last executing test programs: 13.047456249s ago: executing program 3 (id=1667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x7, 0x2, 0x0, 0x800, r5, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000040)) close_range(r4, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x1000c40, &(0x7f0000000a00)=ANY=[@ANYBLOB="696f8abc686172736547ae53a53837342c756e695b786c6174653d312c757466383d312c6e6f6c0ba37461696c3d302c69656b2c00"], 0x3, 0x36c, &(0x7f0000000680)="$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") 11.42154827s ago: executing program 1 (id=1668): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2008050, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@bh}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d8, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000ac0), 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getpid() fsopen(0x0, 0x0) creat(0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1d30c0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) 11.41996659s ago: executing program 3 (id=1670): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2008050, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@bh}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d8, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fsopen(&(0x7f0000000900)='virtiofs\x00', 0x0) 11.41968449s ago: executing program 4 (id=1671): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="05000056c0b60dd44d328000ad3519970e2fdaee", @ANYRES32, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) ftruncate(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/89, 0x59}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x5, 0x8}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) unshare(0x20400) timerfd_gettime(0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) 11.259874903s ago: executing program 0 (id=1633): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f0000000d00)={[{@nombcache}, {@usrjquota}, {@discard}, {@data_err_ignore}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@dioread_lock}, {@grpjquota}, {}]}, 0x45, 0x7ce, &(0x7f0000000500)="$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") prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000140)={0x8, 0x6c4f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x101400, 0x110, 0xe}, 0x18) move_mount(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x0, 0x0, 0x0, 0x592, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$sock(r9, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x8, 0x0, 0x1, 0x0, r5, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x48) 11.232385985s ago: executing program 4 (id=1674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x2, 0x35b, 0xc, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x1000, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@allow_other}, {@allow_other}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, '@-#\xed%\xc2#)]&'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}, 0x1, 0x0, &(0x7f0000000c40)="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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8aeeb8baf8ff0000a2000000000000070200b37238b7e1cb42bb0008000000b7040000f66f63bb85000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='ext4_request_inode\x00', r3}, 0x10) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f0000000380)={{0xcb, 0x4}, {0x4, 0x5}, 0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0xfffffffffffffddb, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x9, 0x1}, 0x48) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0x4, 0x0, 0x0, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7800, 0x4, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6gre0\x00', r7, 0x2f, 0xfe, 0x0, 0xf60, 0x3c, @empty, @mcast1, 0x8000, 0x10, 0x5, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 9.006623655s ago: executing program 1 (id=1675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x7, 0x2, 0x0, 0x800, r5, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000040)) close_range(r4, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x1000c40, &(0x7f0000000a00)=ANY=[@ANYBLOB="696f8abc686172736547ae53a53837342c756e695b786c6174653d312c757466383d312c6e6f6c0ba37461696c3d302c69656b2c00"], 0x3, 0x36c, &(0x7f0000000680)="$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") 9.005261114s ago: executing program 2 (id=1676): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xffffffffffffff5a, 0x40000, 0x0, 0x27) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) 9.003732684s ago: executing program 3 (id=1677): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10, r5, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7fffffff, 0xc07c, 0x6, 0x6, 0x3, 0x3a4, 0x9}, 0x0, &(0x7f0000000340)={0x3, 0x2, 0x3, 0x9, 0x3, 0x9, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x6315]}, 0x8}) 8.906710952s ago: executing program 0 (id=1633): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f0000000d00)={[{@nombcache}, {@usrjquota}, {@discard}, {@data_err_ignore}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@dioread_lock}, {@grpjquota}, {}]}, 0x45, 0x7ce, &(0x7f0000000500)="$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") prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000140)={0x8, 0x6c4f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x101400, 0x110, 0xe}, 0x18) move_mount(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x0, 0x0, 0x0, 0x592, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$sock(r9, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x8, 0x0, 0x1, 0x0, r5, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x48) 6.851980328s ago: executing program 1 (id=1678): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x17}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000180)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3f9}, 0x10) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x7c, 0x453, 0x110, 0x70bd28, 0x25dfdbfe, "8bd9930ced08d03a0d8fd166ffe734c4d21e30eb9237bcf1cb7fcae2093a73d25946ba79b542c74441855f932be141e6e2fddf2f15dca450cd6563f279b539be62759e98b45b8fb83fa502bbfe06731c2062bd0aae305c9cf7d99c64a5abfce4907c889f063c431c113a3886", ["", "", "", "", ""]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvfrom(r0, &(0x7f0000000480)=""/191, 0xbf, 0x40, 0x0, 0x0) 6.850895188s ago: executing program 2 (id=1679): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r5}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r7}, 0x10) close(r6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xffffffffffffff5a, 0x40000, 0x0, 0x27) recvmsg(r3, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 6.850379978s ago: executing program 3 (id=1680): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x21, 0xc9, {0xc9, 0x9, "72a3468a83b65674ef7c8f704360f09c5ab92d78ed844fd52086f641e0f14d3dbed960563335b738155ad4c5d14a23f70bd2d2eeee3551b301bedb51cee68e23cc2281683e9261aee0f61ebaeea3f69339199a13ed83e7859451f0b29b5c02f9977f62b722e015f5da87f71dce6bac54cefc310be6d2b1a2b7a301f4be15f8b11f1b44aa5515cf5cf54da87c22af0c74362d220e1068267f56ce16aa85ce57c3544522c39cd0eb8db337faea4840c92c08445323feabdd79a3a869919f095a94dba8ea8bb9de01"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, &(0x7f0000000140)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x9, 0x1ef00, 0x200, [0x3f00, 0xffc000]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x8, 0x9, 0x6}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x74, 0x3, 0x0, 0x9, "23a7d238", "b9869171"}}, 0x0}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x20, 0x1, 0x92, "000848b6bf532c3548f6f65be1043cb8ae782ced044228b6004ca4ae36a6d63daf2b5ea4d90ff809343f0c79980b25dd531702fae65c071e2e75f3cec00753d0ae8cc559049951ebadaffea8aeb9854285851fe3422a1a363824647de926262cb40144adae1685ba1b895b9d05c702c6688a571d809e179c9086f4c8d483cd87a1064a5931d20d963ed14d7c6bd1e5fb939a"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x120, 0x8, [0xff0f]}}, &(0x7f0000000440)={0x40, 0x7, 0x2}, &(0x7f0000000480)={0x40, 0x9, 0x1}, &(0x7f00000004c0)={0x40, 0xb, 0x2, 'xJ'}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x7ff}, &(0x7f0000000540)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "03a3"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x1611}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0xf}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) 6.818913401s ago: executing program 4 (id=1681): sched_setscheduler(0x0, 0x1, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x28002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a07, 0x1700) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x4) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 6.70348809s ago: executing program 0 (id=1633): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f0000000d00)={[{@nombcache}, {@usrjquota}, {@discard}, {@data_err_ignore}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@dioread_lock}, {@grpjquota}, {}]}, 0x45, 0x7ce, &(0x7f0000000500)="$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") prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000140)={0x8, 0x6c4f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x101400, 0x110, 0xe}, 0x18) move_mount(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x0, 0x0, 0x0, 0x592, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$sock(r9, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x8, 0x0, 0x1, 0x0, r5, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x48) 4.804800283s ago: executing program 1 (id=1682): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000087d1e242c00000000000109022400010000000009040000050300000009210000000122070009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x502, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.800443274s ago: executing program 2 (id=1683): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write(r2, 0x0, 0x0) 4.800070004s ago: executing program 4 (id=1684): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x2000082, &(0x7f0000000800)=ANY=[@ANYBLOB='nonumtail=0,utf8=0,iocharset=cp1250,uni_xlate=1,codepage=865,shortname=mixed,gid=', @ANYRESHEX, @ANYRESOCT], 0x26, 0x35b, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000020c0)=ANY=[@ANYBLOB="f8bb14da1462f4d70600000000000000000000000000000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) pause() 4.694533852s ago: executing program 2 (id=1685): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a07, 0x1700) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x50, 0x0, 0x1d) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 4.676946474s ago: executing program 0 (id=1633): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f0000000d00)={[{@nombcache}, {@usrjquota}, {@discard}, {@data_err_ignore}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@dioread_lock}, {@grpjquota}, {}]}, 0x45, 0x7ce, &(0x7f0000000500)="$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") prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000140)={0x8, 0x6c4f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x101400, 0x110, 0xe}, 0x18) move_mount(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x0, 0x0, 0x0, 0x592, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$sock(r9, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x8, 0x0, 0x1, 0x0, r5, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x48) 2.741098639s ago: executing program 2 (id=1686): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r5}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r7}, 0x10) close(r6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xffffffffffffff5a, 0x40000, 0x0, 0x27) recvmsg(r3, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) close(r10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.74028858s ago: executing program 3 (id=1687): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x21, 0xc9, {0xc9, 0x9, "72a3468a83b65674ef7c8f704360f09c5ab92d78ed844fd52086f641e0f14d3dbed960563335b738155ad4c5d14a23f70bd2d2eeee3551b301bedb51cee68e23cc2281683e9261aee0f61ebaeea3f69339199a13ed83e7859451f0b29b5c02f9977f62b722e015f5da87f71dce6bac54cefc310be6d2b1a2b7a301f4be15f8b11f1b44aa5515cf5cf54da87c22af0c74362d220e1068267f56ce16aa85ce57c3544522c39cd0eb8db337faea4840c92c08445323feabdd79a3a869919f095a94dba8ea8bb9de01"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, &(0x7f0000000140)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x9, 0x1ef00, 0x200, [0x3f00, 0xffc000]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x8, 0x9, 0x6}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x74, 0x3, 0x0, 0x9, "23a7d238", "b9869171"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x90, 0x9b, 0x6, 0x335f, 0x2}}}, &(0x7f0000000700)={0x84, &(0x7f0000000280)={0x20, 0x1, 0x92, "000848b6bf532c3548f6f65be1043cb8ae782ced044228b6004ca4ae36a6d63daf2b5ea4d90ff809343f0c79980b25dd531702fae65c071e2e75f3cec00753d0ae8cc559049951ebadaffea8aeb9854285851fe3422a1a363824647de926262cb40144adae1685ba1b895b9d05c702c6688a571d809e179c9086f4c8d483cd87a1064a5931d20d963ed14d7c6bd1e5fb939a"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x8, {0x120, 0x8, [0xff0f]}}, &(0x7f0000000440)={0x40, 0x7, 0x2}, 0x0, &(0x7f00000004c0)={0x40, 0xb, 0x2, 'xJ'}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x7ff}, &(0x7f0000000540)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "03a3"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x1611}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0xf}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x280, 0x280, 0x280, 0x0, 0x280, 0x348, 0x365, 0x350, 0x348, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_virt_wifi\x00', {0x0, 0x0, 0xbe0e2b6312c7057, 0x0, 0x0, 0x8001, 0x100}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x317) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001ac0)={0x0, 0x1000, 0x7f48, 0x1}) sendmmsg(0xffffffffffffffff, &(0x7f0000006040)=[{{&(0x7f0000003140)=@caif=@dbg={0x25, 0x0, 0x6}, 0x80, 0x0}}], 0x1, 0x20008085) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f00000002c0)={[{@errors_remount}]}, 0xfe, 0x492, &(0x7f0000000f00)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x60000, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2.738550629s ago: executing program 4 (id=1688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x7, 0x2, 0x0, 0x800, r5, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000040)) close_range(r4, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x1000c40, &(0x7f0000000a00)=ANY=[@ANYBLOB="696f8abc686172736547ae53a53837342c756e695b786c6174653d312c757466383d312c6e6f6c0ba37461696c3d302c69656b2c00"], 0x3, 0x36c, &(0x7f0000000680)="$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") 2.726071131s ago: executing program 1 (id=1689): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r5}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r7}, 0x10) close(r6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0xffffffffffffff5a, 0x40000, 0x0, 0x27) recvmsg(r3, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.626845089s ago: executing program 0 (id=1633): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f0000000d00)={[{@nombcache}, {@usrjquota}, {@discard}, {@data_err_ignore}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@dioread_lock}, {@grpjquota}, {}]}, 0x45, 0x7ce, &(0x7f0000000500)="$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") prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000140)={0x8, 0x6c4f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x101400, 0x110, 0xe}, 0x18) move_mount(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x0, 0x0, 0x0, 0x592, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$sock(r9, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x8, 0x0, 0x1, 0x0, r5, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x48) 575.059304ms ago: executing program 1 (id=1690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) 573.690275ms ago: executing program 2 (id=1691): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10, r5, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7fffffff, 0xc07c, 0x6, 0x6, 0x3, 0x3a4, 0x9}, 0x0, &(0x7f0000000340)={0x3, 0x2, 0x3, 0x9, 0x3, 0x9, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x6315]}, 0x8}) 570.841465ms ago: executing program 4 (id=1692): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000002c80)={0x24a0, r5, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0xa98, 0x5, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x75}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x236}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x4b4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xd4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x3b8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc499}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2a}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe083}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}, {0x150, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x40, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x100, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xcbb6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x95}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}]}, {0x11c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x3c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x6c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfe4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x29c}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}]}, {0x1a4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36d}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x11c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc9a2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9f}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x203}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1354, 0x5, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x4b4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x320, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x21}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xcedf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x70}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1da}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x78, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8e}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x440, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x224, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x24}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xed}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x188, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe1ed}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9f0}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x365}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x44, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}]}]}, {0x960, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x330, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf6f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x164, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x240, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x673043acc00942fa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x93}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x140, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x97}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x294, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3a}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x8c, 0x5, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x78, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xc6ed11fc3535dc65}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xbd}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x60c, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x330, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1d0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9c}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x12c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfe4f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1f8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x8c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}]}]}]}]}, 0x24a0}, 0x1, 0x0, 0x0, 0x815}, 0x20000000) creat(&(0x7f0000000040)='./bus\x00', 0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x31, 0xffffffffffffffff, &(0x7f0000000040)=0x22) fallocate(r7, 0x0, 0x0, 0x1000f4) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000000400)=[@acquire, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @flat=@weak_handle={0x77682a85, 0x1100}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/53, 0x35, 0x2, 0xa}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}, @free_buffer], 0x0, 0x0, 0x0}) dup3(r10, r9, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 569.109765ms ago: executing program 3 (id=1693): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r5}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r7}, 0x10) close(r6) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600), 0x4) recvmsg(r3, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 0s ago: executing program 0 (id=1633): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f0000000d00)={[{@nombcache}, {@usrjquota}, {@discard}, {@data_err_ignore}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@dioread_lock}, {@grpjquota}, {}]}, 0x45, 0x7ce, &(0x7f0000000500)="$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") prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000140)={0x8, 0x6c4f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x101400, 0x110, 0xe}, 0x18) move_mount(r2, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x0, 0x0, 0x0, 0x592, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$sock(r9, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x8, 0x0, 0x1, 0x0, r5, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x48) kernel console output (not intermixed with test programs): file1/file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 362.349620][ T28] audit: type=1400 audit(1723490036.016:251): avc: denied { read } for pid=6163 comm="syz.4.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 362.351210][ T3513] usb 3-1: USB disconnect, device number 25 [ 362.377309][ T6175] xt_hashlimit: size too large, truncated to 1048576 [ 362.430674][ T6177] FAULT_INJECTION: forcing a failure. [ 362.430674][ T6177] name failslab, interval 1, probability 0, space 0, times 0 [ 362.443694][ T6177] CPU: 1 PID: 6177 Comm: syz.1.1425 Not tainted 6.1.90-syzkaller-00004-g79436849ef1d #0 [ 362.454095][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 362.465477][ T6177] Call Trace: [ 362.469031][ T6177] [ 362.471800][ T6177] dump_stack_lvl+0x151/0x1b7 [ 362.476676][ T6177] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 362.482148][ T6177] ? fib6_table_lookup+0x929/0xa80 [ 362.487102][ T6177] dump_stack+0x15/0x1a [ 362.491200][ T6177] should_fail_ex+0x3d0/0x520 [ 362.495887][ T6177] ? dst_alloc+0x164/0x1e0 [ 362.500747][ T6177] __should_failslab+0xaf/0xf0 [ 362.505433][ T6177] should_failslab+0x9/0x20 [ 362.509854][ T6177] kmem_cache_alloc+0x3b/0x2c0 [ 362.514562][ T6177] ? fib6_select_path+0x13c/0x5b0 [ 362.519776][ T6177] ? ipv6_sysctl_rtcache_flush+0x120/0x120 [ 362.525507][ T6177] dst_alloc+0x164/0x1e0 [ 362.529579][ T6177] ip6_pol_route+0xc60/0x14a0 [ 362.534440][ T6177] ? ip6_pol_route+0x583/0x14a0 [ 362.539213][ T6177] ? fib6_table_lookup+0xa80/0xa80 [ 362.544268][ T6177] ip6_pol_route_input+0x55/0x80 [ 362.549422][ T6177] fib6_rule_lookup+0x371/0x620 [ 362.554190][ T6177] ? ip6_route_input_lookup+0xd0/0xd0 [ 362.559839][ T6177] ? fib6_lookup+0x3f0/0x3f0 [ 362.564481][ T6177] ? __local_bh_enable_ip+0x58/0x80 [ 362.569781][ T6177] ? ip6t_do_table+0x1643/0x1830 [ 362.574810][ T6177] ? ip6t_do_table+0x1f7/0x1830 [ 362.579792][ T6177] ? ip6_route_input+0x242/0xc50 [ 362.584581][ T6177] ? __ipv6_addr_type+0x244/0x2f0 [ 362.589431][ T6177] ip6_route_input+0x733/0xc50 [ 362.594141][ T6177] ? ip6_multipath_l3_keys+0x6b0/0x6b0 [ 362.599945][ T6177] ip6_rcv_finish+0x150/0x350 [ 362.604443][ T6177] ipv6_rcv+0xeb/0x270 [ 362.608735][ T6177] ? ip6_rcv_finish+0x350/0x350 [ 362.613411][ T6177] ? net_zcopy_put_abort+0x90/0x90 [ 362.618921][ T6177] ? ip6_rcv_finish+0x350/0x350 [ 362.623567][ T6177] __netif_receive_skb+0x1c6/0x530 [ 362.628688][ T6177] ? kmem_cache_alloc+0x175/0x2c0 [ 362.633731][ T6177] ? build_skb+0x2c/0x220 [ 362.638254][ T6177] ? tun_get_user+0x1c0e/0x3a90 [ 362.642945][ T6177] ? vfs_write+0x902/0xeb0 [ 362.647196][ T6177] ? ksys_write+0x199/0x2c0 [ 362.651625][ T6177] ? __x64_sys_write+0x7b/0x90 [ 362.656339][ T6177] ? x64_sys_call+0x2f/0x9a0 [ 362.660828][ T6177] ? __netif_receive_skb_list_core+0x890/0x890 [ 362.666910][ T6177] netif_receive_skb+0xb0/0x480 [ 362.671584][ T6177] ? enqueue_to_backlog+0x9d0/0x9d0 [ 362.676939][ T6177] ? tun_rx_batched+0x169/0x8f0 [ 362.682172][ T6177] tun_rx_batched+0x1c0/0x8f0 [ 362.686767][ T6177] ? __kasan_slab_alloc+0x6c/0x80 [ 362.691995][ T6177] ? eth_type_trans+0x342/0x710 [ 362.697032][ T6177] ? pskb_may_pull+0x100/0x100 [ 362.701916][ T6177] ? tun_get_user+0x2340/0x3a90 [ 362.706790][ T6177] tun_get_user+0x287e/0x3a90 [ 362.711649][ T6177] ? tun_do_read+0x2000/0x2000 [ 362.716791][ T6177] ? ref_tracker_alloc+0x31d/0x450 [ 362.722197][ T6177] ? ref_tracker_dir_print+0x160/0x160 [ 362.728429][ T6177] ? avc_policy_seqno+0x1b/0x70 [ 362.733565][ T6177] ? tun_get+0xe9/0x120 [ 362.737828][ T6177] tun_chr_write_iter+0x129/0x210 [ 362.743252][ T6177] vfs_write+0x902/0xeb0 [ 362.747743][ T6177] ? __kasan_slab_free+0x11/0x20 [ 362.752767][ T6177] ? file_end_write+0x1c0/0x1c0 [ 362.758069][ T6177] ? __fget_files+0x2cb/0x330 [ 362.762782][ T6177] ? __fdget_pos+0x204/0x390 [ 362.767547][ T6177] ? ksys_write+0x77/0x2c0 [ 362.771989][ T6177] ksys_write+0x199/0x2c0 [ 362.776930][ T6177] ? __ia32_sys_read+0x90/0x90 [ 362.781593][ T6177] ? debug_smp_processor_id+0x17/0x20 [ 362.786885][ T6177] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 362.792792][ T6177] __x64_sys_write+0x7b/0x90 [ 362.797215][ T6177] x64_sys_call+0x2f/0x9a0 [ 362.801645][ T6177] do_syscall_64+0x3b/0xb0 [ 362.806045][ T6177] ? clear_bhb_loop+0x55/0xb0 [ 362.810710][ T6177] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.817542][ T6177] RIP: 0033:0x7fb7581784df [ 362.821928][ T6177] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 362.842243][ T6177] RSP: 002b:00007fb758e96000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 362.850741][ T6177] RAX: ffffffffffffffda RBX: 00007fb758316058 RCX: 00007fb7581784df [ 362.858891][ T6177] RDX: 000000000000004a RSI: 0000000020000340 RDI: 00000000000000c8 [ 362.867432][ T6177] RBP: 00007fb758e96090 R08: 0000000000000000 R09: 0000000000000000 [ 362.875980][ T6177] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 362.884805][ T6177] R13: 0000000000000001 R14: 00007fb758316058 R15: 00007ffda024e628 [ 362.894144][ T6177] [ 362.931034][ T3664] EXT4-fs (loop2): unmounting filesystem. [ 362.966733][ T28] audit: type=1400 audit(1723490036.666:252): avc: denied { unlink } for pid=4687 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 362.993460][ T4687] EXT4-fs (loop4): unmounting filesystem. [ 363.003071][ T6185] loop1: detected capacity change from 0 to 128 [ 363.284740][ T6184] loop0: detected capacity change from 0 to 40427 [ 363.398251][ T6184] F2FS-fs (loop0): invalid crc value [ 363.461282][ T3513] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 363.495274][ T6184] F2FS-fs (loop0): Found nat_bits in checkpoint [ 363.570789][ T6187] input: syz0 as /devices/virtual/input/input134 [ 363.760923][ T6184] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 363.782288][ T6198] loop3: detected capacity change from 0 to 512 [ 363.789123][ T6198] ext4: Bad value for 'inode_readahead_blks' [ 363.874333][ T6198] syz.3.1432 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 363.898270][ T6200] loop1: detected capacity change from 0 to 512 [ 363.917782][ T6200] ext4: Bad value for 'inode_readahead_blks' [ 363.952396][ T3513] usb 3-1: Using ep0 maxpacket: 32 [ 364.072469][ T3513] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.084042][ T6184] xt_hashlimit: size too large, truncated to 1048576 [ 364.084507][ T3513] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.383525][ T3513] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 364.677555][ T3513] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.725255][ T3513] hub 3-1:4.0: USB hub found [ 364.840783][ T6218] loop4: detected capacity change from 0 to 512 [ 364.863076][ T6218] ext4: Bad value for 'inode_readahead_blks' [ 365.057302][ T6220] FAULT_INJECTION: forcing a failure. [ 365.057302][ T6220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.070670][ T6220] CPU: 1 PID: 6220 Comm: syz.4.1438 Not tainted 6.1.90-syzkaller-00004-g79436849ef1d #0 [ 365.080593][ T6220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 365.090922][ T6220] Call Trace: [ 365.094233][ T6220] [ 365.097019][ T6220] dump_stack_lvl+0x151/0x1b7 [ 365.102104][ T6220] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 365.107596][ T6220] ? preempt_schedule_irq+0xe7/0x140 [ 365.112922][ T6220] ? preempt_schedule_notrace+0x140/0x140 [ 365.118715][ T6220] dump_stack+0x15/0x1a [ 365.122958][ T6220] should_fail_ex+0x3d0/0x520 [ 365.127646][ T6220] should_fail+0xb/0x10 [ 365.131741][ T6220] should_fail_usercopy+0x1a/0x20 [ 365.136953][ T6220] _copy_to_user+0x1e/0x90 [ 365.141805][ T6220] simple_read_from_buffer+0xc7/0x150 [ 365.147361][ T6220] proc_fail_nth_read+0x1a3/0x210 [ 365.152491][ T6220] ? proc_fault_inject_write+0x390/0x390 [ 365.158056][ T6220] ? fsnotify_perm+0x470/0x5d0 [ 365.162838][ T6220] ? security_file_permission+0x86/0xb0 [ 365.168213][ T6220] ? proc_fault_inject_write+0x390/0x390 [ 365.173695][ T6220] vfs_read+0x26c/0xad0 [ 365.176973][ T3513] hub 3-1:4.0: 1 port detected [ 365.177678][ T6220] ? push_rt_task+0x46e/0x5c0 [ 365.186794][ T6220] ? kernel_read+0x1f0/0x1f0 [ 365.191298][ T6220] ? mutex_lock+0xb1/0x1e0 [ 365.195641][ T6220] ? bit_wait_io_timeout+0x120/0x120 [ 365.200760][ T6220] ? __fdget_pos+0x2e2/0x390 [ 365.205272][ T6220] ? ksys_read+0x77/0x2c0 [ 365.209544][ T6220] ksys_read+0x199/0x2c0 [ 365.213891][ T6220] ? vfs_write+0xeb0/0xeb0 [ 365.218331][ T6220] ? fpregs_restore_userregs+0x130/0x290 [ 365.223886][ T6220] __x64_sys_read+0x7b/0x90 [ 365.228223][ T6220] x64_sys_call+0x28/0x9a0 [ 365.232477][ T6220] do_syscall_64+0x3b/0xb0 [ 365.236737][ T6220] ? clear_bhb_loop+0x55/0xb0 [ 365.241368][ T6220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 365.247527][ T6220] RIP: 0033:0x7f2c3737843c [ 365.251776][ T6220] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 365.271963][ T6220] RSP: 002b:00007f2c38177030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 365.280632][ T6220] RAX: ffffffffffffffda RBX: 00007f2c37516130 RCX: 00007f2c3737843c [ 365.288994][ T6220] RDX: 000000000000000f RSI: 00007f2c381770a0 RDI: 0000000000000009 [ 365.297135][ T6220] RBP: 00007f2c38177090 R08: 0000000000000000 R09: 0000000000000000 [ 365.305243][ T6220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.313416][ T6220] R13: 0000000000000000 R14: 00007f2c37516130 R15: 00007ffc12f43a78 [ 365.321322][ T6220] [ 365.338130][ T6221] loop2: detected capacity change from 0 to 1024 [ 365.368514][ T6221] EXT4-fs: Ignoring removed orlov option [ 365.378625][ T6221] EXT4-fs: Ignoring removed nomblk_io_submit option [ 365.392992][ T6223] loop4: detected capacity change from 0 to 128 [ 365.429770][ T28] audit: type=1400 audit(1723490039.126:253): avc: denied { ioctl } for pid=6222 comm="syz.4.1439" path="socket:[42070]" dev="sockfs" ino=42070 ioctlcmd=0x48dc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 365.457254][ T3389] syz-executor: attempt to access beyond end of device [ 365.457254][ T3389] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 365.488157][ T6221] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 365.606582][ T6233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.616273][ T6233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.630206][ T28] audit: type=1400 audit(1723490039.306:254): avc: denied { name_bind } for pid=6231 comm="syz.0.1440" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 365.672566][ T3513] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 365.685730][ T3513] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 365.713344][ T6237] loop3: detected capacity change from 0 to 2048 [ 365.737305][ T6237] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 365.743542][ T3513] usb 3-1: USB disconnect, device number 26 [ 365.746848][ T28] audit: type=1400 audit(1723490039.446:255): avc: denied { mount } for pid=6236 comm="syz.3.1441" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 365.872459][ T6] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 365.887717][ T6249] loop1: detected capacity change from 0 to 128 [ 366.296231][ T28] audit: type=1400 audit(1723490039.996:256): avc: denied { unmount } for pid=3664 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 366.297047][ T3664] EXT4-fs (loop2): unmounting filesystem. [ 366.412415][ T6] usb 1-1: device descriptor read/64, error -71 [ 366.468516][ T6253] loop2: detected capacity change from 0 to 40427 [ 366.482395][ T6253] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 366.490658][ T6253] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 366.506325][ T6253] F2FS-fs (loop2): invalid crc value [ 366.507008][ T5456] EXT4-fs (loop3): unmounting filesystem. [ 366.518072][ T6253] F2FS-fs (loop2): invalid crc value [ 366.524067][ T6253] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 366.567243][ T6256] loop3: detected capacity change from 0 to 512 [ 366.577299][ T6256] EXT4-fs (loop3): Test dummy encryption mode enabled [ 366.590842][ T6256] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.1446: inline data xattr refers to an external xattr inode [ 366.606412][ T6256] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1446: couldn't read orphan inode 12 (err -117) [ 366.619191][ T6256] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 366.675594][ T6253] loop2: detected capacity change from 0 to 256 [ 366.697628][ T6253] FAT-fs (loop2): Unrecognized mount option "codepage=85Ieshortname=mixed" or missing value [ 367.100059][ T6] usb 1-1: device descriptor read/64, error -71 [ 367.612656][ T5456] EXT4-fs (loop3): unmounting filesystem. [ 367.752444][ T6] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 367.795556][ T6274] loop2: detected capacity change from 0 to 40427 [ 367.803783][ T6274] F2FS-fs (loop2): invalid crc value [ 367.813505][ T6274] F2FS-fs (loop2): Found nat_bits in checkpoint [ 367.880375][ T6274] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 368.032420][ T6] usb 1-1: device descriptor read/64, error -71 [ 368.106439][ T6274] xt_hashlimit: size too large, truncated to 1048576 [ 368.268365][ T6292] 9pnet_fd: Insufficient options for proto=fd [ 368.375476][ T6295] xt_bpf: check failed: parse error [ 368.422412][ T6] usb 1-1: device descriptor read/64, error -71 [ 368.454655][ T3664] syz-executor: attempt to access beyond end of device [ 368.454655][ T3664] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 368.525573][ T6297] FAULT_INJECTION: forcing a failure. [ 368.525573][ T6297] name failslab, interval 1, probability 0, space 0, times 0 [ 368.538342][ T6297] CPU: 1 PID: 6297 Comm: syz.3.1458 Not tainted 6.1.90-syzkaller-00004-g79436849ef1d #0 [ 368.542566][ T6] usb usb1-port1: attempt power cycle [ 368.548542][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 368.564173][ T6297] Call Trace: [ 368.567381][ T6297] [ 368.570514][ T6297] dump_stack_lvl+0x151/0x1b7 [ 368.575716][ T6297] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 368.581367][ T6297] ? kasan_set_track+0x60/0x70 [ 368.586906][ T6297] ? kasan_save_alloc_info+0x1f/0x30 [ 368.592285][ T6297] ? __kasan_slab_alloc+0x6c/0x80 [ 368.597160][ T6297] ? slab_post_alloc_hook+0x53/0x2c0 [ 368.602862][ T6297] ? kmem_cache_alloc+0x175/0x2c0 [ 368.608269][ T6297] dump_stack+0x15/0x1a [ 368.612426][ T6297] should_fail_ex+0x3d0/0x520 [ 368.616092][ T6299] loop2: detected capacity change from 0 to 128 [ 368.617025][ T6297] ? ref_tracker_alloc+0x138/0x450 [ 368.628540][ T6297] __should_failslab+0xaf/0xf0 [ 368.633761][ T6297] should_failslab+0x9/0x20 [ 368.638189][ T6297] __kmem_cache_alloc_node+0x3d/0x250 [ 368.643384][ T6297] ? ref_tracker_alloc+0x138/0x450 [ 368.648775][ T6297] kmalloc_trace+0x2a/0xa0 [ 368.653127][ T6297] ref_tracker_alloc+0x138/0x450 [ 368.658247][ T6297] ? ref_tracker_dir_print+0x160/0x160 [ 368.663530][ T6297] ? slab_post_alloc_hook+0x72/0x2c0 [ 368.668648][ T6297] ? dst_alloc+0x164/0x1e0 [ 368.672910][ T6297] dst_init+0xe1/0x400 [ 368.676976][ T6297] ? ipv6_sysctl_rtcache_flush+0x120/0x120 [ 368.682889][ T6297] dst_alloc+0x18a/0x1e0 [ 368.687157][ T6297] ip6_pol_route+0xc60/0x14a0 [ 368.691839][ T6297] ? ip6_pol_route+0x583/0x14a0 [ 368.696528][ T6297] ? fib6_table_lookup+0xa80/0xa80 [ 368.701562][ T6297] ? 0xffffffffa0001ae0 [ 368.705683][ T6297] ? ip6t_do_table+0x1f7/0x1830 [ 368.710491][ T6297] ? __local_bh_enable_ip+0x58/0x80 [ 368.715798][ T6297] ip6_pol_route_input+0x55/0x80 [ 368.720936][ T6297] fib6_rule_lookup+0x371/0x620 [ 368.726121][ T6297] ? ip6_route_input_lookup+0xd0/0xd0 [ 368.731631][ T6297] ? fib6_lookup+0x3f0/0x3f0 [ 368.736428][ T6297] ? ip6t_alloc_initial_table+0x630/0x630 [ 368.742149][ T6297] ? ip6_route_input+0x242/0xc50 [ 368.747190][ T6297] ? __ipv6_addr_type+0x244/0x2f0 [ 368.752486][ T6297] ip6_route_input+0x733/0xc50 [ 368.757106][ T6297] ? ip6_multipath_l3_keys+0x6b0/0x6b0 [ 368.762554][ T6297] ? __stack_depot_save+0x419/0x480 [ 368.767914][ T6297] ? nf_hook_slow+0x200/0x200 [ 368.773299][ T6297] ? __skb_flow_dissect+0x5f80/0x6b90 [ 368.779316][ T6297] ip6_sublist_rcv+0x76d/0x1120 [ 368.784401][ T6297] ? pskb_trim_rcsum_slow+0x316/0x520 [ 368.790119][ T6297] ? ipv6_list_rcv+0x470/0x470 [ 368.794914][ T6297] ? net_zcopy_put_abort+0x90/0x90 [ 368.799941][ T6297] ipv6_list_rcv+0x424/0x470 [ 368.804528][ T6297] ? ip6_rcv_core+0x13e0/0x13e0 [ 368.809384][ T6297] ? down_read_trylock+0x319/0x7d0 [ 368.814449][ T6297] ? ip6_rcv_core+0x13e0/0x13e0 [ 368.819149][ T6297] __netif_receive_skb_list_core+0x6b1/0x890 [ 368.825198][ T6297] ? napi_schedule_rps+0x100/0x100 [ 368.830143][ T6297] ? ipv6_gro_receive+0xefd/0x1460 [ 368.835087][ T6297] netif_receive_skb_list_internal+0x967/0xcc0 [ 368.841369][ T6297] ? netif_receive_skb_core+0x210/0x210 [ 368.846974][ T6297] ? dev_gro_receive+0x1469/0x2150 [ 368.852529][ T6297] ? eth_type_trans+0x342/0x710 [ 368.857858][ T6297] ? eth_get_headlen+0x240/0x240 [ 368.863142][ T6297] napi_complete_done+0x344/0x770 [ 368.868226][ T6297] ? __napi_schedule_irqoff+0x280/0x280 [ 368.873963][ T6297] ? tun_get_user+0x2666/0x3a90 [ 368.878842][ T6297] tun_get_user+0x2682/0x3a90 [ 368.883530][ T6297] ? _kstrtol+0x150/0x150 [ 368.887703][ T6297] ? tun_do_read+0x2000/0x2000 [ 368.892458][ T6297] ? ref_tracker_alloc+0x31d/0x450 [ 368.897684][ T6297] ? ref_tracker_dir_print+0x160/0x160 [ 368.903325][ T6297] ? avc_policy_seqno+0x1b/0x70 [ 368.908619][ T6297] ? tun_get+0xe9/0x120 [ 368.912879][ T6297] tun_chr_write_iter+0x129/0x210 [ 368.917945][ T6297] vfs_write+0x902/0xeb0 [ 368.922097][ T6297] ? __kasan_slab_free+0x11/0x20 [ 368.927344][ T6297] ? file_end_write+0x1c0/0x1c0 [ 368.932795][ T6297] ? __fget_files+0x2cb/0x330 [ 368.937669][ T6297] ? __fdget_pos+0x204/0x390 [ 368.942730][ T6297] ? ksys_write+0x77/0x2c0 [ 368.947074][ T6297] ksys_write+0x199/0x2c0 [ 368.951252][ T6297] ? __ia32_sys_read+0x90/0x90 [ 368.955928][ T6297] ? debug_smp_processor_id+0x17/0x20 [ 368.961155][ T6297] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 368.967302][ T6297] __x64_sys_write+0x7b/0x90 [ 368.971907][ T6297] x64_sys_call+0x2f/0x9a0 [ 368.976147][ T6297] do_syscall_64+0x3b/0xb0 [ 368.980406][ T6297] ? clear_bhb_loop+0x55/0xb0 [ 368.985010][ T6297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.990729][ T6297] RIP: 0033:0x7f7b01b799f9 [ 368.995160][ T6297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.015470][ T6297] RSP: 002b:00007f7b02884038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 369.024412][ T6297] RAX: ffffffffffffffda RBX: 00007f7b01d15f80 RCX: 00007f7b01b799f9 [ 369.033065][ T6297] RDX: 000000000000fdef RSI: 0000000020000440 RDI: 0000000000000003 [ 369.041817][ T6297] RBP: 00007f7b02884090 R08: 0000000000000000 R09: 0000000000000000 [ 369.049963][ T6297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.058470][ T6297] R13: 0000000000000000 R14: 00007f7b01d15f80 R15: 00007ffd473e76f8 [ 369.066648][ T6297] [ 369.069596][ T6297] memory allocation failure, unreliable refcount tracker. [ 369.069648][ T3513] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 369.200951][ T6307] xt_bpf: check failed: parse error [ 369.492463][ T321] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 369.627463][ T28] audit: type=1400 audit(1723490043.326:257): avc: denied { write } for pid=6311 comm="syz.2.1463" name="map_files" dev="proc" ino=42238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 369.650212][ T28] audit: type=1400 audit(1723490043.326:258): avc: denied { add_name } for pid=6311 comm="syz.2.1463" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 369.672073][ T28] audit: type=1400 audit(1723490043.326:259): avc: denied { create } for pid=6311 comm="syz.2.1463" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 369.674413][ T6314] loop2: detected capacity change from 0 to 512 [ 369.694142][ T28] audit: type=1400 audit(1723490043.326:260): avc: denied { associate } for pid=6311 comm="syz.2.1463" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 369.721760][ T6314] EXT4-fs: Ignoring removed orlov option [ 369.728023][ T6314] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 369.742169][ T6314] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 369.754190][ T6314] EXT4-fs (loop2): 1 truncate cleaned up [ 369.761593][ T6314] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 369.771453][ T606] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 369.775603][ T321] usb 4-1: Using ep0 maxpacket: 16 [ 369.790371][ T3664] EXT4-fs (loop2): unmounting filesystem. [ 369.792534][ T3513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.807879][ T3513] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 369.819588][ T3513] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.829092][ T3513] usb 2-1: config 0 descriptor?? [ 369.902492][ T6] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 369.922521][ T321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.932668][ T321] usb 4-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 369.941653][ T321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.950643][ T28] audit: type=1400 audit(1723490043.646:261): avc: denied { write } for pid=6323 comm="syz.2.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 369.953178][ T321] usb 4-1: config 0 descriptor?? [ 370.122670][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.134125][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.144074][ T606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.155411][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 370.168707][ T606] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 370.178805][ T6] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 370.188258][ T606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.196559][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.205513][ T606] usb 5-1: config 0 descriptor?? [ 370.211117][ T6] usb 1-1: config 0 descriptor?? [ 370.303068][ T3513] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 370.312562][ T3513] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0022/input/input135 [ 370.396955][ T28] audit: type=1400 audit(1723490044.096:262): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1247 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 370.420745][ T28] audit: type=1400 audit(1723490044.096:263): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1247 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 370.445330][ T28] audit: type=1400 audit(1723490044.096:264): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1247 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 370.472306][ T3513] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 370.473592][ T321] waltop 0003:172F:0502.0023: hidraw1: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.3-1/input0 [ 370.663412][ T606] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 370.673238][ T606] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0024/input/input136 [ 370.763401][ T606] keytouch 0003:0926:3333.0024: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 370.839618][ T6328] loop2: detected capacity change from 0 to 40427 [ 370.849280][ T6328] F2FS-fs (loop2): invalid crc value [ 370.856017][ T6328] F2FS-fs (loop2): Found nat_bits in checkpoint [ 370.862856][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 370.869318][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 370.879858][ T6] usb 1-1: USB disconnect, device number 28 [ 370.912484][ T6328] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 370.979343][ T6328] xt_hashlimit: size too large, truncated to 1048576 [ 371.212126][ T28] audit: type=1400 audit(1723490044.896:265): avc: denied { mount } for pid=6303 comm="syz.3.1460" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 371.317220][ T28] audit: type=1400 audit(1723490044.906:266): avc: denied { mounton } for pid=6303 comm="syz.3.1460" path="/43/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 371.382382][ T321] usb 2-1: USB disconnect, device number 29 [ 371.382579][ C0] keytouch 0003:0926:3333.0022: usb_submit_urb(ctrl) failed: -19 [ 371.679606][ T6338] xt_hashlimit: size too large, truncated to 1048576 [ 371.698941][ T2626] usb 5-1: USB disconnect, device number 25 [ 371.702452][ C0] keytouch 0003:0926:3333.0024: usb_submit_urb(ctrl) failed: -19 [ 371.817703][ T3664] syz-executor: attempt to access beyond end of device [ 371.817703][ T3664] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 372.028349][ T6348] loop0: detected capacity change from 0 to 1024 [ 372.050266][ T6348] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 372.107044][ T6351] loop2: detected capacity change from 0 to 128 [ 372.504119][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1472'. [ 372.564930][ T6358] loop4: detected capacity change from 0 to 1024 [ 372.614823][ T6358] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 372.644255][ T4687] EXT4-fs (loop4): unmounting filesystem. [ 372.663119][ T6364] loop4: detected capacity change from 0 to 1024 [ 372.675017][ T6364] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 372.693578][ T4687] EXT4-fs (loop4): unmounting filesystem. [ 372.730778][ T2626] usb 4-1: USB disconnect, device number 27 [ 372.845077][ T5456] syz-executor (5456) used greatest stack depth: 19984 bytes left [ 372.938034][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.963649][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.986230][ T6374] device bridge_slave_0 entered promiscuous mode [ 373.010490][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.018550][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.027109][ T6374] device bridge_slave_1 entered promiscuous mode [ 373.137028][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.144550][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.152297][ T6380] device bridge_slave_0 entered promiscuous mode [ 373.166653][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.174034][ T6380] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.181790][ T6380] device bridge_slave_1 entered promiscuous mode [ 373.245092][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.252193][ T6374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.260226][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.267631][ T6374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.275276][ T348] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 373.317784][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.324700][ T6380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.332018][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.339087][ T6380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.353662][ T473] device bridge_slave_1 left promiscuous mode [ 373.359833][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.368278][ T473] device bridge_slave_0 left promiscuous mode [ 373.374763][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.383846][ T473] device veth1_macvtap left promiscuous mode [ 373.389813][ T473] device veth0_vlan left promiscuous mode [ 373.502932][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 373.511810][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.519787][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.522444][ T348] usb 3-1: Using ep0 maxpacket: 8 [ 373.537706][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.545778][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.583124][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.591566][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.598879][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.607171][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.616870][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.623941][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.642519][ T348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.656296][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 373.665458][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 373.674570][ T348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.685325][ T348] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 373.713477][ T348] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 373.722859][ T348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.738793][ T348] usb 3-1: config 0 descriptor?? [ 373.747233][ T6374] device veth0_vlan entered promiscuous mode [ 373.755931][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 373.766461][ T6388] xt_bpf: check failed: parse error [ 373.776810][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 373.786773][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 373.795423][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 373.804146][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 373.812091][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 373.829433][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 373.836938][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 373.844932][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 373.853983][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.863358][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.870434][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.878627][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.887149][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.895831][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.903241][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.914343][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 373.923474][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 373.932062][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 373.941086][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 373.950828][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 373.959669][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 373.969080][ T6374] device veth1_macvtap entered promiscuous mode [ 373.980784][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 373.989218][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 373.997520][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 374.010795][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 374.019797][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 374.037239][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 374.046313][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 374.054824][ T321] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 374.073311][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 374.081526][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 374.090628][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 374.098681][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 374.108195][ T6380] device veth0_vlan entered promiscuous mode [ 374.121792][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 374.131068][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 374.140874][ T6380] device veth1_macvtap entered promiscuous mode [ 374.175366][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 374.183446][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 374.192182][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 374.201058][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 374.212115][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 374.282461][ T348] usbhid 3-1:0.0: can't add hid device: -71 [ 374.289016][ T348] usbhid: probe of 3-1:0.0 failed with error -71 [ 374.298194][ T348] usb 3-1: USB disconnect, device number 27 [ 374.524662][ T321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.547978][ T321] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 374.588344][ T321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.638378][ T321] usb 5-1: config 0 descriptor?? [ 374.713381][ T473] device bridge_slave_1 left promiscuous mode [ 374.727296][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.738880][ T6402] loop3: detected capacity change from 0 to 40427 [ 374.748247][ T473] device bridge_slave_0 left promiscuous mode [ 374.755825][ T6402] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 374.770641][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.778359][ T6402] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 374.788462][ T473] device veth1_macvtap left promiscuous mode [ 374.795535][ T6402] F2FS-fs (loop3): invalid crc value [ 374.800918][ T473] device veth0_vlan left promiscuous mode [ 374.817329][ T6402] F2FS-fs (loop3): Found nat_bits in checkpoint [ 374.887160][ T6402] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 374.919589][ T6402] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 374.930810][ T6402] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 374.972511][ T3513] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 375.065102][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1488'. [ 375.082472][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 375.082494][ T28] audit: type=1400 audit(1723490048.766:268): avc: denied { lock } for pid=6401 comm="syz.3.1488" path="socket:[41565]" dev="sockfs" ino=41565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 375.121966][ T321] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 375.139471][ T321] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0025/input/input137 [ 375.239233][ T321] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 375.345681][ T6415] loop0: detected capacity change from 0 to 40427 [ 375.358981][ T6415] F2FS-fs (loop0): invalid crc value [ 375.369477][ T6415] F2FS-fs (loop0): Found nat_bits in checkpoint [ 375.419837][ T6415] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 375.431097][ T6418] loop3: detected capacity change from 0 to 40427 [ 375.446651][ T6418] F2FS-fs (loop3): Unrecognized mount option "01777777777777777777777" or missing value [ 375.462612][ T3513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.478705][ T3513] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.501245][ T3513] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 375.552402][ T3513] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.573165][ T3513] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.587371][ T3513] usb 2-1: config 0 descriptor?? [ 376.022418][ T6424] serio: Serial port pts0 [ 376.027010][ T28] audit: type=1400 audit(1723490049.706:269): avc: denied { setcheckreqprot } for pid=6417 comm="syz.3.1492" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 376.176030][ T6415] xt_hashlimit: size too large, truncated to 1048576 [ 376.274352][ T348] usb 5-1: USB disconnect, device number 26 [ 376.334285][ T6428] loop2: detected capacity change from 0 to 2048 [ 376.398057][ T6428] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 376.554778][ T3513] plantronics 0003:047F:FFFF.0026: unbalanced delimiter at end of report description [ 376.566825][ T3513] plantronics 0003:047F:FFFF.0026: parse failed [ 376.573389][ T3513] plantronics: probe of 0003:047F:FFFF.0026 failed with error -22 [ 376.622599][ T6374] syz-executor: attempt to access beyond end of device [ 376.622599][ T6374] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 376.674095][ T6448] loop3: detected capacity change from 0 to 256 [ 376.682280][ T6448] FAT-fs (loop3): Unrecognized mount option "ioŠ¼harseG®S„874" or missing value [ 376.815982][ T1698] usb 2-1: USB disconnect, device number 30 [ 376.880970][ T317] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 377.011906][ T3664] EXT4-fs (loop2): unmounting filesystem. [ 377.033575][ T6454] xt_bpf: check failed: parse error [ 377.172437][ T3513] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 377.302448][ T2626] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 377.412451][ T3513] usb 5-1: Using ep0 maxpacket: 32 [ 377.937002][ T6462] loop1: detected capacity change from 0 to 256 [ 377.943799][ T6462] FAT-fs (loop1): Unrecognized mount option "ioŠ¼harseG®S„874" or missing value [ 377.954387][ T6464] input: syz0 as /devices/virtual/input/input140 [ 377.989376][ T6464] loop3: detected capacity change from 0 to 256 [ 377.998304][ T6464] FAT-fs (loop3): Unrecognized mount option "ioŠ¼harseG®S„874" or missing value [ 378.380824][ T3513] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.394025][ T3513] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.401684][ T6467] loop1: detected capacity change from 0 to 512 [ 378.406119][ T3513] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 378.410598][ T2626] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.431284][ T3513] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.431888][ T2626] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 378.448638][ T2626] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.457720][ T2626] usb 3-1: config 0 descriptor?? [ 378.480693][ T6467] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1505: casefold flag without casefold feature [ 378.495301][ T6467] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.1505: missing EA_INODE flag [ 378.510032][ T6467] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1505: error while reading EA inode 2 err=-117 [ 378.523436][ T6467] EXT4-fs (loop1): 1 orphan inode deleted [ 378.529278][ T6467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 378.545415][ T3513] hub 5-1:4.0: USB hub found [ 379.098067][ T6481] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #19: comm syz.1.1505: Siphash requires key [ 379.109826][ T6481] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #19: comm syz.1.1505: Siphash requires key [ 379.121797][ T6481] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #19: comm syz.1.1505: Siphash requires key [ 379.122769][ T2626] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 379.172438][ T3513] hub 5-1:4.0: 1 port detected [ 379.177769][ T2626] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0027/input/input141 [ 379.340037][ T2626] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 379.417937][ T6450] loop4: detected capacity change from 0 to 1024 [ 379.424863][ T2626] usb 3-1: USB disconnect, device number 28 [ 379.440237][ T6450] EXT4-fs: Ignoring removed orlov option [ 379.449875][ T6450] EXT4-fs: Ignoring removed nomblk_io_submit option [ 379.474194][ T6490] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1512'. [ 379.500246][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'. [ 379.511779][ T6450] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 379.652724][ T3513] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 379.659380][ T3513] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 379.689363][ T4061] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #2: comm syz-executor: Siphash requires key [ 379.702935][ T3513] usb 5-1: USB disconnect, device number 27 [ 379.755796][ T4061] EXT4-fs (loop1): unmounting filesystem. [ 379.782425][ T39] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 379.940811][ T6501] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.948071][ T6501] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.956011][ T6501] device bridge_slave_0 entered promiscuous mode [ 379.966323][ T6501] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.973571][ T6501] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.985268][ T6501] device bridge_slave_1 entered promiscuous mode [ 380.039113][ T6506] input: syz0 as /devices/virtual/input/input142 [ 380.105881][ T6507] loop2: detected capacity change from 0 to 256 [ 380.114401][ T6507] FAT-fs (loop2): Unrecognized mount option "ioŠ¼harseG®S„874" or missing value [ 380.295139][ T4687] EXT4-fs (loop4): unmounting filesystem. [ 380.392429][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.404236][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.413993][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 380.427116][ T39] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 380.436482][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.445659][ T39] usb 4-1: config 0 descriptor?? [ 380.457625][ T6501] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.465206][ T6501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.473481][ T6501] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.480624][ T6501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.599170][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 380.610266][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.618322][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.644496][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.661438][ T606] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.670494][ T606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.682515][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.739038][ T606] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.746290][ T606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.781039][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 380.789492][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 380.832482][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 380.841122][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 380.855178][ T6501] device veth0_vlan entered promiscuous mode [ 380.876466][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 380.884742][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 380.902100][ T6501] device veth1_macvtap entered promiscuous mode [ 380.909749][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 380.917925][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 380.925966][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.937240][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.945569][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 380.954438][ T330] device bridge_slave_1 left promiscuous mode [ 380.961289][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.969398][ T330] device bridge_slave_0 left promiscuous mode [ 380.975766][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.993586][ T330] device veth1_macvtap left promiscuous mode [ 381.002845][ T330] device veth0_vlan left promiscuous mode [ 381.123417][ T39] plantronics 0003:047F:FFFF.0028: unbalanced delimiter at end of report description [ 381.142211][ T39] plantronics 0003:047F:FFFF.0028: parse failed [ 381.151625][ T39] plantronics: probe of 0003:047F:FFFF.0028 failed with error -22 [ 381.181493][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 381.195204][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 381.216780][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 381.242254][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 381.389792][ T39] usb 4-1: USB disconnect, device number 28 [ 381.411856][ T6525] xt_bpf: check failed: parse error [ 381.656574][ T6534] loop0: detected capacity change from 0 to 128 [ 381.715278][ T1698] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 382.222448][ T1698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.252955][ T1698] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 382.262219][ T1698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.274422][ T1698] usb 3-1: config 0 descriptor?? [ 382.300667][ T6543] loop4: detected capacity change from 0 to 512 [ 382.370680][ T6543] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2926: inode #16: comm syz.4.1525: corrupted xattr block 8 [ 382.409944][ T6543] EXT4-fs (loop4): Remounting filesystem read-only [ 382.421186][ T6543] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 382.431250][ T6543] EXT4-fs (loop4): 1 orphan inode deleted [ 382.435626][ T6539] loop3: detected capacity change from 0 to 40427 [ 382.437723][ T6543] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 382.454679][ T6543] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038 (0x7fffffff) [ 382.480784][ T6539] F2FS-fs (loop3): invalid crc value [ 382.488821][ T6539] F2FS-fs (loop3): Found nat_bits in checkpoint [ 382.541626][ T6539] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 382.673118][ T4687] EXT4-fs (loop4): unmounting filesystem. [ 382.760527][ T6539] xt_hashlimit: size too large, truncated to 1048576 [ 382.768292][ T1698] keytouch 0003:0926:3333.0029: fixing up Keytouch IEC report descriptor [ 382.783612][ T1698] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0029/input/input143 [ 382.909779][ T6564] loop0: detected capacity change from 0 to 512 [ 382.917995][ T6564] EXT4-fs: Ignoring removed oldalloc option [ 382.952609][ T28] audit: type=1400 audit(1723490056.576:270): avc: denied { read write } for pid=6558 comm="syz.0.1530" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 382.991694][ T1698] keytouch 0003:0926:3333.0029: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 383.037591][ T6564] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.1530: Parent and EA inode have the same ino 15 [ 383.051761][ T6564] EXT4-fs (loop0): Remounting filesystem read-only [ 383.059091][ T6564] EXT4-fs (loop0): 1 orphan inode deleted [ 383.065011][ T6564] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 383.113352][ T28] audit: type=1400 audit(1723490056.576:271): avc: denied { open } for pid=6558 comm="syz.0.1530" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 383.146818][ T1698] usb 3-1: USB disconnect, device number 29 [ 383.252430][ T348] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 383.314995][ T6567] loop1: detected capacity change from 0 to 2048 [ 383.334241][ T6567] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 383.358971][ T6380] syz-executor: attempt to access beyond end of device [ 383.358971][ T6380] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 383.502441][ T348] usb 5-1: Using ep0 maxpacket: 8 [ 383.563202][ T6374] EXT4-fs (loop0): unmounting filesystem. [ 383.622460][ T348] usb 5-1: config 129 has an invalid interface number: 3 but max is 2 [ 383.631120][ T348] usb 5-1: config 129 has an invalid interface number: 181 but max is 2 [ 383.640485][ T348] usb 5-1: config 129 has an invalid interface number: 205 but max is 2 [ 383.648936][ T348] usb 5-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 383.657776][ T348] usb 5-1: config 129 has no interface number 0 [ 383.663853][ T348] usb 5-1: config 129 has no interface number 1 [ 383.670177][ T348] usb 5-1: config 129 has no interface number 2 [ 383.676825][ T348] usb 5-1: config 129 interface 3 altsetting 9 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 383.688464][ T348] usb 5-1: config 129 interface 3 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 383.700097][ T348] usb 5-1: config 129 interface 3 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 383.712261][ T348] usb 5-1: config 129 interface 181 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 383.725033][ T348] usb 5-1: config 129 interface 181 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 383.736728][ T348] usb 5-1: config 129 interface 181 altsetting 2 endpoint 0x6 has an invalid bInterval 128, changing to 11 [ 383.751627][ T348] usb 5-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 383.774736][ T348] usb 5-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 383.790661][ T348] usb 5-1: config 129 interface 181 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 383.806431][ T348] usb 5-1: config 129 interface 181 altsetting 2 has an invalid endpoint with address 0x70, skipping [ 383.818700][ T348] usb 5-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 383.831955][ T348] usb 5-1: config 129 interface 181 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 383.844783][ T348] usb 5-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 383.856697][ T348] usb 5-1: config 129 interface 181 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 383.869270][ T348] usb 5-1: config 129 interface 181 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 383.881842][ T348] usb 5-1: config 129 interface 205 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 64 [ 383.894800][ T348] usb 5-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 383.906876][ T348] usb 5-1: config 129 interface 205 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 383.921740][ T348] usb 5-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 383.939937][ T348] usb 5-1: config 129 interface 205 altsetting 3 endpoint 0x8 has an invalid bInterval 38, changing to 9 [ 383.954730][ T348] usb 5-1: config 129 interface 205 altsetting 3 endpoint 0x8 has invalid wMaxPacketSize 0 [ 383.965662][ T348] usb 5-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 383.979037][ T348] usb 5-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 383.990838][ T348] usb 5-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 384.038364][ T348] usb 5-1: config 129 interface 205 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 384.067418][ T348] usb 5-1: config 129 interface 205 altsetting 3 has an invalid endpoint with address 0xD7, skipping [ 384.093022][ T348] usb 5-1: config 129 interface 3 has no altsetting 0 [ 384.108585][ T348] usb 5-1: config 129 interface 181 has no altsetting 0 [ 384.130459][ T348] usb 5-1: config 129 interface 205 has no altsetting 0 [ 384.152398][ T6501] EXT4-fs (loop1): unmounting filesystem. [ 384.302998][ T348] usb 5-1: New USB device found, idVendor=05c6, idProduct=9062, bcdDevice=74.7a [ 384.327746][ T348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.369071][ T348] usb 5-1: Product: éŗė˜¼į·”ķŠ¬ę€«ķŠšé²ŗą¼“ęˆ«į…£Źčæ©ą”•ć½§ė³Žé›£ā”¤ęƒ²čÆŗ啌ą±ŗį’²å½–×”ēµ“ē—£ļ†–ē·­ćƒ’ā®Ŗē½°į ‹ė‚ėŖ¹ģæ˜į®®ļ©œź»Æģ½»ėŒė‹žāŠŠź·Ŗģ»”Š¶ā²–ē„‰ģ‡²ąø„ä¶Æģ›Ŗź¼ę›µģ­±ļ’¹é’•ļ‚®ä°Ŗļ²½č¾ˆä¢äŸÆ굈ģ€—å–žå›­źœ¹į³Ŗ垈ī±­į†·ä°«å‚½ć­¹å±‹×†ź££å°¢źƒ…ćÆ©ķ”„ź¢ ź±½į¼ź‡¦į¾²ėƎį¶Øā§æę—€å¦“ę³æį¹ŗģŽ¶Ų¬ę“˜ļš§į›€ī…·ģ’µźˆ·ģ£³ź™€į„‹ėŗŒļ²į‚ī«ęž›ä«Ŗ蔘ē…‹ģ˜’ļ§™é²éŒ–č‹·ī°¾č‹©ä‡§ģš¶ [ 384.460334][ T348] usb 5-1: Manufacturer: Š‚ [ 384.470978][ T348] usb 5-1: SerialNumber: į”¼@ [ 384.809373][ T6609] loop3: detected capacity change from 0 to 256 [ 384.818337][ T6609] FAT-fs (loop3): Unrecognized mount option "ioŠ¼harseG®S„874" or missing value [ 384.987290][ T6430] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 385.052449][ T3513] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 385.124233][ T348] usb 5-1: USB disconnect, device number 28 [ 385.292395][ T3513] usb 1-1: Using ep0 maxpacket: 8 [ 385.376552][ T6614] input: syz0 as /devices/virtual/input/input145 [ 385.576909][ T6615] loop1: detected capacity change from 0 to 256 [ 385.589141][ T6615] FAT-fs (loop1): Unrecognized mount option "ioŠ¼harseG®S„874" or missing value [ 385.703723][ T317] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 385.739560][ T6618] loop3: detected capacity change from 0 to 2048 [ 385.746063][ T3513] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.757901][ T3513] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.768063][ T3513] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 385.781092][ T3513] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 385.790643][ T3513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.800327][ T6618] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 385.810226][ T3513] usb 1-1: config 0 descriptor?? [ 386.022436][ T1698] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 386.282427][ T1698] usb 5-1: Using ep0 maxpacket: 32 [ 386.372489][ T3513] usbhid 1-1:0.0: can't add hid device: -71 [ 386.378876][ T3513] usbhid: probe of 1-1:0.0 failed with error -71 [ 386.386541][ T3513] usb 1-1: USB disconnect, device number 29 [ 386.392667][ T6] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 386.422565][ T1698] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.433979][ T1698] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.444876][ T1698] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 386.453952][ T1698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.503494][ T1698] hub 5-1:4.0: USB hub found [ 386.536789][ T6380] EXT4-fs (loop3): unmounting filesystem. [ 386.580540][ T28] audit: type=1400 audit(1723490060.276:272): avc: denied { bind } for pid=6636 comm="syz.3.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 386.600357][ T28] audit: type=1400 audit(1723490060.276:273): avc: denied { read } for pid=6636 comm="syz.3.1554" path="socket:[43275]" dev="sockfs" ino=43275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 386.635767][ T28] audit: type=1400 audit(1723490060.326:274): avc: denied { setopt } for pid=6636 comm="syz.3.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 386.690546][ T6642] loop2: detected capacity change from 0 to 1024 [ 386.706596][ T6642] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 386.717759][ T6642] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 386.753406][ T28] audit: type=1400 audit(1723490060.456:275): avc: denied { bind } for pid=6641 comm="syz.2.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 386.774792][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.785606][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.795530][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 386.808651][ T6] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 386.822440][ T1698] hub 5-1:4.0: 1 port detected [ 386.832565][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.900376][ T6] usb 2-1: config 0 descriptor?? [ 386.906551][ T3664] EXT4-fs (loop2): unmounting filesystem. [ 386.956243][ T6650] xt_bpf: check failed: parse error [ 387.077637][ T6620] loop4: detected capacity change from 0 to 1024 [ 387.084490][ T6620] EXT4-fs: Ignoring removed orlov option [ 387.090649][ T6620] EXT4-fs: Ignoring removed nomblk_io_submit option [ 387.114173][ T6620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 387.179255][ T6652] loop0: detected capacity change from 0 to 40427 [ 387.205847][ T6652] F2FS-fs (loop0): invalid crc value [ 387.212447][ T1698] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 387.219027][ T1698] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 387.219726][ T6652] F2FS-fs (loop0): Found nat_bits in checkpoint [ 387.242849][ T348] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 387.252798][ T1698] usb 5-1: USB disconnect, device number 29 [ 387.268743][ T6652] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 387.334080][ T6652] xt_hashlimit: size too large, truncated to 1048576 [ 387.433429][ T6] plantronics 0003:047F:FFFF.002A: unbalanced delimiter at end of report description [ 387.445321][ T6] plantronics 0003:047F:FFFF.002A: parse failed [ 387.452829][ T6] plantronics: probe of 0003:047F:FFFF.002A failed with error -22 [ 387.541435][ T6374] syz-executor: attempt to access beyond end of device [ 387.541435][ T6374] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 387.612462][ T348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.623411][ T348] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 387.638678][ T6663] loop0: detected capacity change from 0 to 512 [ 387.638897][ T348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.646376][ T6663] EXT4-fs: Ignoring removed bh option [ 387.663074][ T348] usb 3-1: config 0 descriptor?? [ 387.668211][ T6] usb 2-1: USB disconnect, device number 31 [ 387.674585][ T6663] EXT4-fs (loop0): 1 orphan inode deleted [ 387.680806][ T6663] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 387.690395][ T6663] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) [ 387.758925][ T4687] EXT4-fs (loop4): unmounting filesystem. [ 387.787789][ T6668] loop4: detected capacity change from 0 to 2048 [ 387.805024][ T6668] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 387.842463][ T1698] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 387.870863][ T6673] syz.0.1560[6673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.871635][ T6673] syz.0.1560[6673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.202532][ T348] usbhid 3-1:0.0: can't add hid device: -71 [ 388.219730][ T6675] FAULT_INJECTION: forcing a failure. [ 388.219730][ T6675] name failslab, interval 1, probability 0, space 0, times 0 [ 388.227758][ T348] usbhid: probe of 3-1:0.0 failed with error -71 [ 388.233865][ T1698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.248277][ T348] usb 3-1: USB disconnect, device number 30 [ 388.255602][ T6675] CPU: 1 PID: 6675 Comm: syz.1.1563 Not tainted 6.1.90-syzkaller-00004-g79436849ef1d #0 [ 388.266804][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 388.276779][ T6675] Call Trace: [ 388.279988][ T6675] [ 388.282906][ T6675] dump_stack_lvl+0x151/0x1b7 [ 388.287442][ T6675] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 388.293215][ T6675] dump_stack+0x15/0x1a [ 388.297270][ T6675] should_fail_ex+0x3d0/0x520 [ 388.301945][ T6675] ? security_file_alloc+0x29/0x120 [ 388.307335][ T6675] __should_failslab+0xaf/0xf0 [ 388.312548][ T6675] should_failslab+0x9/0x20 [ 388.316886][ T6675] kmem_cache_alloc+0x3b/0x2c0 [ 388.321754][ T6675] ? __alloc_file+0x29/0x2a0 [ 388.326270][ T6675] security_file_alloc+0x29/0x120 [ 388.331448][ T6675] __alloc_file+0xb2/0x2a0 [ 388.335793][ T6675] alloc_empty_file+0x95/0x180 [ 388.340745][ T6675] path_openat+0xec/0x2d60 [ 388.345086][ T6675] ? kasan_set_track+0x60/0x70 [ 388.349769][ T6675] ? kasan_set_track+0x4b/0x70 [ 388.354386][ T6675] ? kasan_save_alloc_info+0x1f/0x30 [ 388.359496][ T6675] ? __kasan_slab_alloc+0x6c/0x80 [ 388.364623][ T6675] ? slab_post_alloc_hook+0x53/0x2c0 [ 388.369817][ T6675] ? getname_flags+0xba/0x520 [ 388.374609][ T6675] ? getname+0x19/0x20 [ 388.378764][ T6675] ? do_sys_openat2+0xe0/0x890 [ 388.383935][ T6675] ? __x64_sys_creat+0x11f/0x160 [ 388.388781][ T6675] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.394859][ T6675] ? do_filp_open+0x480/0x480 [ 388.399457][ T6675] do_filp_open+0x230/0x480 [ 388.404062][ T6675] ? vfs_tmpfile+0x480/0x480 [ 388.408574][ T6675] ? alloc_fd+0x4fa/0x5a0 [ 388.413175][ T6675] do_sys_openat2+0x151/0x890 [ 388.417798][ T6675] ? __mutex_lock_slowpath+0x10/0x10 [ 388.423063][ T6675] ? do_sys_open+0x220/0x220 [ 388.427634][ T6675] ? __kasan_check_write+0x14/0x20 [ 388.432869][ T6675] ? ksys_write+0x260/0x2c0 [ 388.437556][ T6675] __x64_sys_creat+0x11f/0x160 [ 388.442591][ T6675] ? __x64_compat_sys_openat+0x290/0x290 [ 388.449048][ T6675] ? debug_smp_processor_id+0x17/0x20 [ 388.454393][ T6675] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 388.460751][ T6675] ? exit_to_user_mode_prepare+0x39/0xa0 [ 388.466764][ T6675] x64_sys_call+0x27b/0x9a0 [ 388.471619][ T6675] do_syscall_64+0x3b/0xb0 [ 388.476123][ T6675] ? clear_bhb_loop+0x55/0xb0 [ 388.480639][ T6675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.486564][ T6675] RIP: 0033:0x7fbf98d799f9 [ 388.490821][ T6675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.510774][ T6675] RSP: 002b:00007fbf98bff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 388.519687][ T6675] RAX: ffffffffffffffda RBX: 00007fbf98f15f80 RCX: 00007fbf98d799f9 [ 388.527483][ T6675] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000020000200 [ 388.535295][ T6675] RBP: 00007fbf98bff090 R08: 0000000000000000 R09: 0000000000000000 [ 388.543359][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.551360][ T6675] R13: 0000000000000000 R14: 00007fbf98f15f80 R15: 00007ffe282d3028 [ 388.559859][ T6675] [ 388.585882][ T6677] loop1: detected capacity change from 0 to 512 [ 388.587880][ T1698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.614743][ T1698] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 388.625208][ T1698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.634281][ T4687] EXT4-fs (loop4): unmounting filesystem. [ 388.644592][ T1698] usb 4-1: config 0 descriptor?? [ 388.651869][ T6677] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 388.680414][ T6681] loop4: detected capacity change from 0 to 512 [ 388.698408][ T6681] EXT4-fs: Ignoring removed bh option [ 388.704582][ T6677] ext4 filesystem being mounted at /11/bus supports timestamps until 2038 (0x7fffffff) [ 388.796171][ T6681] EXT4-fs (loop4): 1 orphan inode deleted [ 388.801842][ T6681] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 388.811202][ T6681] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038 (0x7fffffff) [ 389.129770][ T6374] EXT4-fs (loop0): unmounting filesystem. [ 389.223846][ T1698] hid (null): report_id 0 is invalid [ 389.252301][ T1698] logitech-djreceiver 0003:046D:C71B.002B: report_id 0 is invalid [ 389.394658][ T1698] logitech-djreceiver 0003:046D:C71B.002B: item 0 0 1 8 parsing failed [ 389.482246][ T1698] logitech-djreceiver 0003:046D:C71B.002B: logi_dj_probe: parse failed [ 389.490791][ T1698] logitech-djreceiver: probe of 0003:046D:C71B.002B failed with error -22 [ 389.526711][ T6501] EXT4-fs (loop1): unmounting filesystem. [ 389.534067][ T1698] usb 4-1: USB disconnect, device number 29 [ 389.541879][ T4687] EXT4-fs (loop4): unmounting filesystem. [ 389.603756][ T6697] loop1: detected capacity change from 0 to 512 [ 389.615720][ T6697] EXT4-fs: Ignoring removed bh option [ 389.653138][ T6697] EXT4-fs (loop1): 1 orphan inode deleted [ 389.659441][ T6697] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 389.672506][ T6697] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff) [ 389.742436][ T348] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 389.992419][ T348] usb 1-1: Using ep0 maxpacket: 32 [ 390.112429][ T348] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.131069][ T348] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.152997][ T348] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 390.166611][ T6709] loop3: detected capacity change from 0 to 40427 [ 390.173578][ T348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.194540][ T6709] F2FS-fs (loop3): invalid crc value [ 390.206007][ T6709] F2FS-fs (loop3): Found nat_bits in checkpoint [ 390.243262][ T348] hub 1-1:4.0: USB hub found [ 390.265501][ T6709] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 390.352391][ T606] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 390.392468][ T6709] xt_hashlimit: size too large, truncated to 1048576 [ 390.465630][ T6501] EXT4-fs (loop1): unmounting filesystem. [ 390.562503][ T348] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 390.731277][ T6720] input: syz0 as /devices/virtual/input/input146 [ 391.072450][ T606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.088465][ T606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.103414][ T606] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 391.122452][ T606] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.137013][ T606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.152111][ T606] usb 3-1: config 0 descriptor?? [ 391.164544][ T6380] syz-executor: attempt to access beyond end of device [ 391.164544][ T6380] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 391.323731][ T6726] loop3: detected capacity change from 0 to 2048 [ 391.339915][ T6726] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 391.612481][ T606] usbhid 3-1:0.0: can't add hid device: -71 [ 391.616832][ T6738] loop0: detected capacity change from 0 to 1024 [ 391.618578][ T606] usbhid: probe of 3-1:0.0 failed with error -71 [ 391.625447][ T6738] EXT4-fs: Ignoring removed orlov option [ 391.639245][ T6738] EXT4-fs: Ignoring removed nomblk_io_submit option [ 391.650154][ T606] usb 3-1: USB disconnect, device number 31 [ 391.674545][ T6738] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 391.692628][ T3513] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 391.942457][ T3513] usb 2-1: Using ep0 maxpacket: 32 [ 392.062698][ T3513] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.075162][ T3513] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.085500][ T3513] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 392.095228][ T3513] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.138453][ T6380] EXT4-fs (loop3): unmounting filesystem. [ 392.143323][ T3513] hub 2-1:4.0: USB hub found [ 392.161695][ T6748] loop3: detected capacity change from 0 to 128 [ 392.282392][ T39] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 392.632464][ T3513] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 392.662542][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.674336][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.684706][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 392.698058][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.710180][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.737259][ T39] usb 3-1: config 0 descriptor?? [ 392.744233][ T6374] EXT4-fs (loop0): unmounting filesystem. [ 393.053789][ T3513] usb 1-1: reset high-speed USB device number 30 using dummy_hcd [ 393.103277][ T3513] usb 1-1: device reset changed ep0 maxpacket size! [ 393.160790][ T3513] usb 1-1: USB disconnect, device number 30 [ 393.227243][ T6762] loop3: detected capacity change from 0 to 512 [ 393.234936][ T6762] EXT4-fs: Ignoring removed bh option [ 393.260234][ T6762] EXT4-fs (loop3): 1 orphan inode deleted [ 393.266537][ T6762] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 393.276261][ T6762] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038 (0x7fffffff) [ 393.423514][ T39] plantronics 0003:047F:FFFF.002C: unbalanced delimiter at end of report description [ 393.436111][ T39] plantronics 0003:047F:FFFF.002C: parse failed [ 393.442858][ T39] plantronics: probe of 0003:047F:FFFF.002C failed with error -22 [ 393.639095][ T39] usb 3-1: USB disconnect, device number 32 [ 393.833592][ T6772] input: syz0 as /devices/virtual/input/input147 [ 393.873625][ T6772] loop4: detected capacity change from 0 to 256 [ 393.882124][ T6772] FAT-fs (loop4): Unrecognized mount option "ioŠ¼harseG®S„874" or missing value [ 394.270488][ T6380] EXT4-fs (loop3): unmounting filesystem. [ 394.450980][ T317] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 394.512540][ T3513] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 394.572538][ T6780] loop1: detected capacity change from 0 to 512 [ 394.691202][ T6780] EXT4-fs: Ignoring removed bh option [ 394.866069][ T6780] EXT4-fs (loop1): 1 orphan inode deleted [ 394.874954][ T6780] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 394.887127][ T6780] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff) [ 395.262693][ T6790] syz.1.1589[6790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.262811][ T6790] syz.1.1589[6790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.093661][ T606] usb 2-1: USB disconnect, device number 32 [ 396.154972][ T6501] EXT4-fs (loop1): unmounting filesystem. [ 396.190519][ T6792] loop0: detected capacity change from 0 to 2048 [ 396.227040][ T6792] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 396.252514][ T6] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 396.492406][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 396.612753][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.624247][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.635039][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 396.648908][ T6] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 396.658851][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.682638][ T6] usb 3-1: config 0 descriptor?? [ 396.719004][ T6374] EXT4-fs (loop0): unmounting filesystem. [ 396.847215][ T6812] loop0: detected capacity change from 0 to 512 [ 396.855904][ T6812] EXT4-fs: Ignoring removed bh option [ 396.888588][ T6812] EXT4-fs (loop0): 1 orphan inode deleted [ 396.894761][ T6812] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 396.905619][ T6812] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038 (0x7fffffff) [ 397.303433][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 397.314529][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 397.324939][ T6] usb 3-1: USB disconnect, device number 33 [ 397.341579][ T28] audit: type=1326 audit(1723490071.036:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6820 comm="syz.1.1599" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf98d799f9 code=0x0 [ 397.546250][ T6827] input: syz0 as /devices/virtual/input/input148 [ 397.584206][ T6827] loop3: detected capacity change from 0 to 256 [ 397.592652][ T6827] FAT-fs (loop3): Unrecognized mount option "ioŠ¼harseG®S„874" or missing value [ 397.781465][ T3513] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 397.789921][ T6374] EXT4-fs (loop0): unmounting filesystem. [ 397.810538][ T6831] loop0: detected capacity change from 0 to 512 [ 397.818551][ T6831] EXT4-fs: Ignoring removed bh option [ 397.834993][ T6831] EXT4-fs (loop0): 1 orphan inode deleted [ 397.841417][ T6831] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 397.850451][ T6831] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038 (0x7fffffff) [ 398.020630][ T6836] syz.0.1602[6836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.021026][ T6836] syz.0.1602[6836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.197714][ T3513] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.373696][ T6] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 400.099750][ T3513] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.150012][ T3513] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 400.285267][ T6848] bridge0: port 3(gretap0) entered blocking state [ 400.291964][ T6848] bridge0: port 3(gretap0) entered disabled state [ 400.308550][ T6848] device gretap0 entered promiscuous mode [ 400.317002][ T6848] bridge0: port 3(gretap0) entered blocking state [ 400.323631][ T6848] bridge0: port 3(gretap0) entered forwarding state [ 400.993154][ T6374] EXT4-fs (loop0): unmounting filesystem. [ 401.102095][ T3513] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 401.112309][ T3513] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.160578][ T3513] usb 5-1: config 0 descriptor?? [ 401.166808][ T6856] loop0: detected capacity change from 0 to 2048 [ 401.216687][ T3513] usb 5-1: can't set config #0, error -71 [ 401.234424][ T6862] xt_bpf: check failed: parse error [ 401.259687][ T3513] usb 5-1: USB disconnect, device number 30 [ 401.259708][ T6856] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 401.642459][ T3513] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 401.977558][ T3513] usb 5-1: Using ep0 maxpacket: 8 [ 401.989807][ T6374] EXT4-fs (loop0): unmounting filesystem. [ 402.033135][ T6877] loop1: detected capacity change from 0 to 128 [ 402.102533][ T3513] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.115504][ T3513] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.125612][ T3513] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 402.150445][ T3513] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 402.152396][ T1698] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 402.160239][ T3513] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.176659][ T3513] usb 5-1: config 0 descriptor?? [ 402.248935][ T6883] input: syz0 as /devices/virtual/input/input149 [ 402.318485][ T6884] loop0: detected capacity change from 0 to 256 [ 402.327325][ T6884] FAT-fs (loop0): Unrecognized mount option "ioŠ¼harseG®S„874" or missing value [ 402.592539][ T1698] usb 4-1: Using ep0 maxpacket: 32 [ 402.722855][ T1698] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.737212][ T1698] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.749634][ T1698] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 402.760337][ T1698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.827379][ T1698] hub 4-1:4.0: USB hub found [ 402.909625][ T28] audit: type=1400 audit(1723490076.606:277): avc: denied { read write } for pid=6887 comm="syz.2.1617" name="uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 402.920693][ T6889] loop0: detected capacity change from 0 to 512 [ 402.935740][ T28] audit: type=1400 audit(1723490076.636:278): avc: denied { open } for pid=6887 comm="syz.2.1617" path="/dev/uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 402.966181][ T6889] EXT4-fs: Ignoring removed bh option [ 402.984962][ T6889] EXT4-fs (loop0): 1 orphan inode deleted [ 402.990910][ T6889] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 403.000827][ T6889] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038 (0x7fffffff) [ 403.011813][ T3513] usbhid 5-1:0.0: can't add hid device: -71 [ 403.017903][ T3513] usbhid: probe of 5-1:0.0 failed with error -71 [ 403.031130][ T3513] usb 5-1: USB disconnect, device number 31 [ 403.162887][ T1698] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 403.187466][ T6897] syz.0.1616[6897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.187785][ T6897] syz.0.1616[6897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.242852][ T628] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 403.682478][ T628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.693728][ T628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.703439][ T628] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 403.712726][ T628] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.722194][ T628] usb 2-1: config 0 descriptor?? [ 403.787701][ T6374] EXT4-fs (loop0): unmounting filesystem. [ 403.793591][ T3513] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 403.831633][ T6905] loop0: detected capacity change from 0 to 512 [ 403.844265][ T6905] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 403.853308][ T6905] ext4 filesystem being mounted at /29/bus supports timestamps until 2038 (0x7fffffff) [ 404.001880][ T6891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.013393][ T6891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.524706][ T6374] EXT4-fs (loop0): unmounting filesystem. [ 404.541921][ T28] audit: type=1326 audit(1723490078.236:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28729799f9 code=0x7ffc0000 [ 404.566297][ T628] usbhid 2-1:0.0: can't add hid device: -71 [ 404.566896][ T28] audit: type=1326 audit(1723490078.236:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28729799f9 code=0x7ffc0000 [ 404.573087][ T628] usbhid: probe of 2-1:0.0 failed with error -71 [ 404.624542][ T28] audit: type=1326 audit(1723490078.236:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28729799f9 code=0x7ffc0000 [ 404.651750][ T628] usb 2-1: USB disconnect, device number 33 [ 404.659475][ T28] audit: type=1326 audit(1723490078.236:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28729799f9 code=0x7ffc0000 [ 404.703991][ T28] audit: type=1326 audit(1723490078.236:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28729799f9 code=0x7ffc0000 [ 404.729637][ T28] audit: type=1326 audit(1723490078.246:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f28729709a7 code=0x7ffc0000 [ 404.755003][ T3513] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.757877][ T28] audit: type=1326 audit(1723490078.246:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2872915369 code=0x7ffc0000 [ 404.768749][ T6923] loop2: detected capacity change from 0 to 2048 [ 404.793020][ T28] audit: type=1326 audit(1723490078.246:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6918 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28729799f9 code=0x7ffc0000 [ 404.802090][ T3513] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.841393][ T3513] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 404.850990][ T3513] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.864988][ T3513] usb 5-1: config 0 descriptor?? [ 404.871020][ T6923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 405.352610][ T3513] hid (null): report_id 0 is invalid [ 405.361134][ T3513] logitech-djreceiver 0003:046D:C71B.002D: report_id 0 is invalid [ 405.372268][ T3513] logitech-djreceiver 0003:046D:C71B.002D: item 0 0 1 8 parsing failed [ 405.381315][ T3513] logitech-djreceiver 0003:046D:C71B.002D: logi_dj_probe: parse failed [ 405.391969][ T3513] logitech-djreceiver: probe of 0003:046D:C71B.002D failed with error -22 [ 405.473517][ T628] usb 4-1: reset high-speed USB device number 30 using dummy_hcd [ 405.513104][ T3664] EXT4-fs (loop2): unmounting filesystem. [ 405.525349][ T628] usb 4-1: device reset changed ep0 maxpacket size! [ 405.542608][ T628] usb 4-1: USB disconnect, device number 30 [ 405.560493][ T1698] usb 5-1: USB disconnect, device number 32 [ 405.653534][ T6940] loop0: detected capacity change from 0 to 1024 [ 405.667639][ T6940] EXT4-fs: Ignoring removed oldalloc option [ 405.684844][ T6940] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 405.751671][ T6943] input: syz0 as /devices/virtual/input/input150 [ 405.790858][ T6943] loop2: detected capacity change from 0 to 256 [ 405.799416][ T6943] FAT-fs (loop2): Unrecognized mount option "ioŠ¼harseG®S„874" or missing value [ 405.962464][ T628] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 406.042884][ T6940] loop0: detected capacity change from 1024 to 64 [ 406.058527][ T6374] EXT4-fs warning (device loop0): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.072806][ T6374] EXT4-fs warning (device loop0): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.089618][ T6374] EXT4-fs warning (device loop0): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.103782][ T6374] EXT4-fs warning (device loop0): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.118634][ T6374] EXT4-fs warning (device loop0): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.133596][ T6374] EXT4-fs warning (device loop0): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.148247][ T6374] EXT4-fs warning (device loop0): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.163340][ T6374] EXT4-fs warning (device loop0): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.178120][ T6374] EXT4-fs warning (device loop0): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.192625][ T6374] EXT4-fs warning (device loop0): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 406.254324][ T43] kworker/u4:2: attempt to access beyond end of device [ 406.254324][ T43] loop0: rw=1, sector=224, nr_sectors = 2 limit=64 [ 406.267923][ T43] Buffer I/O error on device loop0, logical block 112 [ 406.280971][ T6374] EXT4-fs (loop0): unmounting filesystem. [ 406.290574][ T6941] kmmpd-loop0: attempt to access beyond end of device [ 406.290574][ T6941] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 406.304411][ T6941] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 406.322583][ T1698] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 406.452905][ T628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.472418][ T628] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.487959][ T628] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 406.501574][ T628] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 406.511685][ T628] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.532960][ T628] usb 4-1: config 0 descriptor?? [ 406.715273][ T1698] usb 2-1: Using ep0 maxpacket: 8 [ 407.835980][ T1698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.847282][ T1698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.852099][ T6966] loop4: detected capacity change from 0 to 512 [ 407.857544][ T1698] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 407.877240][ T1698] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 407.886436][ T1698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.887430][ T6966] EXT4-fs: Ignoring removed mblk_io_submit option [ 407.895469][ T1698] usb 2-1: config 0 descriptor?? [ 407.931044][ T6969] loop2: detected capacity change from 0 to 2048 [ 407.938243][ T6966] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.1636: inline data xattr refers to an external xattr inode [ 407.954113][ T6966] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1636: couldn't read orphan inode 12 (err -117) [ 407.969432][ T6966] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 407.985494][ T628] plantronics 0003:047F:FFFF.002E: unknown main item tag 0xe [ 407.994161][ T6969] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 408.008483][ T628] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 408.095380][ T628] plantronics 0003:047F:FFFF.002E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 408.133387][ T330] device bridge_slave_1 left promiscuous mode [ 408.140613][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.151194][ T330] device bridge_slave_0 left promiscuous mode [ 408.202261][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 408.202290][ T28] audit: type=1400 audit(1723490081.896:342): avc: denied { write } for pid=6965 comm="syz.4.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 408.237938][ T628] usb 4-1: USB disconnect, device number 31 [ 408.362162][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.416632][ T330] device veth1_macvtap left promiscuous mode [ 408.422625][ T330] device veth0_vlan left promiscuous mode [ 408.542446][ T1698] usbhid 2-1:0.0: can't add hid device: -71 [ 408.548418][ T1698] usbhid: probe of 2-1:0.0 failed with error -71 [ 408.563730][ T1698] usb 2-1: USB disconnect, device number 34 [ 408.711929][ T4687] EXT4-fs (loop4): unmounting filesystem. [ 408.755560][ T3664] EXT4-fs (loop2): unmounting filesystem. [ 409.146693][ T6992] loop2: detected capacity change from 0 to 512 [ 409.154252][ T6992] EXT4-fs: Ignoring removed bh option [ 409.174937][ T6992] EXT4-fs (loop2): 1 orphan inode deleted [ 409.181188][ T6992] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 409.234368][ T6992] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038 (0x7fffffff) [ 409.256460][ T6997] FAULT_INJECTION: forcing a failure. [ 409.256460][ T6997] name failslab, interval 1, probability 0, space 0, times 0 [ 409.269192][ T6997] CPU: 1 PID: 6997 Comm: syz.4.1641 Not tainted 6.1.90-syzkaller-00004-g79436849ef1d #0 [ 409.279313][ T6997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 409.289660][ T6997] Call Trace: [ 409.292949][ T6997] [ 409.295731][ T6997] dump_stack_lvl+0x151/0x1b7 [ 409.300499][ T6997] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 409.305974][ T6997] ? bpf_trace_run3+0x2e0/0x2e0 [ 409.310680][ T6997] ? __this_cpu_preempt_check+0x13/0x20 [ 409.316345][ T6997] dump_stack+0x15/0x1a [ 409.320504][ T6997] should_fail_ex+0x3d0/0x520 [ 409.325101][ T6997] ? radix_tree_node_alloc+0x80/0x3c0 [ 409.330318][ T6997] __should_failslab+0xaf/0xf0 [ 409.334943][ T6997] should_failslab+0x9/0x20 [ 409.339368][ T6997] kmem_cache_alloc+0x3b/0x2c0 [ 409.344171][ T6997] radix_tree_node_alloc+0x80/0x3c0 [ 409.349354][ T6997] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 409.354992][ T6997] ? rcu_preempt_deferred_qs_irqrestore+0x704/0x9e0 [ 409.361430][ T6997] idr_get_free+0x2b6/0xa90 [ 409.365927][ T6997] idr_alloc+0x1a0/0x2f0 [ 409.370265][ T6997] ? idr_alloc_u32+0x320/0x320 [ 409.374954][ T6997] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 409.380242][ T6997] ? __rcu_read_unlock+0x7e/0xd0 [ 409.385332][ T6997] ? get_net_ns_by_pid+0xfe/0x130 [ 409.390411][ T6997] rtnl_net_newid+0x60c/0x9b0 [ 409.395137][ T6997] ? register_pernet_subsys+0x40/0x40 [ 409.400526][ T6997] ? __rcu_read_unlock+0x7e/0xd0 [ 409.405379][ T6997] ? register_pernet_subsys+0x40/0x40 [ 409.410776][ T6997] rtnetlink_rcv_msg+0x937/0xca0 [ 409.415926][ T6997] ? __kasan_check_write+0x14/0x20 [ 409.421119][ T6997] ? rtnetlink_bind+0x80/0x80 [ 409.426069][ T6997] ? compat_start_thread+0x20/0x20 [ 409.431324][ T6997] ? bpf_trace_run3+0x2e0/0x2e0 [ 409.436504][ T6997] ? __this_cpu_preempt_check+0x13/0x20 [ 409.442244][ T6997] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 409.449376][ T6997] ? probe_sched_switch+0x60/0x80 [ 409.454483][ T6997] ? _raw_spin_unlock+0x4c/0x70 [ 409.459337][ T6997] ? finish_task_switch+0x167/0x7b0 [ 409.464966][ T6997] ? __schedule+0xcaf/0x1550 [ 409.469547][ T6997] ? release_firmware_map_entry+0x191/0x191 [ 409.475547][ T6997] ? __kasan_check_read+0x11/0x20 [ 409.480393][ T6997] ? __kasan_check_read+0x11/0x20 [ 409.485611][ T6997] ? preempt_schedule_irq+0xe7/0x140 [ 409.490730][ T6997] ? preempt_schedule_notrace+0x140/0x140 [ 409.496572][ T6997] netlink_rcv_skb+0x1cd/0x410 [ 409.501148][ T6997] ? rtnetlink_bind+0x80/0x80 [ 409.505759][ T6997] ? netlink_ack+0x12a0/0x12a0 [ 409.510448][ T6997] ? netlink_unicast+0x7fc/0xab0 [ 409.515820][ T6997] ? rtnetlink_rcv+0xd/0x20 [ 409.520596][ T6997] ? rtnetlink_bind+0x80/0x80 [ 409.525176][ T6997] ? netlink_rcv_skb+0x6/0x410 [ 409.529809][ T6997] rtnetlink_rcv+0x1c/0x20 [ 409.534052][ T6997] netlink_unicast+0x906/0xab0 [ 409.538665][ T6997] ? netlink_detachskb+0x90/0x90 [ 409.543716][ T6997] ? security_netlink_send+0x7b/0xa0 [ 409.549153][ T6997] netlink_sendmsg+0xa15/0xd30 [ 409.554090][ T6997] ? netlink_getsockopt+0x540/0x540 [ 409.559499][ T6997] ? security_socket_sendmsg+0x82/0xb0 [ 409.565045][ T6997] ? netlink_getsockopt+0x540/0x540 [ 409.570259][ T6997] sock_write_iter+0x394/0x4e0 [ 409.575198][ T6997] ? sock_read_iter+0x4b0/0x4b0 [ 409.580060][ T6997] ? raw_irqentry_exit_cond_resched+0x2a/0x30 [ 409.585958][ T6997] ? vfs_write+0x256/0xeb0 [ 409.590296][ T6997] vfs_write+0x902/0xeb0 [ 409.594382][ T6997] ? file_end_write+0x1c0/0x1c0 [ 409.599297][ T6997] ? __fget_files+0x2cb/0x330 [ 409.603976][ T6997] ? __fdget_pos+0x204/0x390 [ 409.608480][ T6997] ? ksys_write+0x77/0x2c0 [ 409.612751][ T6997] ksys_write+0x199/0x2c0 [ 409.616986][ T6997] ? irqentry_exit+0x30/0x40 [ 409.621417][ T6997] ? __ia32_sys_read+0x90/0x90 [ 409.626030][ T6997] __x64_sys_write+0x7b/0x90 [ 409.630527][ T6997] x64_sys_call+0x2f/0x9a0 [ 409.634778][ T6997] do_syscall_64+0x3b/0xb0 [ 409.639188][ T6997] ? clear_bhb_loop+0x55/0xb0 [ 409.643992][ T6997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.649725][ T6997] RIP: 0033:0x7f2c373799f9 [ 409.654296][ T6997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.674459][ T6997] RSP: 002b:00007f2c38177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 409.682964][ T6997] RAX: ffffffffffffffda RBX: 00007f2c37516130 RCX: 00007f2c373799f9 [ 409.690866][ T6997] RDX: 0000000000000024 RSI: 0000000020ef4000 RDI: 000000000000000a [ 409.699031][ T6997] RBP: 00007f2c38177090 R08: 0000000000000000 R09: 0000000000000000 [ 409.707193][ T6997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.714999][ T6997] R13: 0000000000000000 R14: 00007f2c37516130 R15: 00007ffc12f43a78 [ 409.723250][ T6997] [ 409.726315][ T28] audit: type=1400 audit(1723490082.946:343): avc: denied { create } for pid=6985 comm="syz.4.1641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 409.832438][ T6] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 409.962496][ T7002] syz.2.1639[7002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.962585][ T7002] syz.2.1639[7002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.205530][ T3664] EXT4-fs (loop2): unmounting filesystem. [ 410.321846][ T28] audit: type=1400 audit(1723490084.016:344): avc: denied { read } for pid=7010 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 410.348793][ T28] audit: type=1400 audit(1723490084.026:345): avc: denied { open } for pid=7010 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 410.472044][ T7012] input: syz0 as /devices/virtual/input/input151 [ 410.492733][ T6] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 410.513238][ T6] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 410.578595][ T7008] input: syz0 as /devices/virtual/input/input152 [ 410.587308][ T6] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 410.639415][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.005403][ T6990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1640'. [ 411.032501][ T6] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 411.048051][ T6] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input153 [ 411.058324][ T6] input: failed to attach handler kbd to device input153, error: -5 [ 411.078421][ T6] usb 4-1: USB disconnect, device number 32 [ 411.652452][ T39] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 411.893544][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 412.012537][ T39] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.023808][ T39] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.034439][ T39] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 412.043864][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.093344][ T39] hub 3-1:4.0: USB hub found [ 412.266742][ T7034] loop4: detected capacity change from 0 to 2048 [ 412.284918][ T7034] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 412.402576][ T39] hub 3-1:4.0: 1 port detected [ 412.452400][ T6] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 412.636879][ T7024] loop2: detected capacity change from 0 to 1024 [ 412.643539][ T7024] EXT4-fs: Ignoring removed orlov option [ 412.649170][ T7024] EXT4-fs: Ignoring removed nomblk_io_submit option [ 412.664235][ T7024] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 412.692449][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 412.762489][ T39] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 412.768900][ T39] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 412.802706][ T39] usb 3-1: USB disconnect, device number 35 [ 412.812542][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.823760][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.833339][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 412.849571][ T6] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 412.859609][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.872501][ T6] usb 4-1: config 0 descriptor?? [ 413.028974][ T4687] EXT4-fs (loop4): unmounting filesystem. [ 413.146305][ T7051] loop1: detected capacity change from 0 to 512 [ 413.160611][ T7051] EXT4-fs: Ignoring removed bh option [ 413.174665][ T7051] EXT4-fs (loop1): 1 orphan inode deleted [ 413.180722][ T7051] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 413.189874][ T7051] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038 (0x7fffffff) [ 413.299734][ T3664] EXT4-fs (loop2): unmounting filesystem. [ 413.403657][ T7056] syz.1.1651[7056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 413.404042][ T7056] syz.1.1651[7056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 413.452480][ T39] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 413.642479][ T6] usbhid 4-1:0.0: can't add hid device: -71 [ 413.648427][ T6] usbhid: probe of 4-1:0.0 failed with error -71 [ 413.656255][ T6] usb 4-1: USB disconnect, device number 33 [ 413.892490][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.904539][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.914359][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 413.927626][ T39] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 413.937060][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.946181][ T39] usb 5-1: config 0 descriptor?? [ 414.003992][ T6501] EXT4-fs (loop1): unmounting filesystem. [ 414.217236][ T7060] loop1: detected capacity change from 0 to 512 [ 414.225646][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.236311][ T7060] EXT4-fs: Ignoring removed bh option [ 414.241937][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.259737][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.272448][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.281598][ T7060] EXT4-fs (loop1): 1 orphan inode deleted [ 414.290169][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.292436][ T7060] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 414.306800][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.322500][ T7060] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038 (0x7fffffff) [ 414.332304][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.340018][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.377913][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.405899][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.432420][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.443600][ T39] plantronics 0003:047F:FFFF.0030: unbalanced delimiter at end of report description [ 414.454000][ T39] plantronics 0003:047F:FFFF.0030: parse failed [ 414.460560][ T39] plantronics: probe of 0003:047F:FFFF.0030 failed with error -22 [ 414.462904][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.491920][ T7062] fuse: Unknown parameter '’’’’’’’’’’’’' [ 414.503668][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.564726][ T7070] syz.1.1653[7070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.565055][ T7070] syz.1.1653[7070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.806266][ T7064] loop3: detected capacity change from 0 to 40427 [ 414.821102][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.834506][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.841876][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.849297][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.857096][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.865242][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.873024][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.880943][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.888956][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.896432][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.904345][ T7064] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 414.904760][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.920824][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.928837][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.936371][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.944138][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.944583][ T7064] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 414.951512][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.967234][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.974713][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.982080][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.989676][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 414.989881][ T39] usb 5-1: USB disconnect, device number 33 [ 414.998133][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 415.010910][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 415.011736][ T7064] F2FS-fs (loop3): invalid crc value [ 415.018497][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 415.025639][ T7064] F2FS-fs (loop3): Found nat_bits in checkpoint [ 415.031572][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 415.049111][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 415.057045][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 415.064869][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 415.072900][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 415.080548][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 415.088465][ T1605] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 415.097567][ T6501] EXT4-fs (loop1): unmounting filesystem. [ 415.099994][ T1605] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 415.136657][ T7064] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 415.146413][ T7064] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 415.324213][ T7077] FAULT_INJECTION: forcing a failure. [ 415.324213][ T7077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.337784][ T7077] CPU: 1 PID: 7077 Comm: syz.3.1655 Not tainted 6.1.90-syzkaller-00004-g79436849ef1d #0 [ 415.347357][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 415.357695][ T7077] Call Trace: [ 415.360822][ T7077] [ 415.363602][ T7077] dump_stack_lvl+0x151/0x1b7 [ 415.368461][ T7077] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 415.374101][ T7077] ? __memmove+0x1a0/0x1a0 [ 415.378344][ T7077] ? __sigqueue_alloc+0x130/0x200 [ 415.383205][ T7077] dump_stack+0x15/0x1a [ 415.387237][ T7077] should_fail_ex+0x3d0/0x520 [ 415.391797][ T7077] should_fail+0xb/0x10 [ 415.396060][ T7077] should_fail_usercopy+0x1a/0x20 [ 415.401238][ T7077] _copy_to_user+0x1e/0x90 [ 415.405560][ T7077] do_timer_create+0xc2e/0x12c0 [ 415.410425][ T7077] ? __ia32_sys_clock_nanosleep_time32+0xb0/0xb0 [ 415.417215][ T7077] __x64_sys_timer_create+0x140/0x190 [ 415.422583][ T7077] ? posix_timer_event+0x140/0x140 [ 415.427876][ T7077] ? __kasan_check_write+0x14/0x20 [ 415.432831][ T7077] ? fpregs_restore_userregs+0x130/0x290 [ 415.438378][ T7077] ? switch_fpu_return+0xe/0x10 [ 415.443065][ T7077] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 415.448569][ T7077] x64_sys_call+0x5d1/0x9a0 [ 415.453044][ T7077] do_syscall_64+0x3b/0xb0 [ 415.457466][ T7077] ? clear_bhb_loop+0x55/0xb0 [ 415.462733][ T7077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.468648][ T7077] RIP: 0033:0x7f02129799f9 [ 415.473462][ T7077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.493327][ T7077] RSP: 002b:00007f02127de038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 415.501568][ T7077] RAX: ffffffffffffffda RBX: 00007f0212b16130 RCX: 00007f02129799f9 [ 415.509393][ T7077] RDX: 0000000020001400 RSI: 0000000000000000 RDI: fffffffffffffffc [ 415.517312][ T7077] RBP: 00007f02127de090 R08: 0000000000000000 R09: 0000000000000000 [ 415.525219][ T7077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.533213][ T7077] R13: 0000000000000000 R14: 00007f0212b16130 R15: 00007ffd369790f8 [ 415.541038][ T7077] [ 416.162434][ T39] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 416.170220][ T628] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 416.172397][ T1605] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 416.442419][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 416.447632][ T628] usb 3-1: Using ep0 maxpacket: 32 [ 416.542681][ T1605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.553701][ T1605] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 416.562868][ T1605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.583072][ T1605] usb 2-1: config 0 descriptor?? [ 416.602783][ T39] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.614022][ T628] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.627542][ T628] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.637981][ T39] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.648646][ T628] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 416.658747][ T39] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 416.668337][ T628] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.676827][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.733233][ T39] hub 5-1:4.0: USB hub found [ 416.738913][ T628] hub 3-1:4.0: USB hub found [ 417.022517][ T628] hub 3-1:4.0: 1 port detected [ 417.027205][ T39] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 417.063147][ T1605] keytouch 0003:0926:3333.0031: fixing up Keytouch IEC report descriptor [ 417.072969][ T1605] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0031/input/input154 [ 417.159937][ T1605] keytouch 0003:0926:3333.0031: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 417.268050][ T7082] loop2: detected capacity change from 0 to 1024 [ 417.271070][ T1605] usb 2-1: USB disconnect, device number 35 [ 417.275364][ T7082] EXT4-fs: Ignoring removed orlov option [ 417.288173][ T7082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 417.305003][ T7082] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 417.372889][ T39] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 417.402540][ T628] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 417.408791][ T628] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 417.442751][ T628] usb 3-1: USB disconnect, device number 36 [ 417.632543][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 417.802486][ T39] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.813611][ T39] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.823479][ T39] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 417.832245][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.883078][ T39] hub 4-1:4.0: USB hub found [ 417.916220][ T3664] EXT4-fs (loop2): unmounting filesystem. [ 418.203815][ T39] hub 4-1:4.0: 1 port detected [ 418.421248][ T7104] loop1: detected capacity change from 0 to 128 [ 418.487863][ T7094] loop3: detected capacity change from 0 to 1024 [ 418.511036][ T7094] EXT4-fs: Ignoring removed orlov option [ 418.516882][ T7094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 418.544470][ T7094] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 419.001950][ T39] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 419.065939][ T39] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 419.073867][ T1698] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 419.112666][ T39] usb 4-1: USB disconnect, device number 34 [ 419.172558][ T1605] usb 5-1: USB disconnect, device number 34 [ 419.332454][ T1698] usb 3-1: Using ep0 maxpacket: 32 [ 419.482508][ T1698] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.517217][ T1698] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.527532][ T1698] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 419.528594][ T6380] EXT4-fs (loop3): unmounting filesystem. [ 419.536955][ T1698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.593194][ T1698] hub 3-1:4.0: USB hub found [ 419.892433][ T1698] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 419.906055][ T7116] loop1: detected capacity change from 0 to 512 [ 419.915754][ T7116] EXT4-fs: Ignoring removed bh option [ 419.931733][ T7119] loop3: detected capacity change from 0 to 1024 [ 419.954450][ T7119] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 419.965171][ T7116] EXT4-fs (loop1): 1 orphan inode deleted [ 419.971003][ T7116] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 419.980935][ T7116] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038 (0x7fffffff) [ 419.993363][ T7119] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 420.037296][ T7119] EXT4-fs error (device loop3): __ext4_iget:5046: inode #12: block 13: comm syz.3.1664: invalid block [ 420.131213][ T6380] EXT4-fs (loop3): unmounting filesystem. [ 420.207474][ T7127] syz.1.1663[7127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.207799][ T7127] syz.1.1663[7127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.412058][ T6] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 420.662427][ T6] usb 5-1: Using ep0 maxpacket: 8 [ 420.755870][ T6501] EXT4-fs (loop1): unmounting filesystem. [ 420.782878][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.794982][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.804661][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 420.817423][ T6] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 420.826979][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.836064][ T6] usb 5-1: config 0 descriptor?? [ 421.392496][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 421.399410][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 421.406628][ T6] usb 5-1: USB disconnect, device number 35 [ 421.670070][ T7140] input: syz0 as /devices/virtual/input/input155 [ 421.728564][ T7140] loop3: detected capacity change from 0 to 256 [ 421.736749][ T7140] FAT-fs (loop3): Unrecognized mount option "ioŠ¼harseG®S„874" or missing value [ 422.012587][ T6] usb 3-1: USB disconnect, device number 37 [ 423.104180][ T7148] loop1: detected capacity change from 0 to 512 [ 423.130070][ T7148] EXT4-fs: Ignoring removed bh option [ 423.143956][ T7150] loop3: detected capacity change from 0 to 512 [ 423.157984][ T7150] EXT4-fs: Ignoring removed bh option [ 423.167227][ T7148] EXT4-fs (loop1): 1 orphan inode deleted [ 423.173564][ T7148] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 423.183219][ T7148] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038 (0x7fffffff) [ 423.194841][ T7150] EXT4-fs (loop3): 1 orphan inode deleted [ 423.200402][ T7150] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 423.232569][ T7150] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038 (0x7fffffff) [ 423.532714][ T7169] syz.1.1668[7169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.532804][ T7169] syz.1.1668[7169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 424.313229][ T2626] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 424.350461][ T6501] EXT4-fs (loop1): unmounting filesystem. [ 424.352961][ T6380] EXT4-fs (loop3): unmounting filesystem. [ 424.722590][ T2626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.734383][ T2626] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 424.743510][ T2626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.752243][ T2626] usb 5-1: config 0 descriptor?? [ 425.233788][ T2626] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor [ 425.243373][ T2626] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0032/input/input156 [ 425.329778][ T2626] keytouch 0003:0926:3333.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 425.437434][ T2626] usb 5-1: USB disconnect, device number 36 [ 425.699270][ T7186] input: syz0 as /devices/virtual/input/input157 [ 425.782667][ T7186] loop1: detected capacity change from 0 to 256 [ 425.791159][ T7186] FAT-fs (loop1): Unrecognized mount option "ioŠ¼harseG®S„874" or missing value [ 427.669990][ T28] audit: type=1400 audit(1723490101.366:346): avc: denied { setopt } for pid=7192 comm="syz.1.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 427.700327][ T7193] loop1: detected capacity change from 0 to 512 [ 427.809913][ T7193] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 427.819279][ T7193] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038 (0x7fffffff) [ 427.842055][ T7193] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 427.858613][ T7193] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 427.892030][ T7193] EXT4-fs (loop1): This should not happen!! Data will be lost [ 427.892030][ T7193] [ 427.905770][ T28] audit: type=1400 audit(1723490101.606:347): avc: denied { mount } for pid=7192 comm="syz.1.1678" name="/" dev="configfs" ino=13517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 427.936764][ T7193] EXT4-fs (loop1): Total free blocks count 0 [ 427.944734][ T7193] EXT4-fs (loop1): Free/Dirty block details [ 427.950827][ T7193] EXT4-fs (loop1): free_blocks=65280 [ 427.956765][ T7193] EXT4-fs (loop1): dirty_blocks=23 [ 427.963709][ T7193] EXT4-fs (loop1): Block reservation details [ 427.969768][ T7193] EXT4-fs (loop1): i_reserved_data_blocks=23 [ 427.976475][ T3903] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 428.001917][ T28] audit: type=1400 audit(1723490101.696:348): avc: denied { unmount } for pid=6501 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 428.026518][ T6501] EXT4-fs (loop1): unmounting filesystem. [ 428.242483][ T3903] usb 4-1: Using ep0 maxpacket: 32 [ 428.372461][ T3903] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.384397][ T3903] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.394443][ T3903] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 428.403837][ T3903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.463186][ T3903] hub 4-1:4.0: USB hub found [ 428.762512][ T3903] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 429.718479][ T7219] loop4: detected capacity change from 0 to 256 [ 429.835426][ T317] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 430.392457][ T3903] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 430.632445][ T3903] usb 2-1: Using ep0 maxpacket: 8 [ 430.752523][ T3903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.763910][ T3903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.773843][ T3903] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 430.787073][ T3903] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 430.796262][ T3903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.804709][ T1605] usb 4-1: USB disconnect, device number 35 [ 430.811635][ T3903] usb 2-1: config 0 descriptor?? [ 431.352506][ T3903] usbhid 2-1:0.0: can't add hid device: -71 [ 431.358766][ T3903] usbhid: probe of 2-1:0.0 failed with error -71 [ 431.366314][ T3903] usb 2-1: USB disconnect, device number 36 [ 431.996715][ T7242] loop4: detected capacity change from 0 to 256 [ 432.005020][ T7242] FAT-fs (loop4): Unrecognized mount option "ioŠ¼harseG®S„874" or missing value [ 432.272884][ T3903] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 432.512386][ T3903] usb 4-1: Using ep0 maxpacket: 32 [ 432.664453][ T3903] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.680189][ T3903] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.697000][ T3903] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 432.712366][ T3903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.762999][ T3903] hub 4-1:4.0: USB hub found [ 433.062488][ T3903] hub 4-1:4.0: 1 port detected [ 433.297374][ T7232] loop3: detected capacity change from 0 to 1024 [ 433.304543][ T7232] EXT4-fs: Ignoring removed orlov option [ 433.310481][ T7232] EXT4-fs: Ignoring removed nomblk_io_submit option [ 433.324398][ T7232] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 433.422518][ T3903] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 433.428867][ T3903] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 433.462682][ T3903] usb 4-1: USB disconnect, device number 36 [ 433.936099][ T6380] EXT4-fs (loop3): unmounting filesystem. [ 433.947377][ T7252] loop4: detected capacity change from 0 to 128 [ 434.128182][ T7258] input: syz0 as /devices/virtual/input/input159 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=0 req=1633 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 435.504904][ T3307] bridge0: port 3(gretap0) entered disabled state [ 435.514839][ T3307] device gretap0 left promiscuous mode [ 435.520232][ T3307] bridge0: port 3(gretap0) entered disabled state [ 435.663697][ T3307] device bridge_slave_1 left promiscuous mode [ 435.669756][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.677276][ T3307] device bridge_slave_0 left promiscuous mode [ 435.683665][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.691594][ T3307] device bridge_slave_1 left promiscuous mode [ 435.697862][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.706009][ T3307] device bridge_slave_0 left promiscuous mode [ 435.711942][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.720056][ T3307] device bridge_slave_1 left promiscuous mode [ 435.726443][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.734427][ T3307] device bridge_slave_0 left promiscuous mode [ 435.740458][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.748792][ T3307] device bridge_slave_1 left promiscuous mode [ 435.755246][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.762694][ T3307] device bridge_slave_0 left promiscuous mode [ 435.768919][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.778141][ T3307] device veth1_macvtap left promiscuous mode [ 435.784240][ T3307] device veth0_vlan left promiscuous mode [ 435.790397][ T3307] device veth1_macvtap left promiscuous mode [ 435.796674][ T3307] device veth0_vlan left promiscuous mode [ 435.802844][ T3307] device veth1_macvtap left promiscuous mode [ 435.808689][ T3307] device veth0_vlan left promiscuous mode [ 435.814649][ T3307] device veth1_macvtap left promiscuous mode [ 435.821018][ T3307] device veth0_vlan left promiscuous mode