad value for 'max'
[   56.891613][   T36] kauditd_printk_skb: 33 callbacks suppressed
[   56.891632][   T36] audit: type=1400 audit(1759512572.000:395): avc:  denied  { ioctl } for  pid=1704 comm="syz.3.411" path="mnt:[4026532311]" dev="nsfs" ino=4026532311 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   56.962231][ T1711] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   56.970327][ T1711] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   56.979129][ T1711] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   56.987197][ T1711] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   57.021284][ T1714] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   57.265215][   T36] audit: type=1400 audit(1759512572.370:396): avc:  denied  { bpf } for  pid=1732 comm="syz.0.421" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   57.278542][   T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[   57.322574][ T1735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.422'.
[   57.331502][ T1735] bridge_slave_1: left allmulticast mode
[   57.337235][ T1735] bridge_slave_1: left promiscuous mode
[   57.342950][ T1735] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.350568][ T1735] bridge_slave_0: left allmulticast mode
[   57.356227][ T1735] bridge_slave_0: left promiscuous mode
[   57.361986][ T1735] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.374877][   T36] audit: type=1326 audit(1759512572.480:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1734 comm="syz.0.422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feda0b8eec9 code=0x0
[   57.462641][   T45] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[   57.479780][   T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   57.507145][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   57.518409][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   57.528794][ T1747] batadv_slave_0: entered promiscuous mode
[   57.530096][   T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   57.549035][   T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   57.549080][ T1747] batadv_slave_0: left promiscuous mode
[   57.558096][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.572441][   T45] usb 4-1: config 0 descriptor??
[   57.577789][ T1719] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   57.586185][ T1747] netlink: 'syz.1.425': attribute type 4 has an invalid length.
[   57.594334][ T1747] netlink: 17 bytes leftover after parsing attributes in process `syz.1.425'.
[   57.654563][ T1757] netlink: 44 bytes leftover after parsing attributes in process `syz.1.429'.
[   57.665333][ T1757] overlayfs: failed to clone upperpath
[   57.672202][ T1757] overlayfs: failed to clone upperpath
[   57.706388][   T36] audit: type=1400 audit(1759512572.810:398): avc:  denied  { create } for  pid=1760 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[   57.739499][ T1766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.433'.
[   57.996210][   T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd
[   58.003731][   T45] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   58.011430][   T45] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[   58.020719][   T45] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   58.201353][  T586] usb 4-1: USB disconnect, device number 16
[   58.749785][ T1791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1791 comm=syz.3.442
[   58.762793][ T1791] FAT-fs (rnullb0): bogus number of reserved sectors
[   58.769798][ T1791] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   58.796305][   T36] audit: type=1400 audit(1759512573.900:399): avc:  denied  { getopt } for  pid=1794 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   58.816353][ T1802] overlayfs: failed to clone upperpath
[   58.823077][ T1802] cgroup: name respecified
[   58.848089][ T1807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'.
[   58.878608][ T1814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.449'.
[   58.909114][ T1824] batadv_slave_0: entered promiscuous mode
[   58.935850][ T1826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.454'.
[   58.944807][ T1826] bridge_slave_1: left allmulticast mode
[   58.950768][ T1826] bridge_slave_1: left promiscuous mode
[   58.956506][ T1826] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.964104][ T1826] bridge_slave_0: left allmulticast mode
[   58.969937][ T1826] bridge_slave_0: left promiscuous mode
[   58.975588][ T1826] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.998339][  T293] Bluetooth: hci0: Frame reassembly failed (-84)
[   59.010090][ T1823] batadv_slave_0: left promiscuous mode
[   60.365391][ T1870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1870 comm=syz.0.468
[   60.376855][ T1871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1871 comm=syz.0.468
[   60.401213][   T36] audit: type=1400 audit(1759512575.510:400): avc:  denied  { ioctl } for  pid=1872 comm="syz.0.469" path="socket:[8941]" dev="sockfs" ino=8941 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   60.565919][   T36] audit: type=1400 audit(1759512575.683:401): avc:  denied  { mount } for  pid=1877 comm="syz.1.471" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   60.984665][ T1896] overlayfs: failed to clone upperpath
[   61.013655][ T1901] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   61.022612][ T1900] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   61.054026][   T36] audit: type=1400 audit(1759512576.163:402): avc:  denied  { bind } for  pid=1905 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   61.073314][  T429] Bluetooth: hci0: command 0x1003 tx timeout
[   61.075387][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   61.602466][ T1937] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[   61.641716][   T36] audit: type=1400 audit(1759512576.753:403): avc:  denied  { listen } for  pid=1940 comm="syz.3.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   61.768963][ T1945] usb usb8: usbfs: process 1945 (syz.3.495) did not claim interface 0 before use
[   61.800658][ T1950] x_tables: duplicate underflow at hook 4
[   61.822063][ T1957] netlink: 40 bytes leftover after parsing attributes in process `syz.3.498'.
[   61.838338][ T1957] rust_binder: 310: no such ref 0
[   61.843680][ T1957] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   62.098554][  T330] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[   62.249638][  T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.260611][  T330] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   62.269688][  T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.278326][  T330] usb 4-1: config 0 descriptor??
[   62.435146][ T1986] netlink: 9 bytes leftover after parsing attributes in process `syz.1.510'.
[   62.444404][ T1986] gretap0: entered promiscuous mode
[   62.451568][ T1986] netlink: 5 bytes leftover after parsing attributes in process `syz.1.510'.
[   62.460534][ T1986] 0��{X��: renamed from gretap0
[   62.466219][ T1986] 0��{X��: left promiscuous mode
[   62.471384][ T1986] 0��{X��: entered allmulticast mode
[   62.477565][ T1986] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[   62.579915][ T2004] netlink: 'syz.0.516': attribute type 1 has an invalid length.
[   62.590885][ T2004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.516'.
[   62.659963][   T36] audit: type=1400 audit(1759512837.766:404): avc:  denied  { mount } for  pid=2018 comm="syz.0.519" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   62.668575][ T2019] overlayfs: failed to clone upperpath
[   62.695117][  T330] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[   62.707621][  T330] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input10
[   62.760446][ T2028] 9pnet_fd: Insufficient options for proto=fd
[   62.786671][  T330] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[   62.919199][   T36] audit: type=1400 audit(1759512838.026:405): avc:  denied  { getopt } for  pid=2036 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   62.975591][   T36] audit: type=1400 audit(1759512838.076:406): avc:  denied  { map } for  pid=2051 comm="syz.0.530" path="socket:[9193]" dev="sockfs" ino=9193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   63.006554][   T36] audit: type=1400 audit(1759512838.076:407): avc:  denied  { read } for  pid=2051 comm="syz.0.530" path="socket:[9193]" dev="sockfs" ino=9193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   63.084110][ T2061] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0
[   63.096162][  T330] usb 4-1: USB disconnect, device number 17
[   63.130275][ T2071] /dev/loop0: Can't lookup blockdev
[   63.541650][   T36] audit: type=1400 audit(1759512838.646:408): avc:  denied  { create } for  pid=2090 comm="syz.2.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[   64.480700][   T36] audit: type=1400 audit(1759512839.586:409): avc:  denied  { listen } for  pid=2112 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   64.634408][   T36] audit: type=1326 audit(1759512839.737:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2117 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357878eec9 code=0x7fc00000
[   64.657713][   T36] audit: type=1326 audit(1759512839.737:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2117 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357878eec9 code=0x7fc00000
[   64.694357][   T36] audit: type=1326 audit(1759512839.797:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2117 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357878eec9 code=0x7fc00000
[   64.718083][   T36] audit: type=1326 audit(1759512839.797:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2117 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357878eec9 code=0x7fc00000
[   64.845840][ T2130] overlayfs: failed to clone upperpath
[   64.985036][ T2143] syz.2.564 (2143): attempted to duplicate a private mapping with mremap.  This is not supported.
[   65.029200][ T2147] 9pnet_fd: Insufficient options for proto=fd
[   65.475386][ T2155] tmpfs: Bad value for 'size'
[   65.778835][ T2170] mmap: syz.2.576 (2170) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   65.805187][ T2170] veth1: entered allmulticast mode
[   65.837659][ T2187] kvm: kvm [2186]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0xffffffffffffffff
[   66.157708][  T330] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[   66.185533][ T2201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.587'.
[   66.195081][ T2201] bridge_slave_1: left allmulticast mode
[   66.201211][ T2201] bridge_slave_1: left promiscuous mode
[   66.206907][ T2201] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.215324][ T2201] bridge_slave_0: left allmulticast mode
[   66.221302][ T2201] bridge_slave_0: left promiscuous mode
[   66.227090][ T2201] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.287742][  T330] usb 4-1: device descriptor read/64, error -71
[   66.341619][ T2211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'.
[   66.350546][ T2211] erspan0: entered promiscuous mode
[   66.367971][ T2216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=2216 comm=syz.1.590
[   66.381791][ T2217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=2217 comm=syz.1.590
[   66.415921][ T2223] /dev/loop0: Can't lookup blockdev
[   66.467348][ T2232] fuse: Unknown parameter 'g_oup_} Jt)#���
[   66.467348][ T2232] ���
��ȁ�l$��t'
[   66.478586][ T2232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'.
[   66.509566][ T2169] veth1: left allmulticast mode
[   66.527832][  T330] usb 4-1: device descriptor read/64, error -71
[   66.560216][ T2239] overlayfs: failed to clone upperpath
[   66.591347][ T2246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.600'.
[   66.770793][  T330] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[   66.907557][  T330] usb 4-1: device descriptor read/64, error -71
[   67.147510][  T330] usb 4-1: device descriptor read/64, error -71
[   67.257540][  T330] usb usb4-port1: attempt power cycle
[   67.597384][  T330] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[   67.618469][  T330] usb 4-1: device descriptor read/8, error -71
[   67.730187][ T2280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'.
[   67.748304][  T330] usb 4-1: device descriptor read/8, error -71
[   67.987265][  T330] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[   68.008427][  T330] usb 4-1: device descriptor read/8, error -71
[   68.138242][  T330] usb 4-1: device descriptor read/8, error -71
[   68.154433][ T2314] No source specified
[   68.174556][ T2316] netlink: 32 bytes leftover after parsing attributes in process `syz.1.623'.
[   68.195930][ T2318] fuse: Bad value for 'group_id'
[   68.200957][ T2318] fuse: Bad value for 'group_id'
[   68.247343][  T330] usb usb4-port1: unable to enumerate USB device
[   68.452332][   T36] kauditd_printk_skb: 33 callbacks suppressed
[   68.452351][   T36] audit: type=1326 audit(1759512843.557:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz.2.626" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa90c18eec9 code=0x0
[   68.720731][ T2329] overlayfs: failed to clone upperpath
[   68.960488][ T2356] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.992527][ T2358] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   69.006357][ T2358] rust_binder: 363: no such ref 3
[   69.059293][ T2360] rust_binder: 365: no such ref 3
[   69.064496][ T2360] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   69.071655][ T2360] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   69.078750][ T2360] rust_binder: Write failure EFAULT in pid:365
[   69.092772][ T2364] netlink: 200 bytes leftover after parsing attributes in process `syz.3.639'.
[   69.108071][ T2364] tc_dump_action: action bad kind
[   69.142437][ T2366] rust_binder: Failed copying remainder into alloc: EFAULT
[   69.142458][ T2366] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   69.149955][ T2366] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   69.158399][ T2366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:371
[   69.301584][ T2377] netlink: 'syz.2.643': attribute type 11 has an invalid length.
[   69.330711][   T36] audit: type=1400 audit(1759512844.438:448): avc:  denied  { ioctl } for  pid=2381 comm="syz.2.645" path="socket:[11945]" dev="sockfs" ino=11945 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   69.378231][   T36] audit: type=1400 audit(1759512844.488:449): avc:  denied  { read } for  pid=2386 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   69.399183][   T36] audit: type=1400 audit(1759512844.488:450): avc:  denied  { ioctl } for  pid=2386 comm="syz.2.646" path="socket:[10859]" dev="sockfs" ino=10859 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   70.013463][   T36] audit: type=1400 audit(1759512845.118:451): avc:  denied  { append } for  pid=2411 comm="syz.3.656" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   70.014216][ T2413] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   70.090139][ T2413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.656'.
[   70.105602][ T2423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.656'.
[   70.114914][ T2413] rust_binder: Error while translating object.
[   70.114950][ T2413] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   70.121618][ T2413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:389
[   70.890980][ T2443] overlayfs: failed to clone upperpath
[   70.933832][   T36] audit: type=1400 audit(1759512846.038:452): avc:  denied  { read } for  pid=2447 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   71.210435][ T2465] rust_binder: Write failure EFAULT in pid:402
[   71.222934][   T36] audit: type=1326 audit(1759512846.328:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2468 comm="syz.3.671" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f357878eec9 code=0x0
[   71.570745][   T36] audit: type=1400 audit(1759512846.678:454): avc:  denied  { map } for  pid=2473 comm="syz.2.673" path="socket:[12091]" dev="sockfs" ino=12091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   71.840162][ T2480] /dev/loop0: Can't lookup blockdev
[   71.849427][   T36] audit: type=1400 audit(1759512846.958:455): avc:  denied  { execute } for  pid=2479 comm="syz.1.676" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   71.980769][ T2489] 9pnet_fd: Insufficient options for proto=fd
[   72.118907][   T36] audit: type=1400 audit(1759512847.228:456): avc:  denied  { create } for  pid=2499 comm="syz.3.684" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   72.426885][  T400] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[   72.527264][ T2508] capability: warning: `syz.1.688' uses 32-bit capabilities (legacy support in use)
[   72.576585][  T400] usb 4-1: too many configurations: 151, using maximum allowed: 8
[   72.593160][  T400] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[   72.602409][  T400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[   72.611106][  T400] usb 4-1: Product: syz
[   72.615438][  T400] usb 4-1: Manufacturer: syz
[   72.620748][  T400] usb 4-1: SerialNumber: syz
[   72.633121][  T400] usb 4-1: config 0 descriptor??
[   72.654877][ T2517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2517 comm=syz.1.692
[   72.736097][ T2536] netlink: 92 bytes leftover after parsing attributes in process `syz.2.699'.
[   72.746191][ T2537] bpf: Bad value for 'gid'
[   72.842683][ T2504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.852060][ T2504] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.862371][ T2504] rust_binder: Write failure EFAULT in pid:416
[   72.863911][  T400] usb 4-1: bad CDC descriptors
[   72.879209][  T400] usb 4-1: USB disconnect, device number 23
[   73.426532][ T2564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.707'.
[   73.480580][ T2571] netlink: 'syz.2.711': attribute type 27 has an invalid length.
[   73.540589][ T2581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'.
[   73.743246][ T2629] 9pnet_fd: Insufficient options for proto=fd
[   73.814406][ T2635] overlayfs: failed to clone upperpath
[   74.634114][ T2682] 9pnet_fd: Insufficient options for proto=fd
[   74.960120][   T36] kauditd_printk_skb: 11 callbacks suppressed
[   74.960141][   T36] audit: type=1326 audit(1759512850.069:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2689 comm="syz.2.748" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa90c18eec9 code=0x0
[   75.727269][   T36] audit: type=1400 audit(1759512850.839:469): avc:  denied  { mounton } for  pid=2708 comm="syz.0.755" path="/185/file0" dev="tmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[   75.768116][   T36] audit: type=1400 audit(1759512850.879:470): avc:  denied  { getopt } for  pid=2710 comm="syz.3.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   75.904412][ T2728] netlink: 'syz.2.763': attribute type 4 has an invalid length.
[   75.912878][ T2720] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   76.122447][ T2751] 9pnet_fd: Insufficient options for proto=fd
[   76.143539][ T2753] overlayfs: failed to clone upperpath
[   76.178287][   T36] audit: type=1400 audit(1759512851.289:471): avc:  denied  { ioctl } for  pid=2755 comm="syz.1.772" path="socket:[13540]" dev="sockfs" ino=13540 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   76.194005][ T2760] netlink: 64 bytes leftover after parsing attributes in process `syz.1.773'.
[   76.332921][ T2767] veth1: entered allmulticast mode
[   76.571004][ T2770] netlink: 196 bytes leftover after parsing attributes in process `syz.0.777'.
[   76.726345][ T2776] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[   79.339468][ T2768] veth1: left allmulticast mode
[   83.529104][   T36] audit: type=1400 audit(1759512858.641:472): avc:  denied  { connect } for  pid=2794 comm="syz.2.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   83.612135][   T36] audit: type=1400 audit(1759512858.721:473): avc:  denied  { write } for  pid=400 comm="kworker/1:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12549 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   84.344285][   T36] audit: type=1326 audit(1759512859.461:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2858 comm="syz.0.804" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feda0b8eec9 code=0x0
[   84.405504][   T36] audit: type=1400 audit(1759512859.521:475): avc:  denied  { mounton } for  pid=2863 comm="syz.3.805" path="/syzcgroup/unified/syz3" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[   84.507617][   T36] audit: type=1400 audit(1759512859.621:476): avc:  denied  { accept } for  pid=2865 comm="syz.3.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   84.543033][ T2868] /dev/rnullb0: Can't open blockdev
[   84.626099][ T2873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   84.626131][ T2873] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   84.646903][   T36] audit: type=1400 audit(1759512859.761:477): avc:  denied  { append } for  pid=2878 comm="syz.3.810" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   84.653091][ T2879] rust_binder: Write failure EFAULT in pid:474
[   84.755194][ T2892] mmap: syz.2.814 (2892): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   84.774277][ T2892] cgroup: Unknown subsys name 'appraise_type'
[   85.557924][ T2922] af_packet: tpacket_rcv: packet too big, clamped from 65532 to 3944. macoff=96
[   85.622336][ T2924] netlink: 'syz.1.825': attribute type 9 has an invalid length.
[   85.648195][   T36] audit: type=1400 audit(1759512860.762:478): avc:  denied  { mounton } for  pid=2925 comm="syz.1.826" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   85.921047][   T36] audit: type=1400 audit(1759512861.032:479): avc:  denied  { map } for  pid=2939 comm="syz.0.831" path="socket:[12781]" dev="sockfs" ino=12781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   86.664435][ T2952] 9pnet_fd: Insufficient options for proto=fd
[   86.681327][ T2952] SELinux:  Context system_u:object_r:sshd_exec_t:s0 is not valid (left unmapped).
[   86.710724][   T36] audit: type=1400 audit(1759512861.822:480): avc:  denied  { write } for  pid=2959 comm="syz.0.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   86.750497][   T36] audit: type=1400 audit(1759512861.832:481): avc:  denied  { relabelto } for  pid=2950 comm="syz.2.835" name="file0" dev="tmpfs" ino=1456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:sshd_exec_t:s0"
[   87.016496][ T2970] SELinux:  Context  is not valid (left unmapped).
[   87.036383][ T2969] tipc: Started in network mode
[   87.048896][ T2969] tipc: Node identity 72b882084903, cluster identity 4711
[   87.066556][ T2969] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.082080][ T2970] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   87.632931][ T2986] veth1: entered allmulticast mode
[   87.678206][ T2997] fuse: Bad value for 'fd'
[   87.721477][ T3001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.852'.
[   88.072375][   T31] tipc: Node number set to 1002144264
[   88.258821][ T2985] veth1: left allmulticast mode
[   88.751178][ T3043] rust_binder: Error while translating object.
[   88.751208][ T3043] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   88.757515][ T3043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:491
[   88.980021][   T36] kauditd_printk_skb: 9 callbacks suppressed
[   88.980050][   T36] audit: type=1400 audit(1759512864.092:491): avc:  denied  { relabelfrom } for  pid=3072 comm="syz.1.880" name="NETLINK" dev="sockfs" ino=12930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   89.020466][   T36] audit: type=1400 audit(1759512864.132:492): avc:  denied  { relabelto } for  pid=3072 comm="syz.1.880" name="NETLINK" dev="sockfs" ino=12930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1
[   89.552365][ T3102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'.
[   89.581763][   T36] audit: type=1326 audit(1759512864.693:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3105 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda0b8eec9 code=0x50000
[   89.607165][   T36] audit: type=1326 audit(1759512864.693:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3105 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda0b8eec9 code=0x50000
[   89.630365][   T36] audit: type=1326 audit(1759512864.693:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3105 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda0b8eec9 code=0x50000
[   89.654960][   T36] audit: type=1326 audit(1759512864.693:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3105 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda0b8eec9 code=0x50000
[   89.678199][   T36] audit: type=1326 audit(1759512864.693:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3105 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda0b8eec9 code=0x50000
[   89.701317][   T36] audit: type=1326 audit(1759512864.693:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3105 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda0b8eec9 code=0x50000
[   89.725162][   T36] audit: type=1326 audit(1759512864.693:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3105 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda0b8eec9 code=0x50000
[   89.748546][   T36] audit: type=1326 audit(1759512864.693:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3105 comm="syz.0.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda0b8eec9 code=0x50000
[   89.832053][ T3126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.889'.
[   93.251673][ T3207] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   93.522518][ T3245] incfs: Backing dir is not set, filesystem can't be mounted.
[   93.533016][ T3245] incfs: mount failed -2
[   93.565160][ T3249] netlink: 2 bytes leftover after parsing attributes in process `syz.3.932'.
[   93.743147][ T3269] fuse: Unknown parameter 'fdҁn����jGx�0D�'
[   93.787564][ T3261] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[   93.804237][ T3283] netlink: 596 bytes leftover after parsing attributes in process `syz.2.944'.
[   94.491240][   T36] kauditd_printk_skb: 31886 callbacks suppressed
[   94.491261][   T36] audit: type=1400 audit(1759512869.614:32387): avc:  denied  { setattr } for  pid=3321 comm="syz.2.960" name="secretmem" dev="secretmem" ino=14427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   94.522057][ T3321] process '/newroot/314/file0' started with executable stack
[   94.737598][   T36] audit: type=1400 audit(1759512869.854:32388): avc:  denied  { setopt } for  pid=3339 comm="syz.3.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   94.757815][   T36] audit: type=1400 audit(1759512869.854:32389): avc:  denied  { ioctl } for  pid=3339 comm="syz.3.966" path="socket:[14452]" dev="sockfs" ino=14452 ioctlcmd=0x541d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   94.968902][ T3354] overlay: ./file0 is not a directory
[   94.990765][   T31] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[   95.140942][   T31] usb 4-1: Using ep0 maxpacket: 32
[   95.147190][   T31] usb 4-1: config 8 has an invalid descriptor of length 69, skipping remainder of the config
[   95.157445][   T31] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[   95.168157][   T31] usb 4-1: New USB device found, idVendor=1a0a, idProduct=00f9, bcdDevice= 6.d6
[   95.177332][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.185447][   T31] usb 4-1: Product: syz
[   95.189698][   T31] usb 4-1: Manufacturer: syz
[   95.194346][   T31] usb 4-1: SerialNumber: syz
[   95.217098][ T3356] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   95.224147][   T36] audit: type=1400 audit(1759512870.334:32390): avc:  denied  { associate } for  pid=3358 comm="syz.2.971" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[   95.246565][ T3356] overlayfs: failed to set xattr on upper
[   95.252770][ T3356] overlayfs: ...falling back to redirect_dir=nofollow.
[   95.260004][ T3356] overlayfs: ...falling back to uuid=null.
[   95.266509][ T3356] overlayfs: overlapping lowerdir path
[   95.308717][ T3363] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   95.402881][   T31] usb 4-1: USB disconnect, device number 24
[   95.516125][   T36] audit: type=1400 audit(1759512870.634:32391): avc:  denied  { relabelfrom } for  pid=3377 comm="syz.0.979" name="" dev="pipefs" ino=15493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   95.541192][ T3381] overlayfs: failed to clone upperpath
[   95.592316][ T3392] futex_wake_op: syz.1.983 tries to shift op by 144; fix this program
[   95.679173][ T3397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.984'.
[   96.120922][ T3419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.992'.
[   96.130982][ T3419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'.
[   96.600688][    T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[   96.750710][    T9] usb 4-1: Using ep0 maxpacket: 16
[   96.758921][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[   96.768008][    T9] usb 4-1: unable to read config index 0 descriptor/start: -71
[   96.776394][    T9] usb 4-1: can't read configurations, error -71
[   96.846220][   T36] audit: type=1400 audit(1759512871.964:32392): avc:  denied  { ioctl } for  pid=3439 comm="syz.1.1000" path="/255/file2" dev="tmpfs" ino=1394 ioctlcmd=0x1260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   96.905413][   T36] audit: type=1326 audit(1759512872.024:32393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3446 comm="syz.3.999" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f357878eec9 code=0x0
[   97.096768][   T36] audit: type=1400 audit(1759512872.214:32394): avc:  denied  { map } for  pid=3471 comm="syz.0.1010" path="socket:[14676]" dev="sockfs" ino=14676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   97.124470][ T3472] 9pnet_fd: Insufficient options for proto=fd
[   97.159589][   T36] audit: type=1400 audit(1759512872.274:32395): avc:  denied  { nlmsg_tty_audit } for  pid=3478 comm="syz.0.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   97.216414][ T3479] overlayfs: failed to clone upperpath
[   97.330036][ T3485] tipc: New replicast peer: 255.255.255.255
[   97.336357][ T3485] tipc: Enabled bearer <udp:syz2>, priority 10
[   97.697601][ T3495] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1016'.
[   97.747500][ T3509] netlink: 'syz.2.1019': attribute type 12 has an invalid length.
[   97.809558][ T3511] rust_binder: Write failure EFAULT in pid:543
[   97.916047][ T3535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1027'.
[   98.129310][ T3551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'.
[   98.346980][ T3570] netlink: 4432 bytes leftover after parsing attributes in process `syz.1.1038'.
[   98.451137][  T330] tipc: Node number set to 2925695613
[   98.489861][   T36] audit: type=1400 audit(1759512873.603:32396): avc:  denied  { read } for  pid=3575 comm="syz.1.1040" path="socket:[14794]" dev="sockfs" ino=14794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   99.236092][ T3580] netlink: 'syz.1.1041': attribute type 11 has an invalid length.
[   99.244941][ T3580] netlink: 'syz.1.1041': attribute type 1 has an invalid length.
[   99.253006][ T3580] netlink: 3593 bytes leftover after parsing attributes in process `syz.1.1041'.
[   99.796000][   T36] audit: type=1400 audit(1759512874.913:32397): avc:  denied  { shutdown } for  pid=3592 comm="syz.0.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   99.913938][   T36] audit: type=1400 audit(1759512875.033:32398): avc:  denied  { name_bind } for  pid=3598 comm="syz.0.1049" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  100.177262][   T36] audit: type=1400 audit(1759512875.293:32399): avc:  denied  { mounton } for  pid=3619 comm="syz.3.1057" path="/" dev="ramfs" ino=14859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  100.258608][ T3634] rust_binder: 571: no such ref 3
[  100.264055][ T3634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:571
[  100.836725][ T3649] overlayfs: failed to clone lowerpath
[  101.710354][ T3688] overlayfs: failed to clone upperpath
[  103.152285][ T3724] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  103.199691][ T3736] netlink: 5308 bytes leftover after parsing attributes in process `syz.2.1096'.
[  104.053395][ T3792] 9pnet_fd: Insufficient options for proto=fd
[  243.912450][    C0] watchdog: BUG: soft lockup - CPU#0 stuck for 144s! [syz.3.1102:3753]
[  243.912501][    C0] CPU#0 Utilization every 22s during lockup:
[  243.912511][    C0] 	#1: 100% system,	  1% softirq,	  1% hardirq,	  0% idle
[  243.912526][    C0] 	#2: 100% system,	  1% softirq,	  1% hardirq,	  0% idle
[  243.912540][    C0] 	#3: 100% system,	  1% softirq,	  1% hardirq,	  0% idle
[  243.912554][    C0] 	#4: 100% system,	  1% softirq,	  1% hardirq,	  0% idle
[  243.912569][    C0] 	#5: 100% system,	  1% softirq,	  1% hardirq,	  0% idle
[  243.912583][    C0] Modules linked in:
[  243.912607][    C0] CPU: 0 UID: 0 PID: 3753 Comm: syz.3.1102 Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b
[  243.912631][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  243.912651][    C0] RIP: 0010:change_mnt_propagation+0x112/0xb00
[  243.912690][    C0] Code: 24 20 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 77 4e e7 ff 4d 39 2e 0f 84 8f 00 00 00 <49> 81 c4 d8 00 00 00 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc
[  243.912705][    C0] RSP: 0018:ffffc9000e4e79c0 EFLAGS: 00000202
[  243.912720][    C0] RAX: 1ffff1102724f5c4 RBX: ffffffffffffff28 RCX: dffffc0000000000
[  243.912733][    C0] RDX: ffffc90001e93000 RSI: 000000000007ffff RDI: 0000000000080000
[  243.912744][    C0] RBP: ffffc9000e4e7a10 R08: ffff888144dcd7ef R09: 0000000000000000
[  243.912756][    C0] R10: ffff888144dcd7e0 R11: ffffed10289b9afe R12: ffff88813927ae00
[  243.912769][    C0] R13: ffff8881154fbcc0 R14: ffff88813927ae20 R15: ffff88813fe53500
[  243.912782][    C0] FS:  00007f35796306c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  243.912797][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  243.912808][    C0] CR2: 00007feda19f0f70 CR3: 0000000122284000 CR4: 00000000003526b0
[  243.912823][    C0] Call Trace:
[  243.912830][    C0]  <TASK>
[  243.912846][    C0]  umount_tree+0xdfd/0xf70
[  243.912871][    C0]  ? irqentry_exit+0x4a/0x60
[  243.912886][    C0]  ? sysvec_apic_timer_interrupt+0x50/0x90
[  243.912911][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1f/0x30
[  243.912928][    C0]  ? __detach_mounts+0x610/0x610
[  243.912952][    C0]  attach_recursive_mnt+0x6df/0x21e0
[  243.912971][    C0]  ? __asan_memset+0x39/0x50
[  243.912997][    C0]  ? graft_tree+0x1c0/0x1c0
[  243.913014][    C0]  ? clone_mnt+0xa27/0xc80
[  243.913035][    C0]  graft_tree+0x157/0x1c0
[  243.913053][    C0]  do_loopback+0x364/0x4b0
[  243.913077][    C0]  ? path_mount+0x1050/0x1050
[  243.913100][    C0]  ? security_capable+0xcf/0xf0
[  243.913123][    C0]  ? ns_capable+0x91/0xf0
[  243.913145][    C0]  path_mount+0x582/0x1050
[  243.913168][    C0]  ? putname+0x113/0x150
[  243.913185][    C0]  __se_sys_mount+0x2bd/0x480
[  243.913200][    C0]  ? __x64_sys_mount+0xf0/0xf0
[  243.913215][    C0]  ? __kasan_check_write+0x18/0x20
[  243.913239][    C0]  ? fpregs_restore_userregs+0x11d/0x260
[  243.913258][    C0]  __x64_sys_mount+0xc3/0xf0
[  243.913273][    C0]  x64_sys_call+0x2021/0x2ee0
[  243.913298][    C0]  do_syscall_64+0x58/0xf0
[  243.913323][    C0]  ? clear_bhb_loop+0x50/0xa0
[  243.913339][    C0]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  243.913364][    C0] RIP: 0033:0x7f357878eec9
[  243.913385][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.913399][    C0] RSP: 002b:00007f3579630038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  243.913415][    C0] RAX: ffffffffffffffda RBX: 00007f35789e5fa0 RCX: 00007f357878eec9
[  243.913428][    C0] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 00002000000002c0
[  243.913439][    C0] RBP: 00007f3578811f91 R08: 0000000000000000 R09: 0000000000000000
[  243.913450][    C0] R10: 0000000002101819 R11: 0000000000000246 R12: 0000000000000000
[  243.913460][    C0] R13: 00007f35789e6038 R14: 00007f35789e5fa0 R15: 00007ffe0b62b1d8
[  243.913474][    C0]  </TASK>
[  243.913486][    C0] Sending NMI from CPU 0 to CPUs 1:
[  244.291101][    C1] NMI backtrace for cpu 1
[  244.291117][    C1] CPU: 1 UID: 0 PID: 3771 Comm: syz.2.1108 Not tainted syzkaller #0 68071847e78a8b5e73ab1b858b320f4e6b4f981b
[  244.291140][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  244.291151][    C1] RIP: 0010:pv_native_safe_halt+0x17/0x20
[  244.291175][    C1] Code: cc cc cc b8 e4 7e 4c 98 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 32 3a 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 d3 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90
[  244.291190][    C1] RSP: 0018:ffffc9000e39fa10 EFLAGS: 000002d3
[  244.291205][    C1] RAX: ffffffff81439535 RBX: 0000000000000003 RCX: ffff88813f1fa600
[  244.291218][    C1] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
[  244.291228][    C1] RBP: ffffc9000e39fa10 R08: ffffffff8720d604 R09: 1ffffffff0e41ac0
[  244.291241][    C1] R10: dffffc0000000000 R11: fffffbfff0e41ac1 R12: dffffc0000000000
[  244.291253][    C1] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff92001c73f44
[  244.291265][    C1] FS:  00005555609d4500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  244.291280][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  244.291291][    C1] CR2: 00007f019d9c4f98 CR3: 00000001452a4000 CR4: 00000000003526b0
[  244.291306][    C1] Call Trace:
[  244.291313][    C1]  <TASK>
[  244.291320][    C1]  kvm_wait+0x1ba/0x220
[  244.291343][    C1]  ? __cfi_kvm_wait+0x10/0x10
[  244.291366][    C1]  __pv_queued_spin_lock_slowpath+0x78d/0xcc0
[  244.291390][    C1]  ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10
[  244.291413][    C1]  ? locks_remove_file+0x346/0x1000
[  244.291438][    C1]  _raw_spin_lock+0x109/0x120
[  244.291457][    C1]  ? __cfi__raw_spin_lock+0x10/0x10
[  244.291477][    C1]  mntput_no_expire+0x147/0x6c0
[  244.291500][    C1]  ? __cfi_lockref_put_return+0x10/0x10
[  244.291523][    C1]  ? mntput+0xd0/0xd0
[  244.291543][    C1]  ? __kasan_check_write+0x18/0x20
[  244.291568][    C1]  mntput+0x63/0xd0
[  244.291588][    C1]  __fput+0x5c5/0xa00
[  244.291607][    C1]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  244.291627][    C1]  ____fput+0x20/0x30
[  244.291645][    C1]  task_work_run+0x1e0/0x250
[  244.291665][    C1]  ? __cfi_task_work_run+0x10/0x10
[  244.291684][    C1]  ? __kasan_check_write+0x18/0x20
[  244.291709][    C1]  resume_user_mode_work+0x36/0x50
[  244.291728][    C1]  syscall_exit_to_user_mode+0x64/0xb0
[  244.291744][    C1]  do_syscall_64+0x64/0xf0
[  244.291763][    C1]  ? clear_bhb_loop+0x50/0xa0
[  244.291779][    C1]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  244.291804][    C1] RIP: 0033:0x7fa90c18eec9
[  244.291818][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  244.291832][    C1] RSP: 002b:00007ffe64c8fa38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  244.291847][    C1] RAX: 0000000000000000 RBX: 00007fa90c3e7da0 RCX: 00007fa90c18eec9
[  244.291858][    C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  244.291868][    C1] RBP: 00007fa90c3e7da0 R08: 00000000000000dc R09: 0000000b64c8fd2f
[  244.291879][    C1] R10: 00007fa90c3e7cb0 R11: 0000000000000246 R12: 00000000000198e5
[  244.291891][    C1] R13: 00007fa90c3e6180 R14: ffffffffffffffff R15: 00007ffe64c8fb50
[  244.291905][    C1]  </TASK>