[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.160' (ECDSA) to the list of known hosts. 2020/11/16 22:38:44 fuzzer started 2020/11/16 22:38:44 dialing manager at 10.128.0.26:40323 2020/11/16 22:38:45 syscalls: 3449 2020/11/16 22:38:45 code coverage: enabled 2020/11/16 22:38:45 comparison tracing: enabled 2020/11/16 22:38:45 extra coverage: enabled 2020/11/16 22:38:45 setuid sandbox: enabled 2020/11/16 22:38:45 namespace sandbox: enabled 2020/11/16 22:38:45 Android sandbox: /sys/fs/selinux/policy does not exist 2020/11/16 22:38:45 fault injection: enabled 2020/11/16 22:38:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/11/16 22:38:45 net packet injection: enabled 2020/11/16 22:38:45 net device setup: enabled 2020/11/16 22:38:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/11/16 22:38:45 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/11/16 22:38:45 USB emulation: enabled 2020/11/16 22:38:45 hci packet injection: enabled 2020/11/16 22:38:45 wifi device emulation: enabled 22:42:10 executing program 0: clock_gettime(0x0, &(0x7f0000001340)) 22:42:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x402c542b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cf15b12089d778675a6b40295af71da321139e"}) 22:42:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:42:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cf15b12089d778675a6b40295af71da321139e"}) 22:42:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 22:42:11 executing program 5: r0 = getpgrp(0xffffffffffffffff) pidfd_open(r0, 0x0) syzkaller login: [ 273.569260][ T8504] IPVS: ftp: loaded support on port[0] = 21 [ 273.810958][ T8506] IPVS: ftp: loaded support on port[0] = 21 [ 273.873390][ T8504] chnl_net:caif_netlink_parms(): no params data found [ 274.016302][ T8508] IPVS: ftp: loaded support on port[0] = 21 [ 274.087039][ T8504] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.094749][ T8504] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.103407][ T8504] device bridge_slave_0 entered promiscuous mode [ 274.143926][ T8506] chnl_net:caif_netlink_parms(): no params data found [ 274.162774][ T8504] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.176322][ T8504] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.189625][ T8504] device bridge_slave_1 entered promiscuous mode [ 274.270084][ T8504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.304384][ T8504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.340710][ T8510] IPVS: ftp: loaded support on port[0] = 21 [ 274.451644][ T8504] team0: Port device team_slave_0 added [ 274.493351][ T8504] team0: Port device team_slave_1 added [ 274.521844][ T8512] IPVS: ftp: loaded support on port[0] = 21 [ 274.531253][ T8506] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.545252][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.553029][ T8506] device bridge_slave_0 entered promiscuous mode [ 274.584976][ T8506] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.592088][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.602078][ T8506] device bridge_slave_1 entered promiscuous mode [ 274.629741][ T8504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.636955][ T8504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.663832][ T8504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.679697][ T8504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.687835][ T8504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.715428][ T8504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.771658][ T8506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.896902][ T8506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.991455][ T8504] device hsr_slave_0 entered promiscuous mode [ 275.000458][ T8504] device hsr_slave_1 entered promiscuous mode [ 275.028340][ T8508] chnl_net:caif_netlink_parms(): no params data found [ 275.056866][ T8572] IPVS: ftp: loaded support on port[0] = 21 [ 275.081931][ T8510] chnl_net:caif_netlink_parms(): no params data found [ 275.095239][ T8506] team0: Port device team_slave_0 added [ 275.125712][ T8506] team0: Port device team_slave_1 added [ 275.181120][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.188826][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.216566][ T8506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.252966][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.260557][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.286763][ T8506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.434827][ T8512] chnl_net:caif_netlink_parms(): no params data found [ 275.505529][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 275.514469][ T8510] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.521652][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.534242][ T8510] device bridge_slave_0 entered promiscuous mode [ 275.556685][ T8506] device hsr_slave_0 entered promiscuous mode [ 275.568599][ T8506] device hsr_slave_1 entered promiscuous mode [ 275.576240][ T8506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.584143][ T8506] Cannot create hsr debugfs directory [ 275.590082][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.598172][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.606312][ T8508] device bridge_slave_0 entered promiscuous mode [ 275.618109][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.625766][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.634270][ T8508] device bridge_slave_1 entered promiscuous mode [ 275.662724][ T8510] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.670347][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.678859][ T8510] device bridge_slave_1 entered promiscuous mode [ 275.725999][ T8508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.738430][ T8510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.749048][ T3003] Bluetooth: hci1: command 0x0409 tx timeout [ 275.782442][ T8508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.809945][ T8510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.867579][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.875330][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.883347][ T8512] device bridge_slave_0 entered promiscuous mode [ 275.918066][ T8508] team0: Port device team_slave_0 added [ 275.960287][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.970458][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.979911][ T8512] device bridge_slave_1 entered promiscuous mode [ 275.985827][ T3194] Bluetooth: hci2: command 0x0409 tx timeout [ 275.991614][ T8508] team0: Port device team_slave_1 added [ 276.014993][ T8510] team0: Port device team_slave_0 added [ 276.026114][ T8510] team0: Port device team_slave_1 added [ 276.032262][ T8504] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 276.086208][ T8512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.110268][ T8504] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 276.125332][ T8512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.135152][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.142106][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.169341][ T8508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.181879][ T8572] chnl_net:caif_netlink_parms(): no params data found [ 276.199555][ T8504] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 276.212123][ T8504] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 276.231973][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.239314][ T3003] Bluetooth: hci3: command 0x0409 tx timeout [ 276.243468][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.272408][ T8508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.290777][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.298412][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.325165][ T8510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.372588][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.379902][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.408297][ T8510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.423563][ T8512] team0: Port device team_slave_0 added [ 276.433228][ T8512] team0: Port device team_slave_1 added [ 276.464426][ T3194] Bluetooth: hci4: command 0x0409 tx timeout [ 276.526144][ T8508] device hsr_slave_0 entered promiscuous mode [ 276.533346][ T8508] device hsr_slave_1 entered promiscuous mode [ 276.541079][ T8508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.549431][ T8508] Cannot create hsr debugfs directory [ 276.569806][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.576957][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.604136][ T8512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.621324][ T8510] device hsr_slave_0 entered promiscuous mode [ 276.629882][ T8510] device hsr_slave_1 entered promiscuous mode [ 276.636795][ T8510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.644618][ T8510] Cannot create hsr debugfs directory [ 276.680045][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.688165][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.715911][ T8512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.814912][ T8512] device hsr_slave_0 entered promiscuous mode [ 276.822281][ T8512] device hsr_slave_1 entered promiscuous mode [ 276.830113][ T8512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.838524][ T8512] Cannot create hsr debugfs directory [ 276.844310][ T8572] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.851384][ T8572] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.861846][ T8572] device bridge_slave_0 entered promiscuous mode [ 276.868346][ T3003] Bluetooth: hci5: command 0x0409 tx timeout [ 276.877225][ T8572] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.885685][ T8572] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.893491][ T8572] device bridge_slave_1 entered promiscuous mode [ 276.959932][ T8506] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 277.010126][ T8572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.029603][ T8506] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 277.052033][ T8572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.068927][ T8506] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 277.149161][ T8506] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 277.231148][ T8572] team0: Port device team_slave_0 added [ 277.241647][ T8572] team0: Port device team_slave_1 added [ 277.265755][ T8510] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 277.313984][ T8510] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 277.361140][ T8510] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 277.386182][ T8510] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 277.405767][ T8572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.412787][ T8572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.440535][ T8572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.461891][ T8504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.497031][ T8572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.504014][ T8572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.532897][ T8572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.576174][ T8508] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 277.585082][ T5] Bluetooth: hci0: command 0x041b tx timeout [ 277.596282][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.610375][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.650488][ T8508] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 277.660542][ T8508] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 277.683966][ T8508] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 277.699350][ T8504] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.710533][ T8572] device hsr_slave_0 entered promiscuous mode [ 277.718904][ T8572] device hsr_slave_1 entered promiscuous mode [ 277.726135][ T8572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.733793][ T8572] Cannot create hsr debugfs directory [ 277.803302][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.813189][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.824622][ T3003] Bluetooth: hci1: command 0x041b tx timeout [ 277.831122][ T3194] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.838470][ T3194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.856731][ T8512] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 277.866574][ T8512] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 277.908283][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.916637][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.926218][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.940864][ T8882] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.948031][ T8882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.958755][ T8512] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 277.974568][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.007592][ T8512] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 278.026432][ T8506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.037773][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.046496][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.056901][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.068050][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.075643][ T3003] Bluetooth: hci2: command 0x041b tx timeout [ 278.109746][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.121468][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.163703][ T8504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.174401][ T8504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.205597][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.214009][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.224421][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.235638][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.243910][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.252726][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.272815][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.297765][ T8506] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.304804][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 278.327159][ T8510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.390448][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.401046][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.411020][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.419609][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.437499][ T8504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.445743][ T8572] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 278.468314][ T8510] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.476288][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.487520][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.496482][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.503530][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.513427][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.546344][ T5] Bluetooth: hci4: command 0x041b tx timeout [ 278.557450][ T8572] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 278.572439][ T8572] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 278.582169][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.592369][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.601913][ T3194] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.609088][ T3194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.617087][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.626405][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.635387][ T3194] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.642482][ T3194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.650525][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.659699][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.668643][ T3194] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.675821][ T3194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.683847][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.716194][ T8572] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 278.730989][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.740668][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.749661][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.759433][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.774376][ T8508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.801824][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.811702][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.822047][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.863676][ T8504] device veth0_vlan entered promiscuous mode [ 278.878776][ T8508] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.887693][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.901430][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.910458][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.923071][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.932213][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.941674][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.950836][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.959637][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.968821][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.977611][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.987687][ T5] Bluetooth: hci5: command 0x041b tx timeout [ 279.015317][ T8510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.027538][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.039432][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.048523][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.057016][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.066050][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.074832][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.083471][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.092648][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.119500][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.133517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.142942][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.158990][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.168218][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.175355][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.185662][ T8504] device veth1_vlan entered promiscuous mode [ 279.193158][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.235517][ T8506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.246317][ T8506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.268859][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.279192][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.289842][ T3194] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.297284][ T3194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.305426][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.313767][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.323203][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.331833][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.352313][ T8510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.362529][ T8512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.381612][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.390316][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.399612][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.407344][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.416656][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.481725][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.494781][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.503477][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.512574][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.520685][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.529752][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.538680][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.547765][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.563219][ T8572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.577364][ T8512] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.601868][ T8506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.613920][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.622425][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.630601][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.638728][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.648256][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.664794][ T9457] Bluetooth: hci0: command 0x040f tx timeout [ 279.669310][ T8572] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.694322][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.702192][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.711358][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.721649][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.730549][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.737733][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.746572][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.755697][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.781211][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.819328][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.828799][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.839462][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.848446][ T3194] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.855640][ T3194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.864851][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.873427][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.882586][ T3194] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.889733][ T3194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.897833][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.907239][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.914132][ T9457] Bluetooth: hci1: command 0x040f tx timeout [ 279.921035][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.930009][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.939370][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.977865][ T8504] device veth0_macvtap entered promiscuous mode [ 279.989115][ T8510] device veth0_vlan entered promiscuous mode [ 280.033517][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.041898][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.057601][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.067502][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.076129][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.086781][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.096153][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.106111][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.115400][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.123770][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.133295][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.142197][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.152033][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.154827][ T9457] Bluetooth: hci2: command 0x040f tx timeout [ 280.160748][ T9777] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.173139][ T9777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.195278][ T8512] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.208512][ T8512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.239049][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.247694][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.258762][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.268989][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.278032][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.289409][ T8504] device veth1_macvtap entered promiscuous mode [ 280.308790][ T8506] device veth0_vlan entered promiscuous mode [ 280.336911][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.345702][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.353853][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.367748][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.385113][ T5] Bluetooth: hci3: command 0x040f tx timeout [ 280.392681][ T8504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.405863][ T8510] device veth1_vlan entered promiscuous mode [ 280.421523][ T8504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.442077][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.451269][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.459262][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.468878][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.477004][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.486284][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.495531][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.505669][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.515168][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.523892][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.532397][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.548835][ T8506] device veth1_vlan entered promiscuous mode [ 280.561947][ T8504] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.572672][ T8504] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.581980][ T8504] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.591829][ T8504] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.625208][ T5] Bluetooth: hci4: command 0x040f tx timeout [ 280.627796][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.640113][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.649995][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.659069][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.668330][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.677608][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.686470][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.695362][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.703713][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.713401][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.727910][ T8508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.768547][ T8512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.777067][ T8572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.874715][ T8510] device veth0_macvtap entered promiscuous mode [ 280.899895][ T8510] device veth1_macvtap entered promiscuous mode [ 280.916176][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.925331][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.934723][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.943192][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 281.028720][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 281.038195][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.059630][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.084928][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 281.096815][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.106802][ T5] Bluetooth: hci5: command 0x040f tx timeout [ 281.134905][ T8506] device veth0_macvtap entered promiscuous mode [ 281.163141][ T8508] device veth0_vlan entered promiscuous mode [ 281.180968][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 281.200463][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.210798][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.219772][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.229694][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.251327][ T8506] device veth1_macvtap entered promiscuous mode [ 281.263522][ T8572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.296575][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 281.305360][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.313199][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.322947][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.334243][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.349047][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.369867][ T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.386053][ T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.409583][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.418283][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.428006][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.446540][ T8508] device veth1_vlan entered promiscuous mode [ 281.457647][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.474542][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.486991][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.507245][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.529263][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.540140][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.550209][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.569805][ T8510] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.582175][ T8510] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.591783][ T8510] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.600978][ T8510] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.635543][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.656083][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.667004][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.678368][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.690544][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.726837][ T8512] device veth0_vlan entered promiscuous mode [ 281.741768][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.744095][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.751381][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.760092][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.774843][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.783183][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.791915][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.799927][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 281.812418][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.824582][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.837563][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.848289][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.861394][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.875420][ T8506] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.884703][ T8506] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.893990][ T8506] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.902702][ T8506] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.924488][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.932416][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.941128][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 281.950312][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.959906][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.969370][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.993938][ T5] Bluetooth: hci1: command 0x0419 tx timeout [ 282.043445][ T8508] device veth0_macvtap entered promiscuous mode 22:42:20 executing program 0: socket(0x2, 0x0, 0xffffff7f) [ 282.085607][ T8512] device veth1_vlan entered promiscuous mode [ 282.128097][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 282.138431][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 282.164917][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 22:42:20 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000540)={0x4, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0, 0x5c1}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000200)='ns/time\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x12) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000340)="3291f963e4b6b68aa565a24b3a0025ba10b832f0447e8c69d74930ee9a9853de6747d4714982ad369bbe631a4149562ef2aed6f36f2101edffb2c5cc54775720738fe442f26446aa40e04817905a97f420d5b7bdba067fd45e8e56aa10abd6c9f895a072eed89c44b42132771f1684", &(0x7f0000000640)=""/214}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ab}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @ldst={0x0, 0x0, 0x6, 0x0, 0xf}, @generic={0x0, 0x6, 0x9, 0x14, 0x9}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x63, &(0x7f00000002c0)=""/99, 0x0, 0x1, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x3, 0x4, 0x4}, 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x400c000) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000500)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r4, 0x0, 0x0, &(0x7f0000000300)}, 0x30) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x70, 0x81, 0x1, 0x0, 0x1f, 0x0, 0x9, 0x20, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x1800, 0x1, 0x8, 0x2, 0x2, 0x0, 0x81}, r3, 0xb, 0xffffffffffffffff, 0x7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) [ 282.184882][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.235150][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 282.287872][ T8508] device veth1_macvtap entered promiscuous mode [ 282.336415][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 282.349572][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 282.369729][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 282.385274][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 282.393819][ C1] hrtimer: interrupt took 88895 ns [ 282.441985][ T245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.454638][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.462630][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.494004][ T245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.514591][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 282.545417][ T8572] device veth0_vlan entered promiscuous mode [ 282.551735][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 282.590237][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 282.613758][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.623609][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 22:42:20 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000540)={0x4, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0, 0x5c1}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000200)='ns/time\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x12) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000340)="3291f963e4b6b68aa565a24b3a0025ba10b832f0447e8c69d74930ee9a9853de6747d4714982ad369bbe631a4149562ef2aed6f36f2101edffb2c5cc54775720738fe442f26446aa40e04817905a97f420d5b7bdba067fd45e8e56aa10abd6c9f895a072eed89c44b42132771f1684", &(0x7f0000000640)=""/214}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ab}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @ldst={0x0, 0x0, 0x6, 0x0, 0xf}, @generic={0x0, 0x6, 0x9, 0x14, 0x9}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x63, &(0x7f00000002c0)=""/99, 0x0, 0x1, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x3, 0x4, 0x4}, 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x400c000) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000500)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r4, 0x0, 0x0, &(0x7f0000000300)}, 0x30) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x70, 0x81, 0x1, 0x0, 0x1f, 0x0, 0x9, 0x20, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x1800, 0x1, 0x8, 0x2, 0x2, 0x0, 0x81}, r3, 0xb, 0xffffffffffffffff, 0x7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) [ 282.704397][ T3003] Bluetooth: hci4: command 0x0419 tx timeout [ 282.722281][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.746596][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 282.763541][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.790725][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.868946][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 282.886817][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 22:42:21 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000540)={0x4, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0, 0x5c1}, r1, 0xd, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000200)='ns/time\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x12) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000340)="3291f963e4b6b68aa565a24b3a0025ba10b832f0447e8c69d74930ee9a9853de6747d4714982ad369bbe631a4149562ef2aed6f36f2101edffb2c5cc54775720738fe442f26446aa40e04817905a97f420d5b7bdba067fd45e8e56aa10abd6c9f895a072eed89c44b42132771f1684", &(0x7f0000000640)=""/214}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ab}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @ldst={0x0, 0x0, 0x6, 0x0, 0xf}, @generic={0x0, 0x6, 0x9, 0x14, 0x9}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x63, &(0x7f00000002c0)=""/99, 0x0, 0x1, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x3, 0x4, 0x4}, 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x400c000) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000500)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r4, 0x0, 0x0, &(0x7f0000000300)}, 0x30) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x70, 0x81, 0x1, 0x0, 0x1f, 0x0, 0x9, 0x20, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x1800, 0x1, 0x8, 0x2, 0x2, 0x0, 0x81}, r3, 0xb, 0xffffffffffffffff, 0x7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000)) [ 282.922938][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 282.935937][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 282.960542][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 282.973011][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.992058][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 283.002690][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.028816][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 283.053815][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.080481][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.126326][ T8572] device veth1_vlan entered promiscuous mode [ 283.126561][ T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.164583][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 283.173571][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 283.216061][ T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.246418][ T8512] device veth0_macvtap entered promiscuous mode [ 283.253062][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 283.274462][ T8508] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.285938][ T8508] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.299485][ T8508] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.311725][ T8508] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 22:42:21 executing program 0: perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x20000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 283.347772][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.363094][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.364813][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 283.392327][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 283.409791][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 283.433348][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.456803][ T8512] device veth1_macvtap entered promiscuous mode [ 283.478871][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:42:21 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00'}) socketpair(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) [ 283.534268][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 283.543077][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.564578][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 283.588694][ T8572] device veth0_macvtap entered promiscuous mode [ 283.640765][ T8572] device veth1_macvtap entered promiscuous mode 22:42:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bond_slave_1\x00'}) [ 283.684780][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 283.743313][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 22:42:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x4004743d, &(0x7f0000000680)='&@[\x00') [ 283.783670][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 283.811572][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.840310][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 283.860380][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.881494][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 283.904525][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.930008][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.995153][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 284.003402][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 284.024956][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.044895][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.067499][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 284.087088][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.098284][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 284.110115][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.120925][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 284.133006][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.144122][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 284.156205][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.169160][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.185531][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.250003][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.296904][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.308091][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.318003][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 284.335784][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 284.351312][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.361758][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 284.373155][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.431351][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 284.453309][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.475854][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 284.502606][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.513012][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 284.530975][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.543395][ T8572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.576988][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.589075][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.605713][ T8512] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.622556][ T8512] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.636717][ T8512] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.645894][ T8512] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.661704][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 284.674567][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.688075][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 284.700007][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.710636][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 284.729343][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.740131][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 284.750881][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.761227][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 284.772083][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.799513][ T8572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.810320][ T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.820872][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.830991][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.833778][ T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.852593][ T8572] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.873728][ T8572] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.882460][ T8572] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.904634][ T8572] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.944097][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 22:42:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect(r0, 0x0, 0x700) 22:42:23 executing program 3: r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="2e00000031000d08d22780648c6394fb0124fc0010000b400c000200053582c137153e370900018025643000d1bd", 0x2e}], 0x1}, 0x0) [ 285.099825][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.129859][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.179493][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 285.214045][ T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.222804][ T9974] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 285.236663][ T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.259896][ T245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.280293][ T245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.298517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 285.350514][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 285.389555][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.408554][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.435257][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 22:42:23 executing program 4: pipe(&(0x7f0000004100)={0xffffffffffffffff}) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) 22:42:23 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time_for_children\x00') 22:42:23 executing program 0: openat$cgroup_type(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.type\x00', 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000500)={{0x0, 0x81, 0x0, 0x0, 0x0, 0x9e4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001a00)='batadv\x00') ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 22:42:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 22:42:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x19, 0x0, 0x0, 0xa49e}, 0x40) 22:42:23 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nbd(0x0) connect$x25(r0, &(0x7f0000001f80)={0x9, @null=' \x00'}, 0x12) 22:42:23 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x9, 0x0, &(0x7f0000001980)) 22:42:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', 0x0}) 22:42:23 executing program 3: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) 22:42:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002500)=[{&(0x7f00000005c0)=@in6={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000600)="a9", 0x1}], 0x1, &(0x7f00000008c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x3}}], 0x30}], 0x1, 0x0) 22:42:23 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f00000000c0)=0x54) 22:42:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x12) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 22:42:23 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, 0x0}, 0x78) 22:42:24 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x12, 0x0, &(0x7f0000001980)) 22:42:24 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, 0x0, 0x0) 22:42:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x1) 22:42:24 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:42:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$sock(r0, &(0x7f0000001400)={&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "251066e0cec82198ee774b13998fa5376fcc05ba431d621f6a722379ec852bd97e3c91fed835e3aafe6b4595a0bfca9a7d9561b449990aa965ee1a800813a2"}, 0x80, 0x0, 0x0, &(0x7f00000013c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 22:42:24 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, 0xc) 22:42:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180), &(0x7f00000001c0)=0xc) 22:42:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000000)=@raw=[@map_val], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:42:24 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x17, 0x0, &(0x7f0000001980)) 22:42:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r1, 0x309}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 22:42:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) 22:42:24 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 22:42:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000), 0x8) 22:42:24 executing program 2: read$usbmon(0xffffffffffffffff, 0x0, 0x0) 22:42:24 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 22:42:24 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$sock(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[@timestamping={{0x14}}], 0x18}, 0x0) 22:42:24 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1a9b0}, 0x78) 22:42:24 executing program 4: syz_mount_image$vxfs(&(0x7f0000000200)='vxfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0x7c0, 0x40}], 0x0, &(0x7f0000001380)) 22:42:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xc0a, &(0x7f0000000180)={0x0, 0x8000, 0x0, 0x0, 0x3b7}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffff}, {}, {0x4}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x492492492492570, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000018c0)={&(0x7f00000002c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001800)=[{0x0}, {&(0x7f00000013c0)=""/139, 0x8b}, {&(0x7f0000001580)=""/143, 0x8f}, {&(0x7f0000001640)=""/82, 0x52}, {&(0x7f0000001900)=""/102400, 0x19000}, {&(0x7f0000001700)=""/238, 0xee}], 0x44}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x1000000) 22:42:24 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f00000001c0), 0x4) 22:42:24 executing program 0: r0 = openat$uinput(0xffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0xc00c55ca, 0x0) 22:42:24 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x4b, 0x2b, 0x0, @dev, @local, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@dev]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 286.601309][T10069] vxfs: WRONG superblock magic 53532fdd at 1 22:42:24 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04db07000000000001090224000100000000090400000903000001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 286.662767][T10069] vxfs: unable to read disk superblock at 8 [ 286.670120][T10069] vxfs: can't find superblock. 22:42:24 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)) [ 286.703157][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:42:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) [ 286.753571][T10069] vxfs: WRONG superblock magic 53532fdd at 1 [ 286.761643][T10069] vxfs: unable to read disk superblock at 8 [ 286.820281][T10069] vxfs: can't find superblock. [ 286.861199][T10090] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 286.916515][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:42:25 executing program 2: read$usbmon(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f00000008c0)=[{0x0, 0x0, 0xa6a47a5}]) 22:42:25 executing program 4: symlinkat(&(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x0) open$dir(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) 22:42:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="200000000001000050000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef1a620e34103e2fa9339f2609c9a7ffd662b4a53f5e0d45af9202629037faa7607a5dc3add7c0ac04f15dbaa7", 0x66, 0x400}], 0x0, &(0x7f0000000140)) 22:42:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xc0a, &(0x7f0000000180)={0x0, 0x8000, 0x0, 0x0, 0x3b7}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffff}, {}, {0x4}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x492492492492570, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000018c0)={&(0x7f00000002c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001800)=[{0x0}, {&(0x7f00000013c0)=""/139, 0x8b}, {&(0x7f0000001580)=""/143, 0x8f}, {&(0x7f0000001640)=""/82, 0x52}, {&(0x7f0000001900)=""/102400, 0x19000}, {&(0x7f0000001700)=""/238, 0xee}], 0x44}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x1000000) 22:42:25 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300)) [ 287.084189][ T9457] usb 6-1: new high-speed USB device number 2 using dummy_hcd 22:42:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x17, 0x0, 0x0) [ 287.222566][T10114] BFS-fs: bfs_fill_super(): WARNING: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 287.242468][T10113] EXT4-fs warning (device loop0): ext4_fill_super:4098: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 287.270391][T10114] BFS-fs: bfs_fill_super(): Last block not available on loop1: 1507328 [ 287.286730][T10115] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.309504][T10113] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 287.374973][ T9457] usb 6-1: Using ep0 maxpacket: 16 [ 287.456971][T10114] BFS-fs: bfs_fill_super(): WARNING: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 287.487095][T10113] EXT4-fs warning (device loop0): ext4_fill_super:4098: metadata_csum and uninit_bg are redundant flags; please run fsck. 22:42:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x491282, 0x0) socket$inet6(0xa, 0x3, 0x6) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000780)="c3", 0x1}], 0x1, 0x4000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000001f40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 287.507036][ T9457] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.535812][T10114] BFS-fs: bfs_fill_super(): Last block not available on loop1: 1507328 [ 287.539210][ T9457] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 22:42:25 executing program 4: sysfs$2(0x2, 0x87, 0x0) [ 287.558139][ T9457] usb 6-1: New USB device found, idVendor=045e, idProduct=07db, bcdDevice= 0.00 [ 287.567504][ T9457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.575778][T10113] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 287.671510][ T9457] usb 6-1: config 0 descriptor?? 22:42:25 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300)) [ 287.853232][T10142] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 288.008106][T10152] BFS-fs: bfs_fill_super(): WARNING: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 288.024091][ T9457] usb 6-1: string descriptor 0 read error: -71 [ 288.077882][ T9457] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 288.079202][T10152] BFS-fs: bfs_fill_super(): Last block not available on loop1: 1507328 [ 288.089453][ T9457] usb 6-1: USB disconnect, device number 2 [ 288.763323][ T9777] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 289.013400][ T9777] usb 6-1: Using ep0 maxpacket: 16 [ 289.143512][ T9777] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.189200][ T9777] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 289.218190][ T9777] usb 6-1: New USB device found, idVendor=045e, idProduct=07db, bcdDevice= 0.00 [ 289.243856][ T9777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.259671][ T9777] usb 6-1: config 0 descriptor?? 22:42:27 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x60}}, 0x0) 22:42:27 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 22:42:27 executing program 4: r0 = openat$uinput(0xffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x402c582b, 0x0) 22:42:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x491282, 0x0) socket$inet6(0xa, 0x3, 0x6) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000780)="c3", 0x1}], 0x1, 0x4000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000001f40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 22:42:27 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300)) 22:42:27 executing program 3: r0 = socket$inet(0xa, 0x80805, 0x0) socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @rand_addr=0xac14ffbb}}}, &(0x7f0000000180)=0x9c) [ 289.593304][ T9777] usb 6-1: string descriptor 0 read error: -71 [ 289.663773][ T9777] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 289.730955][ T9777] usb 6-1: USB disconnect, device number 3 [ 289.761581][T10198] BFS-fs: bfs_fill_super(): WARNING: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 289.804282][T10198] BFS-fs: bfs_fill_super(): Last block not available on loop1: 1507328 22:42:27 executing program 5: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x7}, 0xc) 22:42:27 executing program 0: r0 = openat$uinput(0xffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x402c5839, 0x0) 22:42:27 executing program 4: pselect6(0x40, &(0x7f0000000380)={0x7}, &(0x7f00000003c0)={0x1}, 0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={[0x8]}, 0x8}) 22:42:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="00fffbffff00000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000040)) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="9f090000000000000401087f3321a53af24e4c38cefda9395de25d64f4cae992e8e2730340190aa31c11d196c5da4df6c0fbf9a7d2535d72fbbc4a7f14e79fb9c910fc00"/88], 0x58) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) ioctl$VT_OPENQRY(r1, 0x5600, 0x0) ioctl$TIOCCONS(r1, 0x541d) socket(0x2, 0x0, 0x100000001) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='fdinfo/3\x00') read$usbfs(r2, 0x0, 0x0) openat$proc_capi20(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) [ 289.900047][T10201] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 22:42:28 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300)) 22:42:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 22:42:28 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) recvmmsg(r0, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 22:42:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000005300)={0x0, 0x0, &(0x7f0000005280)=[{&(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x316}, 0x0) [ 290.170730][T10229] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. 22:42:28 executing program 0: select(0x40, &(0x7f0000000140), &(0x7f0000000180)={0x101}, 0x0, 0x0) [ 290.227522][T10229] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.3'. [ 290.229016][T10231] BFS-fs: bfs_fill_super(): WARNING: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway 22:42:28 executing program 0: perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:42:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000980)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) [ 290.405533][T10231] BFS-fs: bfs_fill_super(): Last block not available on loop1: 1507328 22:42:28 executing program 5: r0 = socket(0xa, 0x3, 0xff) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 22:42:28 executing program 2: r0 = socket(0x29, 0x5, 0x0) write$nbd(r0, 0x0, 0x46) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_deladdr={0x18}, 0x18}}, 0x0) [ 290.455403][T10229] bridge0: port 3(veth3) entered blocking state [ 290.485588][T10229] bridge0: port 3(veth3) entered disabled state [ 290.545970][T10229] device veth3 entered promiscuous mode 22:42:28 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x4a481, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x40000) 22:42:28 executing program 1: syz_mount_image$bfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300)) 22:42:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003740)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) 22:42:28 executing program 2: r0 = socket(0xa, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 22:42:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x8}, 0x0, 0x0, 0x0) 22:42:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="00fffbffff00000008000a000d000000250012000800010076657468"], 0x200}}, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000040)) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="9f090000000000000401087f3321a53af24e4c38cefda9395de25d64f4cae992e8e2730340190aa31c11d196c5da4df6c0fbf9a7d2535d72fbbc4a7f14e79fb9c910fc00"/88], 0x58) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) ioctl$VT_OPENQRY(r1, 0x5600, 0x0) ioctl$TIOCCONS(r1, 0x541d) socket(0x2, 0x0, 0x100000001) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='fdinfo/3\x00') read$usbfs(r2, 0x0, 0x0) openat$proc_capi20(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) 22:42:28 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x4a481, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x40000) 22:42:28 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000004880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000004900)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x11c, 0x5, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x20, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xe0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}]}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}]}, @NL80211_PMSR_ATTR_PEERS={0xd8c, 0x5, 0x0, 0x1, [{0x47c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x130, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x154, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0x544, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x98, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xc4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x208, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x16c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x27c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x118, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x90, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}]}]}]}]}, 0xec4}}, 0x2000040) 22:42:29 executing program 1: syz_mount_image$bfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300)) [ 290.923422][T10286] binder: 10282:10286 ioctl c0306201 0 returned -14 [ 290.955895][T10290] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. 22:42:29 executing program 4: r0 = socket(0x23, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) [ 290.966833][T10290] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.3'. 22:42:29 executing program 0: r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) [ 291.007889][T10290] bridge0: port 4(veth5) entered blocking state [ 291.021001][T10290] bridge0: port 4(veth5) entered disabled state [ 291.040579][T10290] device veth5 entered promiscuous mode 22:42:29 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b5a80c7a"}}) 22:42:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0x0) sendmsg$unix(r0, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003740)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee00}}}], 0x20}, 0x0) 22:42:29 executing program 1: syz_mount_image$bfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300)) 22:42:29 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0xc0001) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x21) 22:42:29 executing program 4: r0 = socket(0x23, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x40012160) [ 291.244551][T10290] syz-executor.3 (10290) used greatest stack depth: 22504 bytes left [ 291.674142][T10336] binder: 10282:10336 ioctl c0306201 0 returned -14 22:42:29 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000004880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000004900)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 22:42:29 executing program 0: r0 = socket(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "827be1d8cf98fd8e70cbe6aceea7e8895c9b74b276b1e7c97de9f35d89dc348c879093fc076048a71aba840d4585b66e115d1ffbeb408675fa74d0fe061acd"}, 0x80, 0x0}, 0x0) 22:42:29 executing program 2: r0 = socket(0xa, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x0) 22:42:29 executing program 4: r0 = getpgrp(0x0) r1 = getpid() tgkill(r1, r0, 0x21) 22:42:29 executing program 3: r0 = socket(0xa, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 22:42:29 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300)) 22:42:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000000), 0x0) 22:42:29 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300)) 22:42:29 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) 22:42:30 executing program 2: r0 = socket(0x23, 0x2, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000840)={&(0x7f0000000100), 0xc, &(0x7f0000000800)={0x0}}, 0x0) 22:42:30 executing program 0: r0 = socket(0x23, 0x5, 0x0) write$nbd(r0, 0x0, 0x46) 22:42:30 executing program 5: r0 = getpid() r1 = getpid() tgkill(r0, r1, 0x1c) 22:42:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001880)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = getpid() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001880)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001880)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001880)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x50}, 0x0) 22:42:30 executing program 4: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) 22:42:30 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-control\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r1}}) 22:42:30 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) 22:42:30 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300)) 22:42:30 executing program 3: r0 = semget(0x2, 0x0, 0x0) semtimedop(r0, &(0x7f0000000100)=[{}], 0x1, 0x0) 22:42:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff000000000c000100736b627072696f"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 22:42:30 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000240), 0x8) ioctl$LOOP_SET_FD(r0, 0x5452, 0xffffffffffffffff) 22:42:30 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x0, 0x0) read$midi(r0, &(0x7f0000000180)=""/127, 0x7f) 22:42:30 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}]}) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 22:42:30 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) readahead(r0, 0x0, 0x0) [ 292.427086][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 292.462554][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 22:42:30 executing program 5: keyctl$reject(0xb, 0x0, 0x0, 0x0, 0x0) 22:42:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff000000000c000100736b627072696f"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) 22:42:30 executing program 2: keyctl$reject(0x7, 0x0, 0x0, 0x0, 0x0) 22:42:30 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010300)) 22:42:30 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-control\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040), 0xc, 0x0) 22:42:30 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-control\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-control\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 22:42:30 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x5, 0x0) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x3) 22:42:30 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x18}, 0xc) [ 292.759120][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 22:42:30 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0) 22:42:30 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-control\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 22:42:30 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_security(0x11, r0, &(0x7f0000000000)=""/110, 0x6e) 22:42:30 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010300)) 22:42:30 executing program 4: r0 = socket(0x18, 0x0, 0x1) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={0x0}}, 0x0) 22:42:31 executing program 2: r0 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) fspick(r0, &(0x7f0000000040)='./file0\x00', 0x0) 22:42:31 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x2, 0x0) 22:42:31 executing program 0: fsopen(&(0x7f0000000000)='adfs\x00', 0x0) 22:42:31 executing program 3: syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1f}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000200)={0xa}, 0x0, 0x0}) 22:42:31 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010300)) 22:42:31 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 22:42:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @generic={0x0, "e85282a934dfeec16928509290e1"}, @phonet, @xdp, 0x9}) 22:42:31 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}], 0x0, &(0x7f0000010300)) 22:42:31 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 22:42:31 executing program 5: openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x10140, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0xa2600, 0x0) 22:42:31 executing program 4: r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000e80)='/dev/dlm-monitor\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 22:42:31 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x541b, 0x0) 22:42:31 executing program 5: socket(0xa, 0x6, 0x3) [ 293.414797][T10459] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1 22:42:31 executing program 2: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 22:42:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x541b, 0x0) [ 293.482905][ T5] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 293.843040][ T5] usb 4-1: not running at top speed; connect to a high speed hub [ 294.120034][ T5] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.40 [ 294.139121][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.171191][ T5] usb 4-1: Product: syz [ 294.187513][ T5] usb 4-1: Manufacturer: syz [ 294.192701][ T5] usb 4-1: SerialNumber: syz [ 294.513508][ T5] usbhid 4-1:1.0: can't add hid device: -22 [ 294.519950][ T5] usbhid: probe of 4-1:1.0 failed with error -22 [ 294.604247][ T5] usb 4-1: USB disconnect, device number 2 [ 295.264476][ T9457] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 295.612910][ T9457] usb 4-1: not running at top speed; connect to a high speed hub [ 295.882891][ T9457] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.40 [ 295.891957][ T9457] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.900385][ T9457] usb 4-1: Product: syz [ 295.908396][ T9457] usb 4-1: Manufacturer: syz [ 295.913431][ T9457] usb 4-1: SerialNumber: syz 22:42:34 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) 22:42:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000b4c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee01}}}], 0x18}], 0x1, 0x0) 22:42:34 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}], 0x0, &(0x7f0000010300)) 22:42:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000002180)={0x9}, 0x40) 22:42:34 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xb1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 22:42:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000b800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x18}}, @rights={{0xc}}], 0x24}], 0x1, 0x0) [ 296.202918][ T9457] usbhid 4-1:1.0: can't add hid device: -22 [ 296.209194][ T9457] usbhid: probe of 4-1:1.0 failed with error -22 22:42:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000039c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5}]}, 0x24}}, 0x0) [ 296.269288][ T9457] usb 4-1: USB disconnect, device number 3 [ 296.279956][T10524] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1 22:42:34 executing program 4: r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 22:42:34 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 22:42:34 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}], 0x0, &(0x7f0000010300)) 22:42:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'veth1_to_batadv\x00', @ifru_map}) 22:42:34 executing program 4: openat$dlm_monitor(0xffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x410203, 0x0) 22:42:34 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000026c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 22:42:34 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000027c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) [ 296.513688][ T8882] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 296.528381][T10552] veth1_to_batadv: mtu less than device minimum [ 296.542167][T10548] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1 22:42:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000003340)={0x0, 0x0, 0x0, &(0x7f0000003140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 22:42:34 executing program 1: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {0x0, 0x0, 0x9}], 0x0, &(0x7f0000010300)) [ 296.792871][ T8882] usb 3-1: Using ep0 maxpacket: 32 [ 296.811370][T10565] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1 [ 296.822731][ T9777] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 296.913039][ T8882] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 297.093292][ T8882] usb 3-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.40 [ 297.102384][ T8882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.127670][ T8882] usb 3-1: Product: syz [ 297.144504][ T8882] usb 3-1: Manufacturer: syz [ 297.161884][ T8882] usb 3-1: SerialNumber: syz [ 297.201419][ T9777] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 297.217151][ T8882] usbhid 3-1:1.0: couldn't find an input interrupt endpoint