last executing test programs: 25.30616272s ago: executing program 4 (id=5775): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b80)={0x1078, r2, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x11}}}}, [@NL80211_PMSR_ATTR_PEERS={0x20, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1038, 0x5, 0x0, 0x1, [{0x544, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x74000}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x21c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x138, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc09}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc0}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffb}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x23}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfc00}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x65}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3c9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}]}]}, {0x380, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x314, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7e0}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x34}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x201}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xaf8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x76}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x317}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x5a0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x144, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xaf}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x31c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xfc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x5c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d7}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}]}]}]}, 0x1078}, 0x1, 0x0, 0x0, 0x50}, 0x8000) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}}], 0x1, 0x0, 0x0) 24.374276756s ago: executing program 4 (id=5786): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x60003, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c000380140001"], 0xe8}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000000)={0xab00000000000000}) 23.756139113s ago: executing program 4 (id=5788): socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x6, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = inotify_init1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) dup(r0) socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x4c, 0x10, 0x609, 0x5000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 23.117813542s ago: executing program 4 (id=5796): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x404000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000080)=0xf1b, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x8, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x0, 0xeeee8000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="66baf80cb8de8ae2878befacefacfc0c66b8000166ef450f01cac4023d06f53e0f01c86b760b00f0418047f65d8f69f812c6640f0f6fce94664a0f38f6eac74424000001c0fec7442402028a0000c7442406000000000f011424", 0x5a}], 0x1, 0x23, 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x14000c000, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0xa2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}}) read$FUSE(r5, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f00000001c0)={0x50, 0x0, r6}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x78, 0x0, 0x0, {0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) unshare(0x24000600) fstat(r7, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r9, 0x40189429, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020}, 0x31) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000140)={0xf000, 0x2000}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r10, &(0x7f0000000000)=0x729, 0x12) syz_open_dev$sndctrl(&(0x7f0000000240), 0x3, 0x98480) 23.117422506s ago: executing program 1 (id=5797): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c00018006000600800a000300010280f9"], 0x124}}, 0xc000) 22.923615859s ago: executing program 1 (id=5800): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xe703) 22.689222304s ago: executing program 1 (id=5803): r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r1 = fsmount(r0, 0x1, 0x6) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'cpu'}, {0x2d, 'net_prio'}, {0x2d, 'cpu'}]}, 0x14) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x2, 0x2, 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x3, 0x1, 0x7, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000440)={&(0x7f0000000240)=[r4], 0x1, r5, r6, 0x5, 0xc8a, 0x0, 0x1, {0x4, 0x0, 0x1ff, 0x9, 0x2, 0x6, 0xc2f7, 0x7, 0x537e, 0x6, 0x7d3d, 0x6, 0x5, 0x3, "89be00f8747868940604f5c46ba543842a2dfb292787c6311673ac611ba27a7d"}}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x3, r3}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000005c0)=r7, 0x4) (async) r8 = openat$kvm(0xffffff9c, &(0x7f0000000600), 0x400080, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000640)) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000001f40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001f00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x2, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x134, 0xb, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_USERDATA={0xf8, 0xd, 0x1, 0x0, "61e773561f93900e0dc6dd2da251eb8639fe00a8b4fa1dc2486f6401867f47479e31754eb396c1c97b88cc6c3d1b14f5c4ee54263ee5fa3c7582262cb8109f87f860f9127d80fb51407813625f4e521403da42bc1e1019d413701d61a9451683a955eaa272689fe12a3ba7e867a7c130869841ad525430339e25c9722e9e51f0c3eb73156d93dbf085d9790b4acf6ffcffd068b276590113f73ebe6b77b60e5f1953087033636d0bbdd1e4246fa0a4662e46d474d97c667bd9c6eadece7d2b929df425c8385230c61f994061d2e63c47a9d761431e32644b7ec2990082223a39fdbb634317ab5ff83c9cf2beabd8feba3de059f4"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1644, 0xe, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x15f4, 0x3, 0x0, 0x1, [{0x304, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x104, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfd, 0x1, "69c31028379ea9adf3e9271233597c9b8cfb7bf7e32bf8405e6f19cfc342a46be03c46b1ed044eaf4598051ad933fb35b74830d61717a9db58097f56b7aa0bd222afdf42cafd85c5a995015b79c4c92c53fd3173caef0b0c0f8946c46f6826af31c790d3d9e28aa43ba904d782a584194b75ddb4e1e9108aa507628192f34ed2982eaa02507114025b178d11bfd5c1ff472c84b2f7ce8c224c0d3f63b1f4f94e0fff50acfcd162c26475b36bd76e4fe795405415ba6962feb20081c58b589e51d68529e094f2d3b648c02c71b828d4510219e678b92e6e3ece32435db69c9c48d2c0c60c9dcf0913b9bbae6c04b1f1891a90f18057fe122aee"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x1cc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x55, 0x1, "12f3d8d7341fde093980861c30974988faa7b09c2e1d0989bec1599b9249f552cdc4ea5966feff8f205105d42e8ce0a34b4e81aecb7812ab5ee384e6f66cfe44450cd149b81deb55c4f1293dd6481df9bc"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x4c, 0x1, "f682eb5708f088d278316637e81ad3a0a127c961492819e443a0ad0850fd32ea2e92221c0a8c71dad6f2bc0a3e331aa770a7101347eaba3dda7972d4cdbee0de824b034b12e79e8d"}, @NFTA_DATA_VALUE={0xf, 0x1, "5fcd78ce3c0103a67fd1a2"}, @NFTA_DATA_VALUE={0xe1, 0x1, "f10ca432e00512f98f40240b7aec3518dfbb7a370c44ce37cf8c35f3f4ac2867f409347a892d1c49bdbd02ed0fe36190b71442423e42dd6b7828084b7857eb66095194d932a42172389ff3a77235b969caf1846fcf1404153ffccea98d1e882ceca742a5b6cd2949a7afae8c3d23ea408da9b3ecf8dd1e5b2758b81885e8cd9f053a0cc84522f36d9e1c27fd5b5153390e64422946319ee41eb0da7431628c431c058206fb89a892a689cbee6b06e127a1ff3fb2c16e1f99642a81b1bdef9325a6c251060b2c46aedf8dd9a1098115c65f3e2bc496e6f9987de9603881"}]}]}, {0x12ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x12a0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x82, 0x1, "4a577343fa2af828b82cfbf72833d901d8f8a25a3166a6783e5274ba812cb9c085119f27dd383829e5d7d39e1cdc4e646e2ce12e66eebbcbe3091631fa3301e95fcb1a774f8949899043977f4770be84b29b3cffe18d9a6c22d334b021c1e835bd3180bfb80b6a7a52ecd28fb007d2370529d255b19cb24b7b6de40e28f8"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8b93db9616dee156}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xdf, 0x1, "a3496c3b130218f03071ac914e6fc2a2db0be7364b10da9e95c648ee64df40e8dc3077708042d75268cfa27bb5790275fd90edddce008d89e373da9fa3742243e7d61bf39e15ce830b34b72b8be953d12e8117101fc9a4928b96827452f3bdaf05a53c9bc72dd9d06803bd2a388fae948e828e88b6b808c316ccda44cef9f5b1a012b8bd5150cf04745a238a4f6e11e39eb71de4042aefa9fd2c0f122fe9bf12b41d465b464a76a05e615d34c22df464af7d0d97bf313dbbe93283e9e3a8bf864b8631a71bd96abc3e4e0e4cde0474c161cb017d637cf97e9216d7"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "2891db9a28ec7450491f9d1e5d8e7fa853ea8bb9ff1e4ea60be4c269cf626fa26debd04eaebbea1fa88ed91fb94c072a1b70e3ec74062c7673b47ca633686dd6791eb9eeaa108fa347231b67fe66d7429c042122833a54fa14db7a3fe2c47f140d0df0a5d306d835232ec1bc7644b3b825e9f8e45e6651fe7992bb706850f41d4dae15615c418a806a772ea08f481889f591949fa88339cbca9fd7e6acf9682e482cfa02ee41b93d53769669858e7d01a784b7d18e419683d8c12ec179"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xcc}, @NFTA_SET_ELEM_USERDATA={0x33, 0x6, 0x1, 0x0, "dda4754e72c7bccb87cbc2c4afe7554e2fd3644cfdf39c941b86aa692b6777c9eca9e7a94cd1391e5f2cb44a3fafcd"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1834}, 0x1, 0x0, 0x0, 0x9000}, 0x810) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000001f80)) (async) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000001fc0)={&(0x7f0000ffd000/0x2000)=nil, 0xd, 0x0, 0x48}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000002000)) (async) io_setup(0x8003, &(0x7f0000002040)) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000002180)=@multiplanar_userptr={0x2, 0x2, 0x4, 0x10, 0x7f, {0x77359400}, {0x1, 0x8, 0xff, 0xd, 0x3, 0x7f, "a0668d77"}, 0x6, 0x2, {&(0x7f0000002100)=[{0x2, 0x2, {&(0x7f0000002080)}, 0x8}, {0x5, 0x7, {&(0x7f00000020c0)}}]}, 0x0, 0x0, r1}) (async) r10 = signalfd4(r1, &(0x7f0000002200)={[0x100000001]}, 0x8, 0xc00) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000002240)={@multicast2, @multicast2, 0xffffffffffffffff, "b7f18aa6564d586edd752a837b66d90414288ef4bdb2e52c810a23fb606cd363", 0x2, 0x7, 0xff, 0x5}, 0x3c) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000022c0), r10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x28, r11, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) openat$cgroup_root(0xffffff9c, &(0x7f00000023c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) kcmp(0xffffffffffffffff, 0x0, 0x6, r9, r8) (async) openat$hwrng(0xffffff9c, &(0x7f0000002400), 0x3, 0x0) 22.444111321s ago: executing program 4 (id=5807): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x103, 0x0, 0x0, {{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8}]}, 0xd4}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000003400128009000100626f6e640000000024000280050016000000000005001100010000000800070003"], 0x54}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 22.359448866s ago: executing program 1 (id=5809): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000000"]) 22.203797105s ago: executing program 4 (id=5811): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private, @private, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip_vti0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@remote, @multicast2, @loopback}}}, {{@arp={@loopback, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'xfrm0\x00'}, 0xc0, 0xe8, 0x0, {0xffffff7f}}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 21.995310122s ago: executing program 1 (id=5814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800b000100736f636b657400001c000280080002400000000b080001400000001f0f8c2200000000890900010073797a30000000000900020073797a32"], 0x84}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x700, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa6d214, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', 0x110) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000009d000040"]) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x1, &(0x7f0000000100)=@raw=[@ldst={0x2, 0x0, 0x5, 0x9, 0x0, 0x40}], &(0x7f0000000240)='GPL\x00', 0x4, 0xd, &(0x7f0000000280)=""/13, 0x1f00, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000300)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xa, 0x8, 0x800}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[r1, r1, r6], &(0x7f0000000480)=[{0x2, 0x3, 0x7}, {0x2, 0x2, 0xc, 0xa}, {0x4, 0x2, 0xc, 0x5}], 0x10, 0x5f6, @void, @value}, 0x94) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000580)=0x0) fcntl$lock(r10, 0x26, &(0x7f00000005c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, r11}) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) sendmmsg$unix(r3, &(0x7f00000bd000), 0x100, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x2000, 0x42) 21.598099181s ago: executing program 1 (id=5817): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000010c0)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90324fc600e6005000a000200053582c137153e3704000880fc0b0b000300", 0x33fe0}], 0x1}, 0x0) 15.035690958s ago: executing program 2 (id=5837): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/stat\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f00000000c0)={0x10000, 0x800, 0x7, 0x6, 0xa, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4, 0x1e8d, 0x5, 0x400, r1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x974, 0x3, @void, @value, @void, @value}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x4, @tick, {}, {0x1}, @note={0x1, 0x99, 0x8, 0x5, 0xa5}}], 0x1c) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x21, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fe1d0e0014000000000000000000008000"}}) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x280000, 0x0) socket$l2tp(0x2, 0x2, 0x73) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}], 0x1) connect$inet(r10, &(0x7f0000000080)={0x2, 0x4e21, @empty=0x1802}, 0x10) 12.475086741s ago: executing program 2 (id=5842): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) mlock(&(0x7f00007ff000/0x2000)=nil, 0x2000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="00000561ac910000f9294ea60936b3001900"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = gettid() r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) listen(r2, 0x101) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r7 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f000001aa80)="ca59ae74f81daebf1646e2910b4b17217cab042dd07a4885c525d99c1652758f107c0f1e68", 0x25}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) process_vm_readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/235, 0xeb}, {&(0x7f0000000100)=""/12, 0xc}, {&(0x7f0000000140)=""/97, 0x61}, {&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/15, 0xf}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000400)=""/66, 0x42}], 0x9, &(0x7f0000000540)=[{&(0x7f0000002600)=""/4096, 0x1000}], 0x1, 0x0) 9.389415156s ago: executing program 2 (id=5851): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x0, 0x202, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xff800000}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4011) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='cmdline\x00') r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x100000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002000000faff000000000000080018004e284e220500160000000000080017004e224e24"], 0x34}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002400030000000000"], 0x1c}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x40044160, 0x3) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000000)={r3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, "82ffe9a7ca8d338e0978c80c568a9d94969744f1a5779b19a198a16ac0b5502df67a3a54817e92bda7e02337b5186bf1532b41dc173f2ef38ea641dbf4bea193", "2c8d97ffffffff6770b6bc05c7d33d4ba1eeb28b81365fd5b98b898cd82f59b99d77af213e51d53d7e04d4e85e1d41ee121ea3aad6253aed9525e1b181ac9ebf", "9fef7affaecae7ed08f4c36330801327cabc8491b2a7e8063de5a51f02b8cb3a", [0x0, 0x800000b]}}) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/223, 0xdf}], 0x1, 0xfffff62d, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendfile(r4, r3, 0x0, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x1c, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x62040200) unshare(0x62040200) socket$igmp(0x2, 0x3, 0x2) 7.557332293s ago: executing program 3 (id=5854): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500010001"], 0x1c}}, 0x0) (async) close(r3) (async) r4 = socket(0x10, 0x803, 0x0) write$binfmt_script(r4, 0x0, 0xfffffe5d) (async, rerun: 64) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r5, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4004}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond_slave={{}, {0x0, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x0, 0x5, 0x51}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x11, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r5}}, 0x24}}, 0x0) 6.344368005s ago: executing program 3 (id=5857): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'gretap0\x00', r2, 0x8, 0x7860, 0x0, 0x7, {{0xe, 0x4, 0x2, 0x2, 0x38, 0x66, 0x0, 0x5, 0x4, 0x0, @empty, @local, {[@timestamp={0x44, 0x24, 0xb9, 0x0, 0x3, [0x8, 0x4, 0x80000000, 0x8, 0xf38, 0x0, 0x81, 0xfffffffe]}]}}}}}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r6}, 0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x48084}, 0x0) 5.455093261s ago: executing program 3 (id=5858): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1000000000002) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xffffffea}) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYRES8=r2], 0x110) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f0000000100)=""/39, 0x27}, {0x0}, {0x0}, {&(0x7f00000002c0)=""/232, 0xe8}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000880)=""/197, 0xc5}], 0x8, 0x1, 0x400) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x101ff, 0x1, 0x100000, 0x1000, &(0x7f0000b0e000/0x1000)=nil}) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 5.452636582s ago: executing program 2 (id=5859): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@rr={0x7, 0xb, 0x0, [@multicast2, @broadcast]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x0, 0x8, 0x6, {0x6, 0xe, "ad83e6f1"}}, &(0x7f0000000080)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}}, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="200e8e61b8004d71844e5721c4ed5d8458e2bb48ccfb84af1a8f559df212b12e1794caa7256393adb4d54e25ec81b917493977a6d7c42bca4e7f914a2f216d7913f0b30e03b01de9fb283dfa4a5393ecec588761c5ae6793b9965632badb55f27c7064880ee950502a122e527bcfa9f0e1d1432f56abf6b0c352213ce194c7f0ebe819522e7a44e779"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000340)={0x20, 0x0, 0x9d, {0x9b, "2aafc154dfce6bed513ecc978a96c16710252db47dfc6c2cedc587ebbb9cce742b2f24dbcc2abf7445839a63a3d307397748c795c024fd3aabe03d2e4c4be75c9f65731b522c6eab766340d77962ce0006fc758c3ee4ef8d59b115ae5a2ef5f7ff5a5f5bd459677eac0c1f1a048c0d72da1febad89a3762efe1544d38fbf24f8b2d8542ec264332a55a0b2808cf459598994f963bab35e2ea34dec"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x39}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffc) ioctl$EVIOCGMASK(r3, 0x60b, 0x0) syz_emit_ethernet(0x1015, &(0x7f00000004c0)={@local, @local, @val={@void, {0x8100, 0x5, 0x1, 0x2}}, {@x25={0x805, {0x1, 0x9, 0xfd, "584c81086cf9c99c768685a86fc78597449e9b21d822250ba1aeb4ba711bb52c5c63348e363519291e7726421e390320ecff1e44952669749fc8b5dd2508861d6d039e7ee271c4dedf0e796abaf59af07bc21fe83a17bd8b381ae005fa3a575ef1c79c48b7368462380090df80bc4231c35c184e32454a2c0118ea7e6e581eaa2bbee52352f7c0e3a2ea3477880f188d2521f5f17c0c7eae7feead9998780f83b704c8d3982efe7884f06c1ea1caf7fc12733a07ae944ff4bf1a141b092da276e594536f8db47fbe6cbcaf67778d46d9b97bda2aee01340ec6466e673da1ff3dfdf5278da3de09f0f796e8110dde978e21fcdea402e3c92f5400d6e3d764def06b60595e3354ef1c64eed1cf2a11414e50c6c694f81f08cd4d947081d0acc1d0ebd78a887a5f84eaba09416d51c84e7007b256b0ff9bbd27136fc8515dd7d736e425e9aad18ab67ca2f144858716ea58609d5949759334162b1cf00d32abe18209cdf0992d22916045b9693b1540274a52b93f879ae2e645b718cefbccd1fa0ec94ef2dab6426b78e17e1456aa5c1da695e65ab3977d27e5bf6e15f3ebcd92b3f0c9f5fd2bf45545444013abd443584db1044faf2f38937294d61ddbca172e37d48cd60807b590c481fefe04a863dfb82440c248678d0ede19411617e6249a65f4be08e79dc92120bc50e9e4953bb743108db44c8655b65e1fb9fa1c3b627f4a0eaef038fd8c78c3920eb434127bb2cab3dde8e26344eaa9eddd688d530cdd9b30d175ed2bcfc401ca3083ba5f49bc59732198ad499e5c9623b086c967ecd7992094206fd3098c2b504272de0a61c17d78f91ec5f7162b7a83239bc47ca54543a4e2a5c6433f30ab9db0c45fd4b8432520a4efc9bc522d320ef974db57ca6c84ae864776bcb30b05bddd5bec34d0f2e60ee79287001fb60a40965c395f30798ba934653c245b5c07f438d9d0e885bd0d750fb22f14e87f8e6025450ee52ba14a144e4c07e6b49acc7224b59d970c49f194edda084e52e192dc6b7c6d5cc70d0a76096314402770b1c94db89e26ffb1bf87e9af85f41b77a10e6aea825ca4bf6e47d8614c7a85ce3a4f8cd89be6325e92bd48b69fcd4d8037dda729bd62b4f1985e064d7596e30257669d44e01a99e597170afb64ef60de8b473897c05c5e86ba4e9baf3c8c528e532c0cc193a8fe7af995fe3822539d38e02b27264a43e8522cddd157511ae732906955f2c5d6bef396096a779ee64b0c7d3f0d32950c96882efdab2d6a29403ce73b5067c5a4a53a73360437461179da1e74862fb9c40b06d60cf7926412b79c59fb851ce3504988da28037ddbd058728723e4450c7bca08c7db66a8df52a549c547ca605a4f0d76f40353d5e6e9ccfa51e54120826f921b124086c7904bb9cac211f0c227c97a6ea3f1d0bdfb92680d301fde41a46bb8b2a1897ce7da794960bce12215bec5b5f27173978890850ef762116c68a2b3146a331e9351be545e110236dcabd221426d16d9204fb403a4c21c987cb42b04b5ffda5620f2992d10809adb311d2cfc13a1974803e7359143b0ae0d2729fcf5274889a8853736afcb60cbefdf5c38c5f6b2050ac5b3bb950491206ed1e245d2b45a24677f58a36eaa4cd6adc2c891dec9effb4f9658760885d66098c219cfb17b3e5a0857730a509da42b61e764391a85897ecf2bbd897a3e31207d97499889958c2dbdcec9c11a00040f38e8441ac4bff0286ccb2f64327fd858bebba6b724bb92247b4aca9199f5d1b72f402d5452617929fad30ec8b001c40b596d2a2157430518d7570de257ee6f0168f9af2a2929c628b13babfbc3f9d7c1e12631faea67ff06bfbf9e6e451fdb6a87c609ffaffc06fe20f99ca01035f0ed6eb24a07992f4ce3203d358fdc74568b6a511ada2ab57586c305a5e6b4a5b18f04c6b379d1bb82e96fa95062ba607eff3ae6c30f2f54b906d25e24048330033d72199dbfedb78e110c583b499e985cf7bdb3b2fddfb84c712f63e447034c35940f448324ef65833e97ffd2e4c997d9036d5956c2cd2c75d459407ac7a7897ed0528731a7216db26750277dd770acce9a756f5d20567d2c9697346cb00d277d431d6a7d50b14cededd4993559a56f6714a826814a5d5f2fc928b291db0b7414463d5efaf260593786218c37207f4d5bc09075517a6ae01e2e1b5533dd3aca7692e6ae052af432f1a28e5a1bfea10dbe1f8b41818008605c025a95a6883b3f71c0aba7497992cb0f4685e88ae75adbf701de30d9138107d23eb4dd38c8f7e9a4756aabf58693dd57fe02aae01f2f156193b21984782fc32df580f83ad570b1c38f6ca28976249988d89a241c79629432391a1eebbf015ace68325b0d3fee60b4f47371deb6b2de92a29221fc115884e611c52c717f3891fccb427e3464277945e62a96564ce916b51d599176299207546eafafbff79ed472bd2d03e212db01cd3c6c58b52fd5b0a19315f0d7da5a59fd2a06e6fc5c19a1483d842c103dde7cd000d6c2f532c59bba37209cbde179af9f752da2981478ead707b1de15b15eb06dd857da0eda10f70edbfde5164edd3fd9af7a2ac9c9e9e45b5e6dbebf4e7d79657ddb31f9a63c9a84d74d2426407d0cf6a101d9fc9bda0cf5091993b03be91ee7506f085131578720a995c1bf90b767eb0c6e19d51faf5a05093aaea6a41907d643b9e3146fe02ecaecb41f677ff54b1c4a5675a238732a98a8d137c42dae5382a1eb642585ee4e3deea568ebeab344ec1e468e4c086c276456a83807b1b70a14ead778a6433bba7a6c7493e0eec4a6797fcceda685a0a31d887b7e95fa599545c7874d6eadae2de57f16694d81ab37f88af01e5595e72122d0f7fa38db2790ee0d6f890bebc19ddfdf3c5611d9d4b8803e592d84c35f3b6f13789a63656af880f2fc5e4ab9822a51282e2eb5865e2d4be348b5fb65573c8ea510699523755b82f719f87b7a15d7d12ff7a21764bde58d0ea35c7b56056b63ad8ade0032b491533400fbcb5df51192169551b32f8844df77c6c083bc1175b53bffc99ffa5a2df9d1bb7444c951a1fc946356ac47b2d72661843b631ccf3c3024815ba7a2be660cc7f29fee340482711d905c1e1f09a65561d1c578a78dc08cf2ccde30e3d357ba57c93b14dfe6c3266701895737c6199dc7045cf1d50668affb64af6851a08835e5225564ca1f297bb8ac98f7f88f8bcf60e5730c70077d9518db23a83ce25f2c6cfcced4087479c4b5f2f30b90600da2b339e108437dbe68225e71ba38531a9eaad4b0796eda1458c9a4efc4f56dbf6630a2bc55e88df5e87f2b114191872b6ab73bfee5d016f9d0a496e744f07d738588dd1555941b5d15555b08e0f6e18de564d0998e41f2bfa3844947c07ae1540780d798104347cc1943f4ab0212dff51c3652d49b94b41f51b32115177c3934dc74fb843d2eadadff6a5322a42ac0175501937de19fb754147d49a89b24afb5080da0ef3bc941f98b8bb04097073ef0f7c46923f6cf2ead6a22b38c6ee74abe6429719e5bc43aeccc6115a72d703e9d5c56aa18cbd103d155641acc2e5e9dbcd28c5bc48ed7f5b8d14def71c6a64b112dbac40bf8fabf456c3a80c60d5c81cf7e72fa48d74130d9cf6cedf9a4c39a75f87a2bdf2444fdf72addb53e5f7fdfcc996b987b361a11f89dd4483ae91d8bb286ee7d116904157374fee87992ecc980b65ad59193ccf138cac89ecec36b816b80f511e8011632fb3d52ac6ce1b5af61cb3f91555ded7c62d31c1facad2b72624703df2151926e99f54772a93161402ad965ec4d39f3d142c5611cb7398cd7bc2bf66c76ff53067fdcf70c6b87610f4e26f95d0ed4e70b1b019e5c49da50b602ea08086b4c30dbd30f21dc64701f4c1d68be85ede00845e4e969eb5287c81544901f9db568ac65368030b7c2eedf4865fee0920e359b0e34f5d7bfc16fedc5a983c52c4af9925967d562aa0e90cf4ca172fe7f3cb386bb4c373819b1aae1b43c2648ae0f28bd045740d0f645306bdc373cfcd61db42aadacf38f8c1e90000714b2bcc1fc4655438db0496c403378a95a126c618a817182ab8c4f2291b5754cf5edb229aa9a0746b6eebcbbaa5f2479231fbad61a2c7ed59a1e9bc467a534cf4e0ca0ef0ac33702d42b780be3a21aead992e9c0350adf8756192059b33bb98dabe21563d11d50eca1e75c4861a8b7005d44090cc10b1ab01cd537ffed6268eff5b2f792ec4fc6a6af9f4ae61dc3bca4be83c1a019af94fdf41703ccdf7750156954ba922181952896970b7f03cfc0fcf2b88ba4dbe4165964a0d4525becaff79d66925e73adecf022b23f7f5ae61ea2cdb724b467133a8ce5f286a34115cebf4465dc22760ce133266febc48798f4a0196597e709d362aad1b8567824b66f08388ee614a2efb8fb02100d5bbb7c2ebddaa00e8050d43b0d14db9fbb33e67f8ad615d7785a8540b7eee50c162fee3744ca68e7fa00eccbe01623dbb6606df999719e4a99fa5f2976ff78d3da23e7840169b9a41c2524d52fa0a874b2f5002ecd71c70ffb2a3a2053fb55029aeca004394306b8a7f69e0f88b76a852a0ccd2922805356f20dd83d16ee6f81a4e0a311cabb34434cf0dacb287acbbef79348361eecc263e3f2ab1d2ef23c89adfd40b87beece4008cc1452d7eef7b4c2b98fa77d28e82502a32eea95365cad3fdabdfbfd1e97c4a0335ab907f2c10e895aaa9d218dd5c0900198ef0e9b06cfea136162eb2802ebca027e51c61c905b3e4b50ae393038034d4fb639982b016f186704ffd4071921f44a3efdecf1dacfcfcaa841d8419fcc587ae32ea3e37785ad4b023320fdd595142be0408dee26ffbec011a2736a1316f622bef02221e71921e7cb4931d56d75684e250cd6698e05f26a24ee99b4257ba1627b6763e0e915b4e56eaa89e0de299a7c9bbccbdf4b77934f61ecfa26f52f6341fee5c67773252f8930464d413a29711e8cadd8348933e94a15725fd65c244d1027dda054f2d7a29aae320fb1d68299eed232744713953de8b6ce635d043112251c01f4be4a40166a709005c132f5e70dbddf076b6e5b9ba242adf1b01529b1f0f90168a73da72b4d174f5ba54e76d93f9696e3259fd2af626376cb3fe2950c4b98a6e75e270f5e0d0c4da0f2bcddde3265109d39ff54cb0416fb9d3b997894a2362e209e315a2ab6e94b0e8f6554346cb46f1396691ac7c31ac27786d9f70b200d1366fcdaeb8656b5b1bbd902fa20ca8468c2da77603dd856d382c0bb82175706210fe676eac06f99e1c93ac2a6cb769e897c3f7fa4489a64f9819eb756831fbd53abb1ec61a78187a5b7630ef0304f0cdffce95329869c83cab8eb8cd424d04802ad50076357d0cf17dc197b784a72e6577d49c8a4cda3c87ba4d7c1d1acd30e252eca49ad81ddedf0116915ab28b035a5b85e44754ce394931058182403c04ad4cd76ec123b3eb30d6926f362198cbc227b3466343b7383363b1e093268845dc48820af4dd0f01adf659980ea61219d6f95de12eac9eeb589758917be800d1dfb46f9e63f2e8900141a340039abef5b3e20e1acbab4d4530bd8e450f555cd5cc30a1965542e292506ea7a71a3fa8a71d330f7571837d704efe1f4dc504ad6031d93c4498fc741d72bdb9be1b0cc5655f213e9b646b569b0712269071b20afa4416df4c52df04bcd85f65634cb81635f4a41d1b0aa22b824fa10ca790512ef402e00e302741052e6b59f2660f42249dd1e6c3c56face7bbf68cb02941ddac5da4937675e7d"}}}}, &(0x7f0000001500)={0x0, 0x3, [0x8e7, 0xfc8, 0x769, 0x9df]}) 3.718796473s ago: executing program 3 (id=5862): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000280)={0x0, 'veth1_to_batadv\x00', {0x1}, 0x4}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x1c, 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000000000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe88000000000000000000000000000100000000000000000100180004000045"], 0x88}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) fsopen(&(0x7f0000000000)='9p\x00', 0x0) r4 = socket(0x1e, 0x4, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1afc289e}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd8}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', r7, 0x29, 0xff, 0x53, 0x8, 0x62, @mcast2, @mcast2, 0x0, 0x1, 0xffff, 0xa}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 3.718215332s ago: executing program 0 (id=5863): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') open(0x0, 0x0, 0x0) 3.717616059s ago: executing program 2 (id=5864): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/5107], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.262098572s ago: executing program 0 (id=5865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 2.73015351s ago: executing program 2 (id=5866): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x9e235000) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x45e, 0x732, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0xf7, 0x1, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x3c, 0x9, 0x1, {0x22, 0xbd1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x7f, 0x9}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x80, 0x4b, 0x1, 0x40, 0x7}, 0x27, &(0x7f0000000180)={0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x9, 0x6a, 0x604}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "ef30cc375d3c87c67d771948fea3b24f"}]}, 0x3, [{0x97, &(0x7f0000000280)=@string={0x97, 0x3, "41c5f21ff1f967c546b7dcc835d9ea6166430a6844fb68fa796cb915ccd026371c2f849754407db0765a85a09e3b4f63478d1bc8f92ae12cb60b34c7358c19072012c9f7daaf5453c894461e8310d0ac42efea7006deb43641a72e87a194277e6ec25cc3e66ff0398fc6bb297539fa6959108e8c80924d0ab6eeb338826b5bca9eb63f534f523b00c1fe582ac0b035fb63390ce440"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42d}}]}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r7, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f00000001c0)) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$binfmt_aout(r8, 0x0, 0x0) ppoll(&(0x7f00000013c0)=[{r8}], 0x1, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) 2.729444954s ago: executing program 0 (id=5867): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/stat\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f00000000c0)={0x10000, 0x800, 0x7, 0x6, 0xa, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x4, 0x1e8d, 0x5, 0x400, r1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x974, 0x3, @void, @value, @void, @value}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x4, @tick, {}, {0x1}, @note={0x1, 0x99, 0x8, 0x5, 0xa5}}], 0x1c) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x21, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fe1d0e0014000000000000000000008000"}}) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x280000, 0x0) socket$l2tp(0x2, 0x2, 0x73) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}], 0x1) connect$inet(r10, &(0x7f0000000080)={0x2, 0x4e21, @empty=0x2000}, 0x10) 1.66252009s ago: executing program 0 (id=5868): r0 = socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0xe6f5a70bc2ee9db6, 0xffffffffffffffff, 0x0) close(r2) r3 = io_uring_setup(0x168e, &(0x7f0000000140)={0x0, 0x0, 0x820, 0x3, 0xfffffffd}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="71d346a4cfde3b70a32282", 0xb}], 0x1}}], 0x1, 0x9200000000000000) r5 = dup3(r4, r0, 0x0) recvmmsg$unix(r5, &(0x7f0000008b40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x2, 0x58ca02a0, 0x0) 1.661976754s ago: executing program 3 (id=5869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x7, [{0x5}, {0x3}, {0x6c}, {0x47}, {0x24}, {0x3}, {0x1b}]}, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x2, 0xb0, 0x7}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_PBSS={0x4}]}, 0x68}}, 0x10004020) 629.167359ms ago: executing program 3 (id=5870): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 628.48227ms ago: executing program 0 (id=5871): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (fail_nth: 1) 0s ago: executing program 0 (id=5872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) (async) kernel console output (not intermixed with test programs): ) 8*512kB (UM) 3*1024kB (UE) 5*2048kB (UME) 951*4096kB (M) = 3935104kB [ 1579.850291][T32326] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1579.874852][ T5290] usb 3-1: USB disconnect, device number 46 [ 1579.916603][T32326] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1579.965934][T32326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1579.975666][T32326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1580.018898][T32326] 65395 total pagecache pages [ 1580.023628][T32326] 2 pages in swap cache [ 1580.043160][T32326] Free swap = 124460kB [ 1580.049416][T32326] Total swap = 124996kB [ 1580.054100][ T29] audit: type=1326 audit(1728110698.774:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32369 comm="syz.3.5481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f095b37dff9 code=0x0 [ 1580.082714][T32326] 2097051 pages RAM [ 1580.086848][T32326] 0 pages HighMem/MovableOnly [ 1580.092224][T32326] 427076 pages reserved [ 1580.115957][T32326] 0 pages cma reserved [ 1580.245920][ T5234] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1580.436291][ T5234] usb 1-1: Using ep0 maxpacket: 32 [ 1580.448233][ T5234] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1580.505970][ T5234] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1580.546174][ T5234] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1580.570505][ T5234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.630855][ T5234] usb 1-1: config 0 descriptor?? [ 1580.649139][ T5234] hub 1-1:0.0: bad descriptor, ignoring hub [ 1580.670055][ T5234] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1580.713442][ T5234] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1580.834628][T10664] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.856949][T32368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1580.889365][T32368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.145351][T10664] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.323350][T10664] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.412200][T22669] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1581.427319][T22669] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1581.447682][T22669] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1581.464100][T22669] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1581.478263][T22669] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1581.487765][T22669] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1581.566079][ T5284] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1581.576972][T10664] bond0: (slave ): Releasing backup interface [ 1581.627674][T10664] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.696248][ T5284] usb 2-1: device descriptor read/64, error -71 [ 1581.956333][ T5284] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1582.011618][T10664] bridge_slave_1: left allmulticast mode [ 1582.042331][T10664] bridge_slave_1: left promiscuous mode [ 1582.086266][T10664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.135918][ T5284] usb 2-1: device descriptor read/64, error -71 [ 1582.156543][T10664] bridge_slave_0: left allmulticast mode [ 1582.162272][T10664] bridge_slave_0: left promiscuous mode [ 1582.193097][T10664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.257302][ T5284] usb usb2-port1: attempt power cycle [ 1582.615897][ T5284] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1582.653895][T22669] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1582.690214][T22669] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1582.694116][ T5284] usb 2-1: device descriptor read/8, error -71 [ 1582.704252][T22669] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1582.715011][T22669] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1582.732190][T22669] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1582.757861][T22669] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1582.936010][ T5284] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1582.960933][ T5284] usb 2-1: device descriptor read/8, error -71 [ 1583.076223][ T5284] usb usb2-port1: unable to enumerate USB device [ 1583.237808][ T5281] usb 1-1: USB disconnect, device number 73 [ 1583.273523][T10664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1583.294519][T10664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1583.308167][T10664] bond0 (unregistering): Released all slaves [ 1583.322885][T32394] chnl_net:caif_netlink_parms(): no params data found [ 1583.372494][T32417] bond0: (slave macvlan2): Opening slave failed [ 1583.535934][ T5281] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1583.597661][T22669] Bluetooth: hci1: command tx timeout [ 1583.650190][T32433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5497'. [ 1583.682038][T32433] netlink: 13 bytes leftover after parsing attributes in process `syz.2.5497'. [ 1583.722278][ T5281] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1583.740156][ T5281] usb 1-1: config 0 has no interfaces? [ 1583.747449][ T5281] usb 1-1: New USB device found, idVendor=07da, idProduct=104d, bcdDevice=e5.48 [ 1583.757574][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1583.765599][ T5281] usb 1-1: Product: syz [ 1583.770356][ T5281] usb 1-1: SerialNumber: syz [ 1583.782699][ T5281] usb 1-1: config 0 descriptor?? [ 1583.858393][T32438] FAULT_INJECTION: forcing a failure. [ 1583.858393][T32438] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.871991][T32438] CPU: 0 UID: 0 PID: 32438 Comm: syz.2.5497 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1583.882788][T32438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1583.892863][T32438] Call Trace: [ 1583.896159][T32438] [ 1583.899104][T32438] dump_stack_lvl+0x241/0x360 [ 1583.903812][T32438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1583.909029][T32438] ? __pfx__printk+0x10/0x10 [ 1583.913656][T32438] should_fail_ex+0x3b0/0x4e0 [ 1583.918370][T32438] ? dst_alloc+0x12b/0x190 [ 1583.922806][T32438] should_failslab+0xac/0x100 [ 1583.927509][T32438] ? dst_alloc+0x12b/0x190 [ 1583.931952][T32438] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1583.937357][T32438] dst_alloc+0x12b/0x190 [ 1583.941627][T32438] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 1583.947732][T32438] ip_route_output_key_hash+0x193/0x2b0 [ 1583.953309][T32438] ? ip_route_output_key_hash+0xdf/0x2b0 [ 1583.958964][T32438] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1583.965086][T32438] tcp_v4_connect+0x6df/0x1ba0 [ 1583.969898][T32438] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1583.975118][T32438] ? mptcp_connect+0x656/0xb20 [ 1583.979913][T32438] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1583.985146][T32438] mptcp_connect+0x701/0xb20 [ 1583.989768][T32438] __inet_stream_connect+0x262/0xf30 [ 1583.995086][T32438] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1584.001536][T32438] ? __local_bh_enable_ip+0x168/0x200 [ 1584.006933][T32438] ? lockdep_hardirqs_on+0x99/0x150 [ 1584.012157][T32438] ? __pfx___inet_stream_connect+0x10/0x10 [ 1584.017986][T32438] ? __local_bh_enable_ip+0x168/0x200 [ 1584.023380][T32438] ? inet_stream_connect+0x50/0xa0 [ 1584.028514][T32438] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1584.034266][T32438] inet_stream_connect+0x65/0xa0 [ 1584.039228][T32438] ? __pfx_inet_stream_connect+0x10/0x10 [ 1584.044884][T32438] __sys_connect+0x2d1/0x300 [ 1584.049503][T32438] ? __pfx___sys_connect+0x10/0x10 [ 1584.054657][T32438] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1584.061013][T32438] ? do_syscall_64+0x100/0x230 [ 1584.065807][T32438] __x64_sys_connect+0x7a/0x90 [ 1584.070599][T32438] do_syscall_64+0xf3/0x230 [ 1584.075122][T32438] ? clear_bhb_loop+0x35/0x90 [ 1584.079826][T32438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.085744][T32438] RIP: 0033:0x7f4d58f7dff9 [ 1584.090172][T32438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1584.109799][T32438] RSP: 002b:00007f4d59da6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1584.118242][T32438] RAX: ffffffffffffffda RBX: 00007f4d59136058 RCX: 00007f4d58f7dff9 [ 1584.126243][T32438] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 000000000000000e [ 1584.134237][T32438] RBP: 00007f4d59da6090 R08: 0000000000000000 R09: 0000000000000000 [ 1584.142224][T32438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1584.150211][T32438] R13: 0000000000000000 R14: 00007f4d59136058 R15: 00007f4d5925fa28 [ 1584.158216][T32438] [ 1584.169887][T10664] hsr_slave_0: left promiscuous mode [ 1584.191945][T10664] hsr_slave_1: left promiscuous mode [ 1584.268675][ T29] audit: type=1326 audit(1728110702.994:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32427 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1584.296596][ T29] audit: type=1326 audit(1728110703.014:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32427 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1584.322446][ T29] audit: type=1326 audit(1728110703.014:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32427 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1584.340956][T10664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1584.345890][ T29] audit: type=1326 audit(1728110703.014:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32427 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1584.353027][T10664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1584.398656][ T29] audit: type=1326 audit(1728110703.014:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32427 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1584.402586][T10664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1584.424714][ T29] audit: type=1326 audit(1728110703.014:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32427 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1584.437216][T10664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1584.464556][ T29] audit: type=1326 audit(1728110703.014:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32427 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1584.506171][ T29] audit: type=1326 audit(1728110703.014:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32427 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1584.529900][ T29] audit: type=1326 audit(1728110703.014:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32427 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1584.603327][T10664] veth1_macvtap: left promiscuous mode [ 1584.616606][T10664] veth0_macvtap: left promiscuous mode [ 1584.629397][T10664] veth1_vlan: left promiscuous mode [ 1584.638041][T10664] veth0_vlan: left promiscuous mode [ 1584.876159][T22669] Bluetooth: hci0: command tx timeout [ 1585.446179][T10664] team0 (unregistering): Port device team_slave_1 removed [ 1585.525821][T10664] team0 (unregistering): Port device team_slave_0 removed [ 1585.683771][T22669] Bluetooth: hci1: command tx timeout [ 1586.290316][T32449] pimreg: entered allmulticast mode [ 1586.316828][T32452] pimreg: left allmulticast mode [ 1586.317934][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1586.317950][ T29] audit: type=1326 audit(1728110705.024:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32427 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1586.375519][ T29] audit: type=1326 audit(1728110705.024:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32427 comm="syz.0.5495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1586.447183][ T5283] usb 1-1: USB disconnect, device number 74 [ 1586.518570][T32394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.526966][T32394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.534285][T32394] bridge_slave_0: entered allmulticast mode [ 1586.542559][T32394] bridge_slave_0: entered promiscuous mode [ 1586.551803][T32394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.559738][T32394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.567546][T32394] bridge_slave_1: entered allmulticast mode [ 1586.574693][T32394] bridge_slave_1: entered promiscuous mode [ 1586.639845][T32394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1586.681196][T32394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1586.728094][ T5281] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1586.746109][ T51] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1586.771255][T32421] chnl_net:caif_netlink_parms(): no params data found [ 1586.841474][T32394] team0: Port device team_slave_0 added [ 1586.867838][T32394] team0: Port device team_slave_1 added [ 1586.876794][ T5281] usb 3-1: device descriptor read/64, error -71 [ 1586.896229][ T51] usb 2-1: Using ep0 maxpacket: 32 [ 1586.914423][ T51] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1586.945213][ T51] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1586.956071][T22669] Bluetooth: hci0: command tx timeout [ 1586.971781][ T51] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1587.015949][ T51] usb 2-1: Product: syz [ 1587.020175][ T51] usb 2-1: Manufacturer: syz [ 1587.050776][ T51] usb 2-1: SerialNumber: syz [ 1587.069334][ T51] usb 2-1: config 0 descriptor?? [ 1587.070664][T32394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1587.085754][T32471] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1587.094636][T32394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1587.148273][ T5281] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1587.176498][T32394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1587.251931][T32394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1587.259980][T32394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1587.289284][T32394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1587.300288][ T5281] usb 3-1: device descriptor read/64, error -71 [ 1587.316097][T32421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.323359][T32421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.332926][T32421] bridge_slave_0: entered allmulticast mode [ 1587.345458][T32421] bridge_slave_0: entered promiscuous mode [ 1587.416574][ T5281] usb usb3-port1: attempt power cycle [ 1587.433733][T32421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.472024][T32421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.486163][T32421] bridge_slave_1: entered allmulticast mode [ 1587.503621][T32421] bridge_slave_1: entered promiscuous mode [ 1587.568008][T32394] hsr_slave_0: entered promiscuous mode [ 1587.577881][T32394] hsr_slave_1: entered promiscuous mode [ 1587.595512][T32394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1587.612449][T32394] Cannot create hsr debugfs directory [ 1587.738620][T10664] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.756903][T22669] Bluetooth: hci1: command tx timeout [ 1587.781559][ T5281] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1587.819880][ T5281] usb 3-1: device descriptor read/8, error -71 [ 1587.866416][T32421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.894580][T32421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1587.965194][T10664] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.076348][ T5281] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1588.107472][T10664] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.116465][ T5281] usb 3-1: device descriptor read/8, error -71 [ 1588.184595][T32421] team0: Port device team_slave_0 added [ 1588.214438][T32421] team0: Port device team_slave_1 added [ 1588.239657][ T5281] usb usb3-port1: unable to enumerate USB device [ 1588.291878][T10664] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.390917][T32421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1588.419040][T32421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1588.460873][T32421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1588.544353][T32421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1588.566115][T32421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1588.609856][T32421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1588.757599][T32421] hsr_slave_0: entered promiscuous mode [ 1588.777814][T32421] hsr_slave_1: entered promiscuous mode [ 1588.797035][T32421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1588.816019][T32421] Cannot create hsr debugfs directory [ 1589.037794][T22669] Bluetooth: hci0: command tx timeout [ 1589.288327][T10664] bridge_slave_1: left allmulticast mode [ 1589.294374][T10664] bridge_slave_1: left promiscuous mode [ 1589.304632][T10664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.324077][T10664] bridge_slave_0: left allmulticast mode [ 1589.336527][T10664] bridge_slave_0: left promiscuous mode [ 1589.352538][T10664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.550081][ T51] usb 2-1: USB disconnect, device number 95 [ 1589.835979][T22669] Bluetooth: hci1: command tx timeout [ 1589.929793][ T5300] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1590.105922][ T5300] usb 1-1: Using ep0 maxpacket: 16 [ 1590.118324][ T5300] usb 1-1: config 0 has an invalid interface number: 154 but max is 0 [ 1590.135862][ T5300] usb 1-1: config 0 has no interface number 0 [ 1590.145493][ T5300] usb 1-1: config 0 interface 154 has no altsetting 0 [ 1590.170799][ T5300] usb 1-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice=d2.52 [ 1590.193945][ T5300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.202315][ T5300] usb 1-1: Product: syz [ 1590.206888][ T5300] usb 1-1: Manufacturer: syz [ 1590.211704][ T5300] usb 1-1: SerialNumber: syz [ 1590.226450][ T5300] usb 1-1: config 0 descriptor?? [ 1590.543443][T10664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1590.566771][T10664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1590.590569][T10664] bond0 (unregistering): Released all slaves [ 1590.618462][ T5300] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.154/input/input96 [ 1590.640692][ T4669] bcm5974 1-1:0.154: could not read from device [ 1590.646241][ T5300] usb 1-1: USB disconnect, device number 75 [ 1590.859821][T31219] bond0: (slave syz_tun): Releasing backup interface [ 1591.115904][T22669] Bluetooth: hci0: command tx timeout [ 1591.456006][T10664] hsr_slave_0: left promiscuous mode [ 1591.516342][T10664] hsr_slave_1: left promiscuous mode [ 1591.542531][T10664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1591.576038][T10664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1591.626828][T10664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1591.634336][T10664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1591.681751][T28053] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1591.693854][T28053] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1591.701538][T10664] veth1_macvtap: left promiscuous mode [ 1591.710273][T28053] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1591.721291][T28053] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1591.732406][T28053] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1591.740566][T28053] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1591.746657][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1591.761909][T22669] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1591.771394][T22669] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1591.772647][T10664] veth0_macvtap: left promiscuous mode [ 1591.779383][T22669] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1591.783964][T10664] veth1_vlan: left promiscuous mode [ 1591.793929][T22669] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1591.804422][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1591.850053][T10664] veth0_vlan: left promiscuous mode [ 1592.543337][T10664] team0 (unregistering): Port device team_slave_1 removed [ 1592.606746][T10664] team0 (unregistering): Port device team_slave_0 removed [ 1593.440836][T32544] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5516'. [ 1593.734133][T32394] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1593.837586][T32540] chnl_net:caif_netlink_parms(): no params data found [ 1593.855553][T32394] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1593.865708][T32394] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1593.888020][T32394] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1593.916236][T11398] Bluetooth: hci3: command tx timeout [ 1593.923319][ T5239] Bluetooth: hci2: command tx timeout [ 1594.040593][T32421] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1594.091072][T32539] chnl_net:caif_netlink_parms(): no params data found [ 1594.103211][T32421] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1594.151091][T32421] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1594.179723][T32421] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1594.201675][T32540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.211294][T32540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.219899][T32540] bridge_slave_0: entered allmulticast mode [ 1594.227287][T32540] bridge_slave_0: entered promiscuous mode [ 1594.270995][T32540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.279979][T32540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.288619][T32540] bridge_slave_1: entered allmulticast mode [ 1594.297873][T32540] bridge_slave_1: entered promiscuous mode [ 1594.494854][T10664] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.560639][T32540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1594.585061][T32540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1594.654834][T10664] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.814945][T10664] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.843274][T32539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.852669][T32539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.866387][T32539] bridge_slave_0: entered allmulticast mode [ 1594.873927][T32539] bridge_slave_0: entered promiscuous mode [ 1594.911059][T10664] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.933371][T32540] team0: Port device team_slave_0 added [ 1594.952091][T32539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.961470][T32539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.969741][T32539] bridge_slave_1: entered allmulticast mode [ 1594.978111][T32539] bridge_slave_1: entered promiscuous mode [ 1595.004463][T32540] team0: Port device team_slave_1 added [ 1595.074700][T32539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1595.101467][T32540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1595.106813][ T5283] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1595.108720][T32540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1595.151604][T32540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1595.180087][T32539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1595.199049][T32540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1595.206271][T32540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1595.233799][T32540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1595.276124][ T5283] usb 1-1: Using ep0 maxpacket: 8 [ 1595.291711][ T5283] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1595.301009][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.309623][ T5283] usb 1-1: Product: syz [ 1595.316632][ T5283] usb 1-1: Manufacturer: syz [ 1595.321344][ T5283] usb 1-1: SerialNumber: syz [ 1595.329428][ T5283] usb 1-1: config 0 descriptor?? [ 1595.345165][T32394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1595.373225][T32539] team0: Port device team_slave_0 added [ 1595.398607][T32539] team0: Port device team_slave_1 added [ 1595.452352][T10664] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.559129][ T5283] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1595.574814][T32539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1595.582535][T32539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1595.610201][T32539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1595.650518][T10664] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.673595][T32540] hsr_slave_0: entered promiscuous mode [ 1595.692035][T32540] hsr_slave_1: entered promiscuous mode [ 1595.713329][T32540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1595.736066][T32540] Cannot create hsr debugfs directory [ 1595.745371][T32394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1595.758207][T32592] binder: 32591:32592 ioctl 400c620e 0 returned -14 [ 1595.770388][T32539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1595.786899][T32539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1595.826861][T32539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1595.883387][T10664] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.006131][ T5239] Bluetooth: hci2: command tx timeout [ 1596.011616][T11398] Bluetooth: hci3: command tx timeout [ 1596.021565][T10664] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.049688][T10669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1596.056860][T10669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1596.223376][T32539] hsr_slave_0: entered promiscuous mode [ 1596.238068][T32539] hsr_slave_1: entered promiscuous mode [ 1596.249801][T32539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1596.265876][T32539] Cannot create hsr debugfs directory [ 1596.293538][T10669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.300739][T10669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1597.044386][ T5283] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1597.071637][ T5283] usb 1-1: USB disconnect, device number 76 [ 1598.096295][T11398] Bluetooth: hci3: command tx timeout [ 1598.101781][T11398] Bluetooth: hci2: command tx timeout [ 1598.158244][T10664] bond0 (unregistering): Released all slaves [ 1598.357370][T10664] bond0 (unregistering): Released all slaves [ 1598.373002][T32421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1598.454793][T32652] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5524'. [ 1598.481516][T10664] IPVS: stopping master sync thread 32131 ... [ 1598.492071][T32652] bridge_slave_1: entered allmulticast mode [ 1598.632359][T32421] 8021q: adding VLAN 0 to HW filter on device team0 [ 1598.670603][T28088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.677777][T28088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1598.716507][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.723625][ T5639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1598.807426][T32394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1599.034014][T32421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1599.275550][T32540] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1599.301661][T32540] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1599.329080][T32394] veth0_vlan: entered promiscuous mode [ 1599.392661][T32540] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1599.455107][T32540] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1599.501743][T32394] veth1_vlan: entered promiscuous mode [ 1599.641579][T32671] syz_tun: entered promiscuous mode [ 1599.647170][T32671] vlan2: entered promiscuous mode [ 1599.655614][T32671] syz_tun: left promiscuous mode [ 1599.850289][T10664] hsr_slave_0: left promiscuous mode [ 1599.866753][T10664] hsr_slave_1: left promiscuous mode [ 1599.895658][T10664] hsr_slave_0: left promiscuous mode [ 1599.907080][T10664] hsr_slave_1: left promiscuous mode [ 1599.987104][T10664] veth1_macvtap: left promiscuous mode [ 1599.992673][T10664] veth0_macvtap: left promiscuous mode [ 1599.999016][T10664] veth1_vlan: left promiscuous mode [ 1600.004339][T10664] veth0_vlan: left promiscuous mode [ 1600.011144][T10664] veth1_macvtap: left promiscuous mode [ 1600.016783][T10664] veth0_macvtap: left promiscuous mode [ 1600.022384][T10664] veth1_vlan: left promiscuous mode [ 1600.028188][T10664] veth0_vlan: left promiscuous mode [ 1600.167724][ T5239] Bluetooth: hci3: command tx timeout [ 1600.173194][T11398] Bluetooth: hci2: command tx timeout [ 1602.690692][T32421] veth0_vlan: entered promiscuous mode [ 1603.033797][T32394] veth0_macvtap: entered promiscuous mode [ 1603.058182][T32421] veth1_vlan: entered promiscuous mode [ 1603.097683][T32394] veth1_macvtap: entered promiscuous mode [ 1603.116987][T32692] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5531'. [ 1603.317483][T32539] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1603.362625][T32421] veth0_macvtap: entered promiscuous mode [ 1603.394663][T32539] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1603.424830][T32539] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1603.466896][T32539] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1603.494426][T32421] veth1_macvtap: entered promiscuous mode [ 1603.510041][T32394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1603.532163][T32394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.556174][T32394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1603.575978][T32394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.596638][T32394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1603.622839][T32394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.643832][T32394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1603.665347][T32394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.681588][T32394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1603.693002][T32394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.704570][T32394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1603.762207][T32394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.777303][T32394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.790000][T32394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.800588][T32394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.810558][T32394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.821137][T32394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.831419][T32394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.842505][T32394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.853014][T32394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1603.863570][T32394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1603.874606][T32394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1603.886562][T32540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1603.931154][T32394] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.943536][T32394] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.961081][T32394] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.972356][T32394] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.043632][T32540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1604.102202][T32421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1604.132859][T32421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.150894][T32421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1604.163619][T32421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.176678][T32421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1604.187585][T32421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.198683][T32421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1604.210523][T32421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.221124][T32421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1604.232144][T32421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.242887][T32421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1604.255184][T32421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.267586][T32421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1604.301564][T32710] netlink: 'syz.0.5533': attribute type 21 has an invalid length. [ 1604.316396][T32710] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5533'. [ 1604.327572][T28085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.334734][T28085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1604.382408][T28085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.389567][T28085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1604.431357][T32421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1604.443085][T32421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.453295][T32421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1604.465500][T32421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.496078][T32421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1604.507392][T32421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.517487][T32421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1604.528516][T32421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.539794][T32421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1604.550367][T32421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.560567][T32421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1604.572175][T32421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1604.583549][T32421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1604.634726][T10669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.649763][T32421] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.654812][T10669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.661198][T32421] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.680491][T32421] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.681605][ T29] audit: type=1326 audit(1728110723.404:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32714 comm="syz.0.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1604.689311][T32421] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.721222][ T29] audit: type=1326 audit(1728110723.404:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32714 comm="syz.0.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1604.766147][ T29] audit: type=1326 audit(1728110723.404:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32714 comm="syz.0.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1604.788957][ T29] audit: type=1326 audit(1728110723.404:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32714 comm="syz.0.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1604.812012][ T29] audit: type=1326 audit(1728110723.404:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32714 comm="syz.0.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1604.842340][ T29] audit: type=1326 audit(1728110723.404:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32714 comm="syz.0.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1604.873118][T32539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1604.890903][ T29] audit: type=1326 audit(1728110723.404:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32714 comm="syz.0.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1604.914263][ T29] audit: type=1326 audit(1728110723.404:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32714 comm="syz.0.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1604.938113][ T29] audit: type=1326 audit(1728110723.404:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32714 comm="syz.0.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1604.963825][ T29] audit: type=1326 audit(1728110723.404:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32714 comm="syz.0.5534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f096b77dff9 code=0x7ffc0000 [ 1605.004484][T32539] 8021q: adding VLAN 0 to HW filter on device team0 [ 1605.036488][T10664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1605.045634][T10664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.085276][T10666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.092476][T10666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1605.127615][T10666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.134793][T10666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1605.282535][ T5639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1605.314232][ T5639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.392809][T32540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1605.419576][T28088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1605.427663][T28088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.539440][T32540] veth0_vlan: entered promiscuous mode [ 1605.568642][T32539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1605.621702][T32540] veth1_vlan: entered promiscuous mode [ 1605.723866][T32540] veth0_macvtap: entered promiscuous mode [ 1605.783842][T32540] veth1_macvtap: entered promiscuous mode [ 1605.814715][T32539] veth0_vlan: entered promiscuous mode [ 1605.844170][T32540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1605.863654][T32540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1605.875963][ T5283] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1605.892661][T32540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1605.906231][T32540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1605.924137][T32540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1605.935373][T32540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1605.953421][T32540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1605.964742][T32540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1605.980465][T32540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1605.992038][T32540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.012247][T32540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.024114][T32540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.027403][ T5283] usb 5-1: config 0 has an invalid interface number: 108 but max is 0 [ 1606.042925][T32540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1606.054234][T32540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.067035][T32540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1606.087096][ T5283] usb 5-1: config 0 has no interface number 0 [ 1606.094083][ T5283] usb 5-1: config 0 interface 108 altsetting 231 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1606.096502][T32539] veth1_vlan: entered promiscuous mode [ 1606.116162][ T5283] usb 5-1: config 0 interface 108 altsetting 231 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1606.127000][ T5283] usb 5-1: config 0 interface 108 has no altsetting 0 [ 1606.133960][ T5283] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1606.157550][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.181083][T32540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.225921][T32540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.237624][ T5283] usb 5-1: config 0 descriptor?? [ 1606.268274][T32540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.321573][T32540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.363418][T32540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.395085][T32540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.444449][T32540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.505986][T32540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.522673][T32540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.579151][T32540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.596000][T32540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.607853][T32540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.618085][T32540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1606.628974][T32540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1606.654610][ T5283] uclogic 0003:5543:0522.0061: unknown main item tag 0x0 [ 1606.666046][T32540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1606.675397][ T5283] uclogic 0003:5543:0522.0061: unknown main item tag 0x0 [ 1606.676199][T32749] netlink: 'syz.3.5543': attribute type 12 has an invalid length. [ 1606.696362][ T5283] uclogic 0003:5543:0522.0061: unknown main item tag 0x0 [ 1606.696677][T32746] netlink: 'syz.0.5542': attribute type 10 has an invalid length. [ 1606.703544][ T5283] uclogic 0003:5543:0522.0061: unknown main item tag 0x0 [ 1606.722857][T32749] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.5543'. [ 1606.733625][ T5283] uclogic 0003:5543:0522.0061: unknown main item tag 0x0 [ 1606.742133][T32746] syz_tun: entered promiscuous mode [ 1606.747726][ T5283] uclogic 0003:5543:0522.0061: No inputs registered, leaving [ 1606.767651][ T5283] uclogic 0003:5543:0522.0061: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input108 [ 1606.770861][T32746] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1606.807040][T32540] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.830271][T32540] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.840423][T32540] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.849244][T32540] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.067960][T11343] usb 5-1: USB disconnect, device number 90 [ 1607.074046][ T5639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.090862][ T5639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.102242][T32539] veth0_macvtap: entered promiscuous mode [ 1607.149579][T32539] veth1_macvtap: entered promiscuous mode [ 1607.237021][ T5639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.263534][ T5639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.289266][T32539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.314098][T32539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.334839][T32539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.345473][T32539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.356464][T32539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.367057][T32539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.377771][T32539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.397443][T32539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.410186][T32539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.420796][T32539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.430776][T32539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.443550][T32539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.453530][T32539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.464109][T32539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.473986][T32539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.484754][T32539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.497764][T32539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1607.511362][T32539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.546021][T32539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.572909][T32539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.597172][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.603946][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.610620][ T25] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1607.622723][T32539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.676406][T32539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.697286][T32539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.735888][T32539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.765893][T32539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.778690][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1607.785892][T32539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.795913][ T25] usb 5-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 1607.829143][T32539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.850935][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.859569][T32539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.876998][ T25] usb 5-1: config 0 descriptor?? [ 1607.905815][T32539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.945859][T32539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.965912][T32539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.985863][T32539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.005974][T32539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.027281][T32539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1608.048964][T32539] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.058359][T32539] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.067436][T32539] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.076928][T32539] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.301642][ T25] hid-steam 0003:28DE:1205.0062: : USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.4-1/input0 [ 1608.384329][ T25] hid-steam 0003:28DE:1205.0062: Steam Controller 'XXXXXXXXXX' connected [ 1608.393795][ T300] dccp_close: ABORT with 69 bytes unread [ 1608.403797][T28088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.450296][T28088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1608.474408][ T25] input: Steam Deck as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1205.0062/input/input98 [ 1608.531986][T10669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.541842][T10669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1608.579057][ T25] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1205.0062/input/input99 [ 1608.718676][ T25] hid-steam 0003:28DE:1205.0063: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.4-1/input0 [ 1608.813944][ T25] usb 5-1: USB disconnect, device number 91 [ 1608.927123][ T25] hid-steam 0003:28DE:1205.0062: Steam Controller 'XXXXXXXXXX' disconnected [ 1608.943856][ T324] team0: entered promiscuous mode [ 1608.954727][ T324] team_slave_0: entered promiscuous mode [ 1608.964870][ T324] team_slave_1: entered promiscuous mode [ 1608.971640][ T324] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1608.981095][ T324] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1609.195417][ T329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5556'. [ 1609.602881][ T342] vlan2: entered promiscuous mode [ 1609.608392][ T342] ip6gretap0: entered promiscuous mode [ 1609.613999][ T342] vlan2: entered allmulticast mode [ 1609.631276][ T342] ip6gretap0: entered allmulticast mode [ 1609.649438][ T342] ip6gretap0: left allmulticast mode [ 1609.675473][ T342] ip6gretap0: left promiscuous mode [ 1609.885182][ T353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5565'. [ 1610.305910][ T5300] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1610.319019][ T364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1610.415920][T11343] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1610.486719][ T5300] usb 2-1: too many configurations: 208, using maximum allowed: 8 [ 1610.504834][ T5300] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1610.513785][ T5300] usb 2-1: can't read configurations, error -61 [ 1610.520738][ T368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5571'. [ 1610.534506][ T368] FAULT_INJECTION: forcing a failure. [ 1610.534506][ T368] name failslab, interval 1, probability 0, space 0, times 0 [ 1610.548511][ T368] CPU: 1 UID: 0 PID: 368 Comm: syz.4.5571 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1610.559163][ T368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1610.569248][ T368] Call Trace: [ 1610.572538][ T368] [ 1610.574106][T11343] usb 3-1: device descriptor read/64, error -71 [ 1610.575464][ T368] dump_stack_lvl+0x241/0x360 [ 1610.586385][ T368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1610.591598][ T368] ? __pfx__printk+0x10/0x10 [ 1610.596212][ T368] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1610.602219][ T368] ? __pfx___might_resched+0x10/0x10 [ 1610.607526][ T368] ? aa_label_sk_perm+0x4f3/0x6c0 [ 1610.612573][ T368] should_fail_ex+0x3b0/0x4e0 [ 1610.617281][ T368] should_failslab+0xac/0x100 [ 1610.621987][ T368] ? __alloc_skb+0x1c3/0x440 [ 1610.626596][ T368] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1610.632426][ T368] __alloc_skb+0x1c3/0x440 [ 1610.636865][ T368] ? __pfx___alloc_skb+0x10/0x10 [ 1610.641828][ T368] netlink_sendmsg+0x638/0xcb0 [ 1610.646619][ T368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1610.651924][ T368] ? aa_sock_msg_perm+0x91/0x160 [ 1610.656888][ T368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1610.657161][ T5300] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1610.662173][ T368] __sock_sendmsg+0x221/0x270 [ 1610.662207][ T368] __sys_sendto+0x39b/0x4f0 [ 1610.662230][ T368] ? __pfx___sys_sendto+0x10/0x10 [ 1610.683938][ T368] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1610.689620][ T368] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1610.695628][ T368] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1610.701971][ T368] __x64_sys_sendto+0xde/0x100 [ 1610.706759][ T368] do_syscall_64+0xf3/0x230 [ 1610.711358][ T368] ? clear_bhb_loop+0x35/0x90 [ 1610.716036][ T368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.721952][ T368] RIP: 0033:0x7f432dd7fe8c [ 1610.726382][ T368] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 1610.746013][ T368] RSP: 002b:00007f432ebbcec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1610.754447][ T368] RAX: ffffffffffffffda RBX: 00007f432ebbcfc0 RCX: 00007f432dd7fe8c [ 1610.762426][ T368] RDX: 0000000000000020 RSI: 00007f432ebbd010 RDI: 0000000000000003 [ 1610.770436][ T368] RBP: 0000000000000000 R08: 00007f432ebbcf14 R09: 000000000000000c [ 1610.778435][ T368] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1610.786427][ T368] R13: 00007f432ebbcf68 R14: 00007f432ebbd010 R15: 0000000000000000 [ 1610.794421][ T368] [ 1610.797540][ C1] vkms_vblank_simulate: vblank timer overrun [ 1610.826119][T11343] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1610.837040][ T5300] usb 2-1: too many configurations: 208, using maximum allowed: 8 [ 1610.847852][ T5300] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1610.855957][ T5300] usb 2-1: can't read configurations, error -61 [ 1610.875665][ T5300] usb usb2-port1: attempt power cycle [ 1610.938623][ T374] netlink: 'syz.3.5574': attribute type 10 has an invalid length. [ 1610.957649][ T374] syz_tun: entered promiscuous mode [ 1610.972524][ T374] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1610.976149][T11343] usb 3-1: device descriptor read/64, error -71 [ 1611.021598][ T376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5575'. [ 1611.098026][T11343] usb usb3-port1: attempt power cycle [ 1611.246485][T31577] bond0: (slave syz_tun): Releasing backup interface [ 1611.255914][ T5300] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1611.279716][ T5300] usb 2-1: too many configurations: 208, using maximum allowed: 8 [ 1611.297469][ T5300] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1611.306402][ T5300] usb 2-1: can't read configurations, error -61 [ 1611.324132][ T387] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5581'. [ 1611.369818][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.446679][ T5300] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1611.454484][T11343] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1611.476898][T11343] usb 3-1: device descriptor read/8, error -71 [ 1611.483975][ T5300] usb 2-1: too many configurations: 208, using maximum allowed: 8 [ 1611.494783][ T5300] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1611.498870][T10664] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.506335][ T5300] usb 2-1: can't read configurations, error -61 [ 1611.548043][ T5300] usb usb2-port1: unable to enumerate USB device [ 1611.708122][T10664] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.715910][T11343] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1611.756923][T11343] usb 3-1: device descriptor read/8, error -71 [ 1611.837421][T10664] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.866232][ T397] netlink: 'syz.4.5587': attribute type 3 has an invalid length. [ 1611.886873][T11343] usb usb3-port1: unable to enumerate USB device [ 1611.921776][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1611.934714][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1611.947911][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1611.977458][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1611.985249][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1611.995730][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1612.035095][T10664] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.578902][ T5297] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1612.788589][ T5297] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1612.798759][ T5297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.822687][ T5297] usb 5-1: Product: syz [ 1612.827010][ T5297] usb 5-1: Manufacturer: syz [ 1612.831630][ T5297] usb 5-1: SerialNumber: syz [ 1612.853635][ T5297] usb 5-1: config 0 descriptor?? [ 1613.079501][ T5297] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1613.201314][ T5297] usb 5-1: USB disconnect, device number 92 [ 1613.230631][T10664] bond0 (unregistering): Released all slaves [ 1613.256293][ T401] chnl_net:caif_netlink_parms(): no params data found [ 1613.773774][ T401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.796480][ T401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.804110][ T401] bridge_slave_0: entered allmulticast mode [ 1613.812962][ T401] bridge_slave_0: entered promiscuous mode [ 1613.834776][ T401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.850316][ T401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.867789][ T401] bridge_slave_1: entered allmulticast mode [ 1613.882367][ T401] bridge_slave_1: entered promiscuous mode [ 1614.082218][T11398] Bluetooth: hci4: command tx timeout [ 1614.197946][ T460] bridge_slave_0: left allmulticast mode [ 1614.215961][ T460] bridge_slave_0: left promiscuous mode [ 1614.232216][ T460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.261427][ T460] bridge_slave_1: left allmulticast mode [ 1614.271245][ T460] bridge_slave_1: left promiscuous mode [ 1614.287074][ T460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.302001][ T460] bond0: (slave bond_slave_0): Releasing backup interface [ 1614.332730][ T460] bond0: (slave bond_slave_1): Releasing backup interface [ 1614.359750][ T460] team_slave_0: left promiscuous mode [ 1614.372032][ T472] program syz.2.5607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1614.439889][ T460] team0: Port device team_slave_0 removed [ 1614.457176][ T460] team_slave_1: left promiscuous mode [ 1614.477911][ T460] team0: Port device team_slave_1 removed [ 1614.484707][ T460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1614.492437][ T460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1614.504202][ T460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1614.512557][ T460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1614.530738][ T460] bond0: (slave macvlan2): Releasing backup interface [ 1614.539636][ T460] team0: left promiscuous mode [ 1614.565896][T24021] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1614.573666][ T401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.598433][ T401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1614.661130][T10664] hsr_slave_0: left promiscuous mode [ 1614.677107][T10664] hsr_slave_1: left promiscuous mode [ 1614.704208][ T480] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5609'. [ 1614.709601][T10664] veth1_macvtap: left promiscuous mode [ 1614.733555][T10664] veth0_macvtap: left promiscuous mode [ 1614.746498][T10664] veth1_vlan: left promiscuous mode [ 1614.747760][T24021] usb 4-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 1614.751826][T10664] veth0_vlan: left promiscuous mode [ 1614.765861][T24021] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.800643][T24021] usb 4-1: config 0 descriptor?? [ 1614.990403][ T487] dccp_close: ABORT with 32 bytes unread [ 1615.245150][T24021] aquacomputer_d5next 0003:0C70:F010.0064: hidraw0: USB HID vff.fd Device [HID 0c70:f010] on usb-dummy_hcd.3-1/input0 [ 1615.343192][ T495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1615.496115][ T5297] usb 4-1: USB disconnect, device number 87 [ 1615.716182][ T25] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1615.866595][ T25] usb 3-1: device descriptor read/64, error -71 [ 1616.014711][ T501] binder: 499:501 unknown command 0 [ 1616.022476][ T501] binder: 499:501 ioctl c0306201 200001c0 returned -22 [ 1616.116993][ T25] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1616.164736][T11398] Bluetooth: hci4: command tx timeout [ 1616.276583][ T25] usb 3-1: device descriptor read/64, error -71 [ 1616.356053][ T5300] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1616.401108][ T25] usb usb3-port1: attempt power cycle [ 1616.531537][ T5300] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1616.557140][ T5300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.565427][ T5300] usb 4-1: Product: syz [ 1616.585874][ T5300] usb 4-1: Manufacturer: syz [ 1616.590530][ T5300] usb 4-1: SerialNumber: syz [ 1616.598945][ T5300] usb 4-1: config 0 descriptor?? [ 1616.754766][ T25] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1616.796114][ T25] usb 3-1: device descriptor read/8, error -71 [ 1616.854254][ T5300] usb 4-1: f81604_write: reg: 105 data: a8 failed: -EPROTO [ 1616.886613][ T5300] f81604 4-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1616.894156][ T5300] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 1616.939621][ T5300] usb 4-1: USB disconnect, device number 88 [ 1617.036421][ T25] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1617.067028][ T25] usb 3-1: device descriptor read/8, error -71 [ 1617.119909][ T525] netlink: 'syz.1.5618': attribute type 10 has an invalid length. [ 1617.156208][ T525] syz_tun: entered promiscuous mode [ 1617.179216][ T25] usb usb3-port1: unable to enumerate USB device [ 1617.186988][ T525] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1617.243143][ T401] team0: Port device team_slave_0 added [ 1617.296008][ T538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5622'. [ 1617.309619][ T401] team0: Port device team_slave_1 added [ 1617.317010][ T534] netlink: 'syz.3.5620': attribute type 1 has an invalid length. [ 1617.324852][ T534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5620'. [ 1617.481900][ T542] netlink: 'syz.4.5623': attribute type 3 has an invalid length. [ 1617.484892][ T401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1617.516131][ T548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5625'. [ 1617.519488][ T401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1617.551039][ C0] vkms_vblank_simulate: vblank timer overrun [ 1617.607636][ T401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1617.633714][ T401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1617.666562][ T401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1617.697558][ T401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1617.896462][ T401] hsr_slave_0: entered promiscuous mode [ 1617.916583][ T401] hsr_slave_1: entered promiscuous mode [ 1617.941559][ T401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1617.966148][ T401] Cannot create hsr debugfs directory [ 1618.022587][ T570] netlink: 160 bytes leftover after parsing attributes in process `syz.3.5628'. [ 1618.052546][ T570] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1618.109564][ T574] loop4: detected capacity change from 0 to 2 [ 1618.235995][T11398] Bluetooth: hci4: command tx timeout [ 1618.746840][ T589] netlink: 'syz.3.5634': attribute type 10 has an invalid length. [ 1618.779391][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 1618.779408][ T29] audit: type=1326 audit(1728110737.504:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=583 comm="syz.2.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc3f7dff9 code=0x7ffc0000 [ 1618.817622][ T588] input: syz0 as /devices/virtual/input/input101 [ 1618.991768][ T29] audit: type=1326 audit(1728110737.504:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=583 comm="syz.2.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc3f7dff9 code=0x7ffc0000 [ 1619.014029][ C0] vkms_vblank_simulate: vblank timer overrun [ 1619.083012][ T29] audit: type=1326 audit(1728110737.544:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=583 comm="syz.2.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fbdc3f7dff9 code=0x7ffc0000 [ 1619.178856][ T603] bond0: (slave syz_tun): Releasing backup interface [ 1619.205736][ T29] audit: type=1326 audit(1728110737.544:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=583 comm="syz.2.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc3f7dff9 code=0x7ffc0000 [ 1619.212918][ T609] netlink: 'syz.1.5636': attribute type 3 has an invalid length. [ 1619.247839][ T29] audit: type=1326 audit(1728110737.544:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=583 comm="syz.2.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc3f7dff9 code=0x7ffc0000 [ 1619.287777][ T603] bridge_slave_0: left allmulticast mode [ 1619.310978][ T603] bridge_slave_0: left promiscuous mode [ 1619.311993][ T29] audit: type=1326 audit(1728110737.544:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=583 comm="syz.2.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdc3f7dff9 code=0x7ffc0000 [ 1619.329342][ T603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1619.352807][ T29] audit: type=1326 audit(1728110737.614:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=583 comm="syz.2.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc3f7dff9 code=0x7ffc0000 [ 1619.389327][ T603] bridge_slave_1: left allmulticast mode [ 1619.405930][ T29] audit: type=1326 audit(1728110737.614:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=583 comm="syz.2.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc3f7dff9 code=0x7ffc0000 [ 1619.406505][ T603] bridge_slave_1: left promiscuous mode [ 1619.463568][ T603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.468590][ T29] audit: type=1326 audit(1728110737.614:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=583 comm="syz.2.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbdc3f7dff9 code=0x7ffc0000 [ 1619.504855][ T603] bond0: (slave bond_slave_0): Releasing backup interface [ 1619.511515][ T29] audit: type=1326 audit(1728110737.654:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=583 comm="syz.2.5633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc3f7dff9 code=0x7ffc0000 [ 1619.561224][ T603] bond0: (slave bond_slave_1): Releasing backup interface [ 1619.617527][ T603] team0: Port device team_slave_0 removed [ 1619.658263][ T603] team0: Port device team_slave_1 removed [ 1619.669892][ T603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1619.696308][ T603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1619.722431][ T603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1619.731649][ T603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1619.914998][ T631] FAULT_INJECTION: forcing a failure. [ 1619.914998][ T631] name failslab, interval 1, probability 0, space 0, times 0 [ 1619.945180][ T631] CPU: 0 UID: 0 PID: 631 Comm: syz.4.5641 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1619.955824][ T631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1619.965897][ T631] Call Trace: [ 1619.969173][ T631] [ 1619.972098][ T631] dump_stack_lvl+0x241/0x360 [ 1619.976777][ T631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1619.981965][ T631] ? __pfx__printk+0x10/0x10 [ 1619.986551][ T631] ? ref_tracker_alloc+0x332/0x490 [ 1619.991681][ T631] should_fail_ex+0x3b0/0x4e0 [ 1619.996405][ T631] ? skb_clone+0x20c/0x390 [ 1620.000851][ T631] should_failslab+0xac/0x100 [ 1620.005566][ T631] ? skb_clone+0x20c/0x390 [ 1620.010093][ T631] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1620.015489][ T631] skb_clone+0x20c/0x390 [ 1620.019726][ T631] __netlink_deliver_tap+0x3cc/0x7c0 [ 1620.025016][ T631] ? netlink_deliver_tap+0x2e/0x1b0 [ 1620.030206][ T631] netlink_deliver_tap+0x19d/0x1b0 [ 1620.035313][ T631] netlink_unicast+0x7c4/0x990 [ 1620.040076][ T631] ? __pfx_netlink_unicast+0x10/0x10 [ 1620.045355][ T631] ? __virt_addr_valid+0x183/0x530 [ 1620.050477][ T631] ? __check_object_size+0x48e/0x900 [ 1620.055789][ T631] netlink_sendmsg+0x8e4/0xcb0 [ 1620.060588][ T631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1620.065897][ T631] ? aa_sock_msg_perm+0x91/0x160 [ 1620.070865][ T631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1620.076178][ T631] __sock_sendmsg+0x221/0x270 [ 1620.080895][ T631] ____sys_sendmsg+0x52a/0x7e0 [ 1620.085699][ T631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1620.091030][ T631] __sys_sendmsg+0x292/0x380 [ 1620.095652][ T631] ? __pfx___sys_sendmsg+0x10/0x10 [ 1620.100803][ T631] ? __pfx_vfs_write+0x10/0x10 [ 1620.105608][ T631] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1620.111972][ T631] ? do_syscall_64+0x100/0x230 [ 1620.116773][ T631] ? do_syscall_64+0xb6/0x230 [ 1620.121480][ T631] do_syscall_64+0xf3/0x230 [ 1620.126012][ T631] ? clear_bhb_loop+0x35/0x90 [ 1620.130725][ T631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.136652][ T631] RIP: 0033:0x7f432dd7dff9 [ 1620.141091][ T631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1620.160735][ T631] RSP: 002b:00007f432ebbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1620.169186][ T631] RAX: ffffffffffffffda RBX: 00007f432df35f80 RCX: 00007f432dd7dff9 [ 1620.177192][ T631] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 1620.185199][ T631] RBP: 00007f432ebbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1620.193207][ T631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1620.201219][ T631] R13: 0000000000000000 R14: 00007f432df35f80 R15: 00007f432e05fa28 [ 1620.209241][ T631] [ 1620.212314][ C0] vkms_vblank_simulate: vblank timer overrun [ 1620.238454][ T631] netlink: 'syz.4.5641': attribute type 3 has an invalid length. [ 1620.326209][T11398] Bluetooth: hci4: command tx timeout [ 1620.433570][ T642] netlink: 'syz.2.5644': attribute type 10 has an invalid length. [ 1620.468443][ T642] syz_tun: entered promiscuous mode [ 1620.526579][ T642] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1620.732266][ T401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1620.769584][ T401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1620.797499][ T401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1620.806899][ T25] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1620.817602][ T401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1621.017707][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 1621.035575][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1621.075884][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1621.077276][ T401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1621.085559][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1621.104325][ T25] usb 2-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 1621.126365][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.153227][ T25] usb 2-1: Product: syz [ 1621.159684][ T25] usb 2-1: Manufacturer: syz [ 1621.164327][ T25] usb 2-1: SerialNumber: syz [ 1621.179343][ T664] bridge_slave_0: left allmulticast mode [ 1621.185048][ T664] bridge_slave_0: left promiscuous mode [ 1621.193124][ T25] usb 2-1: config 0 descriptor?? [ 1621.205154][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.217076][ T25] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 1621.233368][ T664] bridge_slave_1: left promiscuous mode [ 1621.240498][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1621.262888][ T664] bond0: (slave bond_slave_0): Releasing backup interface [ 1621.281601][ T664] bond0: (slave bond_slave_1): Releasing backup interface [ 1621.334088][ T664] team0: Port device team_slave_0 removed [ 1621.375677][ T664] team0: Port device team_slave_1 removed [ 1621.391503][ T664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1621.411496][ T664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1621.434215][ T664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1621.454470][ T664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1621.484206][ T663] netlink: 'syz.2.5652': attribute type 10 has an invalid length. [ 1621.523017][ T663] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1621.569462][ T671] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 1621.690044][ T5284] usb 2-1: USB disconnect, device number 100 [ 1621.753447][ T401] 8021q: adding VLAN 0 to HW filter on device team0 [ 1621.782180][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1621.789333][ T5639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1621.910503][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1621.917699][ T5639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1621.960945][ T700] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 1621.967597][ T700] PKCS7: Only support pkcs7_signedData type [ 1621.984103][ T697] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3) [ 1622.023171][ T401] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1622.034094][ T401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1622.138322][ T401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1622.192853][ T699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.235610][ T707] netlink: 'syz.2.5657': attribute type 10 has an invalid length. [ 1622.261481][ T699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1622.326544][ T25] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1622.618191][ T401] veth0_vlan: entered promiscuous mode [ 1622.686444][ T401] veth1_vlan: entered promiscuous mode [ 1622.798973][ T728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5662'. [ 1622.801434][ T730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.819820][ T401] veth0_macvtap: entered promiscuous mode [ 1622.859818][ T401] veth1_macvtap: entered promiscuous mode [ 1622.880791][ T730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1622.921340][ T401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1622.973748][ T401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.020428][ T401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1623.045302][ T401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.056012][ T5281] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1623.056765][ T401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1623.079943][ T401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.091173][ T401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1623.114239][ T401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.131791][ T401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1623.142798][ T401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.173881][ T401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1623.195071][ T401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.212820][ T401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1623.226335][ T51] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1623.242293][ T401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1623.257970][ T5281] usb 4-1: Using ep0 maxpacket: 32 [ 1623.267823][ T401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.282012][ T401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1623.296640][ T401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.306990][ T5281] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1623.336937][ T401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1623.339310][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.375461][ T5281] usb 4-1: Product: syz [ 1623.384795][ T401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.384828][ T5281] usb 4-1: Manufacturer: syz [ 1623.407000][ T51] usb 2-1: Using ep0 maxpacket: 16 [ 1623.412984][ T401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1623.419846][ T5281] usb 4-1: SerialNumber: syz [ 1623.430081][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1623.442308][ T401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.452786][ T401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1623.461567][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1623.475938][ T401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.486816][ T401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1623.496175][ T25] usb 5-1: device descriptor read/64, error -71 [ 1623.504851][ T51] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1623.521227][ T51] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 1623.532993][ T401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.533510][ T51] usb 2-1: Product: syz [ 1623.551544][ T5281] usb 4-1: config 0 descriptor?? [ 1623.562710][ T401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1623.594627][ T51] usb 2-1: Manufacturer: syz [ 1623.620272][ T401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.630821][ T51] usb 2-1: config 0 descriptor?? [ 1623.651282][ T401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.667866][ T401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.685963][ T401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.746823][ T25] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1623.791424][ T5281] airspy 4-1:0.0: usb_control_msg() failed -71 request 09 [ 1623.816079][ T5281] airspy 4-1:0.0: Could not detect board [ 1623.832107][ T5281] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 1623.878950][ T5281] usb 4-1: USB disconnect, device number 89 [ 1623.926564][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1623.971053][ T25] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1623.981100][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.990875][ T25] usb 5-1: Product: syz [ 1623.995086][ T25] usb 5-1: Manufacturer: syz [ 1624.003175][ T25] usb 5-1: SerialNumber: syz [ 1624.016642][ T25] usb 5-1: config 0 descriptor?? [ 1624.029007][ T25] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1624.271071][T10668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1624.302804][T10668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1624.370807][T10669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1624.428932][ T51] usbhid 2-1:0.0: can't add hid device: -71 [ 1624.434804][T10669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1624.437721][ T51] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1624.497729][ T51] usb 2-1: USB disconnect, device number 101 [ 1624.656932][ T779] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1624.810828][ T785] netlink: 'syz.2.5669': attribute type 10 has an invalid length. [ 1625.146066][ T25] gspca_ov534_9: reg_w failed -110 [ 1625.203570][ T801] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1625.224459][ T801] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 1625.235974][T24021] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1625.385912][T24021] usb 2-1: Using ep0 maxpacket: 32 [ 1625.420821][T24021] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1625.433147][ T810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5676'. [ 1625.448766][T24021] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1625.465910][ T25] gspca_ov534_9: Unknown sensor 0000 [ 1625.465983][ T25] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1625.495098][T24021] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1625.504390][ T25] usb 5-1: USB disconnect, device number 94 [ 1625.555842][T24021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.587881][T24021] usb 2-1: config 0 descriptor?? [ 1625.614487][T24021] hub 2-1:0.0: bad descriptor, ignoring hub [ 1625.634977][T24021] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1625.687224][T24021] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1625.729461][ T810] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5676'. [ 1625.859754][ T791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1625.887505][ T830] netlink: 'syz.0.5682': attribute type 10 has an invalid length. [ 1625.919616][ T830] syz_tun: entered promiscuous mode [ 1625.930019][ T791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1625.962224][ T830] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1626.058212][T24021] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1626.092893][ T837] ip6t_rpfilter: unknown options [ 1626.208621][T24021] usb 5-1: device descriptor read/64, error -71 [ 1626.446087][T24021] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1626.556695][ T25] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1626.586098][T24021] usb 5-1: device descriptor read/64, error -71 [ 1626.696315][T24021] usb usb5-port1: attempt power cycle [ 1626.716327][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 1626.727857][ T25] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1626.745829][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.756574][ T5281] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1626.765129][ T25] usb 4-1: Product: syz [ 1626.770421][ T25] usb 4-1: Manufacturer: syz [ 1626.775397][ T25] usb 4-1: SerialNumber: syz [ 1626.791323][ T25] usb 4-1: config 0 descriptor?? [ 1626.805563][ T25] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1626.945993][ T5281] usb 1-1: Using ep0 maxpacket: 32 [ 1626.958494][ T5281] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=d6.3f [ 1626.969244][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.977416][ T5281] usb 1-1: Product: syz [ 1626.982174][ T5281] usb 1-1: Manufacturer: syz [ 1626.986951][ T5281] usb 1-1: SerialNumber: syz [ 1626.994462][ T5281] usb 1-1: config 0 descriptor?? [ 1627.046006][T24021] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1627.083452][T24021] usb 5-1: device descriptor read/8, error -71 [ 1627.208641][ T849] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 1627.261100][ T5300] usb 1-1: USB disconnect, device number 77 [ 1627.327456][T24021] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1627.356530][T24021] usb 5-1: device descriptor read/8, error -71 [ 1627.466222][T24021] usb usb5-port1: unable to enumerate USB device [ 1627.660090][T32540] bond0: (slave syz_tun): Releasing backup interface [ 1627.869921][T10664] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.918193][ T25] gspca_ov534_9: reg_w failed -110 [ 1628.019840][T10664] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.055168][ T863] netlink: 'syz.0.5696': attribute type 10 has an invalid length. [ 1628.211008][T10664] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.238437][ T25] gspca_ov534_9: Unknown sensor 0000 [ 1628.238511][ T25] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1628.264065][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1628.279145][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1628.281935][ T25] usb 4-1: USB disconnect, device number 90 [ 1628.286575][ T5300] usb 2-1: USB disconnect, device number 102 [ 1628.301559][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1628.318048][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1628.329950][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1628.338649][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1628.482691][T10664] bond0: (slave ): Releasing backup interface [ 1628.501320][T10664] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.535476][ T887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5700'. [ 1628.779547][ T896] vlan2: entered promiscuous mode [ 1628.784789][ T896] vlan2: entered allmulticast mode [ 1628.843953][ T5300] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1628.880542][T10664] bridge_slave_1: left allmulticast mode [ 1628.888971][T10664] bridge_slave_1: left promiscuous mode [ 1628.914699][T10664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.967644][T10664] bridge_slave_0: left allmulticast mode [ 1628.973375][T10664] bridge_slave_0: left promiscuous mode [ 1629.008612][T10664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.016772][ T5300] usb 1-1: Using ep0 maxpacket: 16 [ 1629.039040][ T5300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.060723][ T5300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.093861][ T5300] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1629.126559][ T5300] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 1629.146639][ T5300] usb 1-1: Product: syz [ 1629.152051][ T5300] usb 1-1: Manufacturer: syz [ 1629.178083][ T5300] usb 1-1: config 0 descriptor?? [ 1629.285953][T24021] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1629.445916][T24021] usb 5-1: Using ep0 maxpacket: 32 [ 1629.457216][T24021] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1629.466544][T24021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.474713][T24021] usb 5-1: Product: syz [ 1629.480298][T24021] usb 5-1: Manufacturer: syz [ 1629.485115][T24021] usb 5-1: SerialNumber: syz [ 1629.494817][T24021] usb 5-1: config 0 descriptor?? [ 1629.506667][T24021] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1629.627293][ T5300] kovaplus 0003:1E7D:2D50.0065: unknown main item tag 0xd [ 1629.650175][ T5300] kovaplus 0003:1E7D:2D50.0065: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 1629.970787][T10664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1629.985439][T10664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1629.997196][T10664] bond0 (unregistering): Released all slaves [ 1630.211659][ T875] chnl_net:caif_netlink_parms(): no params data found [ 1630.319708][ T937] ptrace attach of "./syz-executor exec"[32539] was attempted by "./syz-executor exec"[937] [ 1630.358842][ T935] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5711'. [ 1630.379067][ T935] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1630.396290][T11398] Bluetooth: hci2: command tx timeout [ 1630.403976][ T935] 0ªX¹¦Dö»: entered allmulticast mode [ 1630.524243][ T935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5711'. [ 1630.625982][T24021] gspca_ov534_9: reg_w failed -110 [ 1630.876038][ T5281] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1630.916697][T24021] gspca_ov534_9: Unknown sensor 0000 [ 1630.916802][T24021] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1630.922647][ T957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5713'. [ 1630.971332][ T5300] kovaplus 0003:1E7D:2D50.0065: couldn't init struct kovaplus_device [ 1631.003286][T24021] usb 5-1: USB disconnect, device number 99 [ 1631.018999][ T5300] kovaplus 0003:1E7D:2D50.0065: couldn't install mouse [ 1631.055918][ T5281] usb 2-1: Using ep0 maxpacket: 8 [ 1631.064498][ T5300] kovaplus 0003:1E7D:2D50.0065: probe with driver kovaplus failed with error -71 [ 1631.081008][ T5281] usb 2-1: too many configurations: 197, using maximum allowed: 8 [ 1631.122325][ T5281] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1631.134336][ T5300] usb 1-1: USB disconnect, device number 78 [ 1631.152765][ T5281] usb 2-1: can't read configurations, error -61 [ 1631.225958][ T875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.249416][ T875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.273486][ T875] bridge_slave_0: entered allmulticast mode [ 1631.303516][ T875] bridge_slave_0: entered promiscuous mode [ 1631.342385][ T5281] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1631.438484][T10664] hsr_slave_0: left promiscuous mode [ 1631.455385][T10664] hsr_slave_1: left promiscuous mode [ 1631.462103][T10664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1631.475886][T24021] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1631.485902][T10664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1631.506674][T10664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1631.507004][ T972] dccp_close: ABORT with 1 bytes unread [ 1631.514127][T10664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1631.527178][ T5281] usb 2-1: Using ep0 maxpacket: 8 [ 1631.546002][ T5281] usb 2-1: too many configurations: 197, using maximum allowed: 8 [ 1631.564652][ T5281] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1631.594852][ T5281] usb 2-1: can't read configurations, error -61 [ 1631.605257][ T5281] usb usb2-port1: attempt power cycle [ 1631.626993][T10664] veth1_macvtap: left promiscuous mode [ 1631.632555][T10664] veth0_macvtap: left promiscuous mode [ 1631.637330][T24021] usb 5-1: config 7 descriptor has 1 excess byte, ignoring [ 1631.646265][T10664] veth1_vlan: left promiscuous mode [ 1631.656144][T10664] veth0_vlan: left promiscuous mode [ 1631.672183][T24021] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1631.699289][T24021] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1631.716426][T24021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.747602][T24021] usb 5-1: Product: syz [ 1631.751820][T24021] usb 5-1: Manufacturer: syz [ 1631.784450][T24021] usb 5-1: SerialNumber: syz [ 1631.800682][T24021] rndis_host 5-1:7.0: skipping garbage [ 1631.820048][T24021] usb 5-1: bad CDC descriptors [ 1631.830183][T24021] option 5-1:7.0: GSM modem (1-port) converter detected [ 1631.995326][ T5281] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1632.014264][T24021] usb 5-1: USB disconnect, device number 100 [ 1632.032382][T24021] option 5-1:7.0: device disconnected [ 1632.046727][ T5281] usb 2-1: Using ep0 maxpacket: 8 [ 1632.052679][ T5281] usb 2-1: too many configurations: 197, using maximum allowed: 8 [ 1632.116350][ T5281] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1632.123983][ T5281] usb 2-1: can't read configurations, error -61 [ 1632.266090][ T5281] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1632.301314][ T5281] usb 2-1: Using ep0 maxpacket: 8 [ 1632.321262][ T5281] usb 2-1: too many configurations: 197, using maximum allowed: 8 [ 1632.331386][ T5281] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1632.345868][ T5281] usb 2-1: can't read configurations, error -61 [ 1632.356124][ T5281] usb usb2-port1: unable to enumerate USB device [ 1632.476078][T11398] Bluetooth: hci2: command tx timeout [ 1632.918285][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1632.918302][ T29] audit: type=1326 audit(1728110751.644:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=981 comm="syz.4.5719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f432dd7dff9 code=0x0 [ 1633.254129][T10664] team0 (unregistering): Port device team_slave_1 removed [ 1633.280225][T24021] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1633.387248][T10664] team0 (unregistering): Port device team_slave_0 removed [ 1633.494495][T24021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1633.506455][T24021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1633.538329][T24021] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1633.565494][T24021] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1633.591428][T24021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.614807][T24021] usb 5-1: config 0 descriptor?? [ 1633.625331][ T983] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1634.108904][T24021] plantronics 0003:047F:FFFF.0066: unknown main item tag 0xd [ 1634.132277][T24021] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 1634.153683][T24021] plantronics 0003:047F:FFFF.0066: No inputs registered, leaving [ 1634.189547][T24021] plantronics 0003:047F:FFFF.0066: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1634.323781][ T875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1634.333172][ T875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.342685][ T875] bridge_slave_1: entered allmulticast mode [ 1634.360756][ T875] bridge_slave_1: entered promiscuous mode [ 1634.576114][T11398] Bluetooth: hci2: command tx timeout [ 1634.623804][ T875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1634.654828][ T875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1634.770669][ T875] team0: Port device team_slave_0 added [ 1634.798013][ T875] team0: Port device team_slave_1 added [ 1634.949105][ T875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1634.968639][ T875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1635.062810][ T875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1635.099738][ T875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1635.107848][ T875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1635.139878][ T875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1635.171595][ T1012] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1635.202807][ T1012] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 1635.396957][ T875] hsr_slave_0: entered promiscuous mode [ 1635.417012][ T875] hsr_slave_1: entered promiscuous mode [ 1635.440546][ T875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1635.460105][ T875] Cannot create hsr debugfs directory [ 1635.466041][ T51] usb 5-1: reset high-speed USB device number 101 using dummy_hcd [ 1635.804957][ T1052] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5731'. [ 1636.026288][ T5290] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1636.069492][ T1058] pim6reg: entered allmulticast mode [ 1636.089456][ T1063] pim6reg: left allmulticast mode [ 1636.206035][ T5290] usb 2-1: Using ep0 maxpacket: 8 [ 1636.246315][ T5290] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1636.255470][ T5290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.278391][ T5290] usb 2-1: Product: syz [ 1636.282626][ T5290] usb 2-1: Manufacturer: syz [ 1636.289677][ T5290] usb 2-1: SerialNumber: syz [ 1636.296898][ T5290] usb 2-1: config 0 descriptor?? [ 1636.510770][ T5290] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1636.636176][T11398] Bluetooth: hci2: command tx timeout [ 1636.740073][ T5281] usb 5-1: USB disconnect, device number 101 [ 1636.762946][ T875] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1636.787675][ T875] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1636.868333][ T875] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1636.885113][ T875] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1636.903746][ T1100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5742'. [ 1637.187520][ T875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1637.254626][ T875] 8021q: adding VLAN 0 to HW filter on device team0 [ 1637.282308][T10666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.289508][T10666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1637.312698][T28085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.319885][T28085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1637.341447][ T1113] x_tables: duplicate underflow at hook 2 [ 1637.523317][ T875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1637.628076][ T875] veth0_vlan: entered promiscuous mode [ 1637.655102][ T875] veth1_vlan: entered promiscuous mode [ 1637.731566][ T875] veth0_macvtap: entered promiscuous mode [ 1637.749636][ T875] veth1_macvtap: entered promiscuous mode [ 1637.788840][ T875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1637.799897][ T875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1637.823456][ T875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1637.845890][ T875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1637.885915][ T875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1637.927064][ T875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1637.945814][ T875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1637.973471][ T875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1637.989495][ T875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1638.013658][ T875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.038222][ T875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1638.079195][ T875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.113321][ T875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1638.156889][ T1138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5749'. [ 1638.177344][ T5290] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1638.186092][ T1138] netlink: 13 bytes leftover after parsing attributes in process `syz.4.5749'. [ 1638.198848][ T5290] usb 2-1: USB disconnect, device number 107 [ 1638.312149][ T875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1638.323666][ T875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.333886][ T875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1638.344473][ T875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.354779][ T875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1638.365743][ T875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.375840][ T875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1638.386382][ T875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.396556][ T875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1638.407074][ T875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.417294][ T875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1638.427818][ T875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1638.439395][ T875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1638.451100][ T875] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.459980][ T875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.468925][ T875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.477737][ T875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.028539][T10666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.082471][T10666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.151887][T10666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.174449][T10666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.358079][ T1217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5763'. [ 1640.401781][ T1222] netlink: 160 bytes leftover after parsing attributes in process `syz.1.5765'. [ 1640.428136][ T1222] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1640.506158][T24021] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1640.664340][ T5300] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1640.687468][T24021] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 1640.703182][T24021] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1640.714289][T24021] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1640.732510][T24021] usb 5-1: config 0 has no interface number 0 [ 1640.762409][T24021] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1640.787475][T24021] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1640.812893][T24021] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1640.826115][ T5300] usb 3-1: Using ep0 maxpacket: 8 [ 1640.836298][ T5300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1640.847800][ T5300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1640.867648][ T5300] usb 3-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 1640.879503][ T5300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.896061][T24021] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1640.907202][T24021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 1640.915277][T24021] usb 5-1: SerialNumber: syz [ 1640.927477][ T5300] usb 3-1: config 0 descriptor?? [ 1640.936508][T24021] usb 5-1: config 0 descriptor?? [ 1640.951730][T24021] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1641.282110][T24021] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 1641.308331][T24021] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1641.327563][T24021] usb 5-1: MIDIStreaming interface descriptor not found [ 1641.356003][ T1160] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1641.359877][T11398] Bluetooth: hci1: command 0x0c1a tx timeout [ 1641.368481][ T1160] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1641.378392][ T5300] wacom 0003:056A:003F.0067: unknown main item tag 0x0 [ 1641.410614][ T5300] wacom 0003:056A:003F.0067: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.2-1/input0 [ 1641.431417][T24021] usb 5-1: USB disconnect, device number 102 [ 1641.498542][T32737] udevd[32737]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1641.572793][ T5290] usb 3-1: USB disconnect, device number 59 [ 1641.742448][ T1238] Context (ID=0x0) not attached to queue pair (handle=0x1:0x0) [ 1642.197298][ T1160] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1642.212114][ T1160] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1642.266578][ T1160] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1642.279776][ T1160] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1642.324675][ T1160] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1642.345673][ T1160] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1642.389857][ T1160] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1642.416697][ T1160] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1642.498225][ T1293] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5780'. [ 1642.676103][T11343] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1642.841756][T11343] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1642.865291][T11343] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1642.884174][ T1303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5785'. [ 1642.901589][T11343] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1642.917163][T11343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1642.927263][ T1303] netlink: 13 bytes leftover after parsing attributes in process `syz.0.5785'. [ 1642.946745][T11343] usb 2-1: SerialNumber: syz [ 1643.012547][ T1306] netlink: 'syz.4.5786': attribute type 1 has an invalid length. [ 1643.033738][ T1306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5786'. [ 1643.261264][T11343] usb 2-1: 0:2 : does not exist [ 1643.267768][T11343] usb 2-1: unit 5 not found! [ 1643.287227][T11343] usb 2-1: USB disconnect, device number 108 [ 1643.343250][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1643.864054][ T1313] vlan2: entered promiscuous mode [ 1643.891854][ T1313] ip6gretap0: entered promiscuous mode [ 1643.898174][ T1313] vlan2: entered allmulticast mode [ 1643.903462][ T1313] ip6gretap0: entered allmulticast mode [ 1643.916134][ T1319] openvswitch: netlink: Actions may not be safe on all matching packets [ 1643.927449][ T1313] ip6gretap0: left allmulticast mode [ 1643.932787][ T1313] ip6gretap0: left promiscuous mode [ 1644.036875][ T1322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5792'. [ 1644.235632][ T1333] openvswitch: netlink: Actions may not be safe on all matching packets [ 1644.410883][ T1330] block device autoloading is deprecated and will be removed. [ 1644.439822][ T1343] netlink: 'syz.0.5799': attribute type 3 has an invalid length. [ 1644.443318][ T1330] syz.4.5796: attempt to access beyond end of device [ 1644.443318][ T1330] loop41: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1644.469772][ T1343] FAULT_INJECTION: forcing a failure. [ 1644.469772][ T1343] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.509499][ T1343] CPU: 0 UID: 0 PID: 1343 Comm: syz.0.5799 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1644.520237][ T1343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1644.530321][ T1343] Call Trace: [ 1644.533624][ T1343] [ 1644.536577][ T1343] dump_stack_lvl+0x241/0x360 [ 1644.541280][ T1343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1644.546496][ T1343] ? __pfx__printk+0x10/0x10 [ 1644.551117][ T1343] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1644.557121][ T1343] ? __pfx___might_resched+0x10/0x10 [ 1644.562437][ T1343] should_fail_ex+0x3b0/0x4e0 [ 1644.567147][ T1343] should_failslab+0xac/0x100 [ 1644.571853][ T1343] ? __alloc_skb+0x1c3/0x440 [ 1644.576465][ T1343] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1644.582306][ T1343] __alloc_skb+0x1c3/0x440 [ 1644.586753][ T1343] ? __pfx___alloc_skb+0x10/0x10 [ 1644.591730][ T1343] ? netlink_ack_tlv_len+0x6e/0x200 [ 1644.596965][ T1343] netlink_ack+0x13f/0xa30 [ 1644.601408][ T1343] ? __pfx_lock_acquire+0x10/0x10 [ 1644.606460][ T1343] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 1644.611948][ T1343] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1644.617451][ T1343] netlink_rcv_skb+0x262/0x430 [ 1644.622247][ T1343] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1644.627300][ T1343] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1644.632639][ T1343] ? __netlink_deliver_tap+0x77e/0x7c0 [ 1644.638146][ T1343] genl_rcv+0x28/0x40 [ 1644.642152][ T1343] netlink_unicast+0x7f6/0x990 [ 1644.646951][ T1343] ? __pfx_netlink_unicast+0x10/0x10 [ 1644.652263][ T1343] ? __virt_addr_valid+0x183/0x530 [ 1644.657398][ T1343] ? __check_object_size+0x48e/0x900 [ 1644.662714][ T1343] netlink_sendmsg+0x8e4/0xcb0 [ 1644.667512][ T1343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1644.672836][ T1343] ? aa_sock_msg_perm+0x91/0x160 [ 1644.677809][ T1343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1644.683111][ T1343] __sock_sendmsg+0x221/0x270 [ 1644.687825][ T1343] ____sys_sendmsg+0x52a/0x7e0 [ 1644.692633][ T1343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1644.697958][ T1343] __sys_sendmsg+0x292/0x380 [ 1644.702575][ T1343] ? __pfx___sys_sendmsg+0x10/0x10 [ 1644.707721][ T1343] ? __pfx_vfs_write+0x10/0x10 [ 1644.712535][ T1343] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1644.718898][ T1343] ? do_syscall_64+0x100/0x230 [ 1644.723689][ T1343] ? do_syscall_64+0xb6/0x230 [ 1644.728391][ T1343] do_syscall_64+0xf3/0x230 [ 1644.732921][ T1343] ? clear_bhb_loop+0x35/0x90 [ 1644.737624][ T1343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.743543][ T1343] RIP: 0033:0x7f046cf7dff9 [ 1644.747982][ T1343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1644.757902][ T1356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1644.767587][ T1343] RSP: 002b:00007f046de13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1644.767616][ T1343] RAX: ffffffffffffffda RBX: 00007f046d135f80 RCX: 00007f046cf7dff9 [ 1644.767630][ T1343] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 1644.767644][ T1343] RBP: 00007f046de13090 R08: 0000000000000000 R09: 0000000000000000 [ 1644.767657][ T1343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1644.767668][ T1343] R13: 0000000000000000 R14: 00007f046d135f80 R15: 00007f046d25fa28 [ 1644.767694][ T1343] [ 1645.204420][T10668] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.352769][ T1372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5814'. [ 1645.478012][T10668] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.497944][ T1370] netlink: 'syz.0.5813': attribute type 64 has an invalid length. [ 1645.497968][ T1370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5813'. [ 1645.504873][ T1370] netlink: 'syz.0.5813': attribute type 3 has an invalid length. [ 1645.504898][ T1370] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5813'. [ 1645.689686][T10668] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.814674][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1645.827617][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1645.839204][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1645.854080][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1645.863186][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1645.897607][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1645.926735][ T1386] fuse: Bad value for 'fd' [ 1645.992811][T10668] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.079299][ T1383] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5818'. [ 1646.110608][ T1383] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 1646.168176][ T1388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5818'. [ 1648.763533][T10668] bond0 (unregistering): Released all slaves [ 1649.932915][ T1421] fuse: Bad value for 'fd' [ 1649.971871][ T1421] fuse: Bad value for 'fd' [ 1650.461894][T10668] hsr_slave_0: left promiscuous mode [ 1650.482434][T10668] hsr_slave_1: left promiscuous mode [ 1650.517773][T10668] veth1_macvtap: left promiscuous mode [ 1650.533680][T10668] veth0_macvtap: left promiscuous mode [ 1650.543890][T10668] veth1_vlan: left promiscuous mode [ 1650.554004][T10668] veth0_vlan: left promiscuous mode [ 1654.444066][ T1456] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5837'. [ 1654.464047][ T1456] netlink: 13 bytes leftover after parsing attributes in process `syz.2.5837'. [ 1654.857306][ T1476] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5841'. [ 1654.859815][ T1478] ptrace attach of "./syz-executor exec"[875] was attempted by "./syz-executor exec"[1478] [ 1654.916060][ T1476] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1655.512754][ T1494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5846'. [ 1656.817821][T32539] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1657.573357][ T1539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5850'. [ 1657.826293][T32539] bond0: (slave syz_tun): Releasing backup interface [ 1657.859535][ T1478] dccp_close: ABORT with 69 bytes unread [ 1658.340003][ T1547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5851'. [ 1658.473528][T10668] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.715501][T10668] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.969138][T10668] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.166730][T10668] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.723207][T10668] bond0 (unregistering): Released all slaves [ 1660.752558][ T1574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5854'. [ 1660.771951][ T1574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5854'. [ 1660.796931][ T1571] netlink: 'syz.3.5854': attribute type 1 has an invalid length. [ 1660.815646][ T1571] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1660.816240][ T1575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5854'. [ 1661.436981][T10668] hsr_slave_0: left promiscuous mode [ 1661.480233][T10668] hsr_slave_1: left promiscuous mode [ 1661.532954][T10668] veth1_macvtap: left promiscuous mode [ 1661.546362][T10668] veth0_macvtap: left promiscuous mode [ 1661.560098][T10668] veth1_vlan: left promiscuous mode [ 1661.565447][T10668] veth0_vlan: left promiscuous mode [ 1661.931663][ T1612] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 1662.107188][ T1613] xt_CT: No such helper "netbios-ns" [ 1664.950367][ T1647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5867'. [ 1664.981765][ T1647] netlink: 13 bytes leftover after parsing attributes in process `syz.0.5867'. [ 1666.762387][ T1704] FAULT_INJECTION: forcing a failure. [ 1666.762387][ T1704] name failslab, interval 1, probability 0, space 0, times 0 [ 1666.796223][ T1704] CPU: 0 UID: 0 PID: 1704 Comm: syz.0.5871 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 1666.806958][ T1704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1666.817040][ T1704] Call Trace: [ 1666.820343][ T1704] [ 1666.823294][ T1704] dump_stack_lvl+0x241/0x360 [ 1666.828001][ T1704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1666.833221][ T1704] ? __pfx__printk+0x10/0x10 [ 1666.837840][ T1704] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 1666.843415][ T1704] ? __pfx___might_resched+0x10/0x10 [ 1666.848767][ T1704] should_fail_ex+0x3b0/0x4e0 [ 1666.853478][ T1704] ? getname_flags+0xb7/0x540 [ 1666.858181][ T1704] should_failslab+0xac/0x100 [ 1666.863584][ T1704] ? getname_flags+0xb7/0x540 [ 1666.868299][ T1704] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1666.873704][ T1704] getname_flags+0xb7/0x540 [ 1666.878236][ T1704] do_sys_openat2+0xd2/0x1d0 [ 1666.882866][ T1704] ? __pfx_do_sys_openat2+0x10/0x10 [ 1666.888107][ T1704] __x64_sys_open+0x225/0x270 [ 1666.892819][ T1704] ? __pfx___x64_sys_open+0x10/0x10 [ 1666.898054][ T1704] ? do_syscall_64+0x100/0x230 [ 1666.902842][ T1704] ? do_syscall_64+0xb6/0x230 [ 1666.907547][ T1704] do_syscall_64+0xf3/0x230 [ 1666.912078][ T1704] ? clear_bhb_loop+0x35/0x90 [ 1666.916781][ T1704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1666.922699][ T1704] RIP: 0033:0x7f046cf7dff9 [ 1666.927133][ T1704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1666.946765][ T1704] RSP: 002b:00007f046de13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1666.955214][ T1704] RAX: ffffffffffffffda RBX: 00007f046d135f80 RCX: 00007f046cf7dff9 [ 1666.963225][ T1704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 1666.971230][ T1704] RBP: 00007f046de13090 R08: 0000000000000000 R09: 0000000000000000 [ 1666.979235][ T1704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1666.987245][ T1704] R13: 0000000000000000 R14: 00007f046d135f80 R15: 00007f046d25fa28 [ 1666.995279][ T1704] SYZFAIL: open /dev/rfkill failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: open /dev/vhci failed (errno 2: No such file or directory) SYZFAIL: repeatedly failed to execute the program proc=4 req=5812 state=1 status=67 (errno 9: Bad file descriptor) [ 1668.406458][ T401] bond0: (slave syz_tun): Releasing backup interface [ 1668.588331][T28085] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.798623][T28085] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.918279][T28085] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.994842][T28085] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.038023][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.044368][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.236551][T28085] bridge_slave_1: left allmulticast mode [ 1669.242248][T28085] bridge_slave_1: left promiscuous mode [ 1669.256246][T28085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1669.286804][T28085] bridge_slave_0: left allmulticast mode [ 1669.292499][T28085] bridge_slave_0: left promiscuous mode [ 1669.306038][T28085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.117674][T28085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1670.128613][T28085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1670.139572][T28085] bond0 (unregistering): Released all slaves [ 1670.496417][T28085] hsr_slave_0: left promiscuous mode [ 1670.502564][T28085] hsr_slave_1: left promiscuous mode [ 1670.518571][T28085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1670.535931][T28085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1670.546937][T28085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1670.557425][T28085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1670.601350][T28085] veth1_macvtap: left promiscuous mode [ 1670.616039][T28085] veth0_macvtap: left promiscuous mode [ 1670.621688][T28085] veth1_vlan: left promiscuous mode [ 1670.636097][T28085] veth0_vlan: left promiscuous mode [ 1671.303701][T28085] team0 (unregistering): Port device team_slave_1 removed [ 1671.379716][T28085] team0 (unregistering): Port device team_slave_0 removed [ 1672.253751][T28085] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.353516][T28085] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.421800][T28085] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.523922][T28085] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.759615][T28085] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.851818][T28085] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.907920][T28085] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.998727][T28085] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.178521][T28085] bridge_slave_1: left allmulticast mode [ 1673.184233][T28085] bridge_slave_1: left promiscuous mode [ 1673.193341][T28085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.205711][T28085] bridge_slave_0: left allmulticast mode [ 1673.212903][T28085] bridge_slave_0: left promiscuous mode [ 1673.219365][T28085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.063196][T28085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1674.081306][T28085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1674.092460][T28085] bond0 (unregistering): Released all slaves [ 1674.300439][T28085] bond0 (unregistering): Released all slaves [ 1674.927964][T28085] hsr_slave_0: left promiscuous mode [ 1674.934162][T28085] hsr_slave_1: left promiscuous mode [ 1674.940481][T28085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1674.961681][T28085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1674.975586][T28085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1674.994950][T28085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1675.017740][T28085] hsr_slave_0: left promiscuous mode [ 1675.025147][T28085] hsr_slave_1: left promiscuous mode [ 1675.094616][T28085] veth1_macvtap: left promiscuous mode [ 1675.111826][T28085] veth0_macvtap: left promiscuous mode [ 1675.123032][T28085] veth1_vlan: left promiscuous mode [ 1675.134290][T28085] veth0_vlan: left promiscuous mode [ 1675.145239][T28085] veth1_macvtap: left promiscuous mode [ 1675.150967][T28085] veth0_macvtap: left promiscuous mode [ 1675.156759][T28085] veth1_vlan: left promiscuous mode [ 1675.162035][T28085] veth0_vlan: left promiscuous mode [ 1675.892548][T28085] team0 (unregistering): Port device team_slave_1 removed [ 1675.955441][T28085] team0 (unregistering): Port device team_slave_0 removed