last executing test programs: 21m17.869050265s ago: executing program 0 (id=45): socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000e14080025bd7000ffdbdf250800030004000000080001000200000008003c0004000000a3000300ff01000008063c0005000000080003000100000052c2c539d1dafb825ca5e31141ed29b5c8f7c622e50ca1da5507f8490e604b50500c7247e581f19349b6b32c8d510b40ea652c94f9ac23181967afff24a042871f7b72fea11ca8dad16bc0790c98a7378cdc5a2d671894883f77df86f52097821785475cb24833"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20008040) socket(0x1e, 0x805, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x20d4, 0x2c, 0xd2b, 0x70bd2b, 0x2ddfdbfb, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x208c, 0x2, [@TCA_CGROUP_POLICE={0x1430, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x0, 0x6042, 0x29e, 0xfffffff7, 0xf, 0x8, 0x7, 0x20e7, 0x2, 0x400, 0x80000001, 0x1, 0x0, 0xc0, 0x30df77d4, 0x7, 0x5, 0xfffffbff, 0x9, 0x80, 0x4b84, 0x0, 0x54ea, 0x5, 0x2, 0x3, 0x9, 0x35a, 0x3, 0xe9, 0x4, 0xfffffeff, 0x1fc00, 0x9, 0x9, 0x4, 0x1, 0x2630, 0x0, 0x3, 0x10, 0x3, 0x10000, 0x80, 0x3, 0x4, 0x0, 0x1000, 0x1, 0x10000, 0x5, 0x3, 0x3, 0x2, 0x9, 0x1, 0x5, 0xfff, 0x0, 0x2, 0x0, 0x5, 0x7, 0x0, 0x7, 0x0, 0x7, 0x4, 0x6, 0x5, 0x10000, 0xe8f8, 0xf, 0x0, 0x9, 0xffffffff, 0x10000, 0x7, 0x5, 0x9, 0x7, 0x0, 0x9, 0x4, 0xfffffff7, 0x5, 0x4, 0x7ff, 0x0, 0x0, 0x4, 0x4, 0x2, 0xfff, 0x10001, 0x2, 0x24, 0x6, 0x9, 0x7fff, 0x9f6, 0x6, 0x6b77, 0x4, 0x2, 0xb935, 0x12, 0x8, 0x5, 0x0, 0x3, 0x2, 0x9, 0x7ff, 0xa2, 0x5b7, 0x5, 0x3, 0xaa38, 0x8000, 0x2d07, 0x2, 0x0, 0xfffffffb, 0x9, 0x0, 0x1, 0x8, 0x5, 0x6, 0xc, 0x200, 0x720, 0x1, 0xa, 0x80000000, 0x0, 0xa, 0x8, 0x8, 0x4, 0x8, 0x7, 0x9, 0x6, 0x6, 0xf1, 0x7, 0x5d4, 0x29, 0x1, 0x8, 0x7, 0x80000001, 0x9, 0x1, 0xbf55, 0x7, 0x0, 0x1, 0x9, 0x7d, 0x400, 0x891, 0x2, 0x8, 0x7, 0xbb, 0x9, 0x5, 0x0, 0x1, 0xfffffe00, 0xde, 0x3, 0x3, 0x8, 0x8000, 0x3, 0xfffffe00, 0x6c, 0x1, 0x3, 0x7fff, 0x9, 0x1, 0x886, 0x0, 0x5, 0x4, 0x6, 0x0, 0xb, 0x2, 0x5, 0x200, 0x3, 0x4, 0x450, 0x9, 0xfffffffb, 0x45d93843, 0x5, 0x9, 0x0, 0x1, 0x8, 0x7, 0x10001, 0x80, 0x60, 0x2, 0x2, 0xb, 0xfe, 0x80000001, 0xffffffff, 0x7, 0x9, 0x8001, 0xfffffffd, 0x4, 0x0, 0x9, 0x5, 0x78, 0x5, 0x8, 0x2, 0xbf2e, 0x3, 0x5, 0xd499, 0x628d, 0x7, 0x4, 0xb, 0x10000, 0x8, 0xb0d, 0x8, 0x401, 0x3, 0x9, 0x18000000, 0x7f, 0x69ab, 0xfd, 0x4, 0x9, 0x6, 0x1, 0x6, 0x8, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x2fc, 0x4, 0x4, 0xe08, 0x8, 0x0, 0x0, 0x7fffffff, 0x2, 0x80000000, 0x4, 0x10001, 0x7, 0xd, 0xb, 0x2, 0x9, 0x80000001, 0x101, 0x7, 0x4, 0xfd0a, 0xd, 0x7, 0xfffffff8, 0x1000, 0x0, 0x3, 0x3, 0xfffffffa, 0xe6, 0xea00, 0x1000, 0x7, 0xd, 0xc7f, 0xb2, 0x1, 0x10, 0x40, 0x1, 0x2, 0xbc, 0x8, 0x10001, 0x6, 0x7fff, 0x7e, 0x4, 0xb7c, 0x9, 0x80000001, 0x6, 0x0, 0x50c, 0x9, 0xaf, 0x5, 0x80000001, 0x401, 0x3, 0x7, 0x665, 0x3, 0x1000, 0xff, 0x40, 0x1, 0xc64, 0x2, 0xf4e, 0x4, 0x9, 0x8, 0x80000001, 0x40, 0xffff, 0x40, 0x8c, 0x10001, 0x2, 0x1, 0x7, 0x1, 0xa80b, 0x5, 0x6, 0x7, 0x9, 0x0, 0x8, 0x2017, 0x19b, 0x0, 0x10, 0x208, 0x2, 0x2, 0x5, 0x1, 0x5, 0xbe, 0x3, 0x80000000, 0xffffffff, 0xf8000000, 0x6, 0x697f, 0x7, 0x6836, 0x3, 0x0, 0xf, 0x0, 0x1, 0x3, 0xd9, 0x101, 0x2, 0x1ff, 0xa7d7, 0x9, 0x2c, 0xf, 0x4, 0x3, 0x6, 0x2, 0xffffffff, 0x8e3, 0xffff, 0x21880000, 0x592, 0x8001, 0x400, 0x100, 0x8, 0x7fffffff, 0x401, 0x6, 0x8, 0x5, 0x3, 0xcd0c, 0x7, 0x5, 0xe, 0x40, 0x0, 0x756, 0xfffffff8, 0x7, 0x2, 0x6, 0x7, 0x69c, 0x7, 0x200, 0xf956, 0xffff, 0xe000000, 0x6, 0x242, 0x7f, 0x9, 0x8, 0x3, 0x6, 0x3ff, 0x8000, 0x101, 0x10001, 0x100, 0x4, 0x8000, 0x10, 0x5, 0x0, 0x80000001, 0x7, 0x1, 0x1, 0xd, 0x3, 0x2, 0x8, 0x7, 0x1, 0x1, 0x7c, 0x0, 0xba3, 0x3, 0x1ff, 0x10, 0x7fff, 0x109b225b, 0x0, 0x80000000, 0x7, 0x10001, 0x67, 0xfffffff7, 0x7, 0x8, 0x5, 0x10, 0x0, 0x7f, 0x0, 0xfff, 0x7, 0x0, 0x7, 0x888, 0x3, 0x0, 0xfffff2db, 0x1, 0xfffffff2, 0x8, 0x80000001, 0x1800000, 0x3, 0x41, 0xbd9, 0x7fff, 0x5, 0xfffffe00, 0x10000, 0xaa, 0x4, 0x0, 0xd, 0x6, 0xc, 0x8, 0x1ff, 0x5, 0xd, 0x6, 0x4, 0x4, 0x7f, 0x8, 0x8, 0x9, 0x10001, 0x0, 0x7, 0x4, 0x4, 0x5, 0x7, 0x8001]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x79dd517b, 0x800, 0x0, 0x6, 0x0, 0x2c73, 0x3, 0x4, 0xfffffff9, 0x7ff, 0x101, 0x4c, 0xfffffffa, 0x10000, 0x5, 0x0, 0x80000001, 0x1, 0x4f4f, 0x101, 0xffffffcc, 0xc51, 0x0, 0x3, 0x2, 0xc782, 0x7, 0x3, 0xc, 0x2, 0x0, 0x4, 0x8001, 0x4, 0x7, 0x2, 0x9f4, 0x0, 0x8, 0x7f, 0x324, 0x3, 0x1, 0x10000, 0xb, 0xc3a6, 0x8001, 0x4, 0x6, 0xd, 0x40, 0xb13, 0x10, 0x4, 0xfffffff8, 0x20, 0xfff, 0x0, 0xd17, 0xe, 0xfffffffc, 0x0, 0x80000001, 0x9, 0x0, 0x10001, 0xffffff7f, 0x80000001, 0xc, 0x7, 0x700, 0x8, 0x1, 0x1000, 0x0, 0x2733, 0x3, 0x2, 0x1000, 0x0, 0x5, 0x81, 0x1fe00000, 0x41, 0x1, 0x9, 0x7fffffff, 0x6, 0x9, 0x1, 0x5, 0x1, 0x6419f763, 0x1000, 0x8, 0x4c, 0x2f2d9a1d, 0x2, 0x7d6, 0x8, 0x0, 0x81, 0x6c3, 0xc67, 0xfffffffa, 0x3, 0x6, 0x1e, 0x3, 0x2, 0x1, 0x6, 0x0, 0x9, 0x6, 0x75e, 0x40, 0x2, 0x10001, 0x1, 0x80000000, 0x6, 0x4, 0x7, 0xff00, 0x4, 0x2, 0x9, 0x0, 0x3ff, 0x2, 0x6, 0x5, 0x3, 0x800, 0xff, 0x5, 0x2c85, 0x8, 0xfff, 0x347a, 0x0, 0x80000, 0x3ff, 0x200, 0x9, 0x8, 0x8, 0x2, 0x0, 0xff, 0x4, 0xdc5, 0x7, 0xfff, 0x8, 0x400, 0x27c, 0xfffffffe, 0xb76, 0x92645c79, 0x8, 0x86, 0x7, 0x7, 0x2, 0x9, 0x164, 0x8, 0x1, 0x9, 0x1bd5, 0x1, 0x401, 0x6, 0x4b4, 0x2, 0x1000, 0xc, 0x2, 0x4, 0x2, 0x80000001, 0x91c, 0x6, 0x7, 0x800, 0x8001, 0x9e1c, 0x5, 0xa, 0x5, 0x80000001, 0x3, 0x0, 0x9, 0x77, 0x24, 0xffffff38, 0x9, 0x1c34, 0x0, 0xe2c7, 0x8080000, 0x81, 0x3, 0x2, 0x5135157b, 0x10000, 0x2, 0x3, 0x1, 0x10, 0x7ff, 0x9, 0x2, 0x10, 0x2, 0x3b4, 0x4, 0xfffffffb, 0x0, 0x6, 0x4, 0x7fffffff, 0x200, 0xe0, 0xd47a, 0x8, 0x1, 0x2, 0xffb, 0x4, 0x2, 0x80, 0x2, 0x2, 0x8, 0x0, 0x100, 0x101, 0x401, 0x1, 0x1, 0xfffffffa, 0x8, 0xfffffff8, 0x4, 0x2, 0x9, 0x7f, 0x1, 0x5, 0x1, 0x2, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x4, 0x2, 0x10, 0x8001, 0x80000001, 0x2, 0x1, 0x1, 0xb50, 0x7, 0x0, 0x69, 0x2b17, 0x9, 0xffff0000, 0x0, 0x7, 0x5, 0xf2e9, 0x0, 0x89d, 0x7, 0x0, 0x0, 0x966, 0x7, 0x6, 0x2, 0x6, 0xf31b, 0x4, 0x86, 0x1ee0128c, 0xb89, 0xff, 0x0, 0x8001, 0x9041, 0x2, 0x2, 0x9, 0x8, 0x8c6, 0xfffffff7, 0x6, 0x4, 0x9, 0x8, 0x7, 0x3, 0xe, 0x2, 0x5, 0x2, 0x7, 0x5, 0x52aa7e45, 0xffff5d99, 0x100, 0x7, 0xfffffffe, 0x40, 0x1, 0x0, 0x7fff, 0x8dc, 0x3d, 0x3, 0x6, 0x1, 0x33d, 0xc36c, 0x3ff, 0x9, 0xfffffff9, 0x101, 0xd021, 0xf, 0x5, 0xfffffc01, 0x0, 0xffffffff, 0x2, 0x1, 0x3, 0x49, 0x1, 0xffffffff, 0x9, 0x477, 0xb, 0xfff, 0x80000001, 0x6, 0x0, 0xfff, 0x2, 0x7fff, 0xe, 0x4, 0x2, 0x7, 0x5, 0x2, 0xe090, 0xd, 0x46e0f3f6, 0x7, 0x0, 0x5, 0x7, 0x3, 0x3, 0x7f, 0x3, 0x3, 0x9, 0x4, 0x4, 0x6d, 0x101, 0x0, 0x652a, 0x401, 0x80, 0x8, 0x1101, 0x4, 0xb5bc, 0x2, 0x0, 0x1, 0x3, 0x101, 0xffffffff, 0x3, 0x8000, 0x9ab, 0x45, 0x6, 0x80, 0x8, 0xd, 0x463f, 0xf25, 0x0, 0xfffffff7, 0xe7, 0x7f, 0x2, 0x80000000, 0x9, 0x80000000, 0x8, 0x0, 0x94a, 0x0, 0x9, 0x9, 0x4, 0xce, 0x7fff, 0x2, 0x7, 0x8, 0xa, 0x9, 0x1, 0x9, 0x5, 0x8e65, 0x80000000, 0x10000, 0xfffffffc, 0x2, 0x9, 0x5, 0x8, 0x7, 0x40, 0xffff, 0x2, 0xfff, 0x10, 0x7ffffffc, 0x1, 0x5, 0x0, 0x80, 0x1, 0x3, 0x7, 0x88b5, 0xffffff10, 0xff23, 0x5, 0x42a5, 0xb0, 0x9, 0x9fc, 0x0, 0x3, 0x7, 0x7ce, 0x7, 0x81, 0x3, 0x9, 0xcad, 0x9, 0x3, 0xfffff800, 0x10000, 0x100, 0x10000, 0x1, 0x859, 0x7808, 0x4, 0xfffffffa, 0x10001, 0x7, 0x7, 0x1, 0x7, 0x1, 0x6, 0x6, 0xfffffffc, 0x2, 0x7, 0x1, 0x8e, 0x8, 0x200, 0x2, 0x80000000, 0x1ff, 0x2, 0x5, 0xb, 0xe6, 0xffffff81, 0x0, 0x9, 0xb, 0x7, 0x9, 0x10, 0x6, 0x7, 0x200, 0x5, 0x7fff, 0x10000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x98e, 0x2, 0x5, 0xfffffffd, 0x8001, 0x4, 0xd, 0xffffff81, 0x6, 0x1, 0x0, 0x3, 0x9, 0x8, 0x4, 0x1ff, 0x8, 0x1, 0x3, 0x1, 0x9, 0xd4cd, 0xc, 0x7, 0x400, 0xf, 0x1, 0x3c, 0x7fffffff, 0x7, 0x8, 0x2, 0x383, 0x9, 0xb, 0x8, 0x800, 0x80000001, 0x70fa, 0xe4, 0x0, 0x1a, 0xd, 0x0, 0x1, 0x2, 0x1, 0x6ea, 0x5, 0x7, 0x9, 0x0, 0xffffffff, 0x5, 0x93, 0x5, 0x40, 0x9, 0x0, 0xb, 0x5, 0x9, 0x6, 0x2, 0x6, 0xff, 0xc00, 0x1, 0x1a6, 0xfffffffe, 0x1000, 0x8001, 0xfffffe00, 0x1000, 0x49a, 0x1, 0x200, 0x6, 0x1, 0x3, 0x5a5, 0x8, 0x10001, 0x2, 0x0, 0x7, 0x3, 0x8, 0x7fff, 0x6, 0x9, 0x7, 0x5, 0x1, 0x5, 0x80000000, 0x24a0, 0xfffffffa, 0x3, 0x8, 0x8000, 0x6, 0xff, 0x100, 0x6, 0x3, 0x7, 0x5, 0x0, 0x5, 0x0, 0xfffffff1, 0x5, 0x7ff, 0x549, 0x2, 0x40100, 0x6, 0x9, 0x6, 0x8, 0x6, 0x7, 0x4b7a95b5, 0x5, 0x0, 0x7fffffff, 0xffff, 0x3ff, 0x8001, 0x4, 0x6, 0x4, 0x6, 0xfffffffa, 0xfffffff9, 0x5, 0x0, 0x9, 0x800, 0xfffffff9, 0x7, 0x6, 0x2, 0x101, 0x0, 0x6, 0x3, 0x4, 0x0, 0x2, 0x9, 0xfffff098, 0xfffffffc, 0x4, 0x80, 0x0, 0x4569516b, 0x2fdf, 0x7, 0xf0, 0xfffffe01, 0x1, 0x6, 0x3, 0xfffffff7, 0x40000, 0x6, 0x4, 0x5, 0x39, 0x40, 0x7fffffff, 0x3, 0x1, 0x3, 0x0, 0x800, 0xfffffffb, 0x5, 0x488161b5, 0x7, 0xe, 0x5, 0xffe, 0x0, 0x80000001, 0x8, 0x5, 0x8, 0xffffffc0, 0xd, 0x0, 0x8001, 0x0, 0x4, 0xffff0000, 0x5eb, 0x7ff, 0x4000, 0x401, 0xc2, 0x7, 0x0, 0x80000000, 0x1, 0x4, 0x2, 0x1, 0x6, 0xc, 0x8, 0xe, 0x7ac, 0x7f, 0x3, 0x2, 0x100, 0x3, 0x7f, 0x9, 0x3ff, 0x5, 0xb1, 0x5, 0x7, 0xfffffae2, 0x3, 0x1, 0x9, 0x4, 0xf1, 0x4, 0x400, 0x9, 0x4, 0x1, 0x0, 0x8, 0x1, 0x5f2, 0x15794d85, 0x9, 0x7, 0x7, 0x7f, 0x0, 0x0, 0x2, 0x73, 0x6, 0x0, 0x5, 0x321, 0x1, 0x8001]}]}, @TCA_CGROUP_POLICE={0xc58, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x62}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x1, 0x3ff, 0xfffffffb, 0xf7d6, 0x9d6, 0x8, 0x5b3, 0x5, 0x3ff, 0x100, 0x8, 0x76, 0x7fffffff, 0x9, 0x8c6, 0x4, 0xc, 0x6c, 0x7, 0x6, 0x8000, 0xa8b, 0xbf58, 0x424b, 0x10001, 0x5d5, 0xc3, 0x1, 0x7, 0xf, 0x8000, 0xffff, 0x1ff, 0x1, 0x2800000, 0x8, 0x33, 0x2, 0x9, 0x1, 0xfffffff7, 0x9, 0x4, 0x8, 0x7, 0x80, 0x2, 0x9, 0x0, 0x2, 0x8001, 0x8, 0x54f, 0xffffff75, 0xa, 0x8, 0xc, 0x7, 0x6, 0x8, 0xffffff00, 0xab3, 0x0, 0x10001, 0xfffff001, 0x8, 0x4, 0x75fbb0db, 0x9, 0xf2b, 0x400, 0x3, 0x2, 0xa7, 0x5, 0x9, 0x7f, 0x104c3983, 0x8, 0x7, 0x8, 0x9, 0x2, 0x6f4f, 0x5, 0x8, 0x9, 0x2, 0x4a, 0x100, 0x8, 0x63, 0x9, 0x7f, 0x10, 0x3, 0x1, 0x3, 0x8001, 0xffffe67f, 0xfffff804, 0x80000000, 0x74, 0x0, 0xffffffff, 0x991b, 0x6, 0x4, 0x9, 0x6, 0x8001, 0x7, 0x6, 0x10000000, 0x7, 0x6, 0x2, 0x5, 0xf5, 0x40, 0x1000, 0x7, 0x967a, 0x0, 0x8001, 0x6, 0x774d, 0x8, 0x80, 0x1, 0x6, 0x1db, 0x9, 0x5, 0x1, 0x2, 0x8, 0xc00000, 0x7ff, 0x3, 0x21f, 0x4, 0xad6, 0xffffffff, 0x73fb4e79, 0x8c3, 0xe, 0x2, 0x6, 0x7, 0x1, 0x4, 0xf94, 0x4, 0x16, 0xf, 0x9, 0x6d7e, 0x8, 0x2, 0x3, 0x1, 0x620, 0x8d2, 0x8, 0x2, 0x7fff, 0x1, 0x8, 0x7, 0x3, 0x0, 0x3, 0x8000, 0x1, 0xb79, 0x1b, 0xe, 0x8001, 0x3, 0x7ff, 0xfffffffd, 0x4, 0x9, 0xd6, 0xb, 0x3, 0xa82, 0x8, 0x99, 0x7f, 0x3, 0x41, 0x6, 0x4, 0x1000, 0x1, 0x3, 0x2704d5f5, 0x3, 0x6, 0x6, 0xb31, 0xfffffffb, 0x4, 0x240, 0x3, 0x8, 0x7, 0x3, 0x401, 0x1, 0x4, 0xc77, 0x3, 0x6, 0x40, 0xa, 0x6, 0x3ff, 0xfffffffc, 0x100, 0xfffffffb, 0x2, 0x5, 0x8001, 0x7f, 0x5, 0x4, 0xdc, 0x1, 0xfd, 0x4, 0x0, 0x40, 0x3, 0x8, 0xa, 0x2, 0xa0f0, 0x2, 0x4, 0x4, 0x1, 0x290a, 0x2, 0x1000, 0x80, 0xc7d8, 0x0, 0x7831, 0x80000000, 0x1, 0x3, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x3, 0x3, 0x7, 0x4, 0x0, 0x98, 0x5, 0x5, 0x10, 0x8, 0x4, 0x5, 0x8, 0x8000, 0x7, 0x10000, 0x80000000, 0x3, 0x401, 0x5, 0x9, 0x7fff, 0x8, 0x8000, 0x9, 0x3, 0xffff314b, 0x6, 0x1, 0x7, 0x4, 0x1, 0x200, 0xfffffffa, 0x6e60, 0x10, 0x10000, 0x4, 0x6cc, 0x3, 0x3ff, 0xff, 0x3, 0xfffffffd, 0x0, 0x1, 0x7, 0xf627, 0x2, 0xe000, 0x0, 0x7, 0x1, 0xbfa6, 0x2, 0x10, 0x4, 0xfffffffb, 0x851, 0x1, 0x800, 0xdbe6, 0x7, 0x0, 0xdd, 0xbb4, 0x762, 0x3, 0x137, 0x9, 0x7, 0x4afd, 0x7, 0x3, 0x4, 0x7, 0x4, 0xa, 0x4, 0x7, 0xd, 0x2, 0x5, 0xffff, 0x2, 0xb51, 0x9, 0x7, 0x2, 0x7fffffff, 0x8, 0x9, 0x4, 0x6, 0x5, 0x2, 0x7fffffff, 0xfffffff8, 0x4, 0x0, 0x4, 0x0, 0x6, 0xfffffffc, 0x6, 0x43, 0x6, 0x0, 0x7, 0x5, 0x1, 0xfffffff1, 0xb379, 0x1, 0x7f, 0xe21, 0x8eb, 0x4, 0xfffeffff, 0x4, 0x5, 0x7f, 0x401, 0x4, 0x0, 0x18b9, 0x5, 0xffff, 0x2, 0x200, 0x9, 0x7, 0xffffffc0, 0x2885, 0xed7, 0x0, 0x8, 0x9, 0x7, 0x0, 0xffffffff, 0xffff, 0x442d, 0x8, 0x4, 0x0, 0x7, 0x5, 0x5037, 0xff, 0xc00, 0x1000, 0xffffffff, 0x400, 0x6, 0x10001, 0xfffffff0, 0x48, 0xfffffffe, 0x0, 0x1, 0x4, 0x3, 0x7, 0x5, 0x9, 0x5, 0xfffff800, 0x1, 0x9, 0xc000, 0x5, 0x8, 0x8dc, 0xffd6, 0x3, 0x6d, 0x9, 0x4, 0xff, 0x2, 0x1c1, 0xffffffff, 0x0, 0x800, 0x369, 0x7, 0x6a, 0x2136, 0x6, 0x5, 0x6e, 0x3, 0x44c00eb, 0x710, 0x80000000, 0x2, 0x0, 0x382e, 0x69, 0x8, 0x9, 0xb2ca, 0x2437, 0x5, 0x1400000, 0x70, 0xffffffff, 0x0, 0x2, 0x5, 0x0, 0x8001, 0xff, 0x6fc5, 0x8, 0x0, 0x2, 0x86f0, 0x0, 0xff, 0x3, 0x7fffffff, 0x4, 0x9, 0x200000, 0x5c, 0x2, 0x9, 0x81, 0x0, 0x5b4, 0x9cb, 0x1, 0xffffffff, 0x6, 0x1, 0xd, 0xcf3, 0x7, 0x9, 0xb9, 0x7c800000, 0x8001, 0x1600000, 0x6, 0x10000, 0x6db, 0x5, 0x55d7, 0x10, 0x401, 0x1, 0xeb72]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2b28}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe9, 0x2da, 0xa7cc, 0x8, 0x4, 0x3, 0x99d, 0xd561, 0x2, 0xe306, 0x1, 0x9, 0x6, 0x1, 0x0, 0x80, 0x8dcd, 0x48d8, 0xc4c, 0x0, 0xec, 0x8, 0x4, 0x8, 0xec7, 0x7fff, 0x8000, 0x80f, 0x5, 0x3cdb, 0x1, 0x2, 0x8001, 0x40, 0x2, 0x5, 0x40, 0x92, 0x1, 0x8, 0x5, 0x9dabec5, 0x3, 0x1ff, 0x200, 0x1, 0x8, 0x1, 0xa, 0x8064, 0x6, 0x7, 0xc, 0x77, 0x3f, 0x0, 0x1, 0xb6, 0x2, 0x40, 0x2, 0x50, 0x3, 0x8, 0xb8f3, 0xe, 0x2, 0x372ced0a, 0x3, 0x5, 0x4, 0xb5ca, 0x9, 0x4, 0x8, 0x6, 0x4, 0x2469, 0x8, 0x7, 0x1, 0x0, 0x8, 0x1f, 0xab76, 0x6, 0x2b2d, 0x81, 0xce3, 0x3, 0x10001, 0x5, 0xd722, 0x4, 0x401, 0x2, 0x4c14, 0x1, 0xf12, 0xfffffff7, 0x7fff, 0xfffffff7, 0x0, 0x7, 0x7, 0x3ff, 0x2, 0x200, 0x7, 0x14, 0x3, 0x8cc, 0x1, 0xbf, 0x344, 0xfffffff7, 0x8000, 0x2, 0x7, 0x7692, 0x1, 0xe, 0x100, 0xa3, 0x4, 0x0, 0x6, 0x166d996d, 0xfffffffa, 0xe1, 0xbc7, 0x7, 0x5, 0xffffffff, 0xfff, 0x80000000, 0x1, 0x800, 0x7, 0x66cd, 0x7, 0x8, 0x2, 0xb9, 0x7f, 0x7, 0x8, 0x4, 0xbc, 0x0, 0x7, 0xa5, 0x80000001, 0x4, 0xff, 0xb, 0x62, 0xfffffffd, 0x8, 0x2, 0x87c7, 0x0, 0x3, 0x6, 0x101, 0x1, 0x401, 0xc, 0x7, 0x2, 0x8bb, 0x0, 0x7, 0x0, 0x1, 0x1, 0x6, 0x6, 0x6, 0x2, 0x4, 0x7fffffff, 0x1, 0x3655, 0x6, 0x6, 0x8, 0x9, 0x10001, 0xff, 0x10, 0x80, 0x9, 0xbe, 0xffffff7f, 0x1, 0x3e, 0x96f1, 0xfffffff8, 0x5, 0x348, 0x8, 0x4, 0x5, 0x7, 0x7, 0xffffff00, 0x5, 0x3ff, 0x6, 0x0, 0x3, 0xb, 0xff, 0x9, 0x2772, 0x4, 0x1c2e, 0x573, 0x7fff, 0x7, 0x4, 0x7, 0x10000, 0x61, 0x7, 0xff8, 0x5, 0x1ff, 0x3, 0x800, 0xa6c, 0xfffffffb, 0x2, 0x7, 0xff8, 0x45b3acf7, 0x9, 0x3, 0xfff, 0x67f, 0x2, 0x400, 0x3, 0x4, 0x0, 0x6, 0x8, 0x4, 0x8, 0x9, 0x7, 0x7, 0x4, 0xd]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x100}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x20d4}}, 0x24040084) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) 21m16.761617103s ago: executing program 0 (id=49): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x220c0, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0xffffffff, 0xfffffff9, 0x0, 0x4, 0x2, 0x4}}) pwrite64(0xffffffffffffffff, &(0x7f00000008c0)='/', 0x1, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x70) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x100000f, 0x10, r0, 0x7a84d000) add_key$fscrypt_provisioning(&(0x7f0000001400), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x48, 0xfffffffffffffffe) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/4086, 0xff6}], 0x1, 0x176, 0x402) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x4000000) connect$can_bcm(r3, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000001000000000080000000000029fd71a69d3295d8"], 0x48}, 0x2}, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f0000000440)=0x1f) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x54, &(0x7f0000001580)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="ff79863c129bb70ee47bd3d6d0c5ca4ae7a9833aa5984ec09e88602c01de46e1e8d35d51e2a5d5861cedfa4f7ada147a8d5b125dfdd5d794dd572fae7815cd81e92da2900d29ebb6828e0243adeaae1517afab88865bc368802b598bab3f5276225cffcde618e558300fbbd673ba31f550ca7d6bf6e04f7d35a10527c2f7365ce5e5e85d1b5a871a0e7e93e92c2121d06b1771990f41255bb7a78912cb00ab12bbf7e150f9c1ad4dafe8122303be4afe0973e9ca25c8b3ce66a015987597", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0b00000007000000020001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000058951b709cb03862e431e30700"/43], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x20000000000000ea, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703400000000000850000001000000018110000", @ANYRES32=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) lseek(0xffffffffffffffff, 0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x4, 0x1be2dd1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x11}, 0x1c) 21m15.373679817s ago: executing program 0 (id=52): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffc00, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x8d8, 0x5, 0x58565559, 0x6, 0x8000002, 0xb, 0xb, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}}) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x3, {{@in=@rand_addr=0x64010102, @in6=@private0, 0xfffd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x200000, 0x0, 0xefffffffffffffff, 0xcb}, {0x0, 0xa00, 0x407ffffffffffe, 0x2}, 0xfae, 0x0, 0x1, 0x0, 0x4, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3c}, 0xa, @in6=@loopback, 0x6, 0x1, 0x1, 0x0, 0x5}]}]}, 0xfc}}, 0x0) (async) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0}, 0x48814) 21m15.196526103s ago: executing program 0 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$userns(0x0, &(0x7f0000000100)) syz_clone(0x14120000, &(0x7f0000000140)="c7731dd35cdb6482416e2f12173c6724e7e619ad5dd2d2317950b5a7303ca61f260ad1724f8dadc730694f863686019fa1d96192e604fb292141195e6a699b49f606439b04d275005983da7d9e6d90dd90a5bbd5e42d631f2abcf468b542b6be65cf86778393899ed8041acedfc178b7ffd99f5bbf9dfc4a1b2fb748814abe7c032de4093aa94b6b077796ba0323f473c5656c898ad2cb369019a87145edbf4fe9a947913cec15dc86d3105c89e703d3117c01e28a426238d522e3819538b0b42905edbc79f4a9cc8271ef2b32d1d0e24c407e393af0b942329ccaf587e1223380b5761ee92e66c5e29a146ed40d", 0xee, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340)) memfd_secret(0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000020ac054f0200000000000109022400010000a000090400c10103000000092100004001222400090581034000000bff0027c265237e206e4f73b6b0ccf1c5b1328772401afac8d0"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0xffffffff, @loopback, 0x10}, @in6={0xa, 0x4e20, 0x4, @loopback, 0xb}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0xdc0, @local, 0x4}, @in6={0xa, 0x4e21, 0xf, @ipv4={'\x00', '\xff\xff', @local}, 0x5}], 0x80) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan1\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x8000, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) fsopen(&(0x7f0000000280)='ceph\x00', 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r6, 0x1, 0x50, &(0x7f0000000100)={0x0, 0x57}, 0x8) 21m11.223994074s ago: executing program 0 (id=69): clock_gettime(0x3, &(0x7f0000000040)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x100000004]}, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@gettclass={0x24, 0x2a, 0xb75dea63991ab59c, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1a}, {0x3, 0xb}, {0xe, 0xc}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000c4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpriority(0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102392, 0x18ff8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r4, 0x201, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x24040000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x3000000f, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) read$FUSE(r0, &(0x7f0000006040)={0x2020}, 0xdaa) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 21m10.673371985s ago: executing program 0 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000b0370000000000be2fc72689ac8bbece7830030bb86d27d5e9aeca0f4aa2df34bac7ffed094fa5e98fb2e0f3d1c019d0018f63955a41e7fe353935281c8f7c9012"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() setrlimit(0x0, &(0x7f0000000180)={0x0, 0x100000000}) sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) r3 = fsopen(&(0x7f0000000280)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r8, 0x5761, &(0x7f0000000000)=ANY=[@ANYRES64=r7]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000005340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000380)=@mmap={0x800, 0x1, 0x4, 0x100, 0x81, {0x0, 0x2710}, {0x3, 0xc, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x4}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) 21m7.41365494s ago: executing program 32 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000b0370000000000be2fc72689ac8bbece7830030bb86d27d5e9aeca0f4aa2df34bac7ffed094fa5e98fb2e0f3d1c019d0018f63955a41e7fe353935281c8f7c9012"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() setrlimit(0x0, &(0x7f0000000180)={0x0, 0x100000000}) sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) r3 = fsopen(&(0x7f0000000280)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r8, 0x5761, &(0x7f0000000000)=ANY=[@ANYRES64=r7]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000005340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000380)=@mmap={0x800, 0x1, 0x4, 0x100, 0x81, {0x0, 0x2710}, {0x3, 0xc, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x4}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) 10.649569735s ago: executing program 1 (id=3785): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0xce4, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r1, 0x0, 0x100000000000000}, 0x38) openat$audio(0xffffffffffffff9c, 0x0, 0xa0480, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x208800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000019380)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0x0, 0x2b}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x60802, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000004c0)={r5, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c64d2, &(0x7f0000000100)={r6, 0x80000}) 9.861365284s ago: executing program 3 (id=3787): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x1100, 0xffeffffffffffffd}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000500)={@flat=@binder={0x73622a85, 0xa, 0x3, 0xf0ff}, @flat=@handle={0x73682a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 9.416185227s ago: executing program 3 (id=3789): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01007c00000000000400010054d808000100020000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0xc082}, 0x4000800) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r6}, @CGW_DST_IF={0x8, 0xa, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e402, [{{0x9, 0x2, 0xfffffffffffffd08}}]}}, 0x7fe782539b0b) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="400601000004b3"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b750000000109021b0001000000000904"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 9.38510665s ago: executing program 1 (id=3790): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8942, &(0x7f0000000900)={'veth1_virt_wifi\x00', @random='\x00\x00\x00 \x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$uac3(0x4, 0xe3, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xf4be24e617ecdfe1, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x3, 0x1, 0x0, 0x80, 0x7, {0x8, 0xb, 0x2, 0x0, 0x1, 0x26, 0x30, 0x79}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x37, 0xa}, [@feature_unit={0x19, 0x24, 0x7, 0x5, 0x3, [0xa, 0x5, 0x7, 0x0, 0xc]}, @multiply_unit={0xb, 0x24, 0xd, 0xc1, 0x3, 0x0, 0xe}, @extension_unit={0x9, 0x24, 0xa, 0x4, 0x6, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x5, 0x0, 0x40, 0x0, 0x58, 0x8, 0x8, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x20, 0x40, {0xa, 0x25, 0x25, 0x4400, 0x8, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x9, 0x40, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0xc, 0xdb, "", 'B/'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xe, 0x1, 0x5, 0x3b, "712217"}]}, {{0x9, 0x5, 0x82, 0x9, 0x4759748a1f88a3e3, 0x9, 0x6, 0x6, {0xa, 0x25, 0x25, 0x2000, 0x4, 0xb}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0xf, 0x4e, 0x0, 0x20, 0x4}, 0x98, &(0x7f0000000440)={0x5, 0xf, 0x98, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x0, 0x0, 0x2, [0x3f, 0xff00c0, 0x30]}, @generic={0x4e, 0x10, 0x3, "deb8ca88cf76eeeafd0927772f45ac8ee97e28e39e0d7004f70634f29132ba8771f70f13055bdb6aea9e901711f212a46e57caa5d9a4803a17b41b9ad8063da085d070ecbb70d769348024"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xe, 0x0, 0xb}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x9, 0x7, 0x7f}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x10001, 0xf, 0x2, [0xc000, 0x7e00, 0xff000f, 0xc000]}]}, 0x1, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x426}}]}) syz_usb_control_io$uac3(r2, &(0x7f0000000900)={0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="00084e4400004e23899ebb0923a0ae32d86dfbe9eadfe47995686b38cbd7fe66b886e0abfef4926bc700b549b5d95b6d5a8f9cd0fb1ba2760a2afb964247fe2e2987503fa6ef6105ff9718d62a6fef4a761562ae"], &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, &(0x7f0000000c00)={0x44, &(0x7f0000000940)={0x40, 0xf}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f0000000240)={0x20, 0x81, 0x3, '\x00@]'}, &(0x7f0000000b00)={0x20, 0x82, 0x1, "95"}, &(0x7f0000000540)={0x20, 0x83, 0x3, "cd2f00"}, &(0x7f0000000b80)={0x20, 0x84, 0x2, "a776"}, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") read$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r1) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$binfmt_register(r7, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'environ\x00', 0x3a, ',\\', 0x3a, './file0', 0x3a, [0x50, 0x43]}, 0x33) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x5, 0xc, 0x80000000, 0x1}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x28}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r10, r9}, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) 8.082468091s ago: executing program 2 (id=3794): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002cc2cdf40630731203fad0102030109021200015f6562700904010800ff"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x801) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xbbe21a6a6c087afd}, 0xc000) syz_emit_vhci(&(0x7f0000000940)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_PERIODIC_INQ={{0x8}, 0xfd}}}, 0x7) openat$ppp(0xffffffffffffff9c, 0x0, 0x40100, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)) socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x6a4, 0x2002) r5 = fsmount(0xffffffffffffffff, 0x1, 0x6) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000040)={0x0, 0x4, 0x9, 0x5, "7d2fe763523b7b43af6b8a3bd1c31a3d2825ef8654330114cac0207e5446e266"}) mkdirat(r5, &(0x7f00000000c0)='./file0\x00', 0x40) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x271b, &(0x7f0000000440)=""/102392, &(0x7f00000000c0)=0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f00000002c0), &(0x7f0000000340)=r4}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2000c000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 7.303594955s ago: executing program 5 (id=3795): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12100) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x2b, 0x0, &(0x7f0000000380)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRES8], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x90) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x9, 0x5, 0x202, 0x4, 0x0, 0xffffffffffffffff, 0x100}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000440)='\x00', 0x1) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff, 0xfffffffc, 0x80000000, 0x40000006}, 0x10) (async) sendmsg$kcm(r11, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt$packet_fanout_data(r10, 0x107, 0x16, 0x0, 0x0) (async) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 7.088069408s ago: executing program 5 (id=3796): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 7.062142444s ago: executing program 1 (id=3797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548fc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee364dad078fc88d17cbde37a2270f90a60afe8548f4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd1045a5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0xc7, 0x0, &(0x7f0000000e40)="cc0e17e24e09886e8c81cd4edd9333b6f399cf19a17a9b556f488063d0ed169d9a2ba3b2783f5631deb0529a554d093cb7a23e51c2bea5465abeb8347353f0344ca8950f2d7bcadb2fbf192b03c0a7adb8e8bbe8a572fe1a362bcfb4afe72824c96f5ad17e812999e01f4c4c34b8c87ff03b2287b8806ca6c9e91bb667b37bbf850008000000000d00a2196442ac85383670a17def94ff43133494aedff6c05152816c84f60d34fe3e822ef9bee92a6523c697ab7069f7170ae0f40584a95a46ba000000000000"}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000880)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c000380"], 0x50}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd29, 0x65dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040045}, 0x20000080) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x36be6fca, 0x8081) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x35, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.017563598s ago: executing program 5 (id=3799): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x4, 0x4, 0x8003, 0x2641, 0xffffffffffffffff, 0x3a000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r4, &(0x7f0000000000), 0xd4ba103) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x8010) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060103000000000000000001000000052c63928d6d1dd48200592800010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.527665144s ago: executing program 3 (id=3800): unshare(0x28000600) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = fsmount(r0, 0x0, 0x2) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x2000, {r1}}, 0x58) 4.42988277s ago: executing program 4 (id=3801): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0xc}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e}, 0x28) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r2, 0x0, &(0x7f0000606000/0x1000)=nil, 0x1000, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000040)={0xc, r2}) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) r3 = msgget(0x3, 0x710) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x29, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4042806}, 0x84) msgctl$IPC_RMID(r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x2, 0xfffff010}, {0x6}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) msgsnd(r3, &(0x7f0000000100)={0x0, "cb5794395a9d702472bde66b6d62dac36d78d8b74e172ec0ff60399ed681b3b0da666a642d302ed254de43b45563345b5d71b9aaf0f6ae6378297e54eb44d090bb6ea858567243afe51724d1ed9e8d8d05381f1cf776acbba4ac8f31b0fcc31cbc4a8482147fb10b37c8cc5b401d8090a264470bccc35e0ad0129d3079ca745c605ca0622b4da9c99df4f6c9225e5ffa940c10730572dfc10c2ae49388aae39a11cea83b945445b6036b9780af4c4300a99a8779798e7cab5162b8e864b285fbefa9c8681845f7190b9a2cfd6ae533"}, 0xd7, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r7, 0xc038480a, &(0x7f00000000c0)={0x5, 0x100, 0x3, 0x5, 0x9, 0x3b8, 0x3, 0x8, 0x60276b45, 0x1, 0x5, 0x5, 0x8fac, 0x8001}) 4.297255731s ago: executing program 3 (id=3802): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) r0 = msgget$private(0x0, 0x7a8) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socketpair(0x4, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='A', 0x1}], 0x1}, 0x24008051) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0xec00, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) fremovexattr(r3, &(0x7f0000000000)=@known='system.sockprotoname\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r6, 0xc) msgrcv(r0, 0x0, 0x0, 0x0, 0x3000) 3.85020862s ago: executing program 5 (id=3803): r0 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000000)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20000000) sendmsg$nl_route_sched(r2, 0x0, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x26, 0x68, 0xfffffff9, 0x19, @empty, @remote, 0x1, 0x20, 0x477d, 0x8}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x80000000, 0x2, 0xa, 0xe, 0x800005, 0x8, 0x3, 0x8, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x3, 0xfd, 0x5, 0x7c, 0x3, 0x40000003, 0x89, 0x10, 0x0, 0x0, 0x0, 0xe66, 0x403, 0x8, 0xa6b5, 0xfffffffe, 0x1]}) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x28, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x0, 0x9c}}]}, 0x28}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 3.839945444s ago: executing program 2 (id=3804): r0 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x8c, 0x0, 0x240008c4}, 0x4054) 3.722007536s ago: executing program 1 (id=3805): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0xc}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e}, 0x28) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r2, 0x0, &(0x7f0000606000/0x1000)=nil, 0x1000, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000040)={0xc, r2}) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) r3 = msgget(0x3, 0x710) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x29, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4042806}, 0x84) msgctl$IPC_RMID(r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x2, 0xfffff010}, {0x6}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) msgsnd(r3, &(0x7f0000000100)={0x0, "cb5794395a9d702472bde66b6d62dac36d78d8b74e172ec0ff60399ed681b3b0da666a642d302ed254de43b45563345b5d71b9aaf0f6ae6378297e54eb44d090bb6ea858567243afe51724d1ed9e8d8d05381f1cf776acbba4ac8f31b0fcc31cbc4a8482147fb10b37c8cc5b401d8090a264470bccc35e0ad0129d3079ca745c605ca0622b4da9c99df4f6c9225e5ffa940c10730572dfc10c2ae49388aae39a11cea83b945445b6036b9780af4c4300a99a8779798e7cab5162b8e864b285fbefa9c8681845f7190b9a2cfd6ae533"}, 0xd7, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @main=@item_4={0x3, 0x0, 0x9, "e7ab92f7"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f00000000c0)={0x5, 0x100, 0x3, 0x5, 0x9, 0x3b8, 0x3, 0x8, 0x60276b45, 0x1, 0x5, 0x5, 0x8fac, 0x8001}) 3.552925826s ago: executing program 2 (id=3806): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, 0x0, 0x8080) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) 3.272096628s ago: executing program 3 (id=3807): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$FUSE(r0, 0x0, 0x2000) pipe(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000002f00000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f"], 0xdc}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x40810) 3.053309693s ago: executing program 3 (id=3808): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01007c00000000000400010054d808000100020000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0xc082}, 0x4000800) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r6}, @CGW_DST_IF={0x8, 0xa, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_usb_connect_ath9k(0x3, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e402, [{{0x9, 0x2, 0xfffffffffffffd08}}]}}, 0x7fe782539b0b) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="400601000004b3"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002aafee08f00a51678b750000000109021b0001000000000904"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 2.908883931s ago: executing program 2 (id=3809): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x42) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000180)={0xe, 0x7, &(0x7f0000000040)=[0xfff7, 0x6, 0x7, 0x9, 0x1ff, 0x4, 0x0], &(0x7f00000000c0)=[0x885, 0x5, 0x7, 0x8d0, 0xc0a, 0x6, 0x7, 0x200], &(0x7f0000000100)=[0x7, 0x1, 0xfff7], &(0x7f0000000140)=[0xfff7, 0x4]}) rt_sigtimedwait(&(0x7f0000000040)={[0x9]}, 0x0, &(0x7f00000000c0), 0x8) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = openat(r2, &(0x7f0000004280)='./file0\x00', 0x400, 0x100) lseek(0xffffffffffffffff, 0x2, 0x893b8993f4d168b9) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x183, 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102384, 0x18ff0) pipe2$watch_queue(0x0, 0x80) setresuid(0xee01, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0xfffffffffffffffc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ustat(0x1, &(0x7f0000000300)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@multicast1, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) socket$inet(0x2, 0x80001, 0x84) 2.811082401s ago: executing program 5 (id=3810): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x440088c4) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800"], 0x48) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x4000880) r4 = socket$inet6(0xa, 0x80002, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x4001, 0x0, 0x0}], 0x2}) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x9, 0xfffffffffffffffd, 0x7) 1.744944523s ago: executing program 4 (id=3811): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fddbdf25ff020000003f0000000000000000000120010000000000000000000000000001000000004e2200020a0000002c000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000fe3200000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000080000000000000001000000000000000000000000000000050000000000000046050000000000000700000000000000ffffffffffffff7f000000000000001002000000000000000000000000000000000000002dbd70000835000002000100500000000000000060001200726663"], 0x15c}}, 0x0) 1.729641947s ago: executing program 4 (id=3812): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x400, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c801}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x17}, 0x0) 1.681751851s ago: executing program 4 (id=3813): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000022d000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a0000000000096111500000000000180000000000000000000000000000009500000400000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 1.310923143s ago: executing program 1 (id=3814): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400ff9226000100000000000000000006"], 0x14}], 0x1}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) listen(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) 928.763082ms ago: executing program 5 (id=3815): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a75979705a", 0xd) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYBLOB="050000000000e9dbdf050000000008000300", @ANYRES32=r5, @ANYBLOB="0c00238005000600ff"], 0x28}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002140)={&(0x7f0000000b80)={0x1598, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x808}, @NL80211_ATTR_PEER_MEASUREMENTS={0xb24, 0x111, 0x0, 0x1, {0xb20, 0x5, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x3e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x28c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x30}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xac}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x68, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}]}]}]}, {0x400, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x94b6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x301}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x170, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x204, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x154, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x27}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x228, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1b8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x174, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7c27}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x255}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x2d0, 0x111, 0x0, 0x1, {0x2cc, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x2ac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x208, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x688a}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xed28}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d3}]}]}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_MEASUREMENTS={0x750, 0x111, 0x0, 0x1, {0x74c, 0x5, 0x0, 0x1, [{0x20c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x100, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38d}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x371}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x4}]}, {0x534, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x37ed}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x354, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x144, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8e}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf62}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6c}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4b}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}]}, 0x1598}, 0x1, 0x0, 0x0, 0x811}, 0x4000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 553.95683ms ago: executing program 4 (id=3816): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, 0x0, 0x78) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}], 0x30}], 0x1, 0x0) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000ac0)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000}, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x2}) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000100100000c000000e89b1de27f73dba6"], 0x18}, 0x0) 506.245576ms ago: executing program 2 (id=3817): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@newtaction={0x68, 0x30, 0x1, 0x0, 0xffffffff, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x0, 0x6, 0x4, 0xffffff00, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00'}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r3, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0xfdef) sendmsg$nl_route_sched(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)={0xb4, r6, 0x1, 0x4, 0x0, {}, [@WGDEVICE_A_PEERS={0x8c, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba88df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5af64d8ad7decd4cca6afe", @ANYRES16=r6, @ANYBLOB="080025bd7000fbdbdf25000000000800050001000000060006004e230000"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x40480d5) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x21}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x200ce8c4) 127.260046ms ago: executing program 1 (id=3818): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/131, 0x83}], 0x1, 0x9, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020, 0x0, 0x0}, 0x2020) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000004000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$FUSE_OPEN(r0, &(0x7f0000004780)={0x20, 0x0, r1, {0x0, 0x3}}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@remote, @empty}, &(0x7f00000000c0)=0xc) epoll_create1(0x0) socket$packet(0x11, 0x2, 0x300) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000640)=0x10) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r8, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0x40d, 0x10, 0xe89, 0x2, 0x0, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000600)=[0x7], 0x1, 0x0}) 46.437412ms ago: executing program 2 (id=3819): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0xb8, 0x13, 0x101, 0x0, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x0, 0x2d, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xffffffffffffffff}, {0x0, 0x1, 0x6, 0x100}, 0xfffffffe, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000050000000001"], 0xfdef) 0s ago: executing program 4 (id=3820): r0 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000000)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20000000) sendmsg$nl_route_sched(r2, 0x0, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x26, 0x68, 0xfffffff9, 0x19, @empty, @remote, 0x1, 0x20, 0x477d, 0x8}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x80000000, 0x2, 0xa, 0xe, 0x800005, 0x8, 0x3, 0x8, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x3, 0xfd, 0x5, 0x7c, 0x3, 0x40000003, 0x89, 0x10, 0x0, 0x0, 0x0, 0xe66, 0x403, 0x8, 0xa6b5, 0xfffffffe, 0x1]}) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x28, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x0, 0x9c}}]}, 0x28}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) kernel console output (not intermixed with test programs): 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.435936][T10765] usb 3-1: USB disconnect, device number 91 [ 1260.465194][T10759] usb 6-1: config 0 descriptor?? [ 1260.497975][ T5343] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1260.506085][ T5343] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1260.506234][T10759] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1260.513213][ T5343] em28xx 2-1:0.132: No AC97 audio processor [ 1260.524025][T10765] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1260.535849][T10759] dvb-usb: bulk message failed: -22 (3/0) [ 1260.574800][ T5343] usb 2-1: Decoder not found [ 1260.574958][T10759] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1260.587825][ T5343] em28xx 2-1:0.132: failed to create media graph [ 1260.601395][ T5343] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1260.648857][T10759] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1260.649077][ T5343] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1260.678534][T10759] usb 6-1: media controller created [ 1260.694607][ T803] em28xx 2-1:0.132: Closing input extension [ 1260.706027][T10759] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1260.717561][ T803] em28xx 2-1:0.132: Freeing device [ 1260.732555][T10759] dvb-usb: bulk message failed: -22 (6/0) [ 1260.749719][T10759] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1260.761859][T10759] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input189 [ 1260.775529][T10759] dvb-usb: schedule remote query interval to 150 msecs. [ 1260.782886][T10759] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1260.795708][T10759] usb 6-1: USB disconnect, device number 100 [ 1260.937814][T19657] netlink: 'syz.4.3485': attribute type 10 has an invalid length. [ 1260.945860][T19657] ipvlan0: entered allmulticast mode [ 1260.951168][T19657] veth0_vlan: entered allmulticast mode [ 1260.963694][T19657] team0: Device ipvlan0 failed to register rx_handler [ 1261.285596][T10759] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1261.326870][T19655] fuse: Unknown parameter 'group_i00000000000000000000' [ 1261.511164][T19663] netlink: 'syz.2.3488': attribute type 1 has an invalid length. [ 1262.063964][T19663] bond1: entered promiscuous mode [ 1262.064781][T19661] misc userio: No port type given on /dev/userio [ 1262.075830][T19663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1262.133496][T19666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1262.143102][T19666] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1262.144398][T19661] misc userio: The device must be registered before sending interrupts [ 1262.153751][T19666] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1262.180145][T19661] misc userio: The device must be registered before sending interrupts [ 1262.188534][T19666] bond1: (slave vti0): making interface the new active one [ 1262.197152][T19666] vti0: entered promiscuous mode [ 1262.226067][T19666] bond1: (slave vti0): Enslaving as an active interface with an up link [ 1262.623489][T19682] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3491'. [ 1263.427240][T19680] syz_tun: entered allmulticast mode [ 1263.821825][T19673] syz_tun: left allmulticast mode [ 1264.066279][ T803] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1264.329754][ T803] usb 5-1: device descriptor read/64, error -71 [ 1264.660449][T19703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1264.711924][ T803] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1264.768069][T17616] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1264.864119][ T803] usb 5-1: device descriptor read/64, error -71 [ 1264.938485][ T29] audit: type=1400 audit(1777969977.747:1441): avc: denied { ioctl } for pid=19706 comm="syz.3.3499" path="socket:[67144]" dev="sockfs" ino=67144 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1264.963416][T17616] usb 2-1: Using ep0 maxpacket: 32 [ 1264.971543][T17616] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1264.979993][T17616] usb 2-1: config 0 has no interface number 0 [ 1264.986442][T17616] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1264.992728][ T803] usb usb5-port1: attempt power cycle [ 1264.999231][T17616] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1265.011734][T17616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.020029][T17616] usb 2-1: Product: syz [ 1265.027905][T17616] usb 2-1: Manufacturer: syz [ 1265.049164][T17616] usb 2-1: SerialNumber: syz [ 1265.081892][T17616] usb 2-1: config 0 descriptor?? [ 1265.191266][T17616] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1265.204087][T17616] em28xx 2-1:0.132: Video interface 132 found: [ 1265.375202][T19709] FAULT_INJECTION: forcing a failure. [ 1265.375202][T19709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.388294][T19709] CPU: 0 UID: 0 PID: 19709 Comm: syz.2.3501 Tainted: G L syzkaller #0 PREEMPT(full) [ 1265.388311][T19709] Tainted: [L]=SOFTLOCKUP [ 1265.388315][T19709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1265.388322][T19709] Call Trace: [ 1265.388326][T19709] [ 1265.388330][T19709] dump_stack_lvl+0x100/0x190 [ 1265.388347][T19709] should_fail_ex.cold+0x5/0xa [ 1265.388362][T19709] _copy_from_user+0x2e/0xd0 [ 1265.388380][T19709] get_bitmap+0xde/0x1a0 [ 1265.388391][T19709] get_nodes+0x169/0x210 [ 1265.388401][T19709] ? __pfx_get_nodes+0x10/0x10 [ 1265.388414][T19709] ? __fget_files+0x21f/0x3d0 [ 1265.388430][T19709] kernel_mbind+0xf8/0x200 [ 1265.388445][T19709] ? __pfx_kernel_mbind+0x10/0x10 [ 1265.388460][T19709] ? rcu_is_watching+0x12/0xc0 [ 1265.388478][T19709] do_syscall_64+0x10b/0xf80 [ 1265.388490][T19709] ? clear_bhb_loop+0x40/0x90 [ 1265.388504][T19709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.388515][T19709] RIP: 0033:0x7f776559cdd9 [ 1265.388525][T19709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.388535][T19709] RSP: 002b:00007f77664c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1265.388546][T19709] RAX: ffffffffffffffda RBX: 00007f7765815fa0 RCX: 00007f776559cdd9 [ 1265.388553][T19709] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000200000905000 [ 1265.388559][T19709] RBP: 00007f77664c6090 R08: 0000000000008000 R09: 0000000000000006 [ 1265.388565][T19709] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.388572][T19709] R13: 00007f7765816038 R14: 00007f7765815fa0 R15: 00007ffe7ddfc3d8 [ 1265.388586][T19709] [ 1265.398397][ T803] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1265.678363][ T803] usb 5-1: device descriptor read/8, error -71 [ 1265.795446][T17616] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1265.816447][ T29] audit: type=1400 audit(1777969978.580:1442): avc: denied { listen } for pid=19717 comm="syz.2.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1265.965081][T19721] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44 sclass=netlink_xfrm_socket pid=19721 comm=syz.5.3504 [ 1265.987668][ T803] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1266.029913][ T803] usb 5-1: device descriptor read/8, error -71 [ 1266.083896][T10759] hid (null): bogus close delimiter [ 1266.089188][T10759] hid (null): invalid report_size 452615254 [ 1266.095437][T10759] hid (null): invalid report_count -1239660526 [ 1266.127525][T10759] hid_parser_main: 470 callbacks suppressed [ 1266.127544][T10759] hid-generic 0800:000A:0009.0027: unknown main item tag 0x3 [ 1266.157348][ T803] usb usb5-port1: unable to enumerate USB device [ 1266.163797][T10759] hid-generic 0800:000A:0009.0027: unknown main item tag 0x6 [ 1266.188394][T10759] hid-generic 0800:000A:0009.0027: bogus close delimiter [ 1266.226453][T10759] hid-generic 0800:000A:0009.0027: item 0 0 2 10 parsing failed [ 1266.231973][T19699] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3498'. [ 1266.258667][T10759] hid-generic 0800:000A:0009.0027: probe with driver hid-generic failed with error -22 [ 1266.295290][T19699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.303965][T19699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.565691][T19699] overlayfs: conflicting lowerdir path [ 1266.581113][T10447] Bluetooth: hci2: connection err: -111 [ 1266.640028][T17616] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1266.687196][T17616] em28xx 2-1:0.132: board has no eeprom [ 1266.969999][T17616] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1267.008369][T17616] em28xx 2-1:0.132: analog set to bulk mode. [ 1267.030303][ T5702] em28xx 2-1:0.132: Registering V4L2 extension [ 1267.105513][T19699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.209609][T19699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.540821][T19699] trusted_key: encrypted_key: insufficient parameters specified [ 1267.706693][ T5343] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1267.850230][T17617] usb 2-1: USB disconnect, device number 106 [ 1267.916598][ T5702] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 1267.950502][T17617] em28xx 2-1:0.132: Disconnecting em28xx [ 1268.078143][ T5343] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1268.106504][ T5343] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1268.122794][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1268.164395][ T5343] usb 3-1: Product: syz [ 1268.179731][ T5702] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1268.187426][ T5702] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1268.206999][ T5343] usb 3-1: Manufacturer: syz [ 1268.216547][ T5702] em28xx 2-1:0.132: No AC97 audio processor [ 1268.229109][ T5343] usb 3-1: SerialNumber: syz [ 1268.253376][ T5702] usb 2-1: Decoder not found [ 1268.266617][ T5702] em28xx 2-1:0.132: failed to create media graph [ 1268.296050][ T5702] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1268.331226][ T5702] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1268.350731][T17617] em28xx 2-1:0.132: Closing input extension [ 1268.365651][T17617] em28xx 2-1:0.132: Freeing device [ 1268.517112][ T5343] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 92 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1268.572081][T10759] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 1269.167682][T10759] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1269.177895][T10759] usb 5-1: config 0 has no interface number 0 [ 1269.191980][ T803] usb 3-1: USB disconnect, device number 92 [ 1269.198964][T10759] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1269.221039][T10759] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1269.233841][T10759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.264429][T10759] usb 5-1: Product: syz [ 1269.284031][T10759] usb 5-1: Manufacturer: syz [ 1269.291293][T10759] usb 5-1: SerialNumber: syz [ 1269.319795][T10759] usb 5-1: config 0 descriptor?? [ 1269.334290][T16600] kernel write not supported for file /snd/seq (pid: 16600 comm: kworker/1:3) [ 1269.365023][T19757] openvswitch: netlink: Flow key attr not present in new flow. [ 1269.789136][T19763] syz_tun: entered allmulticast mode [ 1269.821780][T19763] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1269.830386][T19763] mroute: pending queue full, dropping entries [ 1269.881295][T19762] syz_tun: left allmulticast mode [ 1270.045376][T19768] binder: 19767:19768 ioctl c0306201 0 returned -14 [ 1270.052638][T19766] fuse: Unknown parameter 'group_i00000000000000000000' [ 1270.289931][T10759] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1270.338684][T19732] usblp0: removed [ 1271.308327][T19781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.346791][T19781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.579464][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3518'. [ 1272.103174][T10759] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1272.141527][T10759] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1272.169595][T10759] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 1272.203914][T10759] usb 5-1: USB disconnect, device number 125 [ 1272.558361][T19795] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1272.867889][T17617] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1273.049651][T17617] usb 3-1: Using ep0 maxpacket: 32 [ 1273.068456][T17617] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1273.096638][T17617] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1273.118965][T10759] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1273.141027][T17617] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1273.169323][T17617] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1273.210402][T17617] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1273.240235][T17617] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1273.252256][T17617] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1273.274065][T17617] usb 3-1: Product: syz [ 1273.286516][T17617] usb 3-1: Manufacturer: syz [ 1273.296029][T17617] usb 3-1: SerialNumber: syz [ 1273.307262][T10759] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1273.324700][T17617] usb 3-1: config 0 descriptor?? [ 1273.343344][T10759] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1273.345399][T17617] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1273.389284][T17617] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1273.423568][T10759] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1273.507974][T10759] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1273.520341][T10759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1273.536208][T10759] usb 5-1: Product: syz [ 1273.540611][T10759] usb 5-1: Manufacturer: syz [ 1273.551392][T10759] usb 5-1: SerialNumber: syz [ 1273.570800][T19805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3526'. [ 1273.720431][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1273.799857][T10759] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 126 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1273.885515][T19810] binder: 19809:19810 ioctl c0306201 0 returned -14 [ 1274.101792][T19803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.274321][T19803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.272850][ T5619] Bluetooth: hci0: connection err: -111 [ 1275.943343][ T5619] Bluetooth: hci0: command 0x0406 tx timeout [ 1276.557964][T10759] usb 5-1: USB disconnect, device number 126 [ 1277.123680][T10759] usblp1: removed [ 1277.557962][T19847] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3539'. [ 1277.596830][ T29] audit: type=1400 audit(1777969989.594:1443): avc: denied { accept } for pid=19846 comm="syz.1.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1277.644970][T17617] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1277.673419][T19849] syzkaller0: entered promiscuous mode [ 1277.689333][T19849] syzkaller0: entered allmulticast mode [ 1277.950202][T17617] usb 4-1: Using ep0 maxpacket: 32 [ 1278.798350][T17617] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1278.808681][T17617] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.819289][T17617] usb 4-1: config 1 interface 2 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1278.832552][T17617] usb 4-1: config 1 interface 2 has no altsetting 0 [ 1278.844003][T17617] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1278.853260][T17617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.861276][T17617] usb 4-1: Product: syz [ 1278.865487][T17617] usb 4-1: Manufacturer: syz [ 1278.870102][T17617] usb 4-1: SerialNumber: syz [ 1279.128199][T19863] Bluetooth: MGMT ver 1.23 [ 1279.166821][T19800] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 1279.709918][ T29] audit: type=1400 audit(1777969991.419:1444): avc: denied { getopt } for pid=19841 comm="syz.3.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1279.773623][ T5343] usb 3-1: USB disconnect, device number 93 [ 1279.804014][ T5343] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1280.552220][ T5343] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1280.735030][ T5343] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1280.746110][ T5343] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1280.756722][ T5343] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1280.772891][ T5343] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1280.802942][T17617] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1280.811717][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1280.856911][T17617] usb 4-1: unknown interface protocol 0x2, assuming v1 [ 1280.870534][ T5343] usb 3-1: Product: syz [ 1280.874754][T17617] usb 4-1: cannot find UAC_HEADER [ 1280.883680][ T5343] usb 3-1: Manufacturer: syz [ 1280.897266][ T5343] usb 3-1: SerialNumber: syz [ 1280.959959][T17617] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1280.992718][T17617] usb 4-1: USB disconnect, device number 6 [ 1281.131106][T18028] udevd[18028]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1281.163716][ T5343] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 94 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1281.745274][T19870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.765760][T19870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.790726][T17617] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1281.963316][T17617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.986620][T17617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.009278][T17617] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1282.041904][T17617] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1282.128213][T17617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.235447][T17617] usb 4-1: config 0 descriptor?? [ 1282.923240][ T5702] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 1283.166734][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.178192][ T5702] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1283.197630][ T5702] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1283.236639][ T5702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.266016][T19878] ksmbd: Unknown IPC event: 4, ignore. [ 1283.318040][ T5702] usb 6-1: config 0 descriptor?? [ 1283.372832][ T5702] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1283.410941][ T5702] dvb-usb: bulk message failed: -22 (3/0) [ 1283.471490][ T5702] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1283.493765][ T5702] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1283.510175][ T5702] usb 6-1: media controller created [ 1283.524409][T17617] plantronics 0003:047F:FFFF.0028: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1283.545832][ T5702] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1283.589221][T19889] dvb-usb: bulk message failed: -22 (2/0) [ 1283.601478][ T5702] dvb-usb: bulk message failed: -22 (6/0) [ 1283.614929][ T5702] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1283.643311][T17617] usb 4-1: USB disconnect, device number 7 [ 1283.654620][ T5702] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input192 [ 1283.789403][ T5702] dvb-usb: schedule remote query interval to 150 msecs. [ 1283.806326][ T5702] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1283.836540][ T5702] usb 6-1: USB disconnect, device number 101 [ 1283.904428][T19899] fido_id[19899]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1283.976312][ T5702] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1284.450056][T19912] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1284.704249][T16600] usb 3-1: USB disconnect, device number 94 [ 1284.711897][T16600] usblp0: removed [ 1285.116350][ T5702] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1285.618503][T19921] syz.3.3563 (19921): drop_caches: 2 [ 1285.939435][ T5702] usb 5-1: Using ep0 maxpacket: 16 [ 1285.943559][T19926] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3566'. [ 1285.956353][T19926] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3566'. [ 1285.964443][ T5702] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1286.096908][ T5702] usb 5-1: config 0 has no interface number 0 [ 1286.142051][ T5702] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1286.245186][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.597613][ T5702] usb 5-1: Product: syz [ 1287.059798][ T5702] usb 5-1: Manufacturer: syz [ 1287.109712][ T5702] usb 5-1: SerialNumber: syz [ 1287.437373][ T5702] usb 5-1: config 0 descriptor?? [ 1287.461376][ T5702] hub 5-1:0.132: bad descriptor, ignoring hub [ 1287.471365][ T5702] hub 5-1:0.132: probe with driver hub failed with error -5 [ 1287.487738][ T5702] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input193 [ 1287.753663][T16600] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 1287.825028][ T5343] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1287.948322][T16600] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.967262][T16600] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1287.976134][T16600] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1287.985570][T16600] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.008487][T16600] usb 2-1: config 0 descriptor?? [ 1288.018396][T16600] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1288.026098][T16600] dvb-usb: bulk message failed: -22 (3/0) [ 1288.035264][T16600] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1288.072402][T16600] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1288.087723][ T5343] usb 4-1: config 0 has no interfaces? [ 1288.110275][T16600] usb 2-1: media controller created [ 1288.129350][ T5343] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1288.145336][T16600] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1288.157159][T19952] FAULT_INJECTION: forcing a failure. [ 1288.157159][T19952] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.194563][ T5343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.203455][T16600] dvb-usb: bulk message failed: -22 (6/0) [ 1288.208056][T19952] CPU: 0 UID: 0 PID: 19952 Comm: syz.5.3573 Tainted: G L syzkaller #0 PREEMPT(full) [ 1288.208080][T19952] Tainted: [L]=SOFTLOCKUP [ 1288.208085][T19952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1288.208094][T19952] Call Trace: [ 1288.208100][T19952] [ 1288.208106][T19952] dump_stack_lvl+0x100/0x190 [ 1288.208129][T19952] should_fail_ex.cold+0x5/0xa [ 1288.208151][T19952] ? tomoyo_encode2+0xfb/0x3c0 [ 1288.208170][T19952] should_failslab+0xc2/0x120 [ 1288.208187][T19952] __kmalloc_noprof+0xe0/0x850 [ 1288.208214][T19952] tomoyo_encode2+0xfb/0x3c0 [ 1288.208237][T19952] tomoyo_encode+0x29/0x50 [ 1288.208255][T19952] tomoyo_realpath_from_path+0x18c/0x690 [ 1288.208281][T19952] tomoyo_path_number_perm+0x23c/0x580 [ 1288.208298][T19952] ? tomoyo_path_number_perm+0x22e/0x580 [ 1288.208316][T19952] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1288.208356][T19952] ? find_held_lock+0x2b/0x80 [ 1288.208371][T19952] ? __fget_files+0x215/0x3d0 [ 1288.208389][T19952] ? hook_file_ioctl_common+0x149/0x410 [ 1288.208410][T19952] ? __fget_files+0x215/0x3d0 [ 1288.208432][T19952] ? __fget_files+0x21f/0x3d0 [ 1288.208454][T19952] security_file_ioctl+0xd3/0x230 [ 1288.208474][T19952] __x64_sys_ioctl+0xb7/0x210 [ 1288.208493][T19952] do_syscall_64+0x10b/0xf80 [ 1288.208511][T19952] ? clear_bhb_loop+0x40/0x90 [ 1288.208530][T19952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.208545][T19952] RIP: 0033:0x7fd1f419cdd9 [ 1288.208558][T19952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.208572][T19952] RSP: 002b:00007fd1f50ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1288.208588][T19952] RAX: ffffffffffffffda RBX: 00007fd1f4416090 RCX: 00007fd1f419cdd9 [ 1288.208598][T19952] RDX: 0000200000000180 RSI: 0000000000008916 RDI: 0000000000000004 [ 1288.208607][T19952] RBP: 00007fd1f50ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.208616][T19952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1288.208625][T19952] R13: 00007fd1f4416128 R14: 00007fd1f4416090 R15: 00007fff8ef21698 [ 1288.208647][T19952] [ 1288.208660][T19952] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1288.210077][T16600] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1288.419212][T19941] dvb-usb: bulk message failed: -22 (2/0) [ 1288.494011][ T5343] usb 4-1: Product: syz [ 1288.504317][ T5343] usb 4-1: Manufacturer: syz [ 1288.528041][ T5343] usb 4-1: SerialNumber: syz [ 1288.534153][ T5343] usb 4-1: config 0 descriptor?? [ 1288.558137][T16600] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input194 [ 1288.580428][T16600] dvb-usb: schedule remote query interval to 150 msecs. [ 1288.587963][T16600] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1288.611900][T16600] usb 2-1: USB disconnect, device number 107 [ 1288.631208][ T4961] usb 5-1: reset high-speed USB device number 127 using dummy_hcd [ 1288.640358][ T4961] usb 5-1: device reset changed ep0 maxpacket size! [ 1288.647764][ T5702] usb 5-1: USB disconnect, device number 127 [ 1288.702418][T16600] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1288.889560][ T5702] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1289.025260][ T5343] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1289.081132][ T5702] usb 5-1: too many configurations: 53, using maximum allowed: 8 [ 1289.115588][ T5702] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1289.127533][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.137327][ T5702] usb 5-1: Product: syz [ 1289.141588][ T5702] usb 5-1: Manufacturer: syz [ 1289.146664][ T5702] usb 5-1: SerialNumber: syz [ 1289.219548][ T5343] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1289.233758][ T5343] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1289.251481][ T5343] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1289.260875][ T5343] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1289.273325][ T5343] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1289.286692][ T5343] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1289.295915][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1289.306759][ T5343] usb 3-1: Product: syz [ 1289.310991][ T5343] usb 3-1: Manufacturer: syz [ 1289.333459][ T5343] cdc_wdm 3-1:1.0: skipping garbage [ 1289.341924][ T5343] cdc_wdm 3-1:1.0: skipping garbage [ 1289.352033][ T5343] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1289.358022][ T5343] cdc_wdm 3-1:1.0: Unknown control protocol [ 1289.394110][ T5702] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1289.407146][ T5702] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1289.418174][ T5702] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1289.441789][ T5702] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1289.450116][T17188] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1289.474019][ T5702] usb 5-1: USB disconnect, device number 2 [ 1289.493379][T19960] netlink: 'syz.5.3576': attribute type 4 has an invalid length. [ 1289.569202][T19960] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3576'. [ 1289.579454][T19960] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1289.635669][T17188] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1289.646283][T17188] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1289.656735][T17188] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1289.779235][T17188] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1289.790416][T17188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1289.807067][T17188] usb 2-1: Product: syz [ 1289.812747][T17188] usb 2-1: Manufacturer: syz [ 1289.869807][T19966] FAULT_INJECTION: forcing a failure. [ 1289.869807][T19966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1289.887785][T19966] CPU: 0 UID: 0 PID: 19966 Comm: syz.5.3577 Tainted: G L syzkaller #0 PREEMPT(full) [ 1289.887810][T19966] Tainted: [L]=SOFTLOCKUP [ 1289.887816][T19966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1289.887826][T19966] Call Trace: [ 1289.887833][T19966] [ 1289.887839][T19966] dump_stack_lvl+0x100/0x190 [ 1289.887862][T19966] should_fail_ex.cold+0x5/0xa [ 1289.887878][T19966] _copy_from_user+0x2e/0xd0 [ 1289.887896][T19966] get_bitmap+0xde/0x1a0 [ 1289.887910][T19966] get_nodes+0x169/0x210 [ 1289.887927][T19966] ? __pfx_get_nodes+0x10/0x10 [ 1289.887944][T19966] ? __fget_files+0x21f/0x3d0 [ 1289.887968][T19966] kernel_mbind+0xf8/0x200 [ 1289.887990][T19966] ? __pfx_kernel_mbind+0x10/0x10 [ 1289.888007][T19966] ? rcu_is_watching+0x12/0xc0 [ 1289.888025][T19966] do_syscall_64+0x10b/0xf80 [ 1289.888037][T19966] ? clear_bhb_loop+0x40/0x90 [ 1289.888050][T19966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.888064][T19966] RIP: 0033:0x7fd1f419cdd9 [ 1289.888078][T19966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1289.888094][T19966] RSP: 002b:00007fd1f50ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1289.888111][T19966] RAX: ffffffffffffffda RBX: 00007fd1f4416090 RCX: 00007fd1f419cdd9 [ 1289.888121][T19966] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000200000905000 [ 1289.888131][T19966] RBP: 00007fd1f50ee090 R08: 0000000000008000 R09: 0000000000000006 [ 1289.888146][T19966] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1289.888152][T19966] R13: 00007fd1f4416128 R14: 00007fd1f4416090 R15: 00007fff8ef21698 [ 1289.888166][T19966] [ 1290.464841][T17188] usb 2-1: SerialNumber: syz [ 1290.659050][T17617] usb 4-1: USB disconnect, device number 8 [ 1290.700440][T17188] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 108 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1291.131328][T19958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.228489][T19958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.941922][ C1] cdc_wdm 3-1:1.0: Unexpected error -71 [ 1291.942204][T17188] usb 3-1: USB disconnect, device number 95 [ 1291.949701][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1291.960578][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1291.966645][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1292.146429][T19982] netlink: 'syz.2.3583': attribute type 49 has an invalid length. [ 1292.158231][T19982] bond0: (slave bond_slave_0): Releasing backup interface [ 1292.166967][ T5702] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 1292.223794][T19982] bond_slave_0: entered promiscuous mode [ 1292.229485][T19982] bond_slave_0: entered allmulticast mode [ 1292.328695][ T5702] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1292.367519][ T5702] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 1292.475753][ T5702] usb 5-1: New USB device found, idVendor=046d, idProduct=5e93, bcdDevice= 0.62 [ 1292.570468][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.606774][T17188] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1292.616180][ T5702] usb 5-1: config 0 descriptor?? [ 1292.655621][ T5702] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1292.792600][T17188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1292.837050][T17188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.117497][T17188] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1293.135434][T17188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.157930][T17188] usb 4-1: config 0 descriptor?? [ 1293.237273][ T29] audit: type=1400 audit(1777970004.230:1445): avc: denied { write } for pid=19989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.480746][ T29] audit: type=1400 audit(1777970004.455:1446): avc: denied { write } for pid=20002 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.506468][T16600] usb 2-1: USB disconnect, device number 108 [ 1293.538159][T16600] usblp1: removed [ 1293.577527][ T5343] usb 6-1: new full-speed USB device number 102 using dummy_hcd [ 1293.713854][T17188] elan 0003:04F3:0755.0029: unknown main item tag 0x0 [ 1293.924679][T20008] blktrace: Concurrent blktraces are not allowed on loop5 [ 1293.964499][T10447] Bluetooth: hci3: connection err: -111 [ 1293.972372][T17188] elan 0003:04F3:0755.0029: unknown main item tag 0x0 [ 1293.979223][T17188] elan 0003:04F3:0755.0029: unknown main item tag 0x0 [ 1293.987883][T17188] elan 0003:04F3:0755.0029: unknown main item tag 0x0 [ 1293.997652][T17188] elan 0003:04F3:0755.0029: unknown main item tag 0x0 [ 1294.064300][T17188] elan 0003:04F3:0755.0029: failed to start in urb: -90 [ 1294.111845][ T5343] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.167442][T20014] netlink: 'syz.4.3582': attribute type 7 has an invalid length. [ 1294.175262][T20014] netlink: 'syz.4.3582': attribute type 8 has an invalid length. [ 1294.190004][ T5343] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1294.340657][ T5343] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1294.364302][T17188] elan 0003:04F3:0755.0029: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1294.377702][ T5343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.398862][ T5343] usb 6-1: config 0 descriptor?? [ 1294.428640][ T5343] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1294.434673][ T29] audit: type=1400 audit(1777970005.353:1447): avc: denied { write } for pid=20005 comm="syz.2.3587" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1294.496111][ T5343] dvb-usb: bulk message failed: -22 (3/0) [ 1294.708885][ T5343] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1294.744584][T20001] dvb-usb: bulk message failed: -22 (2/0) [ 1294.823463][ T5343] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1294.944894][ T5343] usb 6-1: media controller created [ 1294.964883][ T5343] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1295.012656][ T5343] dvb-usb: bulk message failed: -22 (6/0) [ 1295.036819][ T5343] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1295.082892][ T5343] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input195 [ 1295.126764][T16600] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1295.144459][ T5343] dvb-usb: schedule remote query interval to 150 msecs. [ 1295.174869][ T5343] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1295.194159][T16600] hid-generic 0000:0000:0000.002A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1295.256553][ T5343] usb 6-1: USB disconnect, device number 102 [ 1295.327441][ T5343] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1295.335920][T17188] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1295.522448][T17188] usb 2-1: Using ep0 maxpacket: 16 [ 1295.535519][T17188] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.557985][T17188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1295.604705][T17188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1295.638277][T17188] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1295.659643][T17188] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1295.702506][T17188] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1295.718288][T17188] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1295.747237][T17188] usb 2-1: Manufacturer: syz [ 1295.777428][T17188] usb 2-1: config 0 descriptor?? [ 1295.843172][T16600] usb 6-1: new full-speed USB device number 103 using dummy_hcd [ 1295.916662][ T5343] usb 5-1: USB disconnect, device number 3 [ 1296.059753][T16600] usb 6-1: not running at top speed; connect to a high speed hub [ 1296.089107][T16600] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 1296.114172][T16600] usb 6-1: config 95 has no interface number 0 [ 1296.140962][T16600] usb 6-1: config 95 interface 1 has no altsetting 0 [ 1296.142352][T17188] rc_core: IR keymap rc-hauppauge not found [ 1296.182618][T17188] Registered IR keymap rc-empty [ 1296.197172][T17188] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1296.216229][T16600] usb 6-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1296.689955][T17188] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1296.716223][T16600] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.720408][T17188] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1296.803032][T16600] usb 6-1: Product: syz [ 1296.868868][T10759] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1297.017190][T16600] usb 6-1: Manufacturer: syz [ 1297.022635][T16600] usb 6-1: SerialNumber: syz [ 1297.032200][T17188] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input196 [ 1297.107827][T20037] netlink: 'syz.4.3592': attribute type 10 has an invalid length. [ 1297.119901][T18271] usb 4-1: USB disconnect, device number 9 [ 1297.165829][T17188] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1297.211998][T10759] usb 5-1: device descriptor read/all, error -71 [ 1297.260127][T17188] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1297.307542][T17188] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1297.352265][T17188] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1297.414694][T17188] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1297.456504][T17188] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1297.498755][T17188] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1297.531315][T17188] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1297.563392][T17188] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1297.595558][T17188] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1297.642168][T17188] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1297.671584][T17188] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1297.680889][T10759] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1297.722026][T17188] usb 2-1: USB disconnect, device number 109 [ 1297.729700][T16600] usb 6-1: USB disconnect, device number 103 [ 1297.874611][T10759] usb 5-1: Using ep0 maxpacket: 16 [ 1297.906643][T10759] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1297.943597][T10759] usb 5-1: config 198 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.995723][T10759] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=58.84 [ 1298.025579][T10759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.049048][T10759] usb 5-1: Product: syz [ 1298.062899][T10759] usb 5-1: Manufacturer: syz [ 1298.084276][T10759] usb 5-1: SerialNumber: syz [ 1298.205551][T20048] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1298.368381][T20046] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1298.387202][T20046] overlayfs: missing 'lowerdir' [ 1298.486901][T10759] comedi comedi5: Wrong number of endpoints [ 1298.510418][T10759] dt9812 5-1:198.0: driver 'dt9812' failed to auto-configure device. [ 1298.565403][T10759] usb 5-1: USB disconnect, device number 5 [ 1298.952558][T16600] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1298.974938][T17188] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1299.365814][T20071] netlink: 'syz.1.3601': attribute type 10 has an invalid length. [ 1299.373814][T20071] ipvlan0: entered allmulticast mode [ 1299.379375][T20071] veth0_vlan: entered allmulticast mode [ 1299.398604][T20071] team0: Device ipvlan0 failed to register rx_handler [ 1300.471083][T16600] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1300.475489][T17188] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1300.488593][T16600] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1300.506289][T16600] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1300.521031][T16600] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1300.530360][T16600] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1300.566831][T17188] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.576148][T16600] usb 6-1: Product: syz [ 1300.583524][T17188] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1300.602866][T16600] usb 6-1: Manufacturer: syz [ 1300.611206][T17188] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1300.622460][T17188] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1300.631855][T17188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.705408][T16600] usb 6-1: SerialNumber: syz [ 1300.722578][T17188] usb 4-1: config 0 descriptor?? [ 1300.946130][T16600] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 104 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1301.160177][T20059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.170670][T20059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.218392][T17617] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1301.240576][T17188] holtek 0003:1241:5015.002B: item fetching failed at offset 1/5 [ 1301.257712][T17188] holtek 0003:1241:5015.002B: parse failed [ 1301.263876][T17188] holtek 0003:1241:5015.002B: probe with driver holtek failed with error -22 [ 1301.378413][T17617] usb 5-1: Using ep0 maxpacket: 16 [ 1301.386822][T17617] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.397449][T17617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1301.408597][T17617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1301.431805][T17617] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1301.442782][T17617] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1301.456957][T17617] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1301.465972][T16600] usb 4-1: USB disconnect, device number 10 [ 1301.473564][T17617] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1301.486662][T17617] usb 5-1: Manufacturer: syz [ 1301.528739][T17617] usb 5-1: config 0 descriptor?? [ 1301.837766][T17617] rc_core: IR keymap rc-hauppauge not found [ 1301.851489][T17617] Registered IR keymap rc-empty [ 1301.860376][T17188] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 1301.868582][T17617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1301.923870][T17617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1301.950428][T17617] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1301.962143][T20103] netlink: 'syz.2.3611': attribute type 3 has an invalid length. [ 1301.970909][T17617] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input197 [ 1301.983869][T20103] netlink: 'syz.2.3611': attribute type 2 has an invalid length. [ 1301.992132][T20103] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3611'. [ 1302.002194][T17617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1302.032564][T17617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1302.052004][T17617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1302.066592][T17188] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.081472][T17188] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1302.097207][T17617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1302.100245][T20106] Invalid logical block size (530) [ 1302.116075][T17188] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1302.132977][T17188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.147820][T17617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1302.175287][T17188] usb 2-1: config 0 descriptor?? [ 1302.190428][T17617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1302.203194][T17188] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1302.211342][T17188] dvb-usb: bulk message failed: -22 (3/0) [ 1302.222519][T17617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1302.226346][T20109] 9p: Bad value for 'rfdno' [ 1302.235719][T17188] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1302.246924][T17188] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1302.265295][T17617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1302.280365][T17188] usb 2-1: media controller created [ 1302.288018][T17617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1302.296743][T17188] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1302.316313][T17188] dvb-usb: bulk message failed: -22 (6/0) [ 1302.318713][T20111] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3614'. [ 1302.323130][T17617] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1302.338483][T20111] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3614'. [ 1302.340361][T17188] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1302.375002][T17188] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input198 [ 1302.387569][T17617] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1302.397247][T17617] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1302.409323][T20096] dvb-usb: bulk message failed: -22 (2/0) [ 1302.416842][T17188] dvb-usb: schedule remote query interval to 150 msecs. [ 1302.460864][T17617] usb 5-1: USB disconnect, device number 6 [ 1302.469489][T17188] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1302.518598][T17188] usb 2-1: USB disconnect, device number 110 [ 1302.936521][T17617] usb 6-1: USB disconnect, device number 104 [ 1303.085109][T17188] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1303.155849][T17617] usblp0: removed [ 1303.640310][ T29] audit: type=1400 audit(1777970013.962:1448): avc: denied { write } for pid=20117 comm="syz.1.3617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1303.888993][T10447] Bluetooth: hci2: connection err: -111 [ 1303.965274][T20130] batman_adv: batadv0: Adding interface: macsec1 [ 1303.979974][T20130] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.035395][T20130] batman_adv: batadv0: Interface activated: macsec1 [ 1304.825893][T20140] tipc: Enabling of bearer rejected, already enabled [ 1304.837293][T20140] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 1305.236019][T17188] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 1305.392569][T20152] netlink: 'syz.2.3626': attribute type 10 has an invalid length. [ 1305.750231][T17188] usb 6-1: config 1 has an invalid descriptor of length 181, skipping remainder of the config [ 1305.760703][T17188] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1305.775897][T17188] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 1305.790682][T17188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.804733][T20148] batman_adv: batadv0: Adding interface: gretap1 [ 1305.814838][T17188] usb 6-1: Product: syz [ 1305.822392][T17188] usb 6-1: Manufacturer: syz [ 1305.833090][T17188] usb 6-1: SerialNumber: syz [ 1305.866423][T20148] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1305.903374][T20152] ipvlan0: entered allmulticast mode [ 1305.908708][T20152] veth0_vlan: entered allmulticast mode [ 1305.915354][T20152] team0: Device ipvlan0 failed to register rx_handler [ 1307.014403][T20171] FAULT_INJECTION: forcing a failure. [ 1307.014403][T20171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1307.029632][T20171] CPU: 0 UID: 0 PID: 20171 Comm: syz.2.3628 Tainted: G L syzkaller #0 PREEMPT(full) [ 1307.029661][T20171] Tainted: [L]=SOFTLOCKUP [ 1307.029667][T20171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1307.029675][T20171] Call Trace: [ 1307.029679][T20171] [ 1307.029684][T20171] dump_stack_lvl+0x100/0x190 [ 1307.029700][T20171] should_fail_ex.cold+0x5/0xa [ 1307.029716][T20171] _copy_from_user+0x2e/0xd0 [ 1307.029732][T20171] get_bitmap+0xde/0x1a0 [ 1307.029744][T20171] get_nodes+0x169/0x210 [ 1307.029754][T20171] ? __pfx_get_nodes+0x10/0x10 [ 1307.029768][T20171] kernel_mbind+0xf8/0x200 [ 1307.029783][T20171] ? __pfx_kernel_mbind+0x10/0x10 [ 1307.029797][T20171] ? rcu_is_watching+0x12/0xc0 [ 1307.029816][T20171] do_syscall_64+0x10b/0xf80 [ 1307.029828][T20171] ? clear_bhb_loop+0x40/0x90 [ 1307.029841][T20171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.029852][T20171] RIP: 0033:0x7f776559cdd9 [ 1307.029862][T20171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.029873][T20171] RSP: 002b:00007f77664a5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1307.029884][T20171] RAX: ffffffffffffffda RBX: 00007f7765816090 RCX: 00007f776559cdd9 [ 1307.029895][T20171] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000200000905000 [ 1307.029902][T20171] RBP: 00007f77664a5090 R08: 0000000000008000 R09: 0000000000000006 [ 1307.029908][T20171] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1307.029914][T20171] R13: 00007f7765816128 R14: 00007f7765816090 R15: 00007ffe7ddfc3d8 [ 1307.029928][T20171] [ 1307.529597][ T29] audit: type=1400 audit(1777970017.593:1449): avc: denied { write } for pid=20156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1307.675474][ T29] audit: type=1400 audit(1777970017.743:1450): avc: denied { write } for pid=20178 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1308.117224][ T5702] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1308.399530][ T5702] usb 2-1: Using ep0 maxpacket: 16 [ 1308.451478][ T5702] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.569226][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1308.715178][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1308.759102][ T5702] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1308.780808][T17188] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1308.798251][ T5702] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1308.813715][T17188] usb 6-1: USB disconnect, device number 105 [ 1308.824850][ T5702] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1308.835147][ T5702] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1308.848427][T17313] udevd[17313]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1308.866930][ T5702] usb 2-1: Manufacturer: syz [ 1308.883497][ T5702] usb 2-1: config 0 descriptor?? [ 1309.136333][T17188] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1309.691956][ T5702] rc_core: IR keymap rc-hauppauge not found [ 1309.705710][T17188] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1309.781911][ T5702] Registered IR keymap rc-empty [ 1309.792516][T17188] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1309.811701][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1309.825451][T17188] usb 6-1: Product: syz [ 1309.905003][T20226] blktrace: Concurrent blktraces are not allowed on loop6 [ 1310.276153][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1310.285851][T17188] usb 6-1: config 0 descriptor?? [ 1310.305677][ T5702] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1310.322742][T17188] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1310.331888][ T29] audit: type=1400 audit(1777970020.223:1451): avc: denied { write } for pid=20193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1310.374353][T17188] usb 6-1: Detected FT232H [ 1310.380716][ T5702] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input199 [ 1310.405504][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1310.429440][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1310.452583][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1310.472157][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1310.506632][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1310.518854][ T29] audit: type=1400 audit(1777970020.410:1452): avc: denied { write } for pid=20232 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1310.538670][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1310.568516][T17188] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1310.582279][T17188] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1310.592609][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1310.605860][T17188] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 1310.631427][T20237] IPv6: addrconf: prefix option has invalid lifetime [ 1310.646156][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1310.659961][T17188] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1310.696721][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1310.706897][T17188] usb 6-1: USB disconnect, device number 106 [ 1310.738620][T17188] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1310.766341][ T5702] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1310.780925][T17188] ftdi_sio 6-1:0.0: device disconnected [ 1310.800095][ T5702] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1310.829641][ T5702] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1310.850924][ T5702] usb 2-1: USB disconnect, device number 111 [ 1311.038631][T16600] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1311.511375][T20255] netlink: 'syz.5.3646': attribute type 4 has an invalid length. [ 1311.532072][T20255] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3646'. [ 1311.541563][T20255] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1311.555761][T16600] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.566597][T16600] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1311.576293][T16600] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1311.586530][T16600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.597604][T16600] usb 5-1: config 0 descriptor?? [ 1311.608504][T16600] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1311.624008][T16600] dvb-usb: bulk message failed: -22 (3/0) [ 1311.636464][T16600] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1311.660249][T16600] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1311.667437][T16600] usb 5-1: media controller created [ 1311.689196][T16600] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1311.726309][T16600] dvb-usb: bulk message failed: -22 (6/0) [ 1311.751869][T16600] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1311.773593][T16600] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input200 [ 1311.795728][T16600] dvb-usb: schedule remote query interval to 150 msecs. [ 1311.869514][T16600] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1311.869875][T20243] dvb-usb: bulk message failed: -22 (2/0) [ 1311.945124][T17188] usb 5-1: USB disconnect, device number 7 [ 1311.992102][T17188] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1312.000510][ T5702] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1312.181805][ T5702] usb 6-1: Using ep0 maxpacket: 8 [ 1312.197323][ T5702] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1312.224093][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.240178][ T5702] usb 6-1: Product: syz [ 1312.249309][ T5702] usb 6-1: Manufacturer: syz [ 1312.262127][ T5702] usb 6-1: SerialNumber: syz [ 1312.276648][ T5702] usb 6-1: config 0 descriptor?? [ 1312.288693][T17617] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1312.305928][ T5702] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1312.325838][ T5702] pctv452e: pctv452e_power_ctrl: 1 [ 1312.325838][ T5702] [ 1312.344614][ T5702] usb 6-1: selecting invalid altsetting 3 [ 1312.359282][ T5702] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1312.359282][ T5702] [ 1312.381441][ T5702] dvb-usb: bulk message failed: -22 (5/0) [ 1312.400829][ T5702] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1312.428095][ T5702] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1312.440093][T16600] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1312.461059][ T5702] usb 6-1: media controller created [ 1312.473692][T17617] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1312.485309][ T5702] dvb-usb: bulk message failed: -22 (8/0) [ 1312.497934][T17617] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1312.522471][ T5702] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1312.540254][T17617] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1312.570402][ T5702] dvb-usb: MAC address reading failed. [ 1312.584798][T17617] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1312.600909][ T5702] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1312.610827][T17617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1312.623745][T16600] usb 2-1: Using ep0 maxpacket: 32 [ 1312.625833][T17617] usb 3-1: Product: syz [ 1312.649217][T17617] usb 3-1: Manufacturer: syz [ 1312.651723][T16600] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1312.664472][T17617] usb 3-1: SerialNumber: syz [ 1312.699600][T16600] usb 2-1: config 0 has no interface number 0 [ 1312.727177][T16600] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1312.758347][T16600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.778836][T20278] syzkaller0: entered promiscuous mode [ 1312.793866][ T5702] DVB: Unable to find symbol stb0899_attach() [ 1312.805482][ T5702] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1312.805707][T16600] usb 2-1: Product: syz [ 1312.830984][T20278] syzkaller0: entered allmulticast mode [ 1312.848786][T16600] usb 2-1: Manufacturer: syz [ 1312.893098][T16600] usb 2-1: SerialNumber: syz [ 1312.905581][T17617] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 96 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1312.920555][ T5702] rc_core: IR keymap rc-tt-1500 not found [ 1312.930891][ T5702] Registered IR keymap rc-empty [ 1312.962412][ T5702] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1312.986142][T16600] usb 2-1: config 0 descriptor?? [ 1313.006471][T16600] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1313.008850][ T5702] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input201 [ 1313.054990][ T5702] dvb-usb: schedule remote query interval to 100 msecs. [ 1313.083374][ T5702] pctv452e: pctv452e_power_ctrl: 0 [ 1313.083374][ T5702] [ 1313.109652][ T5702] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1313.132660][T20269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.171499][ T5702] usb 6-1: USB disconnect, device number 107 [ 1313.195395][T20269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.332942][T16600] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1313.347631][T16600] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1313.377763][T20285] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3656'. [ 1313.390396][T10447] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1313.401348][T10447] Bluetooth: hci1: Injecting HCI hardware error event [ 1314.239168][T10447] Bluetooth: hci1: command 0x0406 tx timeout [ 1314.355341][ T5702] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1314.428999][ T5619] Bluetooth: hci1: hardware error 0x00 [ 1314.613717][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1314.614085][T17617] usb 2-1: USB disconnect, device number 112 [ 1314.679554][T17617] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1314.728760][T20285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1314.742350][T17617] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1314.802285][T17617] quatech2 2-1:0.51: device disconnected [ 1314.933612][T20300] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3661'. [ 1316.051504][T17617] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1316.885300][ T5619] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1318.176335][T17617] usb 5-1: too many configurations: 53, using maximum allowed: 8 [ 1318.362831][T17617] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1318.839350][T16600] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1318.839617][T17617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.082245][T17617] usb 5-1: Product: syz [ 1319.091994][T17617] usb 5-1: Manufacturer: syz [ 1319.100118][T17617] usb 5-1: SerialNumber: syz [ 1319.138844][ T5619] Bluetooth: hci2: connection err: -111 [ 1319.204747][T17617] usb 5-1: can't set config #1, error -71 [ 1319.220156][T17617] usb 5-1: USB disconnect, device number 8 [ 1319.277824][T16600] usb 4-1: Using ep0 maxpacket: 32 [ 1319.292247][T16600] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1319.310995][T16600] usb 4-1: string descriptor 0 read error: -22 [ 1319.331280][T16600] usb 4-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 1319.358283][T16600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.414763][T16600] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1319.447198][T16600] usb 4-1: MIDIStreaming interface descriptor not found [ 1319.733401][T16600] usb 3-1: USB disconnect, device number 96 [ 1319.764071][T16600] usblp0: removed [ 1319.990299][T20358] lo speed is unknown, defaulting to 1000 [ 1319.996116][T20358] lo speed is unknown, defaulting to 1000 [ 1320.002862][T20358] lo speed is unknown, defaulting to 1000 [ 1320.008974][T20358] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1320.023117][T20358] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1320.039955][T20358] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1320.053306][T20358] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1320.072171][T20358] lo speed is unknown, defaulting to 1000 [ 1320.079491][T20358] lo speed is unknown, defaulting to 1000 [ 1320.085849][T20358] lo speed is unknown, defaulting to 1000 [ 1320.093857][T20358] lo speed is unknown, defaulting to 1000 [ 1320.100834][T20358] lo speed is unknown, defaulting to 1000 [ 1321.094458][ T5702] usb 4-1: USB disconnect, device number 11 [ 1322.530710][ T803] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1322.675640][ T803] usb 6-1: device descriptor read/64, error -71 [ 1323.063187][T20385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3682'. [ 1323.072228][T20385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3682'. [ 1323.082660][T20385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3682'. [ 1323.147185][ T803] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1323.306300][ T803] usb 6-1: device descriptor read/64, error -71 [ 1323.447318][ T803] usb usb6-port1: attempt power cycle [ 1324.225094][ T803] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1324.282823][ T803] usb 6-1: device descriptor read/8, error -71 [ 1324.414666][ T29] audit: type=1400 audit(1777970033.408:1453): avc: denied { watch } for pid=20400 comm="syz.4.3692" path="/proc/279/fd" dev="proc" ino=70696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1324.652724][ T803] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1324.764260][ T803] usb 6-1: device descriptor read/8, error -71 [ 1324.987698][ T803] usb usb6-port1: unable to enumerate USB device [ 1325.027861][T20411] misc userio: Invalid payload size [ 1325.375194][T20418] netlink: 'syz.5.3697': attribute type 8 has an invalid length. [ 1325.388739][T20418] FAULT_INJECTION: forcing a failure. [ 1325.388739][T20418] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.401816][T20418] CPU: 0 UID: 0 PID: 20418 Comm: syz.5.3697 Tainted: G L syzkaller #0 PREEMPT(full) [ 1325.401844][T20418] Tainted: [L]=SOFTLOCKUP [ 1325.401851][T20418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1325.401862][T20418] Call Trace: [ 1325.401869][T20418] [ 1325.401877][T20418] dump_stack_lvl+0x100/0x190 [ 1325.401904][T20418] should_fail_ex.cold+0x5/0xa [ 1325.401928][T20418] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 1325.401950][T20418] should_failslab+0xc2/0x120 [ 1325.401968][T20418] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 1325.401988][T20418] __kmalloc_node_noprof+0xe6/0x850 [ 1325.402015][T20418] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 1325.402051][T20418] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 1325.402072][T20418] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 1325.402101][T20418] crypto_create_tfm_node+0x85/0x350 [ 1325.402132][T20418] crypto_alloc_tfm_node+0x102/0x260 [ 1325.402164][T20418] drbg_kcapi_seed+0x88e/0xe50 [ 1325.402196][T20418] ? __pfx_drbg_kcapi_seed+0x10/0x10 [ 1325.402222][T20418] ? find_held_lock+0x2b/0x80 [ 1325.402250][T20418] crypto_rng_reset+0x7b/0x130 [ 1325.402274][T20418] ? __pfx_rng_setkey+0x10/0x10 [ 1325.402298][T20418] alg_setsockopt+0x433/0xe80 [ 1325.402322][T20418] ? __pfx_alg_setsockopt+0x10/0x10 [ 1325.402345][T20418] ? selinux_socket_setsockopt+0x6a/0x80 [ 1325.402367][T20418] ? __pfx_alg_setsockopt+0x10/0x10 [ 1325.402389][T20418] do_sock_setsockopt+0xf3/0x1d0 [ 1325.402414][T20418] __sys_setsockopt+0x195/0x220 [ 1325.402446][T20418] __x64_sys_setsockopt+0xbd/0x160 [ 1325.402471][T20418] ? do_syscall_64+0x90/0xf80 [ 1325.402493][T20418] ? lockdep_hardirqs_on+0x78/0x100 [ 1325.402513][T20418] do_syscall_64+0x10b/0xf80 [ 1325.402533][T20418] ? clear_bhb_loop+0x40/0x90 [ 1325.402555][T20418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.402573][T20418] RIP: 0033:0x7fd1f419cdd9 [ 1325.402589][T20418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.402606][T20418] RSP: 002b:00007fd1f50cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1325.402624][T20418] RAX: ffffffffffffffda RBX: 00007fd1f4416180 RCX: 00007fd1f419cdd9 [ 1325.402636][T20418] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000008 [ 1325.402646][T20418] RBP: 00007fd1f50cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1325.402657][T20418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1325.402668][T20418] R13: 00007fd1f4416218 R14: 00007fd1f4416180 R15: 00007fff8ef21698 [ 1325.402693][T20418] [ 1325.402716][T20418] DRBG: Continuing without Jitter RNG [ 1325.818506][ T5702] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1326.135743][ T29] audit: type=1326 audit(1777970034.859:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20423 comm="syz.3.3698" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b0f9cdd9 code=0x7ffc0000 [ 1326.916848][T16600] libceph: connect (1)[c::]:6789 error -101 [ 1326.931744][ T5702] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 1326.942435][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.953626][T16600] libceph: mon0 (1)[c::]:6789 connect error [ 1326.955926][ T5702] usb 5-1: config 0 descriptor?? [ 1327.048811][ T29] audit: type=1326 audit(1777970034.859:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20423 comm="syz.3.3698" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b0f9cdd9 code=0x7ffc0000 [ 1327.076733][ T29] audit: type=1326 audit(1777970034.868:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20423 comm="syz.3.3698" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f31b0f9cdd9 code=0x7ffc0000 [ 1327.125146][T20431] ceph: No mds server is up or the cluster is laggy [ 1327.153335][ T29] audit: type=1326 audit(1777970034.868:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20423 comm="syz.3.3698" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b0f9cdd9 code=0x7ffc0000 [ 1327.241850][T20443] netlink: 'syz.5.3700': attribute type 8 has an invalid length. [ 1327.771964][ T29] audit: type=1326 audit(1777970034.868:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20423 comm="syz.3.3698" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b0f9cdd9 code=0x7ffc0000 [ 1327.855294][T20449] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1327.894979][T20452] xt_hl: Unknown Hop Limit match mode: 206 [ 1328.168312][T17617] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1328.232266][T17188] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1328.275074][ T5343] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1328.341539][T17617] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1328.352378][T17617] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.363289][T17617] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1328.375450][T17617] usb 3-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 1328.384991][T17617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.393820][T17617] usb 3-1: Product: syz [ 1328.398466][T17617] usb 3-1: Manufacturer: syz [ 1328.403236][T17188] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1328.412148][T17617] usb 3-1: SerialNumber: syz [ 1328.416957][T17188] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1328.428943][ T5343] usb 4-1: device descriptor read/64, error -71 [ 1328.446845][T17188] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1328.459935][T17188] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1328.481602][T17188] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1328.503590][T17188] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1328.513445][T17188] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1328.523146][T17188] usb 6-1: Product: syz [ 1328.527442][T17188] usb 6-1: Manufacturer: syz [ 1328.605532][T17188] cdc_wdm 6-1:1.0: skipping garbage [ 1328.621559][T17188] cdc_wdm 6-1:1.0: skipping garbage [ 1328.645917][T17188] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1328.652456][T17188] cdc_wdm 6-1:1.0: Unknown control protocol [ 1328.690626][T20452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.699567][ T5343] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1328.783335][T20452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.804878][T20462] block nbd0: server does not support multiple connections per device. [ 1328.816669][T20462] block nbd0: shutting down sockets [ 1328.960158][ T5343] usb 4-1: device descriptor read/64, error -71 [ 1328.978407][T20452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.165845][T20452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.174926][ T5343] usb usb4-port1: attempt power cycle [ 1329.404899][T20452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.527560][T20452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.629970][T20452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.726375][T20452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.734517][ T5702] usb 5-1: string descriptor 0 read error: -71 [ 1329.740982][ T5343] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1329.768033][ T5702] ldusb 5-1:0.0: Interrupt in endpoint not found [ 1329.800088][ T5343] usb 4-1: device descriptor read/8, error -71 [ 1329.810464][ T5702] usb 5-1: USB disconnect, device number 9 [ 1329.907120][T20467] ALSA: mixer_oss: invalid OSS volume '' [ 1330.064746][ C0] cdc_wdm 6-1:1.0: Unexpected error -71 [ 1330.070359][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1330.076943][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1330.083249][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1330.083681][T16600] usb 6-1: USB disconnect, device number 112 [ 1330.089841][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1330.089859][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1330.089978][ T5343] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1330.785533][ T5801] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1331.355005][T17617] usb 3-1: skipping empty audio interface (v1) [ 1331.402549][T17617] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1331.418189][T17617] usb 3-1: USB disconnect, device number 97 [ 1331.431215][T20484] netlink: 'syz.4.3714': attribute type 10 has an invalid length. [ 1331.439655][T20484] team0: Device vlan0 is up. Set it down before adding it as a team port [ 1331.451468][T17313] udevd[17313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1331.525124][ T5801] usb 2-1: Using ep0 maxpacket: 32 [ 1331.539559][ T5801] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1331.550878][ T5801] usb 2-1: config 0 has no interface number 0 [ 1331.598530][ T5343] usb 4-1: device not accepting address 15, error -71 [ 1331.626531][ T5801] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1331.636700][ T5343] usb usb4-port1: unable to enumerate USB device [ 1331.648408][ T5801] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1331.664979][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.675091][ T5801] usb 2-1: Product: syz [ 1331.676054][ T29] audit: type=1400 audit(1777970040.202:1459): avc: denied { create } for pid=20487 comm="syz.4.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1331.679282][ T5801] usb 2-1: Manufacturer: syz [ 1331.679300][ T5801] usb 2-1: SerialNumber: syz [ 1331.711697][ T5801] usb 2-1: config 0 descriptor?? [ 1331.825463][ T5801] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1331.847340][ T5801] em28xx 2-1:0.132: Video interface 132 found: [ 1331.873509][T20489] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1331.954806][T20496] fuse: Unknown parameter 'group_i00000000000000000000' [ 1332.702354][ T5801] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1332.942323][ T29] audit: type=1400 audit(1777970041.391:1460): avc: denied { map } for pid=20501 comm="syz.2.3718" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1333.043828][T20509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20509 comm=syz.5.3720 [ 1333.278729][T20469] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3710'. [ 1333.314827][T20469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.352076][T20469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.388439][T20469] overlayfs: conflicting lowerdir path [ 1333.410067][T20469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.419092][ T5801] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1334.363936][ T29] audit: type=1400 audit(1777970042.663:1461): avc: denied { write } for pid=20518 comm="syz.5.3725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1334.372202][ T5801] em28xx 2-1:0.132: board has no eeprom [ 1334.384993][T20469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.434847][ T29] audit: type=1400 audit(1777970042.682:1462): avc: denied { listen } for pid=20518 comm="syz.5.3725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1334.456176][T20469] trusted_key: encrypted_key: insufficient parameters specified [ 1334.494352][T17617] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1334.547712][ T5801] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1334.556015][ T5801] em28xx 2-1:0.132: analog set to bulk mode. [ 1334.562567][ T5343] em28xx 2-1:0.132: Registering V4L2 extension [ 1334.654412][ T5801] usb 2-1: USB disconnect, device number 113 [ 1334.674254][ T5801] em28xx 2-1:0.132: Disconnecting em28xx [ 1334.708190][T17617] usb 3-1: device descriptor read/64, error -71 [ 1334.892446][ T5343] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1334.910370][ T5343] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1334.921152][ T5343] em28xx 2-1:0.132: No AC97 audio processor [ 1334.937392][ T5343] usb 2-1: Decoder not found [ 1334.953758][ T5343] em28xx 2-1:0.132: failed to create media graph [ 1334.960130][ T5343] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1334.976066][ T5343] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1334.986051][T17617] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1335.008144][ T5801] em28xx 2-1:0.132: Closing input extension [ 1335.023058][ T5801] em28xx 2-1:0.132: Freeing device [ 1335.094490][T16600] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1335.146123][T17617] usb 3-1: device descriptor read/64, error -71 [ 1335.178628][ T803] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1335.195956][T20533] Bluetooth: hci4: Frame reassembly failed (-84) [ 1335.210510][T10799] Bluetooth: hci4: Frame reassembly failed (-84) [ 1335.233956][T20535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3726'. [ 1335.286319][T17617] usb usb3-port1: attempt power cycle [ 1335.287743][T16600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.314727][T16600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1335.348019][T16600] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1335.362343][ T803] usb 4-1: Using ep0 maxpacket: 32 [ 1335.392145][ T803] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1335.415252][ T803] usb 4-1: config 0 has no interface number 0 [ 1335.426416][T16600] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1335.445679][ T803] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1335.469603][T16600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.513367][ T803] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1335.553131][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.569745][T16600] usb 5-1: config 0 descriptor?? [ 1335.631959][ T803] usb 4-1: Product: syz [ 1335.658808][ T803] usb 4-1: Manufacturer: syz [ 1335.686986][ T803] usb 4-1: SerialNumber: syz [ 1335.701804][T17617] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1335.721357][ T803] usb 4-1: config 0 descriptor?? [ 1335.735322][T17617] usb 3-1: device descriptor read/8, error -71 [ 1335.740921][ T803] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1335.751278][ T803] em28xx 4-1:0.132: Video interface 132 found: [ 1335.762901][T20542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1335.990714][T17617] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1336.014511][T17617] usb 3-1: device descriptor read/8, error -71 [ 1336.039835][T20528] ksmbd: Unknown IPC event: 4, ignore. [ 1336.063208][T16600] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1336.142357][T17617] usb usb3-port1: unable to enumerate USB device [ 1336.175753][ T803] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1336.273285][T16600] usb 5-1: USB disconnect, device number 10 [ 1336.614944][T20530] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3727'. [ 1336.629154][T20530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.638670][T20530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.655405][T20530] overlayfs: conflicting lowerdir path [ 1336.999877][ T803] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1337.047247][ T803] em28xx 4-1:0.132: board has no eeprom [ 1337.233574][T20530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.242331][T20530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.254550][T20530] trusted_key: encrypted_key: insufficient parameters specified [ 1337.326086][ T803] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1337.334007][ T803] em28xx 4-1:0.132: analog set to bulk mode. [ 1337.340551][T10759] em28xx 4-1:0.132: Registering V4L2 extension [ 1337.351727][ T803] usb 4-1: USB disconnect, device number 16 [ 1337.366616][ T803] em28xx 4-1:0.132: Disconnecting em28xx [ 1337.402836][ T5619] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1337.402847][T10447] Bluetooth: hci4: command 0xfc11 tx timeout [ 1337.432961][ T5343] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1337.538745][T10759] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1337.545974][T10759] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1337.556893][T10759] em28xx 4-1:0.132: No AC97 audio processor [ 1337.576034][T10759] usb 4-1: Decoder not found [ 1337.578588][T20560] netlink: 'syz.2.3735': attribute type 35 has an invalid length. [ 1337.584690][T10759] em28xx 4-1:0.132: failed to create media graph [ 1337.595165][T20560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3735'. [ 1337.605057][ T5343] usb 5-1: Using ep0 maxpacket: 16 [ 1337.610252][T10759] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1337.613695][ T5343] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1337.634804][ T5343] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1337.635767][T10759] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1337.641565][ T5343] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1337.689094][ T803] em28xx 4-1:0.132: Closing input extension [ 1337.692769][ T5343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.872818][ T5343] usb 5-1: config 0 descriptor?? [ 1337.874540][ T803] em28xx 4-1:0.132: Freeing device [ 1338.042581][T17617] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1339.254565][T20552] netlink: zone id is out of range [ 1339.285909][T20552] netlink: zone id is out of range [ 1339.314250][T20552] netlink: zone id is out of range [ 1339.342291][T20552] netlink: zone id is out of range [ 1339.358058][T17617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.372120][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1339.379759][T17617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1339.387547][T20552] netlink: zone id is out of range [ 1339.389605][T17617] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1339.412290][T20552] netlink: zone id is out of range [ 1339.421820][T20552] netlink: zone id is out of range [ 1339.433375][T20552] netlink: zone id is out of range [ 1339.453643][T20552] netlink: zone id is out of range [ 1339.464442][T20552] netlink: del zone limit has 8 unknown bytes [ 1339.544876][T17617] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1339.554119][T17617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.567954][T17617] usb 3-1: config 0 descriptor?? [ 1339.589348][ T29] audit: type=1400 audit(1777970047.604:1463): avc: denied { bind } for pid=20551 comm="syz.4.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1339.592818][ T5343] mcp2221 0003:04D8:00DD.002D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1339.634792][T16600] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1339.751020][ T29] audit: type=1400 audit(1777970047.754:1464): avc: denied { append } for pid=20582 comm="syz.1.3742" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1339.836796][T16600] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.855531][T16600] usb 4-1: config 0 has no interfaces? [ 1339.865750][T16600] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1339.876549][T16600] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1339.892770][T16600] usb 4-1: Manufacturer: syz [ 1340.432156][T16600] usb 4-1: config 0 descriptor?? [ 1340.841867][T16600] usb 4-1: USB disconnect, device number 17 [ 1341.057799][T17617] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1341.078110][ T5343] usb 5-1: USB disconnect, device number 11 [ 1341.088683][T17617] usb 3-1: USB disconnect, device number 102 [ 1341.244357][T20595] fido_id[20595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1341.261716][T20599] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1342.620867][ T5343] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 1342.797620][T20614] overlayfs: missing 'lowerdir' [ 1343.025738][ T5343] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.141426][ T5343] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1343.256244][ T5343] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1343.314262][T20616] netlink: 'syz.5.3751': attribute type 35 has an invalid length. [ 1343.363220][ T5343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.381893][T20616] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3751'. [ 1343.465565][ T5343] usb 2-1: config 0 descriptor?? [ 1343.569818][ T5343] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1343.576561][T20621] Bluetooth: hci4: Frame reassembly failed (-84) [ 1343.615450][ T5343] dvb-usb: bulk message failed: -22 (3/0) [ 1343.685833][ T5343] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1343.767156][ T5343] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1343.787293][ T5343] usb 2-1: media controller created [ 1343.802690][ T5343] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1343.813962][ T5702] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1343.818902][T20611] dvb-usb: bulk message failed: -22 (2/0) [ 1343.953536][ T5343] dvb-usb: bulk message failed: -22 (6/0) [ 1343.984719][ T5343] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1344.033788][ T5702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.213896][ T5343] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input206 [ 1344.226649][ T5702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.238876][ T5702] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1344.255772][ T5343] dvb-usb: schedule remote query interval to 150 msecs. [ 1344.269951][ T5343] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1344.282532][ T5702] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1344.297961][ T5343] usb 2-1: USB disconnect, device number 114 [ 1344.305302][ T5702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.326755][ T5702] usb 6-1: config 0 descriptor?? [ 1344.366625][ T5343] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1344.431991][T20628] netlink: 'syz.3.3755': attribute type 35 has an invalid length. [ 1344.441731][T20628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3755'. [ 1344.685651][T20634] syzkaller0: entered promiscuous mode [ 1344.692378][T20634] syzkaller0: entered allmulticast mode [ 1344.720841][ T5801] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1344.773830][ T5702] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1344.806344][T16600] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1344.882651][ T5801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.893577][ T5801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.903358][ T5801] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1344.916239][ T5801] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1344.926042][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.935781][ T5801] usb 4-1: config 0 descriptor?? [ 1344.990477][T16600] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1344.996678][ T5702] usb 6-1: USB disconnect, device number 113 [ 1344.999763][T16600] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1345.016219][T16600] usb 3-1: Product: syz [ 1345.022923][T16600] usb 3-1: config 0 descriptor?? [ 1345.030034][T16600] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1345.039793][T16600] usb 3-1: Detected FT232H [ 1345.252764][T16600] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1345.263671][T16600] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1345.270978][T16600] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1345.279364][T16600] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1345.290775][T16600] usb 3-1: USB disconnect, device number 103 [ 1345.302015][T16600] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1345.311820][T16600] ftdi_sio 3-1:0.0: device disconnected [ 1345.380422][ T5801] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1345.592045][T16600] usb 4-1: USB disconnect, device number 18 [ 1345.694187][ T5619] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1345.695114][T20640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3759'. [ 1345.918007][ T5702] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1346.166563][T20647] syz_tun: entered allmulticast mode [ 1346.183656][T20647] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1346.192238][T20647] net_ratelimit: 1 callbacks suppressed [ 1346.192252][T20647] mroute: pending queue full, dropping entries [ 1346.249356][T20646] syz_tun: left allmulticast mode [ 1346.270318][ T5702] usb 6-1: Using ep0 maxpacket: 16 [ 1346.294012][ T5702] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1346.797335][ T5702] usb 6-1: config 0 has no interface number 0 [ 1346.810284][T20649] openvswitch: netlink: Flow actions attr not present in new flow. [ 1347.036612][ T5702] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1347.052015][T20658] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1347.056623][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.074998][ T5702] usb 6-1: Product: syz [ 1347.083767][ T5702] usb 6-1: Manufacturer: syz [ 1347.091188][ T5702] usb 6-1: SerialNumber: syz [ 1347.111988][ T5702] usb 6-1: config 0 descriptor?? [ 1347.121528][ T5702] hub 6-1:0.132: bad descriptor, ignoring hub [ 1347.146211][ T5702] hub 6-1:0.132: probe with driver hub failed with error -5 [ 1347.214201][ T5702] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input209 [ 1347.577003][ T5702] input: failed to attach handler mousedev to device input209, error: -2 [ 1347.644949][ T5702] usb 6-1: USB disconnect, device number 114 [ 1347.895271][T20675] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3770'. [ 1347.915343][T20675] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3770'. [ 1347.929206][T20675] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3770'. [ 1347.938691][T20675] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3770'. [ 1347.947707][T20675] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3770'. [ 1347.984283][T16600] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1348.202020][T16600] usb 4-1: config 0 has no interfaces? [ 1348.208447][T16600] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1348.220452][T16600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.268218][T16600] usb 4-1: config 0 descriptor?? [ 1349.340757][T20697] fuse: Unknown parameter '00000000000000000000012 ' [ 1349.893144][ T29] audit: type=1326 audit(1777970057.243:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20689 comm="syz.1.3774" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1db9cdd9 code=0x7ffc0000 [ 1349.935786][T20706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.984997][T20706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.994618][ T29] audit: type=1326 audit(1777970057.243:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20689 comm="syz.1.3774" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa1db9cdd9 code=0x7ffc0000 [ 1350.052752][T20709] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1350.106608][ T5343] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1350.373875][T20718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3779'. [ 1350.413043][T20718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3779'. [ 1350.730172][ T5343] usb 6-1: Using ep0 maxpacket: 16 [ 1350.739485][ T5343] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.749801][ T5343] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1350.761568][ T5343] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1350.771309][ T5343] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1350.781041][ T5343] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1350.794893][ T5343] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1350.804043][ T5343] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1350.812170][ T5343] usb 6-1: Manufacturer: syz [ 1350.820333][ T5343] usb 6-1: config 0 descriptor?? [ 1351.100377][ T5343] rc_core: IR keymap rc-hauppauge not found [ 1351.108393][ T5343] Registered IR keymap rc-empty [ 1351.113482][ T5343] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1351.122401][ T5801] usb 4-1: USB disconnect, device number 19 [ 1351.153875][ T5343] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1351.202253][ T5343] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1351.221332][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 1351.241624][T20729] Bluetooth: hci4: Frame reassembly failed (-84) [ 1351.248851][ T5343] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input210 [ 1351.292879][T10759] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1351.518652][ T5343] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1351.549293][ T5343] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1351.570634][ T5343] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1351.592177][ T5343] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1351.624071][ T5343] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1351.640662][T20736] bond1: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms [ 1351.656108][ T5343] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1351.678919][ T5343] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1351.698792][T10759] usb 5-1: Using ep0 maxpacket: 8 [ 1351.698876][ T5343] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1351.715574][T10759] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1351.726724][T10759] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1351.730968][ T5343] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1351.736843][T10759] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1351.756996][T10759] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1351.762985][ T5343] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1351.764018][T10759] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 1351.779923][T10759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.786674][ T5343] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1351.792285][T10759] usb 5-1: config 0 descriptor?? [ 1351.800705][ T5343] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1351.821768][ T5343] usb 6-1: USB disconnect, device number 115 [ 1352.278585][T10759] lenovo 0003:17EF:60A4.0031: unknown main item tag 0x0 [ 1352.301811][T10759] lenovo 0003:17EF:60A4.0031: unknown main item tag 0x0 [ 1352.323035][T10759] lenovo 0003:17EF:60A4.0031: unknown main item tag 0x0 [ 1352.331544][T10759] lenovo 0003:17EF:60A4.0031: unknown main item tag 0x0 [ 1352.338609][T10759] lenovo 0003:17EF:60A4.0031: unknown main item tag 0x0 [ 1352.347361][T10759] lenovo 0003:17EF:60A4.0031: unknown main item tag 0x0 [ 1352.390769][T10759] lenovo 0003:17EF:60A4.0031: unknown main item tag 0x0 [ 1352.431080][T10759] lenovo 0003:17EF:60A4.0031: unknown main item tag 0x0 [ 1352.495424][T10759] lenovo 0003:17EF:60A4.0031: unknown main item tag 0x0 [ 1352.534835][T10759] lenovo 0003:17EF:60A4.0031: unknown main item tag 0x0 [ 1352.762500][T10759] lenovo 0003:17EF:60A4.0031: hidraw0: USB HID vff.fc Device [HID 17ef:60a4] on usb-dummy_hcd.4-1/input0 [ 1353.022608][T10759] usb 5-1: USB disconnect, device number 12 [ 1353.148452][T20743] fido_id[20743]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1353.387298][T10447] Bluetooth: hci4: command 0xfc11 tx timeout [ 1353.396211][ T5619] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1353.552984][T20756] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1353.568863][ T5801] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1353.577102][ T5343] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1353.600916][T10759] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1353.761184][T10759] usb 5-1: Using ep0 maxpacket: 32 [ 1353.761211][ T5343] usb 4-1: Using ep0 maxpacket: 32 [ 1353.767608][T10759] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1353.780030][T10759] usb 5-1: config 0 has no interface number 0 [ 1353.786461][T10759] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1353.799979][ T5801] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1353.800453][T10759] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1353.809363][ T5801] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1353.857497][ T5801] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1353.866554][ T5343] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1353.875939][ T5343] usb 4-1: config 0 has no interface number 0 [ 1353.883270][ T5801] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1353.883815][T10759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.894491][ T5343] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1353.923747][T10759] usb 5-1: Product: syz [ 1353.928016][T10759] usb 5-1: Manufacturer: syz [ 1353.931596][ T5801] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1353.950494][ T5343] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1353.958696][T10759] usb 5-1: SerialNumber: syz [ 1353.960000][ T5343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.960178][ T5801] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1353.975932][T10759] usb 5-1: config 0 descriptor?? [ 1353.986604][ T5343] usb 4-1: Product: syz [ 1353.990846][ T5343] usb 4-1: Manufacturer: syz [ 1353.994963][T10759] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1353.995557][ T5343] usb 4-1: SerialNumber: syz [ 1354.006103][T10759] em28xx 5-1:0.132: Video interface 132 found: [ 1354.010196][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1354.025254][ T5801] usb 2-1: Product: syz [ 1354.030138][ T5343] usb 4-1: config 0 descriptor?? [ 1354.035320][ T5801] usb 2-1: Manufacturer: syz [ 1354.042628][ T5343] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1354.052850][ T5343] em28xx 4-1:0.132: Video interface 132 found: [ 1354.065992][ T5801] cdc_wdm 2-1:1.0: skipping garbage [ 1354.071328][ T5801] cdc_wdm 2-1:1.0: skipping garbage [ 1354.078119][ T5801] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1354.084089][ T5801] cdc_wdm 2-1:1.0: Unknown control protocol [ 1354.199420][ T803] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 1354.372188][ T803] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.382617][ T803] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1354.392241][ T803] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1354.402070][ T803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.423373][ T803] usb 6-1: config 0 descriptor?? [ 1354.430712][T10759] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1354.448304][ T803] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1354.459653][ T803] dvb-usb: bulk message failed: -22 (3/0) [ 1354.473592][ T5343] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1354.475236][ T803] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1354.494506][ T803] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1354.502186][ T803] usb 6-1: media controller created [ 1354.508473][ T803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1354.540913][ T803] dvb-usb: bulk message failed: -22 (6/0) [ 1354.553075][ T803] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1354.566274][ T803] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input211 [ 1354.577581][ C0] cdc_wdm 2-1:1.0: Unexpected error -71 [ 1354.583193][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1354.588582][ T803] dvb-usb: schedule remote query interval to 150 msecs. [ 1354.589787][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1354.589984][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1354.602056][ T803] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1354.602770][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1354.604592][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1354.629828][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1354.636735][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1354.643335][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1354.649698][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1354.656294][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1354.664477][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1354.671073][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1354.677775][ T5801] usb 2-1: USB disconnect, device number 115 [ 1354.683859][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1354.683880][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1354.683894][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1354.739824][T20759] dvb-usb: bulk message failed: -22 (2/0) [ 1354.748706][ T803] usb 6-1: USB disconnect, device number 116 [ 1354.783537][ T803] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1354.840731][T17617] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1354.879575][T20747] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.3788'. [ 1354.892666][T20747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.904618][T20747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.919232][T20747] overlayfs: conflicting lowerdir path [ 1354.927296][T20750] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3789'. [ 1354.938737][T10759] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1354.943717][T20750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.958013][T10759] em28xx 5-1:0.132: board has no eeprom [ 1354.962284][T20750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.998580][T20750] overlayfs: conflicting lowerdir path [ 1355.005848][T17617] usb 3-1: not running at top speed; connect to a high speed hub [ 1355.016591][ T5343] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1355.029638][T17617] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 1355.037920][ T5343] em28xx 4-1:0.132: board has no eeprom [ 1355.043542][T17617] usb 3-1: config 95 has no interface number 0 [ 1355.049891][T17617] usb 3-1: config 95 interface 1 has no altsetting 0 [ 1355.058757][T17617] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 1355.067853][T17617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.075873][T17617] usb 3-1: Product: syz [ 1355.080020][T17617] usb 3-1: Manufacturer: syz [ 1355.084614][T17617] usb 3-1: SerialNumber: syz [ 1355.235865][T10759] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1355.243810][T10759] em28xx 5-1:0.132: analog set to bulk mode. [ 1355.253123][ T803] em28xx 5-1:0.132: Registering V4L2 extension [ 1355.344284][ T5343] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1355.374685][ T5343] em28xx 4-1:0.132: analog set to bulk mode. [ 1355.399387][T20747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.418403][T20747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.433624][T20747] trusted_key: encrypted_key: insufficient parameters specified [ 1355.487238][T10759] usb 5-1: USB disconnect, device number 13 [ 1355.493399][ T803] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1355.515025][T10759] em28xx 5-1:0.132: Disconnecting em28xx [ 1355.521133][ T5619] Bluetooth: hci5: unexpected event for opcode 0x0403 [ 1355.620208][T20750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.669639][T20750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.799063][T20769] netlink: set zone limit has 4 unknown bytes [ 1355.944148][T20750] trusted_key: encrypted_key: insufficient parameters specified [ 1356.050905][ T5343] usb 4-1: USB disconnect, device number 20 [ 1356.109590][ T5343] em28xx 4-1:0.132: Disconnecting em28xx [ 1356.381357][ T803] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1356.497015][T17188] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1356.776540][T17188] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 1356.989095][T17188] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1357.122139][T17188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.253359][T17188] usb 2-1: Product: syz [ 1357.322503][T17188] usb 2-1: Manufacturer: syz [ 1357.395669][T17188] usb 2-1: SerialNumber: syz [ 1357.956161][ T803] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1358.200884][ T803] em28xx 5-1:0.132: No AC97 audio processor [ 1358.208261][ T803] usb 5-1: Decoder not found [ 1358.213243][ T803] em28xx 5-1:0.132: failed to create media graph [ 1358.219968][ T803] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1358.231643][ T803] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1358.242150][ T5801] em28xx 4-1:0.132: Registering V4L2 extension [ 1358.269729][T17188] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1358.370175][T17188] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1358.411170][T20793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3799'. [ 1358.425217][T17188] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1358.461915][T17188] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1358.521148][T17188] usb 2-1: USB disconnect, device number 116 [ 1358.612153][ T5801] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1358.621925][ T5801] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1358.643587][ T5801] em28xx 4-1:0.132: No AC97 audio processor [ 1358.669019][ T5801] usb 4-1: Decoder not found [ 1358.683766][ T5801] em28xx 4-1:0.132: failed to create media graph [ 1358.698187][ T5801] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1358.720844][ T5801] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1358.729871][ T5343] em28xx 4-1:0.132: Closing input extension [ 1358.738044][T10759] em28xx 5-1:0.132: Closing input extension [ 1358.760136][ T5343] em28xx 4-1:0.132: Freeing device [ 1358.823813][T10759] em28xx 5-1:0.132: Freeing device [ 1358.932926][T20806] batman_adv: batadv0: Adding interface: macsec1 [ 1358.953000][T20806] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1358.982404][T17617] usb 3-1: USB disconnect, device number 104 [ 1358.982978][T20806] batman_adv: batadv0: Interface activated: macsec1 [ 1359.021573][T17313] udevd[17313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1359.037680][T20807] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1359.157671][T10759] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1359.287314][ T803] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1359.341448][T10759] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.360798][T10759] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.371293][T10759] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1359.387482][T10759] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1359.398102][T10759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.423764][T10759] usb 5-1: config 0 descriptor?? [ 1359.469265][ T803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.469842][T20817] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3807'. [ 1359.490248][ T803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.490355][T20817] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3807'. [ 1359.502163][ T803] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1359.523488][ T803] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1359.533112][ T803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.557796][ T803] usb 2-1: config 0 descriptor?? [ 1359.782904][ T7415] Bluetooth: hci4: Frame reassembly failed (-84) [ 1359.791704][T20821] Bluetooth: hci4: Frame reassembly failed (-84) [ 1359.905861][T16600] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1359.909395][T20797] ksmbd: Unknown IPC event: 4, ignore. [ 1360.076927][T16600] usb 4-1: Using ep0 maxpacket: 32 [ 1360.107458][T16600] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1360.134953][T16600] usb 4-1: config 0 has no interface number 0 [ 1360.135070][T20810] ksmbd: Unknown IPC event: 4, ignore. [ 1360.141749][T16600] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1360.225548][T16600] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1360.248931][T10759] usbhid 5-1:0.0: can't add hid device: -71 [ 1360.272353][T10759] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1360.281148][T16600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.289384][T16600] usb 4-1: Product: syz [ 1360.297205][T10759] usb 5-1: USB disconnect, device number 14 [ 1360.303533][ T803] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1360.319166][T16600] usb 4-1: Manufacturer: syz [ 1360.331754][T16600] usb 4-1: SerialNumber: syz [ 1360.354244][T16600] usb 4-1: config 0 descriptor?? [ 1360.369045][T16600] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1360.384841][T16600] em28xx 4-1:0.132: Video interface 132 found: [ 1360.506029][T10759] usb 2-1: USB disconnect, device number 117 [ 1360.546889][T17617] usb 6-1: new full-speed USB device number 117 using dummy_hcd [ 1360.719604][T17617] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.729784][T17617] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1360.738678][T17617] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1360.747757][T17617] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.757589][T17617] usb 6-1: config 0 descriptor?? [ 1360.766062][T17617] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1360.772731][T17617] dvb-usb: bulk message failed: -22 (3/0) [ 1360.780143][T17617] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1360.789160][T17617] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1360.791870][T16600] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1360.796248][T17617] usb 6-1: media controller created [ 1360.797356][T17617] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1360.822802][T17617] dvb-usb: bulk message failed: -22 (6/0) [ 1360.828748][T17617] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1360.839601][T17617] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input212 [ 1360.864154][T17617] dvb-usb: schedule remote query interval to 150 msecs. [ 1360.875286][T17617] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1360.888643][T20829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3811'. [ 1360.993357][T20826] dvb-usb: bulk message failed: -22 (2/0) [ 1361.028025][T17617] usb 6-1: USB disconnect, device number 117 [ 1361.089904][ T5343] dvb-usb: bulk message failed: -22 (1/0) [ 1361.102119][ T5343] dvb-usb: error while querying for an remote control event. [ 1361.251254][T20819] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3808'. [ 1361.255426][T17617] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1361.265037][T20819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.327477][T20819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.435129][T20819] overlayfs: conflicting lowerdir path [ 1361.453958][T16600] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 1361.478383][T16600] em28xx 4-1:0.132: board has no eeprom [ 1361.767463][T16600] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1361.786173][T16600] em28xx 4-1:0.132: analog set to bulk mode. [ 1361.804970][T10759] em28xx 4-1:0.132: Registering V4L2 extension [ 1361.939249][ T5619] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1361.939547][T10447] Bluetooth: hci4: command 0xfc11 tx timeout [ 1362.257643][T20819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.377854][T20844] netlink: 'syz.2.3817': attribute type 4 has an invalid length. [ 1362.382698][T20819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.472773][T20819] trusted_key: encrypted_key: insufficient parameters specified [ 1362.527275][T10759] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1362.538576][T16600] usb 4-1: USB disconnect, device number 21 [ 1362.565193][T16600] em28xx 4-1:0.132: Disconnecting em28xx [ 1362.659678][T10759] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1362.666905][T10759] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1362.674182][T10759] em28xx 4-1:0.132: No AC97 audio processor [ 1362.749664][T10759] usb 4-1: Decoder not found [ 1362.766906][T10759] em28xx 4-1:0.132: failed to create media graph [ 1362.805701][T17188] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1362.862529][T20861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3818'. [ 1362.875695][T20861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3818'. [ 1363.165074][T17188] usb 6-1: Using ep0 maxpacket: 16 [ 1363.194063][T17188] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.198226][T10759] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1363.207525][T20864] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1363.221203][T10759] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1363.230321][T16600] em28xx 4-1:0.132: Closing input extension [ 1363.233467][T17188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1363.236311][T16600] ================================================================== [ 1363.255120][T16600] BUG: KASAN: slab-use-after-free in media_device_unregister+0x59d/0x610 [ 1363.263522][T16600] Read of size 8 at addr ffff888073000210 by task kworker/1:3/16600 [ 1363.271476][T16600] [ 1363.273785][T16600] CPU: 1 UID: 0 PID: 16600 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1363.273809][T16600] Tainted: [L]=SOFTLOCKUP [ 1363.273815][T16600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1363.273826][T16600] Workqueue: usb_hub_wq hub_event [ 1363.273847][T16600] Call Trace: [ 1363.273854][T16600] [ 1363.273860][T16600] dump_stack_lvl+0x100/0x190 [ 1363.273878][T16600] print_report+0x13d/0x4b0 [ 1363.273899][T16600] ? __virt_addr_valid+0x239/0x430 [ 1363.273918][T16600] ? media_device_unregister+0x59d/0x610 [ 1363.273933][T16600] kasan_report+0xdf/0x1d0 [ 1363.273949][T16600] ? media_device_unregister+0x59d/0x610 [ 1363.273967][T16600] media_device_unregister+0x59d/0x610 [ 1363.273982][T16600] em28xx_unregister_media_device+0x4e/0xe0 [ 1363.274006][T16600] em28xx_release_resources+0x79/0x1b0 [ 1363.274028][T16600] em28xx_usb_disconnect.cold+0x17d/0x253 [ 1363.274051][T16600] usb_unbind_interface+0x1dd/0x9e0 [ 1363.274075][T16600] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1363.274096][T16600] device_remove+0x12a/0x180 [ 1363.274116][T16600] device_release_driver_internal+0x44e/0x620 [ 1363.274132][T16600] bus_remove_device+0x2bc/0x560 [ 1363.274152][T16600] ? __pfx_bus_remove_device+0x10/0x10 [ 1363.274170][T16600] ? __pfx_device_remove_attrs+0x10/0x10 [ 1363.274192][T16600] device_del+0x376/0x9b0 [ 1363.274213][T16600] ? __pfx_device_del+0x10/0x10 [ 1363.274232][T16600] ? kobject_put+0xb9/0x640 [ 1363.274253][T16600] usb_disable_device+0x367/0x810 [ 1363.274273][T16600] usb_disconnect+0x2e2/0x9a0 [ 1363.274294][T16600] hub_event+0x1d0c/0x4af0 [ 1363.274318][T16600] ? __lock_acquire+0x4a5/0x2630 [ 1363.274335][T16600] ? do_raw_spin_unlock+0x145/0x1e0 [ 1363.274356][T16600] ? __pfx_hub_event+0x10/0x10 [ 1363.274374][T16600] ? assoc_array_gc+0xcc0/0x15d0 [ 1363.274395][T16600] ? rcu_is_watching+0x12/0xc0 [ 1363.274417][T16600] process_one_work+0xa0e/0x1980 [ 1363.274440][T16600] ? __pfx_process_one_work+0x10/0x10 [ 1363.274460][T16600] ? __pfx_hub_event+0x10/0x10 [ 1363.274479][T16600] worker_thread+0x5ef/0xe50 [ 1363.274499][T16600] ? __pfx_worker_thread+0x10/0x10 [ 1363.274518][T16600] ? kthread+0x13a/0x450 [ 1363.274533][T16600] ? __pfx_worker_thread+0x10/0x10 [ 1363.274551][T16600] kthread+0x370/0x450 [ 1363.274567][T16600] ? __pfx_kthread+0x10/0x10 [ 1363.274584][T16600] ret_from_fork+0x72b/0xd50 [ 1363.274603][T16600] ? __pfx_ret_from_fork+0x10/0x10 [ 1363.274620][T16600] ? __switch_to+0x800/0x1100 [ 1363.274641][T16600] ? __pfx_kthread+0x10/0x10 [ 1363.274658][T16600] ret_from_fork_asm+0x1a/0x30 [ 1363.274682][T16600] [ 1363.274688][T16600] [ 1363.523919][T16600] Allocated by task 10759: [ 1363.528310][T16600] kasan_save_stack+0x30/0x50 [ 1363.532977][T16600] kasan_save_track+0x14/0x30 [ 1363.537636][T16600] __kasan_kmalloc+0xaa/0xb0 [ 1363.542209][T16600] em28xx_v4l2_init.cold+0x94/0x3a40 [ 1363.547474][T16600] em28xx_init_extension+0x13a/0x200 [ 1363.552745][T16600] request_module_async+0x61/0x80 [ 1363.557748][T16600] process_one_work+0xa0e/0x1980 [ 1363.562667][T16600] worker_thread+0x5ef/0xe50 [ 1363.567241][T16600] kthread+0x370/0x450 [ 1363.571291][T16600] ret_from_fork+0x72b/0xd50 [ 1363.575864][T16600] ret_from_fork_asm+0x1a/0x30 [ 1363.580613][T16600] [ 1363.582914][T16600] Freed by task 10759: [ 1363.586955][T16600] kasan_save_stack+0x30/0x50 [ 1363.591621][T16600] kasan_save_track+0x14/0x30 [ 1363.596283][T16600] kasan_save_free_info+0x3b/0x70 [ 1363.601291][T16600] __kasan_slab_free+0x5f/0x80 [ 1363.606034][T16600] kfree+0x223/0x6c0 [ 1363.609909][T16600] kref_put.isra.0+0x53/0x75 [ 1363.614476][T16600] em28xx_v4l2_init.cold+0x280/0x3a40 [ 1363.619825][T16600] em28xx_init_extension+0x13a/0x200 [ 1363.625097][T16600] request_module_async+0x61/0x80 [ 1363.630097][T16600] process_one_work+0xa0e/0x1980 [ 1363.635014][T16600] worker_thread+0x5ef/0xe50 [ 1363.639589][T16600] kthread+0x370/0x450 [ 1363.643637][T16600] ret_from_fork+0x72b/0xd50 [ 1363.648207][T16600] ret_from_fork_asm+0x1a/0x30 [ 1363.652953][T16600] [ 1363.655254][T16600] The buggy address belongs to the object at ffff888073000000 [ 1363.655254][T16600] which belongs to the cache kmalloc-8k of size 8192 [ 1363.669282][T16600] The buggy address is located 528 bytes inside of [ 1363.669282][T16600] freed 8192-byte region [ffff888073000000, ffff888073002000) [ 1363.683139][T16600] [ 1363.685443][T16600] The buggy address belongs to the physical page: [ 1363.691829][T16600] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73000 [ 1363.700566][T16600] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1363.709039][T16600] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1363.716557][T16600] page_type: f5(slab) [ 1363.720520][T16600] raw: 00fff00000000040 ffff88813fe35280 dead000000000100 dead000000000122 [ 1363.729086][T16600] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1363.737658][T16600] head: 00fff00000000040 ffff88813fe35280 dead000000000100 dead000000000122 [ 1363.746319][T16600] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1363.754976][T16600] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1363.763633][T16600] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1363.772281][T16600] page dumped because: kasan: bad access detected [ 1363.778670][T16600] page_owner tracks the page as allocated [ 1363.784359][T16600] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5251, tgid 5251 (rcS), ts 38609580461, free_ts 19339902550 [ 1363.804133][T16600] post_alloc_hook+0x153/0x170 [ 1363.808888][T16600] get_page_from_freelist+0x11a6/0x33b0 [ 1363.814417][T16600] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1363.820296][T16600] new_slab+0xa6/0x6c0 [ 1363.824345][T16600] refill_objects+0x277/0x420 [ 1363.829004][T16600] __pcs_replace_empty_main+0x375/0x650 [ 1363.834536][T16600] __kmalloc_cache_noprof+0x493/0x6f0 [ 1363.839892][T16600] tomoyo_init_log+0xc4f/0x20c0 [ 1363.844725][T16600] tomoyo_supervisor+0x506/0x1340 [ 1363.849734][T16600] tomoyo_env_perm+0x191/0x200 [ 1363.854473][T16600] tomoyo_find_next_domain+0x13d7/0x2010 [ 1363.860082][T16600] tomoyo_bprm_check_security+0x12d/0x1d0 [ 1363.865786][T16600] security_bprm_check+0x87/0x1e0 [ 1363.870786][T16600] bprm_execve+0x845/0x1650 [ 1363.875268][T16600] do_execveat_common.isra.0+0x4a5/0x580 [ 1363.880880][T16600] __x64_sys_execve+0x93/0xd0 [ 1363.885541][T16600] page last free pid 1 tgid 1 stack trace: [ 1363.891317][T16600] __free_frozen_pages+0x747/0x1040 [ 1363.896499][T16600] free_contig_range+0xda/0x140 [ 1363.901329][T16600] destroy_args+0xa8/0x7a0 [ 1363.905728][T16600] debug_vm_pgtable+0x1d69/0x3490 [ 1363.910731][T16600] do_one_initcall+0x121/0x750 [ 1363.915479][T16600] kernel_init_freeable+0x6ea/0x7b0 [ 1363.920658][T16600] kernel_init+0x1f/0x1e0 [ 1363.924984][T16600] ret_from_fork+0x72b/0xd50 [ 1363.929557][T16600] ret_from_fork_asm+0x1a/0x30 [ 1363.934305][T16600] [ 1363.936611][T16600] Memory state around the buggy address: [ 1363.942217][T16600] ffff888073000100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1363.950253][T16600] ffff888073000180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1363.958289][T16600] >ffff888073000200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1363.966324][T16600] ^ [ 1363.970888][T16600] ffff888073000280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1363.978926][T16600] ffff888073000300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1363.986959][T16600] ================================================================== [ 1364.014492][T17188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1364.014723][T16600] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1364.014741][T16600] CPU: 1 UID: 0 PID: 16600 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1364.014764][T16600] Tainted: [L]=SOFTLOCKUP [ 1364.014770][T16600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1364.014781][T16600] Workqueue: usb_hub_wq hub_event [ 1364.014805][T16600] Call Trace: [ 1364.014811][T16600] [ 1364.014818][T16600] dump_stack_lvl+0x100/0x190 [ 1364.014838][T16600] vpanic+0x552/0x970 [ 1364.014854][T16600] ? __pfx_vpanic+0x10/0x10 [ 1364.014872][T16600] ? media_device_unregister+0x59d/0x610 [ 1364.014893][T16600] panic+0xd1/0xe0 [ 1364.014907][T16600] ? __pfx_panic+0x10/0x10 [ 1364.014922][T16600] ? media_device_unregister+0x59d/0x610 [ 1364.014937][T16600] ? preempt_schedule_common+0x42/0xc0 [ 1364.014958][T16600] check_panic_on_warn.cold+0x19/0x34 [ 1364.014975][T16600] end_report.part.0+0x3a/0x90 [ 1364.014996][T16600] kasan_report.cold+0xe/0x18 [ 1364.015018][T16600] ? media_device_unregister+0x59d/0x610 [ 1364.015036][T16600] media_device_unregister+0x59d/0x610 [ 1364.015054][T16600] em28xx_unregister_media_device+0x4e/0xe0 [ 1364.015079][T16600] em28xx_release_resources+0x79/0x1b0 [ 1364.015103][T16600] em28xx_usb_disconnect.cold+0x17d/0x253 [ 1364.015128][T16600] usb_unbind_interface+0x1dd/0x9e0 [ 1364.015153][T16600] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1364.015175][T16600] device_remove+0x12a/0x180 [ 1364.015198][T16600] device_release_driver_internal+0x44e/0x620 [ 1364.015216][T16600] bus_remove_device+0x2bc/0x560 [ 1364.015237][T16600] ? __pfx_bus_remove_device+0x10/0x10 [ 1364.015258][T16600] ? __pfx_device_remove_attrs+0x10/0x10 [ 1364.015282][T16600] device_del+0x376/0x9b0 [ 1364.015305][T16600] ? __pfx_device_del+0x10/0x10 [ 1364.015326][T16600] ? kobject_put+0xb9/0x640 [ 1364.015349][T16600] usb_disable_device+0x367/0x810 [ 1364.015372][T16600] usb_disconnect+0x2e2/0x9a0 [ 1364.015394][T16600] hub_event+0x1d0c/0x4af0 [ 1364.015421][T16600] ? __lock_acquire+0x4a5/0x2630 [ 1364.015441][T16600] ? do_raw_spin_unlock+0x145/0x1e0 [ 1364.015464][T16600] ? __pfx_hub_event+0x10/0x10 [ 1364.015484][T16600] ? assoc_array_gc+0xcc0/0x15d0 [ 1364.015506][T16600] ? rcu_is_watching+0x12/0xc0 [ 1364.015530][T16600] process_one_work+0xa0e/0x1980 [ 1364.015555][T16600] ? __pfx_process_one_work+0x10/0x10 [ 1364.015578][T16600] ? __pfx_hub_event+0x10/0x10 [ 1364.015599][T16600] worker_thread+0x5ef/0xe50 [ 1364.015622][T16600] ? __pfx_worker_thread+0x10/0x10 [ 1364.015642][T16600] ? kthread+0x13a/0x450 [ 1364.015660][T16600] ? __pfx_worker_thread+0x10/0x10 [ 1364.015678][T16600] kthread+0x370/0x450 [ 1364.015696][T16600] ? __pfx_kthread+0x10/0x10 [ 1364.015715][T16600] ret_from_fork+0x72b/0xd50 [ 1364.015735][T16600] ? __pfx_ret_from_fork+0x10/0x10 [ 1364.015755][T16600] ? __switch_to+0x800/0x1100 [ 1364.015782][T16600] ? __pfx_kthread+0x10/0x10 [ 1364.015801][T16600] ret_from_fork_asm+0x1a/0x30 [ 1364.015827][T16600] [ 1364.024666][T16600] Kernel Offset: disabled