last executing test programs: 15.080888541s ago: executing program 0 (id=659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt(r1, 0x1, 0x5, &(0x7f0000000300)=""/76, &(0x7f0000000400)=0x4c) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000600)=""/173}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) creat(&(0x7f0000000200)='./file0\x00', 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df2"]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x8}, 'port1\x00', 0x22, 0x0, 0xffff, 0x7, 0x598, 0x4000036e, 0x0, 0x0, 0x2, 0x46}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x8000000, 0x0, 0x0, 'queue0\x00'}) read(r6, &(0x7f00000001c0)=""/176, 0xb0) write$sndseq(r7, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {0x80}, @raw8={"a357b6b140cbb6215dd33459"}}], 0x1c) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x28, r10, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x3}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) pipe2$9p(&(0x7f00000001c0), 0x4080) 14.220607427s ago: executing program 0 (id=671): add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b70300000000000085000000720000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfde7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x59, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0) 14.188204127s ago: executing program 0 (id=672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0xf601, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 14.100256457s ago: executing program 3 (id=674): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000ed00000008000000010059c314"], 0x48) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x7575) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, r0, 0x700, 0x100000001, 0x9, 0x3ad}) r2 = syz_open_dev$loop(&(0x7f0000000200), 0xb, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000f40)={0x0, 0x0}) sched_getattr(r3, &(0x7f0000000fc0)={0x38}, 0x38, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) open_by_handle_at(r4, &(0x7f0000000240)=@OVL_FILEID_V1={0x42, 0xf8, {'\x00', {0x0, 0xfb, 0x3f, 0x1, 0x1, "89e8606273d389b092cb2b79f9c38f55", "a54e00eab560613a5030aebdd99316265df724f564446266d2e03a69063e1c668354907786ea15739546"}}}, 0x200c80) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) r6 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @random="43ef452f40e7", @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "418dda", 0x10, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ed5a22", 0x0, "a900"}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSET={0xd4, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3d}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4e}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_EXPRESSIONS={0x94, 0x12, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x576fbaee37c7f7a2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_KEY={0x8}]}}}, {0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}, @NFT_MSG_DELSET={0x130, 0xb, 0xa, 0x401, 0x0, 0x0, {0xd, 0x0, 0x5}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x722}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x7ff}, @NFTA_SET_EXPR={0x4c, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_USERDATA={0x82, 0xd, 0x1, 0x0, "132e7f7ea174ddc2b65bb5f3f4396d9824c87af99d108061eb96329ef2468d2b28a526d7f4b458e24689d18abd6f7495723e110089e12e1393431d4f15989f98333e883c5f45b2e0b0e357478a41c9fb55b820f201e30af49dd3afa04d8d43fc57c6e5ef1dee54e17a66a60dbd37eb030337aebedbe1892fd49e92da88cc"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_KEY_TYPE={0x8}]}, @NFT_MSG_NEWRULE={0x124, 0x6, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0xa0, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1b}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x201}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x78, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7330}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x20c, 0x2, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_TABLE_USERDATA={0x4b, 0x6, "291a8d118f92f7fed259af36c1e7f09fedb2f40be9084f53788657c8e8dc4b309b010ce108c17aeb0a3e183744525cc19caca9c7b78581dc022a6a4ecd0a39d8c9794568db7e2d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x92, 0x6, "a53948789a966c7088078400369055f04f71205b4f0b0089e99c2ac80140360deba5c03e6550c0c5a9abcec3709a05b9b03b9a1aaa365c98c9d8b2d74e576f464fc4908b930b23c3caaf30c61a7a6b12e1af2a99c1c526d62995726b53b51c3f951e32215fb7e51bc57bb8613aff394a058e891d1e2c0e0e082a5ed8d664bc98d65fe29a7b0df7b60021bcea9967"}, @NFTA_TABLE_USERDATA={0xff, 0x6, "e88dbbafb3e1a5e150f9df33d383dc3096a21f1c13c81c36d98a0530f03fee747c1b4748208368a116959b62d9327d1574ae0d6c43e21e5c63eaf22b00062a17b732e62437cf4979f28716d3766ee2fee4f1c038147cba1afc08f8d3bc69e651469e3b7b06d17b3373d925cd6a3c7ed6ff8717ac2687704530ea7b3c13135a59e3a01d61d035e75384967d289a888b078cbb77928d94adfba5f466db062ca463d4b534b268edb4f99f25ddb298179ce9386ec19142d70c94d623a5be02e31e6ac3198f7a67a676e45a49ed9ada40649ab61fd923ab79298f42141c334d96d9c551455d10c41fee02c03b60911adc70a7db33033dc50614af082309"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x72c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) 14.099326997s ago: executing program 0 (id=675): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000003800)={0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000025c0)=""/60, 0x3c}], 0x1, 0x0, 0xfffffffffffffcdf}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000002540)=0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, r5, 0xc4fc9e906872338b, 0x10000, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r8, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x401c4) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004094}, 0x40000) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xff, 0x5}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x800) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x3, 0x0, 0x1, 0x8, 0x7, 0x1, 0x0]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x370}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x424}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x53}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}]}, @NL80211_ATTR_CQM={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004004}, 0x4008040) 14.077969717s ago: executing program 3 (id=677): r0 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x0) 13.983902697s ago: executing program 3 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff0100"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@fadd={0x58, 0x114, 0x6, {{0x800, 0x7}, &(0x7f0000000480)=0x650, 0x0, 0x9, 0x8d, 0xde42, 0x9, 0x9, 0xf0}}], 0x58, 0x8004}, 0x0) 13.884193036s ago: executing program 3 (id=679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0xf601, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 13.881229476s ago: executing program 0 (id=680): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000ed00000008000000010059c314"], 0x48) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x7575) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, r0, 0x700, 0x100000001, 0x9, 0x3ad}) r2 = syz_open_dev$loop(&(0x7f0000000200), 0xb, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000f40)={0x0, 0x0}) sched_getattr(r3, &(0x7f0000000fc0)={0x38}, 0x38, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) open_by_handle_at(r4, &(0x7f0000000240)=@OVL_FILEID_V1={0x42, 0xf8, {'\x00', {0x0, 0xfb, 0x3f, 0x1, 0x1, "89e8606273d389b092cb2b79f9c38f55", "a54e00eab560613a5030aebdd99316265df724f564446266d2e03a69063e1c668354907786ea15739546"}}}, 0x200c80) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) r6 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @random="43ef452f40e7", @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "418dda", 0x10, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ed5a22", 0x0, "a900"}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSET={0xd4, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3d}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4e}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_EXPRESSIONS={0x94, 0x12, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x576fbaee37c7f7a2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_KEY={0x8}]}}}, {0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}, @NFT_MSG_DELSET={0x130, 0xb, 0xa, 0x401, 0x0, 0x0, {0xd, 0x0, 0x5}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x722}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x7ff}, @NFTA_SET_EXPR={0x4c, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_USERDATA={0x82, 0xd, 0x1, 0x0, "132e7f7ea174ddc2b65bb5f3f4396d9824c87af99d108061eb96329ef2468d2b28a526d7f4b458e24689d18abd6f7495723e110089e12e1393431d4f15989f98333e883c5f45b2e0b0e357478a41c9fb55b820f201e30af49dd3afa04d8d43fc57c6e5ef1dee54e17a66a60dbd37eb030337aebedbe1892fd49e92da88cc"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_KEY_TYPE={0x8}]}, @NFT_MSG_NEWRULE={0x110, 0x6, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0xa0, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x201}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x5c, 0x16, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x20c, 0x2, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_TABLE_USERDATA={0x4b, 0x6, "291a8d118f92f7fed259af36c1e7f09fedb2f40be9084f53788657c8e8dc4b309b010ce108c17aeb0a3e183744525cc19caca9c7b78581dc022a6a4ecd0a39d8c9794568db7e2d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x92, 0x6, "a53948789a966c7088078400369055f04f71205b4f0b0089e99c2ac80140360deba5c03e6550c0c5a9abcec3709a05b9b03b9a1aaa365c98c9d8b2d74e576f464fc4908b930b23c3caaf30c61a7a6b12e1af2a99c1c526d62995726b53b51c3f951e32215fb7e51bc57bb8613aff394a058e891d1e2c0e0e082a5ed8d664bc98d65fe29a7b0df7b60021bcea9967"}, @NFTA_TABLE_USERDATA={0xff, 0x6, "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"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6ac}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) 13.853539156s ago: executing program 3 (id=681): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x57, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write$eventfd(r2, 0x0, 0x0) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x2, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x24, 0x0) syz_io_uring_setup(0xd5, &(0x7f0000000480)={0x0, 0xfffffffe, 0x1, 0x2, 0xfffffffe}, &(0x7f0000000040), 0x0) iopl(0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 13.822966336s ago: executing program 0 (id=682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004e3ffffe17f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x9]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000008c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x5c, r4, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="34b9", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20044011) recvmsg$unix(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) fspick(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrandom(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r10 = dup(r9) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0xfa5, 0x0}) 12.983179472s ago: executing program 3 (id=700): fspick(0xffffffffffffff9c, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0x0, 0xfa5, 0x0}) (fail_nth: 3) 1.227736265s ago: executing program 4 (id=841): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) waitid(0x0, r1, &(0x7f0000000440), 0x20000000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}, {@user_xattr}]}, 0xfd, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) 1.132171765s ago: executing program 4 (id=842): open(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 1.036647314s ago: executing program 4 (id=845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0xf601, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 1.002339534s ago: executing program 4 (id=846): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000ed00000008000000010059c314"], 0x48) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x7575) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, r0, 0x700, 0x100000001, 0x9, 0x3ad}) r2 = syz_open_dev$loop(&(0x7f0000000200), 0xb, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000f40)={0x0, 0x0}) sched_getattr(r3, &(0x7f0000000fc0)={0x38}, 0x38, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) open_by_handle_at(r4, &(0x7f0000000240)=@OVL_FILEID_V1={0x42, 0xf8, {'\x00', {0x0, 0xfb, 0x3f, 0x1, 0x1, "89e8606273d389b092cb2b79f9c38f55", "a54e00eab560613a5030aebdd99316265df724f564446266d2e03a69063e1c668354907786ea15739546"}}}, 0x200c80) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) r6 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @random="43ef452f40e7", @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "418dda", 0x10, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ed5a22", 0x0, "a900"}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSET={0xd4, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3d}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4e}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_EXPRESSIONS={0x94, 0x12, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x576fbaee37c7f7a2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_KEY={0x8}]}}}, {0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}, @NFT_MSG_DELSET={0x130, 0xb, 0xa, 0x401, 0x0, 0x0, {0xd, 0x0, 0x5}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x722}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x7ff}, @NFTA_SET_EXPR={0x4c, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_USERDATA={0x82, 0xd, 0x1, 0x0, "132e7f7ea174ddc2b65bb5f3f4396d9824c87af99d108061eb96329ef2468d2b28a526d7f4b458e24689d18abd6f7495723e110089e12e1393431d4f15989f98333e883c5f45b2e0b0e357478a41c9fb55b820f201e30af49dd3afa04d8d43fc57c6e5ef1dee54e17a66a60dbd37eb030337aebedbe1892fd49e92da88cc"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_KEY_TYPE={0x8}]}, @NFT_MSG_NEWRULE={0x10c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1b}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x201}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x5c, 0x16, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x20c, 0x2, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_TABLE_USERDATA={0x4b, 0x6, "291a8d118f92f7fed259af36c1e7f09fedb2f40be9084f53788657c8e8dc4b309b010ce108c17aeb0a3e183744525cc19caca9c7b78581dc022a6a4ecd0a39d8c9794568db7e2d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x92, 0x6, "a53948789a966c7088078400369055f04f71205b4f0b0089e99c2ac80140360deba5c03e6550c0c5a9abcec3709a05b9b03b9a1aaa365c98c9d8b2d74e576f464fc4908b930b23c3caaf30c61a7a6b12e1af2a99c1c526d62995726b53b51c3f951e32215fb7e51bc57bb8613aff394a058e891d1e2c0e0e082a5ed8d664bc98d65fe29a7b0df7b60021bcea9967"}, @NFTA_TABLE_USERDATA={0xff, 0x6, "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"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6a8}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) 932.987884ms ago: executing program 4 (id=847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = io_uring_setup(0x1893, &(0x7f0000000a00)={0x0, 0x7068, 0x1}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000300)={0x0}, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) 916.800314ms ago: executing program 4 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffff7ffffe9}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x1, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r8}, 0x10) renameat2(r6, &(0x7f0000000380)='./file0\x00', r6, &(0x7f0000000200)='./bus\x00', 0x0) 897.815734ms ago: executing program 1 (id=850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, 0x0, &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0xf601, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 861.389684ms ago: executing program 1 (id=851): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pread64(0xffffffffffffffff, &(0x7f0000002180)=""/4103, 0x1007, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000007734000000000000000000000000000000000000c1fc8d4499c20ab04116647631e1bb3dc2aeac7dcee2aa8ad8994f7be1ba392182a6602c08c55613608716ee3f7181d8fa83746de6cb35d7e06f8af8c786cd562eae1854b59c7d02aabe012f668a30e899982eb00adfe922285e796e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000765d1b"], 0x48) getcwd(&(0x7f0000000b00)=""/255, 0xff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x1018ed8, &(0x7f00000005c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodiscard}, {@nodelalloc}, {@usrquota}, {@nolazytime}, {@noblock_validity}, {@block_validity}, {@barrier}]}, 0x6, 0x647, &(0x7f0000002740)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x9, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000181100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400}) close(r5) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000100000000000d90bf4d4712be254321c5f9ffffffff1f0000002a79bcee455a6d2d3d5bdb9e0913b1e10a46789d52e3a80e425021d1f2c3605aa5cd6bcddaf94e88b5e1"], 0x24, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000031c0)={0x18cc, r8, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffeffff, 0x7a}}}}, [@NL80211_PMSR_ATTR_PEERS={0x47c, 0x5, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x120}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x194, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x128, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xcaa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x148, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x74, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa8c1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x88}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x985}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x378, 0x5, 0x0, 0x1, [{0x348, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x2e8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x138, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x50}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x37}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x66}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x89}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1d}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x175}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x10b8, 0x5, 0x0, 0x1, [{0x68c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x4ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8d}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x934f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x73}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x94}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x251}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x335}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x397}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}]}]}, {0x3e8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x44b}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x5c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf68a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33a}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff8001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x100, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}]}, {0x408, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x240, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9a}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5a}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfe00}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x34}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x272}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}, {0x1c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1b4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf5e4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3f}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}]}]}]}, 0x18cc}, 0x1, 0x0, 0x0, 0x801}, 0x4000450) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) 748.729433ms ago: executing program 1 (id=852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101881, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001418) ioctl$TUNSETOFFLOAD(r3, 0x40107447, 0x20000000) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x4, 0x7}]}) sigaltstack(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101881, 0x0) (async) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001418) (async) ioctl$TUNSETOFFLOAD(r3, 0x40107447, 0x20000000) (async) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) (async) sendfile(r4, r4, 0x0, 0x800000009) (async) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x4, 0x7}]}) (async) sigaltstack(0x0, 0x0) (async) 647.267923ms ago: executing program 2 (id=855): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) ioprio_get$pid(0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000cc0)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x8}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f00000034c0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x736f}, 0x100000, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000780)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) preadv2(r7, &(0x7f0000000340)=[{&(0x7f0000000100)=""/65, 0x2}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r9, 0x0, 0x5, &(0x7f0000000000)=""/2, &(0x7f0000000040)=0x2) unlink(&(0x7f0000000280)='./file1\x00') 642.567633ms ago: executing program 1 (id=856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0xf601, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 493.201812ms ago: executing program 1 (id=857): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000ed00000008000000010059c314"], 0x48) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") truncate(&(0x7f0000000080)='./file1\x00', 0x7575) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, r0, 0x700, 0x100000001, 0x9, 0x3ad}) r2 = syz_open_dev$loop(&(0x7f0000000200), 0xb, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000f40)={0x0, 0x0}) sched_getattr(r3, &(0x7f0000000fc0)={0x38}, 0x38, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) open_by_handle_at(r4, &(0x7f0000000240)=@OVL_FILEID_V1={0x42, 0xf8, {'\x00', {0x0, 0xfb, 0x3f, 0x1, 0x1, "89e8606273d389b092cb2b79f9c38f55", "a54e00eab560613a5030aebdd99316265df724f564446266d2e03a69063e1c668354907786ea15739546"}}}, 0x200c80) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) r6 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @random="43ef452f40e7", @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "418dda", 0x10, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ed5a22", 0x0, "a900"}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSET={0xd4, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3d}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4e}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_SET_EXPRESSIONS={0x94, 0x12, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x576fbaee37c7f7a2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_KEY={0x8}]}}}, {0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}, @NFT_MSG_DELSET={0x130, 0xb, 0xa, 0x401, 0x0, 0x0, {0xd, 0x0, 0x5}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x722}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x7ff}, @NFTA_SET_EXPR={0x4c, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_USERDATA={0x82, 0xd, 0x1, 0x0, "132e7f7ea174ddc2b65bb5f3f4396d9824c87af99d108061eb96329ef2468d2b28a526d7f4b458e24689d18abd6f7495723e110089e12e1393431d4f15989f98333e883c5f45b2e0b0e357478a41c9fb55b820f201e30af49dd3afa04d8d43fc57c6e5ef1dee54e17a66a60dbd37eb030337aebedbe1892fd49e92da88cc"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x7}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_KEY_TYPE={0x8}]}, @NFT_MSG_NEWRULE={0x11c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1b}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x201}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x5c, 0x16, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x20c, 0x2, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_TABLE_USERDATA={0x4b, 0x6, "291a8d118f92f7fed259af36c1e7f09fedb2f40be9084f53788657c8e8dc4b309b010ce108c17aeb0a3e183744525cc19caca9c7b78581dc022a6a4ecd0a39d8c9794568db7e2d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x92, 0x6, "a53948789a966c7088078400369055f04f71205b4f0b0089e99c2ac80140360deba5c03e6550c0c5a9abcec3709a05b9b03b9a1aaa365c98c9d8b2d74e576f464fc4908b930b23c3caaf30c61a7a6b12e1af2a99c1c526d62995726b53b51c3f951e32215fb7e51bc57bb8613aff394a058e891d1e2c0e0e082a5ed8d664bc98d65fe29a7b0df7b60021bcea9967"}, @NFTA_TABLE_USERDATA={0xff, 0x6, "e88dbbafb3e1a5e150f9df33d383dc3096a21f1c13c81c36d98a0530f03fee747c1b4748208368a116959b62d9327d1574ae0d6c43e21e5c63eaf22b00062a17b732e62437cf4979f28716d3766ee2fee4f1c038147cba1afc08f8d3bc69e651469e3b7b06d17b3373d925cd6a3c7ed6ff8717ac2687704530ea7b3c13135a59e3a01d61d035e75384967d289a888b078cbb77928d94adfba5f466db062ca463d4b534b268edb4f99f25ddb298179ce9386ec19142d70c94d623a5be02e31e6ac3198f7a67a676e45a49ed9ada40649ab61fd923ab79298f42141c334d96d9c551455d10c41fee02c03b60911adc70a7db33033dc50614af082309"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6b8}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) 307.929951ms ago: executing program 1 (id=858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x57, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write$eventfd(r2, 0x0, 0x0) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x2, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x24, 0x0) syz_io_uring_setup(0xd5, &(0x7f0000000480)={0x0, 0xfffffffe, 0x1, 0x2, 0xfffffffe}, &(0x7f0000000040), 0x0) iopl(0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 192.631111ms ago: executing program 2 (id=859): sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0107000000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES8=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff00000085"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1, 0x0, 0x2000000000020000}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$tipc(0x1e, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0c00) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008001d00", @ANYRES32=r4, @ANYBLOB="080001"], 0x24}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x20048050) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) modify_ldt$write2(0x11, &(0x7f0000000280)={0x4000000, 0x100000, 0x1000, 0x1, 0x1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x2002002, &(0x7f00000001c0)={[], [{@fowner_lt}, {@seclabel}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}, 0x1, 0x554, &(0x7f00000015c0)="$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") perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x10000}, 0x100000, 0x0, 0x0, 0x6, 0x1000000003, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 75.98439ms ago: executing program 2 (id=860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = io_uring_setup(0x1893, &(0x7f0000000a00)={0x0, 0x7068, 0x1}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000300)={0x0}, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) 24.663491ms ago: executing program 2 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0xf601, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 23.84209ms ago: executing program 2 (id=862): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c"], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000001c40)={'IDLETIMER\x00'}, &(0x7f0000004580)=0x1e) 0s ago: executing program 2 (id=863): lstat(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r1]}}], 0x38}}], 0x1, 0x0) r2 = io_uring_setup(0x4684, &(0x7f0000000580)={0x0, 0x4b56, 0x27c, 0x0, 0x47}) open_by_handle_at(r2, &(0x7f0000000040)=@isofs_parent={0x14, 0x2, {0x6, 0x5, 0xfffa, 0x9, 0x2fe, 0xb2d}}, 0x20000) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000100), &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3, 0x1, 0x0, 0x6, 0x0, 0x6, 0x20500, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x457a4f59ceee3eb8}, 0x12064, 0xfffffffffffffe01, 0x7, 0x0, 0x4, 0xe, 0xfffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x106, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@ifindex, 0xffffffffffffffff, 0xa, 0x2000, 0xffffffffffffffff, @value}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x52638b07, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r7, 0x0, 0x20040814) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0200000005000000000000000000766574683098c76f5f7465616d00000064756d6d79300000000000000000000064756d0004300000000000000000000073797a6b616c6c8279a7e00000000000ffffffffffff000000000000ffffffff7fff00000000000000087000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000001b700000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) kernel console output (not intermixed with test programs): 8.276498][ T3696] __x64_sys_mbind+0x78/0x90 [ 38.281120][ T3696] x64_sys_call+0x2662/0x2dc0 [ 38.285822][ T3696] do_syscall_64+0xc9/0x1c0 [ 38.290539][ T3696] ? clear_bhb_loop+0x55/0xb0 [ 38.295310][ T3696] ? clear_bhb_loop+0x55/0xb0 [ 38.300020][ T3696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.306581][ T3696] RIP: 0033:0x7fcdb7865d29 [ 38.311422][ T3696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.331735][ T3696] RSP: 002b:00007fcdb5ed7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 38.340164][ T3696] RAX: ffffffffffffffda RBX: 00007fcdb7a55fa0 RCX: 00007fcdb7865d29 [ 38.348278][ T3696] RDX: 0000000000000001 RSI: 0000000000600000 RDI: 0000000020000000 [ 38.356544][ T3696] RBP: 00007fcdb5ed7090 R08: 0000000000000003 R09: 0000000000000003 [ 38.364537][ T3696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.372605][ T3696] R13: 0000000000000000 R14: 00007fcdb7a55fa0 R15: 00007ffcfc160668 [ 38.380642][ T3696] [ 38.429253][ T3701] lo speed is unknown, defaulting to 1000 [ 38.476370][ T3707] netlink: 256 bytes leftover after parsing attributes in process `syz.2.94'. [ 38.502126][ T3712] syz.4.96[3712] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.502280][ T3712] syz.4.96[3712] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.548371][ T3712] syz.4.96[3712] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.598427][ T3719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3719 comm=syz.1.98 [ 38.628899][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 38.628969][ T29] audit: type=1400 audit(1735089412.167:468): avc: denied { create } for pid=3723 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.688175][ T29] audit: type=1400 audit(1735089412.227:469): avc: denied { validate_trans } for pid=3723 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 38.709296][ T29] audit: type=1400 audit(1735089412.227:470): avc: denied { mount } for pid=3718 comm="syz.1.98" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 38.730990][ T29] audit: type=1326 audit(1735089412.227:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464fee5d29 code=0x7ffc0000 [ 38.754174][ T29] audit: type=1326 audit(1735089412.227:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f464fee5d29 code=0x7ffc0000 [ 38.777610][ T29] audit: type=1326 audit(1735089412.227:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464fee5d29 code=0x7ffc0000 [ 38.801200][ T29] audit: type=1326 audit(1735089412.227:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f464fee5d29 code=0x7ffc0000 [ 38.824926][ T29] audit: type=1326 audit(1735089412.227:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464fee5d29 code=0x7ffc0000 [ 38.848192][ T29] audit: type=1326 audit(1735089412.227:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f464fee5d29 code=0x7ffc0000 [ 38.872396][ T29] audit: type=1326 audit(1735089412.227:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464fee5d29 code=0x7ffc0000 [ 38.904980][ T3732] FAULT_INJECTION: forcing a failure. [ 38.904980][ T3732] name failslab, interval 1, probability 0, space 0, times 0 [ 38.917741][ T3732] CPU: 0 UID: 0 PID: 3732 Comm: syz.1.101 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 38.928445][ T3732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.938620][ T3732] Call Trace: [ 38.941915][ T3732] [ 38.944927][ T3732] dump_stack_lvl+0xf2/0x150 [ 38.949597][ T3732] dump_stack+0x15/0x1a [ 38.953852][ T3732] should_fail_ex+0x223/0x230 [ 38.958592][ T3732] should_failslab+0x8f/0xb0 [ 38.963211][ T3732] kmem_cache_alloc_noprof+0x52/0x320 [ 38.968602][ T3732] ? mas_alloc_nodes+0x1e3/0x490 [ 38.973637][ T3732] mas_alloc_nodes+0x1e3/0x490 [ 38.978460][ T3732] mas_preallocate+0x44a/0x650 [ 38.983280][ T3732] __mmap_region+0x809/0x1400 [ 38.988046][ T3732] mmap_region+0x164/0x1e0 [ 38.992518][ T3732] do_mmap+0x718/0xb60 [ 38.996717][ T3732] vm_mmap_pgoff+0x133/0x290 [ 39.001441][ T3732] ksys_mmap_pgoff+0xd0/0x330 [ 39.006163][ T3732] ? fpregs_assert_state_consistent+0x83/0xa0 [ 39.012309][ T3732] x64_sys_call+0x1940/0x2dc0 [ 39.017013][ T3732] do_syscall_64+0xc9/0x1c0 [ 39.021529][ T3732] ? clear_bhb_loop+0x55/0xb0 [ 39.026269][ T3732] ? clear_bhb_loop+0x55/0xb0 [ 39.030991][ T3732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.036961][ T3732] RIP: 0033:0x7f464fee5d63 [ 39.041394][ T3732] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 39.061088][ T3732] RSP: 002b:00007f464e556e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 39.069603][ T3732] RAX: ffffffffffffffda RBX: 00000000000004c0 RCX: 00007f464fee5d63 [ 39.077610][ T3732] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 39.085600][ T3732] RBP: 0000000020000982 R08: 00000000ffffffff R09: 0000000000000000 [ 39.094027][ T3732] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 39.102017][ T3732] R13: 00007f464e556ef0 R14: 00007f464e556eb0 R15: 0000000020000900 [ 39.110182][ T3732] [ 39.219179][ T3749] netlink: 'syz.3.109': attribute type 13 has an invalid length. [ 39.279330][ T3749] gretap0: refused to change device tx_queue_len [ 39.280112][ T3752] block device autoloading is deprecated and will be removed. [ 39.285714][ T3749] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 39.338059][ T3755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.111'. [ 39.371868][ T3755] netlink: 96 bytes leftover after parsing attributes in process `syz.0.111'. [ 39.398950][ T3761] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.399741][ T3763] FAULT_INJECTION: forcing a failure. [ 39.399741][ T3763] name failslab, interval 1, probability 0, space 0, times 0 [ 39.423466][ T3763] CPU: 0 UID: 0 PID: 3763 Comm: syz.3.114 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 39.434131][ T3763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.444212][ T3763] Call Trace: [ 39.447547][ T3763] [ 39.450519][ T3763] dump_stack_lvl+0xf2/0x150 [ 39.455296][ T3763] dump_stack+0x15/0x1a [ 39.459490][ T3763] should_fail_ex+0x223/0x230 [ 39.464202][ T3763] should_failslab+0x8f/0xb0 [ 39.468861][ T3763] kmem_cache_alloc_noprof+0x52/0x320 [ 39.474295][ T3763] ? skb_clone+0x154/0x1f0 [ 39.478746][ T3763] skb_clone+0x154/0x1f0 [ 39.483020][ T3763] __netlink_deliver_tap+0x2bd/0x4f0 [ 39.488447][ T3763] netlink_unicast+0x64a/0x670 [ 39.493328][ T3763] netlink_sendmsg+0x5cc/0x6e0 [ 39.498180][ T3763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.503532][ T3763] __sock_sendmsg+0x140/0x180 [ 39.508355][ T3763] ____sys_sendmsg+0x312/0x410 [ 39.513149][ T3763] __sys_sendmsg+0x19d/0x230 [ 39.517846][ T3763] __x64_sys_sendmsg+0x46/0x50 [ 39.522696][ T3763] x64_sys_call+0x2734/0x2dc0 [ 39.527486][ T3763] do_syscall_64+0xc9/0x1c0 [ 39.532085][ T3763] ? clear_bhb_loop+0x55/0xb0 [ 39.536841][ T3763] ? clear_bhb_loop+0x55/0xb0 [ 39.541537][ T3763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.547511][ T3763] RIP: 0033:0x7f1b6d5e5d29 [ 39.551953][ T3763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.571605][ T3763] RSP: 002b:00007f1b6bc57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.580131][ T3763] RAX: ffffffffffffffda RBX: 00007f1b6d7d5fa0 RCX: 00007f1b6d5e5d29 [ 39.588125][ T3763] RDX: 0000000000000000 RSI: 0000000020000a40 RDI: 0000000000000003 [ 39.596149][ T3763] RBP: 00007f1b6bc57090 R08: 0000000000000000 R09: 0000000000000000 [ 39.604181][ T3763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.612172][ T3763] R13: 0000000000000000 R14: 00007f1b6d7d5fa0 R15: 00007ffc2955a038 [ 39.620199][ T3763] [ 39.624395][ T3763] IPv6: Can't replace route, no match found [ 39.666300][ T3769] siw: device registration error -23 [ 39.767309][ T3780] FAULT_INJECTION: forcing a failure. [ 39.767309][ T3780] name failslab, interval 1, probability 0, space 0, times 0 [ 39.780015][ T3780] CPU: 0 UID: 0 PID: 3780 Comm: syz.3.120 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 39.790642][ T3780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.800714][ T3780] Call Trace: [ 39.804040][ T3780] [ 39.806982][ T3780] dump_stack_lvl+0xf2/0x150 [ 39.811643][ T3780] dump_stack+0x15/0x1a [ 39.815845][ T3780] should_fail_ex+0x223/0x230 [ 39.820539][ T3780] should_failslab+0x8f/0xb0 [ 39.825201][ T3780] kmem_cache_alloc_noprof+0x52/0x320 [ 39.830589][ T3780] ? radix_tree_node_alloc+0x8b/0x1e0 [ 39.836032][ T3780] radix_tree_node_alloc+0x8b/0x1e0 [ 39.841311][ T3780] idr_get_free+0x1f5/0x550 [ 39.845900][ T3780] idr_alloc_u32+0xcb/0x180 [ 39.850428][ T3780] u32_change+0xa12/0x1340 [ 39.854909][ T3780] ? should_fail_ex+0xd7/0x230 [ 39.859693][ T3780] ? should_failslab+0x8f/0xb0 [ 39.864537][ T3780] ? __pfx_u32_change+0x10/0x10 [ 39.869418][ T3780] tc_new_tfilter+0xf1e/0x11f0 [ 39.874229][ T3780] ? ns_capable+0x7d/0xb0 [ 39.878648][ T3780] ? __pfx_tc_new_tfilter+0x10/0x10 [ 39.883975][ T3780] rtnetlink_rcv_msg+0x651/0x710 [ 39.888939][ T3780] ? ref_tracker_free+0x3a5/0x410 [ 39.894062][ T3780] ? __dev_queue_xmit+0x186/0x2090 [ 39.899245][ T3780] netlink_rcv_skb+0x12c/0x230 [ 39.904288][ T3780] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 39.909897][ T3780] rtnetlink_rcv+0x1c/0x30 [ 39.914329][ T3780] netlink_unicast+0x599/0x670 [ 39.919163][ T3780] netlink_sendmsg+0x5cc/0x6e0 [ 39.923955][ T3780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.929323][ T3780] __sock_sendmsg+0x140/0x180 [ 39.934046][ T3780] ____sys_sendmsg+0x312/0x410 [ 39.938923][ T3780] __sys_sendmsg+0x19d/0x230 [ 39.943648][ T3780] __x64_sys_sendmsg+0x46/0x50 [ 39.948531][ T3780] x64_sys_call+0x2734/0x2dc0 [ 39.953256][ T3780] do_syscall_64+0xc9/0x1c0 [ 39.957789][ T3780] ? clear_bhb_loop+0x55/0xb0 [ 39.962566][ T3780] ? clear_bhb_loop+0x55/0xb0 [ 39.967245][ T3780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.973191][ T3780] RIP: 0033:0x7f1b6d5e5d29 [ 39.977602][ T3780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.997339][ T3780] RSP: 002b:00007f1b6bc57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.006025][ T3780] RAX: ffffffffffffffda RBX: 00007f1b6d7d5fa0 RCX: 00007f1b6d5e5d29 [ 40.013995][ T3780] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 40.021966][ T3780] RBP: 00007f1b6bc57090 R08: 0000000000000000 R09: 0000000000000000 [ 40.030017][ T3780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.038052][ T3780] R13: 0000000000000000 R14: 00007f1b6d7d5fa0 R15: 00007ffc2955a038 [ 40.046095][ T3780] [ 40.051909][ T3776] lo speed is unknown, defaulting to 1000 [ 40.138163][ T3793] process 'syz.1.126' launched '/dev/fd/4' with NULL argv: empty string added [ 40.176203][ T3793] capability: warning: `syz.1.126' uses deprecated v2 capabilities in a way that may be insecure [ 40.218127][ T3803] FAULT_INJECTION: forcing a failure. [ 40.218127][ T3803] name failslab, interval 1, probability 0, space 0, times 0 [ 40.231249][ T3803] CPU: 1 UID: 0 PID: 3803 Comm: syz.0.130 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 40.241926][ T3803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.252035][ T3803] Call Trace: [ 40.255324][ T3803] [ 40.258273][ T3803] dump_stack_lvl+0xf2/0x150 [ 40.262966][ T3803] dump_stack+0x15/0x1a [ 40.267164][ T3803] should_fail_ex+0x223/0x230 [ 40.271912][ T3803] ? alloc_fs_context+0x44/0x4e0 [ 40.276873][ T3803] should_failslab+0x8f/0xb0 [ 40.281546][ T3803] __kmalloc_cache_noprof+0x4e/0x320 [ 40.286858][ T3803] alloc_fs_context+0x44/0x4e0 [ 40.291644][ T3803] fs_context_for_reconfigure+0x46/0x60 [ 40.297326][ T3803] path_mount+0x8a2/0xb30 [ 40.301709][ T3803] __se_sys_mount+0x27c/0x2d0 [ 40.306496][ T3803] ? fput+0x1c4/0x200 [ 40.307342][ T3804] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 40.310489][ T3803] __x64_sys_mount+0x67/0x80 [ 40.324682][ T3803] x64_sys_call+0x2c84/0x2dc0 [ 40.329376][ T3803] do_syscall_64+0xc9/0x1c0 [ 40.333892][ T3803] ? clear_bhb_loop+0x55/0xb0 [ 40.338591][ T3803] ? clear_bhb_loop+0x55/0xb0 [ 40.343282][ T3803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.349236][ T3803] RIP: 0033:0x7f0494785d29 [ 40.353657][ T3803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.373394][ T3803] RSP: 002b:00007f0492df1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.381825][ T3803] RAX: ffffffffffffffda RBX: 00007f0494975fa0 RCX: 00007f0494785d29 [ 40.389979][ T3803] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 40.397958][ T3803] RBP: 00007f0492df1090 R08: 0000000000000000 R09: 0000000000000000 [ 40.405945][ T3803] R10: 000000000097002e R11: 0000000000000246 R12: 0000000000000001 [ 40.413921][ T3803] R13: 0000000000000000 R14: 00007f0494975fa0 R15: 00007ffc042e32e8 [ 40.421961][ T3803] [ 40.576943][ T3818] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 40.601177][ T3818] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 40.654171][ T3823] FAULT_INJECTION: forcing a failure. [ 40.654171][ T3823] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.667376][ T3823] CPU: 1 UID: 0 PID: 3823 Comm: syz.4.134 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 40.677991][ T3823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.688056][ T3823] Call Trace: [ 40.691361][ T3823] [ 40.694323][ T3823] dump_stack_lvl+0xf2/0x150 [ 40.698962][ T3823] dump_stack+0x15/0x1a [ 40.703177][ T3823] should_fail_ex+0x223/0x230 [ 40.707901][ T3823] should_fail+0xb/0x10 [ 40.712086][ T3823] should_fail_usercopy+0x1a/0x20 [ 40.717140][ T3823] _copy_from_user+0x1e/0xb0 [ 40.721842][ T3823] snd_seq_ioctl+0x11b/0x2a0 [ 40.726572][ T3823] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 40.731759][ T3823] __se_sys_ioctl+0xc9/0x140 [ 40.736392][ T3823] __x64_sys_ioctl+0x43/0x50 [ 40.741074][ T3823] x64_sys_call+0x1690/0x2dc0 [ 40.745960][ T3823] do_syscall_64+0xc9/0x1c0 [ 40.750486][ T3823] ? clear_bhb_loop+0x55/0xb0 [ 40.755190][ T3823] ? clear_bhb_loop+0x55/0xb0 [ 40.759883][ T3823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.765827][ T3823] RIP: 0033:0x7ff4bd705d29 [ 40.770253][ T3823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.789917][ T3823] RSP: 002b:00007ff4bbd50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.798437][ T3823] RAX: ffffffffffffffda RBX: 00007ff4bd8f6080 RCX: 00007ff4bd705d29 [ 40.806435][ T3823] RDX: 0000000020001280 RSI: 0000000040605346 RDI: 0000000000000009 [ 40.814428][ T3823] RBP: 00007ff4bbd50090 R08: 0000000000000000 R09: 0000000000000000 [ 40.822465][ T3823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.830446][ T3823] R13: 0000000000000000 R14: 00007ff4bd8f6080 R15: 00007ffd663f9b98 [ 40.838436][ T3823] [ 41.013623][ T3829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.137'. [ 41.133728][ T3842] lo speed is unknown, defaulting to 1000 [ 41.190587][ T3842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.143'. [ 41.330319][ T3869] FAULT_INJECTION: forcing a failure. [ 41.330319][ T3869] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 41.345880][ T3869] CPU: 0 UID: 0 PID: 3869 Comm: syz.3.149 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 41.356537][ T3869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 41.366613][ T3869] Call Trace: [ 41.370737][ T3869] [ 41.373701][ T3869] dump_stack_lvl+0xf2/0x150 [ 41.378647][ T3869] dump_stack+0x15/0x1a [ 41.382900][ T3869] should_fail_ex+0x223/0x230 [ 41.387696][ T3869] should_fail_alloc_page+0xfd/0x110 [ 41.393069][ T3869] __alloc_pages_noprof+0x109/0x340 [ 41.398416][ T3869] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 41.403984][ T3869] alloc_pages_noprof+0xe1/0x100 [ 41.409031][ T3869] pte_alloc_one+0x31/0x110 [ 41.413562][ T3869] __pte_alloc+0x33/0x2a0 [ 41.417935][ T3869] handle_mm_fault+0x1b4a/0x2ac0 [ 41.423060][ T3869] exc_page_fault+0x3b9/0x650 [ 41.427799][ T3869] asm_exc_page_fault+0x26/0x30 [ 41.432723][ T3869] RIP: 0033:0x7f1b6d4a8c46 [ 41.437147][ T3869] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 41.456778][ T3869] RSP: 002b:00007f1b6bc564a0 EFLAGS: 00010246 [ 41.462900][ T3869] RAX: 0000000000000001 RBX: 00007f1b6bc56540 RCX: 0000000000000101 [ 41.470889][ T3869] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f1b6bc565e0 [ 41.478925][ T3869] RBP: 0000000000000102 R08: 00007f1b63837000 R09: 0000000000000000 [ 41.486903][ T3869] R10: 0000000000000000 R11: 00007f1b6bc56550 R12: 0000000000000001 [ 41.494880][ T3869] R13: 00007f1b6d678fe0 R14: 0000000000000000 R15: 00007f1b6bc565e0 [ 41.502891][ T3869] [ 41.506081][ T3869] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 41.931127][ T3884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'. [ 41.944970][ T3884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'. [ 41.959478][ T3884] block device autoloading is deprecated and will be removed. [ 42.114930][ T3895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=3895 comm=syz.4.160 [ 42.127631][ T3895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=3895 comm=syz.4.160 [ 42.161775][ T3893] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 42.261337][ T3905] FAULT_INJECTION: forcing a failure. [ 42.261337][ T3905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.274491][ T3905] CPU: 1 UID: 0 PID: 3905 Comm: +}[@ Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 42.284731][ T3905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 42.294860][ T3905] Call Trace: [ 42.298148][ T3905] [ 42.301083][ T3905] dump_stack_lvl+0xf2/0x150 [ 42.305834][ T3905] dump_stack+0x15/0x1a [ 42.310079][ T3905] should_fail_ex+0x223/0x230 [ 42.314857][ T3905] should_fail+0xb/0x10 [ 42.319103][ T3905] should_fail_usercopy+0x1a/0x20 [ 42.324196][ T3905] _copy_to_user+0x20/0xa0 [ 42.328641][ T3905] simple_read_from_buffer+0xa0/0x110 [ 42.334139][ T3905] proc_fail_nth_read+0xf9/0x140 [ 42.339142][ T3905] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 42.344710][ T3905] vfs_read+0x1a2/0x700 [ 42.349109][ T3905] ? __rcu_read_unlock+0x4e/0x70 [ 42.354066][ T3905] ? __fget_files+0x17c/0x1c0 [ 42.358801][ T3905] ksys_read+0xe8/0x1b0 [ 42.363047][ T3905] __x64_sys_read+0x42/0x50 [ 42.367669][ T3905] x64_sys_call+0x2874/0x2dc0 [ 42.372358][ T3905] do_syscall_64+0xc9/0x1c0 [ 42.376880][ T3905] ? clear_bhb_loop+0x55/0xb0 [ 42.381618][ T3905] ? clear_bhb_loop+0x55/0xb0 [ 42.386310][ T3905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.392289][ T3905] RIP: 0033:0x7fcdb786473c [ 42.396726][ T3905] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 42.417068][ T3905] RSP: 002b:00007fcdb5ed7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.425579][ T3905] RAX: ffffffffffffffda RBX: 00007fcdb7a55fa0 RCX: 00007fcdb786473c [ 42.433614][ T3905] RDX: 000000000000000f RSI: 00007fcdb5ed70a0 RDI: 0000000000000003 [ 42.441609][ T3905] RBP: 00007fcdb5ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.449606][ T3905] R10: 00000000200005c0 R11: 0000000000000246 R12: 0000000000000001 [ 42.457715][ T3905] R13: 0000000000000000 R14: 00007fcdb7a55fa0 R15: 00007ffcfc160668 [ 42.465784][ T3905] [ 42.480547][ T3909] xt_CT: You must specify a L4 protocol and not use inversions on it [ 43.149028][ T3972] FAULT_INJECTION: forcing a failure. [ 43.149028][ T3972] name failslab, interval 1, probability 0, space 0, times 0 [ 43.161779][ T3972] CPU: 0 UID: 0 PID: 3972 Comm: syz.1.180 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 43.172460][ T3972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 43.182624][ T3972] Call Trace: [ 43.186048][ T3972] [ 43.189000][ T3972] dump_stack_lvl+0xf2/0x150 [ 43.193663][ T3972] dump_stack+0x15/0x1a [ 43.197938][ T3972] should_fail_ex+0x223/0x230 [ 43.202644][ T3972] ? audit_log_d_path+0x96/0x250 [ 43.207693][ T3972] should_failslab+0x8f/0xb0 [ 43.212320][ T3972] __kmalloc_cache_noprof+0x4e/0x320 [ 43.217699][ T3972] audit_log_d_path+0x96/0x250 [ 43.222547][ T3972] ? __rcu_read_unlock+0x4e/0x70 [ 43.227583][ T3972] audit_log_d_path_exe+0x42/0x70 [ 43.232746][ T3972] audit_log_task+0x192/0x1c0 [ 43.237516][ T3972] audit_seccomp+0x68/0x130 [ 43.242063][ T3972] __seccomp_filter+0x6fa/0x1180 [ 43.247043][ T3972] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 43.252755][ T3972] ? __rcu_read_unlock+0x4e/0x70 [ 43.257731][ T3972] ? __fget_files+0x17c/0x1c0 [ 43.262509][ T3972] __secure_computing+0x9f/0x1c0 [ 43.267492][ T3972] syscall_trace_enter+0xd1/0x1f0 [ 43.272554][ T3972] ? __x64_sys_epoll_ctl+0xc6/0xf0 [ 43.277759][ T3972] ? fpregs_assert_state_consistent+0x83/0xa0 [ 43.283944][ T3972] do_syscall_64+0xaa/0x1c0 [ 43.288469][ T3972] ? clear_bhb_loop+0x55/0xb0 [ 43.293351][ T3972] ? clear_bhb_loop+0x55/0xb0 [ 43.298159][ T3972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.304306][ T3972] RIP: 0033:0x7f464fee473c [ 43.308800][ T3972] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 43.328512][ T3972] RSP: 002b:00007f464e557030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.336965][ T3972] RAX: ffffffffffffffda RBX: 00007f46500d5fa0 RCX: 00007f464fee473c [ 43.344988][ T3972] RDX: 000000000000000f RSI: 00007f464e5570a0 RDI: 000000000000000e [ 43.353077][ T3972] RBP: 00007f464e557090 R08: 0000000000000000 R09: 0000000000000000 [ 43.361087][ T3972] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 43.369075][ T3972] R13: 0000000000000000 R14: 00007f46500d5fa0 R15: 00007ffcda747208 [ 43.377094][ T3972] [ 43.664988][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 43.665002][ T29] audit: type=1400 audit(1735089417.192:911): avc: denied { create } for pid=3979 comm="syz.3.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 43.696827][ T3984] netlink: 'syz.1.182': attribute type 10 has an invalid length. [ 43.736509][ T3984] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.743833][ T3984] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.753240][ T3984] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.760381][ T3984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.768059][ T3984] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.775108][ T3984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.785008][ T3984] team0: Port device bridge0 added [ 43.945691][ T29] audit: type=1326 audit(1735089417.472:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0494785d29 code=0x7ffc0000 [ 43.977602][ T3987] FAULT_INJECTION: forcing a failure. [ 43.977602][ T3987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.990851][ T3987] CPU: 1 UID: 0 PID: 3987 Comm: syz.0.185 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 44.001462][ T3987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 44.011569][ T3987] Call Trace: [ 44.014852][ T3987] [ 44.017805][ T3987] dump_stack_lvl+0xf2/0x150 [ 44.022437][ T3987] dump_stack+0x15/0x1a [ 44.026680][ T3987] should_fail_ex+0x223/0x230 [ 44.031377][ T3987] should_fail+0xb/0x10 [ 44.035599][ T3987] should_fail_usercopy+0x1a/0x20 [ 44.040778][ T3987] _copy_to_user+0x20/0xa0 [ 44.045218][ T3987] simple_read_from_buffer+0xa0/0x110 [ 44.050623][ T3987] proc_fail_nth_read+0xf9/0x140 [ 44.055593][ T3987] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 44.061191][ T3987] vfs_read+0x1a2/0x700 [ 44.065378][ T3987] ? __cond_resched+0x28/0x50 [ 44.070149][ T3987] ksys_read+0xe8/0x1b0 [ 44.074365][ T3987] __x64_sys_read+0x42/0x50 [ 44.078900][ T3987] x64_sys_call+0x2874/0x2dc0 [ 44.083688][ T3987] do_syscall_64+0xc9/0x1c0 [ 44.088214][ T3987] ? clear_bhb_loop+0x55/0xb0 [ 44.092927][ T3987] ? clear_bhb_loop+0x55/0xb0 [ 44.097618][ T3987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.103641][ T3987] RIP: 0033:0x7f049478473c [ 44.108109][ T3987] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 44.127736][ T3987] RSP: 002b:00007f0492df1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.136255][ T3987] RAX: ffffffffffffffda RBX: 00007f0494975fa0 RCX: 00007f049478473c [ 44.144055][ T29] audit: type=1326 audit(1735089417.502:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0494785d29 code=0x7ffc0000 [ 44.144233][ T3987] RDX: 000000000000000f RSI: 00007f0492df10a0 RDI: 0000000000000005 [ 44.167592][ T29] audit: type=1326 audit(1735089417.502:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0494785d29 code=0x7ffc0000 [ 44.175511][ T3987] RBP: 00007f0492df1090 R08: 0000000000000000 R09: 0000000000000000 [ 44.198721][ T29] audit: type=1326 audit(1735089417.502:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0494785d29 code=0x7ffc0000 [ 44.206621][ T3987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 44.206640][ T3987] R13: 0000000000000000 R14: 00007f0494975fa0 R15: 00007ffc042e32e8 [ 44.229969][ T29] audit: type=1326 audit(1735089417.502:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0494785d29 code=0x7ffc0000 [ 44.237870][ T3987] [ 44.272265][ T29] audit: type=1326 audit(1735089417.502:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0494785d29 code=0x7ffc0000 [ 44.295715][ T29] audit: type=1326 audit(1735089417.502:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0494785d29 code=0x7ffc0000 [ 44.319033][ T29] audit: type=1326 audit(1735089417.502:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0494784690 code=0x7ffc0000 [ 44.342533][ T29] audit: type=1326 audit(1735089417.512:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.0.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f04947847df code=0x7ffc0000 [ 44.445010][ T3999] ipt_REJECT: ECHOREPLY no longer supported. [ 44.457792][ T4006] FAULT_INJECTION: forcing a failure. [ 44.457792][ T4006] name failslab, interval 1, probability 0, space 0, times 0 [ 44.470758][ T4006] CPU: 1 UID: 0 PID: 4006 Comm: syz.0.193 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 44.481439][ T4006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 44.491586][ T4006] Call Trace: [ 44.494870][ T4006] [ 44.497810][ T4006] dump_stack_lvl+0xf2/0x150 [ 44.502500][ T4006] dump_stack+0x15/0x1a [ 44.506708][ T4006] should_fail_ex+0x223/0x230 [ 44.511482][ T4006] should_failslab+0x8f/0xb0 [ 44.516246][ T4006] kmem_cache_alloc_noprof+0x52/0x320 [ 44.521630][ T4006] ? key_alloc+0x2a6/0xa40 [ 44.526055][ T4006] key_alloc+0x2a6/0xa40 [ 44.530311][ T4006] keyring_alloc+0x44/0xb0 [ 44.534741][ T4006] lookup_user_key+0x318/0xdf0 [ 44.539573][ T4006] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 44.545769][ T4006] __se_sys_add_key+0x24b/0x320 [ 44.550652][ T4006] ? fput+0x1c4/0x200 [ 44.554686][ T4006] __x64_sys_add_key+0x67/0x80 [ 44.559557][ T4006] x64_sys_call+0x2964/0x2dc0 [ 44.564268][ T4006] do_syscall_64+0xc9/0x1c0 [ 44.568778][ T4006] ? clear_bhb_loop+0x55/0xb0 [ 44.573483][ T4006] ? clear_bhb_loop+0x55/0xb0 [ 44.578171][ T4006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.584161][ T4006] RIP: 0033:0x7f0494785d29 [ 44.588585][ T4006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.608226][ T4006] RSP: 002b:00007f0492df1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 44.616709][ T4006] RAX: ffffffffffffffda RBX: 00007f0494975fa0 RCX: 00007f0494785d29 [ 44.624722][ T4006] RDX: 0000000000000000 RSI: 0000000020002880 RDI: 0000000020002840 [ 44.632721][ T4006] RBP: 00007f0492df1090 R08: ffffffffffffffff R09: 0000000000000000 [ 44.640708][ T4006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.648688][ T4006] R13: 0000000000000000 R14: 00007f0494975fa0 R15: 00007ffc042e32e8 [ 44.656712][ T4006] [ 44.700143][ T4013] ======================================================= [ 44.700143][ T4013] WARNING: The mand mount option has been deprecated and [ 44.700143][ T4013] and is ignored by this kernel. Remove the mand [ 44.700143][ T4013] option from the mount to silence this warning. [ 44.700143][ T4013] ======================================================= [ 45.179261][ T4040] FAULT_INJECTION: forcing a failure. [ 45.179261][ T4040] name failslab, interval 1, probability 0, space 0, times 0 [ 45.192086][ T4040] CPU: 0 UID: 0 PID: 4040 Comm: syz.0.205 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 45.202760][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 45.212851][ T4040] Call Trace: [ 45.216159][ T4040] [ 45.219193][ T4040] dump_stack_lvl+0xf2/0x150 [ 45.223864][ T4040] dump_stack+0x15/0x1a [ 45.223947][ T4040] should_fail_ex+0x223/0x230 [ 45.223979][ T4040] should_failslab+0x8f/0xb0 [ 45.224130][ T4040] kmem_cache_alloc_node_noprof+0x59/0x320 [ 45.224179][ T4040] ? alloc_vmap_area+0x1e1/0x1830 [ 45.224272][ T4040] alloc_vmap_area+0x1e1/0x1830 [ 45.224307][ T4040] ? __rcu_read_unlock+0x4e/0x70 [ 45.224344][ T4040] ? should_fail_ex+0xd7/0x230 [ 45.224368][ T4040] ? should_failslab+0x8f/0xb0 [ 45.224416][ T4040] ? __kmalloc_cache_node_noprof+0x18c/0x320 [ 45.224456][ T4040] __get_vm_area_node+0x162/0x1c0 [ 45.224494][ T4040] __vmalloc_node_range_noprof+0x280/0xe80 [ 45.224533][ T4040] ? copy_process+0x3a9/0x1f90 [ 45.224554][ T4040] ? mod_objcg_state+0x3a7/0x4f0 [ 45.224643][ T4040] ? __memcg_slab_post_alloc_hook+0x510/0x660 [ 45.224678][ T4040] ? kmem_cache_alloc_node_noprof+0x22e/0x320 [ 45.224704][ T4040] dup_task_struct+0x4a2/0x710 [ 45.224725][ T4040] ? copy_process+0x3a9/0x1f90 [ 45.224747][ T4040] copy_process+0x3a9/0x1f90 [ 45.224842][ T4040] ? 0xffffffff81000000 [ 45.224865][ T4040] ? selinux_file_permission+0x22a/0x360 [ 45.224899][ T4040] ? __rcu_read_unlock+0x4e/0x70 [ 45.224940][ T4040] kernel_clone+0x167/0x5e0 [ 45.225006][ T4040] ? vfs_write+0x596/0x920 [ 45.225055][ T4040] __x64_sys_clone+0xe8/0x120 [ 45.225093][ T4040] x64_sys_call+0x2d7e/0x2dc0 [ 45.225152][ T4040] do_syscall_64+0xc9/0x1c0 [ 45.225184][ T4040] ? clear_bhb_loop+0x55/0xb0 [ 45.225204][ T4040] ? clear_bhb_loop+0x55/0xb0 [ 45.225225][ T4040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.225269][ T4040] RIP: 0033:0x7f0494785d29 [ 45.225318][ T4040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.225337][ T4040] RSP: 002b:00007f0492df0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 45.225359][ T4040] RAX: ffffffffffffffda RBX: 00007f0494975fa0 RCX: 00007f0494785d29 [ 45.225375][ T4040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.423327][ T4040] RBP: 00007f0492df1090 R08: 0000000000000000 R09: 0000000000000000 [ 45.431307][ T4040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.439281][ T4040] R13: 0000000000000000 R14: 00007f0494975fa0 R15: 00007ffc042e32e8 [ 45.447269][ T4040] [ 45.450506][ T4040] syz.0.205: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 45.465347][ T4040] CPU: 0 UID: 0 PID: 4040 Comm: syz.0.205 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 45.475963][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 45.486024][ T4040] Call Trace: [ 45.489306][ T4040] [ 45.492240][ T4040] dump_stack_lvl+0xf2/0x150 [ 45.496854][ T4040] dump_stack+0x15/0x1a [ 45.501104][ T4040] warn_alloc+0x145/0x1b0 [ 45.505462][ T4040] __vmalloc_node_range_noprof+0x2a5/0xe80 [ 45.511297][ T4040] ? mod_objcg_state+0x3a7/0x4f0 [ 45.516252][ T4040] ? __memcg_slab_post_alloc_hook+0x510/0x660 [ 45.522336][ T4040] ? kmem_cache_alloc_node_noprof+0x22e/0x320 [ 45.528485][ T4040] dup_task_struct+0x4a2/0x710 [ 45.533281][ T4040] ? copy_process+0x3a9/0x1f90 [ 45.538140][ T4040] copy_process+0x3a9/0x1f90 [ 45.542800][ T4040] ? 0xffffffff81000000 [ 45.547036][ T4040] ? selinux_file_permission+0x22a/0x360 [ 45.552691][ T4040] ? __rcu_read_unlock+0x4e/0x70 [ 45.557736][ T4040] kernel_clone+0x167/0x5e0 [ 45.562282][ T4040] ? vfs_write+0x596/0x920 [ 45.566786][ T4040] __x64_sys_clone+0xe8/0x120 [ 45.571546][ T4040] x64_sys_call+0x2d7e/0x2dc0 [ 45.576241][ T4040] do_syscall_64+0xc9/0x1c0 [ 45.580774][ T4040] ? clear_bhb_loop+0x55/0xb0 [ 45.585471][ T4040] ? clear_bhb_loop+0x55/0xb0 [ 45.590158][ T4040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.596173][ T4040] RIP: 0033:0x7f0494785d29 [ 45.600605][ T4040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.620223][ T4040] RSP: 002b:00007f0492df0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 45.628709][ T4040] RAX: ffffffffffffffda RBX: 00007f0494975fa0 RCX: 00007f0494785d29 [ 45.636691][ T4040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.644680][ T4040] RBP: 00007f0492df1090 R08: 0000000000000000 R09: 0000000000000000 [ 45.652793][ T4040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.660774][ T4040] R13: 0000000000000000 R14: 00007f0494975fa0 R15: 00007ffc042e32e8 [ 45.668768][ T4040] [ 45.671923][ T4040] Mem-Info: [ 45.675389][ T4040] active_anon:12625 inactive_anon:1 isolated_anon:0 [ 45.675389][ T4040] active_file:6647 inactive_file:14780 isolated_file:0 [ 45.675389][ T4040] unevictable:0 dirty:1530 writeback:0 [ 45.675389][ T4040] slab_reclaimable:2695 slab_unreclaimable:13749 [ 45.675389][ T4040] mapped:31174 shmem:8623 pagetables:808 [ 45.675389][ T4040] sec_pagetables:0 bounce:0 [ 45.675389][ T4040] kernel_misc_reclaimable:0 [ 45.675389][ T4040] free:1892118 free_pcp:1195 free_cma:0 [ 45.720680][ T4040] Node 0 active_anon:51612kB inactive_anon:4kB active_file:27516kB inactive_file:59052kB unevictable:12kB isolated(anon):0kB isolated(file):0kB mapped:125580kB dirty:6160kB writeback:0kB shmem:35744kB writeback_tmp:0kB kernel_stack:2896kB pagetables:3068kB sec_pagetables:0kB all_unreclaimable? no [ 45.748810][ T4040] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 45.776489][ T4040] lowmem_reserve[]: 0 2866 7844 0 [ 45.781586][ T4040] Node 0 DMA32 free:2950384kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953916kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 45.810751][ T4040] lowmem_reserve[]: 0 0 4978 0 [ 45.815702][ T4040] Node 0 Normal free:4586672kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:56484kB inactive_anon:4kB active_file:32620kB inactive_file:59052kB unevictable:12kB writepending:6160kB present:5242880kB managed:5098208kB mlocked:12kB bounce:0kB free_pcp:5708kB local_pcp:664kB free_cma:0kB [ 45.846449][ T4040] lowmem_reserve[]: 0 0 0 0 [ 45.851003][ T4040] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 45.863738][ T4040] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 4*16kB (M) 6*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950384kB [ 45.879980][ T4040] Node 0 Normal: 40*4kB (UME) 22*8kB (UE) 32*16kB (UE) 24*32kB (UE) 8*64kB (UM) 4*128kB (UME) 6*256kB (UE) 10*512kB (UME) 21*1024kB (UME) 16*2048kB (UME) 1104*4096kB (UM) = 4585552kB [ 45.898366][ T4040] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 45.908423][ T4040] 34627 total pagecache pages [ 45.913660][ T4040] 1 pages in swap cache [ 45.917974][ T4040] Free swap = 124988kB [ 45.922136][ T4040] Total swap = 124996kB [ 45.926298][ T4040] 2097051 pages RAM [ 45.930587][ T4040] 0 pages HighMem/MovableOnly [ 45.935544][ T4040] 80180 pages reserved [ 46.085377][ T4061] smc: net device bond0 applied user defined pnetid SYZ0 [ 46.106900][ T4063] netlink: 256 bytes leftover after parsing attributes in process `syz.0.214'. [ 46.148931][ T4061] netlink: 116 bytes leftover after parsing attributes in process `syz.2.213'. [ 46.175122][ T4061] smc: net device bond0 erased user defined pnetid SYZ0 [ 46.290330][ T4069] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.215'. [ 46.311759][ T4068] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.215'. [ 46.470978][ T4076] lo speed is unknown, defaulting to 1000 [ 46.505327][ T4077] netlink: 'syz.4.216': attribute type 12 has an invalid length. [ 47.509798][ T4093] netlink: 'syz.0.223': attribute type 10 has an invalid length. [ 47.822889][ T4098] syz.2.225 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 47.887063][ T4111] block device autoloading is deprecated and will be removed. [ 47.955540][ T4115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 48.684988][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 48.685003][ T29] audit: type=1326 audit(1735089422.212:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 48.701764][ T4127] lo speed is unknown, defaulting to 1000 [ 48.714641][ T29] audit: type=1326 audit(1735089422.212:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 48.854646][ T29] audit: type=1326 audit(1735089422.382:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 48.878166][ T29] audit: type=1400 audit(1735089422.382:1017): avc: denied { write } for pid=4125 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 48.954006][ T29] audit: type=1326 audit(1735089422.382:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 48.977423][ T29] audit: type=1326 audit(1735089422.482:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 49.000892][ T29] audit: type=1326 audit(1735089422.482:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 49.000924][ T29] audit: type=1326 audit(1735089422.482:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 49.001020][ T29] audit: type=1326 audit(1735089422.482:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 49.071193][ T29] audit: type=1326 audit(1735089422.482:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.2.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 49.130088][ T4142] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 49.136671][ T4142] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 49.144457][ T4142] vhci_hcd vhci_hcd.0: Device attached [ 49.152060][ T4126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.161009][ T4126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.220912][ T3371] kernel write not supported for file /102/attr/exec (pid: 3371 comm: kworker/1:3) [ 49.236713][ T4143] vhci_hcd: connection closed [ 49.237895][ T36] vhci_hcd: stop threads [ 49.247003][ T36] vhci_hcd: release socket [ 49.251521][ T36] vhci_hcd: disconnect device [ 49.312895][ T4150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 49.321828][ T4150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.242'. [ 49.349949][ T4150] bond1: entered promiscuous mode [ 49.355124][ T4150] bond1: entered allmulticast mode [ 49.361689][ T4150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.511742][ T4158] xt_CT: No such helper "syz1" [ 49.688606][ T4164] netlink: 'syz.1.247': attribute type 13 has an invalid length. [ 49.707693][ T4164] gretap0: refused to change device tx_queue_len [ 49.714155][ T4164] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 49.809953][ T4175] netlink: 'syz.4.252': attribute type 4 has an invalid length. [ 49.817967][ T4175] netlink: 17 bytes leftover after parsing attributes in process `syz.4.252'. [ 50.396963][ T4209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'. [ 50.587681][ T4231] netlink: 'syz.0.273': attribute type 4 has an invalid length. [ 50.595797][ T4231] netlink: 17 bytes leftover after parsing attributes in process `syz.0.273'. [ 50.609006][ T4234] xt_HMARK: spi-set and port-set can't be combined [ 50.666824][ T4240] block device autoloading is deprecated and will be removed. [ 50.709209][ T4243] block device autoloading is deprecated and will be removed. [ 50.732236][ T4252] siw: device registration error -23 [ 50.915010][ T4271] 9pnet_virtio: no channels available for device 127.0.0.1 [ 51.712116][ T4291] __nla_validate_parse: 5 callbacks suppressed [ 51.712133][ T4291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 51.720958][ T4293] syz.0.292[4293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.727404][ T4293] syz.0.292[4293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.748054][ T4293] syz.0.292[4293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.764924][ T4291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 51.834492][ T4282] +}[@[4282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.834586][ T4282] +}[@[4282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.846137][ T4282] +}[@[4282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.919204][ T4306] siw: device registration error -23 [ 52.118097][ T4330] netlink: 256 bytes leftover after parsing attributes in process `syz.0.306'. [ 52.183047][ T4340] FAULT_INJECTION: forcing a failure. [ 52.183047][ T4340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.196261][ T4340] CPU: 1 UID: 0 PID: 4340 Comm: syz.0.310 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 52.206897][ T4340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.217153][ T4340] Call Trace: [ 52.220522][ T4340] [ 52.223452][ T4340] dump_stack_lvl+0xf2/0x150 [ 52.228166][ T4340] dump_stack+0x15/0x1a [ 52.232356][ T4340] should_fail_ex+0x223/0x230 [ 52.237080][ T4340] should_fail+0xb/0x10 [ 52.241273][ T4340] should_fail_usercopy+0x1a/0x20 [ 52.246303][ T4340] _copy_from_user+0x1e/0xb0 [ 52.251020][ T4340] copy_from_sockptr_offset+0x6b/0xb0 [ 52.256420][ T4340] do_arpt_set_ctl+0x6b2/0xa20 [ 52.261215][ T4340] ? _raw_spin_unlock_bh+0x36/0x40 [ 52.266462][ T4340] nf_setsockopt+0x195/0x1b0 [ 52.271148][ T4340] ip_setsockopt+0xea/0x100 [ 52.275664][ T4340] udp_setsockopt+0x95/0xb0 [ 52.280175][ T4340] sock_common_setsockopt+0x64/0x80 [ 52.285466][ T4340] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 52.291455][ T4340] __sys_setsockopt+0x187/0x200 [ 52.296340][ T4340] __x64_sys_setsockopt+0x66/0x80 [ 52.301385][ T4340] x64_sys_call+0x282e/0x2dc0 [ 52.306082][ T4340] do_syscall_64+0xc9/0x1c0 [ 52.310612][ T4340] ? clear_bhb_loop+0x55/0xb0 [ 52.315290][ T4340] ? clear_bhb_loop+0x55/0xb0 [ 52.319966][ T4340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.326018][ T4340] RIP: 0033:0x7f0494785d29 [ 52.330475][ T4340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.350119][ T4340] RSP: 002b:00007f0492df1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 52.358538][ T4340] RAX: ffffffffffffffda RBX: 00007f0494975fa0 RCX: 00007f0494785d29 [ 52.366510][ T4340] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 52.374482][ T4340] RBP: 00007f0492df1090 R08: 0000000000000068 R09: 0000000000000000 [ 52.382464][ T4340] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 52.390441][ T4340] R13: 0000000000000000 R14: 00007f0494975fa0 R15: 00007ffc042e32e8 [ 52.398545][ T4340] [ 52.406828][ T4341] block device autoloading is deprecated and will be removed. [ 52.666614][ T4349] bond2: entered promiscuous mode [ 52.671812][ T4349] bond2: entered allmulticast mode [ 52.678919][ T4349] 8021q: adding VLAN 0 to HW filter on device bond2 [ 52.689478][ T4349] bond2 (unregistering): Released all slaves [ 53.015008][ T4374] tipc: Started in network mode [ 53.020657][ T4374] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 53.043895][ T4374] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 53.053766][ T4374] tipc: Enabled bearer , priority 10 [ 53.284818][ T4382] program syz.3.325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.794920][ T4391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.330'. [ 53.810521][ T4391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.330'. [ 53.872494][ T4395] siw: device registration error -23 [ 53.925315][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 53.935569][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 53.935587][ T29] audit: type=1326 audit(1735089427.462:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0494785d29 code=0x7ffc0000 [ 53.965637][ T29] audit: type=1326 audit(1735089427.462:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0494785d29 code=0x7ffc0000 [ 53.989198][ T29] audit: type=1326 audit(1735089427.462:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0494785d29 code=0x7ffc0000 [ 54.012600][ T29] audit: type=1326 audit(1735089427.462:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0494785d29 code=0x7ffc0000 [ 54.036108][ T29] audit: type=1326 audit(1735089427.462:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0494785d29 code=0x7ffc0000 [ 54.059522][ T29] audit: type=1326 audit(1735089427.462:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0494785d29 code=0x7ffc0000 [ 54.082830][ T29] audit: type=1326 audit(1735089427.462:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0494785d29 code=0x7ffc0000 [ 54.106191][ T29] audit: type=1326 audit(1735089427.462:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0494785d63 code=0x7ffc0000 [ 54.129482][ T29] audit: type=1326 audit(1735089427.462:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f04947847df code=0x7ffc0000 [ 54.152721][ T29] audit: type=1326 audit(1735089427.462:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0494785db7 code=0x7ffc0000 [ 54.176118][ T35] tipc: Node number set to 1 [ 54.181096][ T4407] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.335'. [ 54.191018][ T4403] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.335'. [ 54.234595][ T4417] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.337'. [ 54.255799][ T4411] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.337'. [ 54.307401][ T4422] block device autoloading is deprecated and will be removed. [ 54.472151][ T4441] siw: device registration error -23 [ 54.625612][ T4454] lo speed is unknown, defaulting to 1000 [ 54.675588][ T4453] bond1: entered promiscuous mode [ 54.681167][ T4453] bond1: entered allmulticast mode [ 54.686747][ T4453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.916236][ T4451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.925634][ T4451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.251093][ T4476] tls_set_device_offload_rx: netdev not found [ 55.822411][ T4504] FAULT_INJECTION: forcing a failure. [ 55.822411][ T4504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.835581][ T4504] CPU: 0 UID: 0 PID: 4504 Comm: syz.0.369 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 55.846285][ T4504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.856497][ T4504] Call Trace: [ 55.859798][ T4504] [ 55.862802][ T4504] dump_stack_lvl+0xf2/0x150 [ 55.867529][ T4504] dump_stack+0x15/0x1a [ 55.871723][ T4504] should_fail_ex+0x223/0x230 [ 55.876427][ T4504] should_fail+0xb/0x10 [ 55.880620][ T4504] should_fail_usercopy+0x1a/0x20 [ 55.885696][ T4504] strncpy_from_user+0x25/0x210 [ 55.890571][ T4504] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 55.896258][ T4504] ? getname_flags+0x81/0x3b0 [ 55.900965][ T4504] getname_flags+0xb0/0x3b0 [ 55.905615][ T4504] getname_uflags+0x24/0x30 [ 55.910241][ T4504] io_statx_prep+0x10c/0x180 [ 55.914908][ T4504] io_submit_sqes+0x5d0/0x1090 [ 55.919750][ T4504] __se_sys_io_uring_enter+0x1b9/0x1ba0 [ 55.925399][ T4504] ? 0xffffffff81000000 [ 55.929596][ T4504] ? selinux_file_permission+0x22a/0x360 [ 55.935354][ T4504] ? get_pid_task+0x8e/0xc0 [ 55.939951][ T4504] ? proc_fail_nth_write+0x12a/0x150 [ 55.945272][ T4504] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 55.951004][ T4504] ? vfs_write+0x596/0x920 [ 55.955523][ T4504] ? putname+0xcf/0xf0 [ 55.959614][ T4504] ? __fget_files+0x17c/0x1c0 [ 55.964339][ T4504] ? fput+0x1c4/0x200 [ 55.968401][ T4504] ? ksys_write+0x176/0x1b0 [ 55.972943][ T4504] __x64_sys_io_uring_enter+0x78/0x90 [ 55.978415][ T4504] x64_sys_call+0xb5e/0x2dc0 [ 55.983054][ T4504] do_syscall_64+0xc9/0x1c0 [ 55.987655][ T4504] ? clear_bhb_loop+0x55/0xb0 [ 55.992354][ T4504] ? clear_bhb_loop+0x55/0xb0 [ 55.997059][ T4504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.003031][ T4504] RIP: 0033:0x7f0494785d29 [ 56.007528][ T4504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.027226][ T4504] RSP: 002b:00007f0492df1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 56.035681][ T4504] RAX: ffffffffffffffda RBX: 00007f0494975fa0 RCX: 00007f0494785d29 [ 56.043674][ T4504] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000008 [ 56.051672][ T4504] RBP: 00007f0492df1090 R08: 0000000000000000 R09: 0000000000000000 [ 56.059673][ T4504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.067678][ T4504] R13: 0000000000000000 R14: 00007f0494975fa0 R15: 00007ffc042e32e8 [ 56.075683][ T4504] [ 56.199360][ T4523] xt_CT: You must specify a L4 protocol and not use inversions on it [ 56.219974][ T4523] sctp: [Deprecated]: syz.3.377 (pid 4523) Use of int in max_burst socket option. [ 56.219974][ T4523] Use struct sctp_assoc_value instead [ 56.277123][ T4534] xt_HMARK: spi-set and port-set can't be combined [ 56.309066][ T4544] netlink: 'syz.3.385': attribute type 9 has an invalid length. [ 56.775074][ T4566] __nla_validate_parse: 10 callbacks suppressed [ 56.775092][ T4566] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.392'. [ 56.791082][ T4565] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.392'. [ 56.840689][ T4570] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 56.848345][ T4570] SELinux: failed to load policy [ 56.999949][ T4581] netlink: 256 bytes leftover after parsing attributes in process `syz.2.400'. [ 57.054825][ T4585] vlan2: entered promiscuous mode [ 57.060771][ T4585] bond0: entered promiscuous mode [ 57.065841][ T4585] bond_slave_0: entered promiscuous mode [ 57.071675][ T4585] bond_slave_1: entered promiscuous mode [ 57.089222][ T4585] bond0: left promiscuous mode [ 57.094038][ T4585] bond_slave_0: left promiscuous mode [ 57.099729][ T4585] bond_slave_1: left promiscuous mode [ 57.190414][ T4591] siw: device registration error -23 [ 57.246050][ T4593] xt_HMARK: spi-set and port-set can't be combined [ 57.252540][ T4597] xt_HMARK: spi-set and port-set can't be combined [ 57.406936][ T4608] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.405'. [ 57.439046][ T4601] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.405'. [ 57.475106][ T4615] netlink: 256 bytes leftover after parsing attributes in process `syz.4.413'. [ 57.667786][ T4628] xt_CT: No such helper "syz1" [ 57.698226][ T4633] xt_CT: No such helper "syz1" [ 57.861273][ T4645] FAULT_INJECTION: forcing a failure. [ 57.861273][ T4645] name failslab, interval 1, probability 0, space 0, times 0 [ 57.873995][ T4645] CPU: 1 UID: 0 PID: 4645 Comm: syz.3.424 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 57.884765][ T4645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.894955][ T4645] Call Trace: [ 57.898254][ T4645] [ 57.901190][ T4645] dump_stack_lvl+0xf2/0x150 [ 57.905856][ T4645] dump_stack+0x15/0x1a [ 57.910056][ T4645] should_fail_ex+0x223/0x230 [ 57.914800][ T4645] should_failslab+0x8f/0xb0 [ 57.919473][ T4645] kmem_cache_alloc_noprof+0x52/0x320 [ 57.924875][ T4645] ? skb_clone+0x154/0x1f0 [ 57.929326][ T4645] skb_clone+0x154/0x1f0 [ 57.933583][ T4645] __netlink_deliver_tap+0x2bd/0x4f0 [ 57.938961][ T4645] netlink_sendskb+0x126/0x150 [ 57.943816][ T4645] netlink_unicast+0x291/0x670 [ 57.948729][ T4645] netlink_ack+0x4bb/0x4f0 [ 57.953185][ T4645] netlink_rcv_skb+0x19c/0x230 [ 57.957977][ T4645] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 57.963523][ T4645] rtnetlink_rcv+0x1c/0x30 [ 57.968095][ T4645] netlink_unicast+0x599/0x670 [ 57.972878][ T4645] netlink_sendmsg+0x5cc/0x6e0 [ 57.977737][ T4645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.983048][ T4645] __sock_sendmsg+0x140/0x180 [ 57.987985][ T4645] ____sys_sendmsg+0x312/0x410 [ 57.992854][ T4645] __sys_sendmsg+0x19d/0x230 [ 57.997503][ T4645] __x64_sys_sendmsg+0x46/0x50 [ 58.002377][ T4645] x64_sys_call+0x2734/0x2dc0 [ 58.007072][ T4645] do_syscall_64+0xc9/0x1c0 [ 58.011597][ T4645] ? clear_bhb_loop+0x55/0xb0 [ 58.016289][ T4645] ? clear_bhb_loop+0x55/0xb0 [ 58.021058][ T4645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.026993][ T4645] RIP: 0033:0x7f1b6d5e5d29 [ 58.031422][ T4645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.051067][ T4645] RSP: 002b:00007f1b6bc57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.059547][ T4645] RAX: ffffffffffffffda RBX: 00007f1b6d7d5fa0 RCX: 00007f1b6d5e5d29 [ 58.067542][ T4645] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000004 [ 58.075528][ T4645] RBP: 00007f1b6bc57090 R08: 0000000000000000 R09: 0000000000000000 [ 58.083556][ T4645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.091549][ T4645] R13: 0000000000000000 R14: 00007f1b6d7d5fa0 R15: 00007ffc2955a038 [ 58.099542][ T4645] [ 58.119869][ T4647] capability: warning: `syz.4.425' uses 32-bit capabilities (legacy support in use) [ 58.169341][ T4651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 58.183381][ T4651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 58.219328][ T4655] netlink: 256 bytes leftover after parsing attributes in process `syz.4.428'. [ 58.229303][ T4657] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.426'. [ 58.269216][ T4662] FAULT_INJECTION: forcing a failure. [ 58.269216][ T4662] name failslab, interval 1, probability 0, space 0, times 0 [ 58.281918][ T4662] CPU: 1 UID: 0 PID: 4662 Comm: syz.3.430 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 58.281948][ T4662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.281963][ T4662] Call Trace: [ 58.281970][ T4662] [ 58.281978][ T4662] dump_stack_lvl+0xf2/0x150 [ 58.282099][ T4662] dump_stack+0x15/0x1a [ 58.282211][ T4662] should_fail_ex+0x223/0x230 [ 58.282283][ T4662] should_failslab+0x8f/0xb0 [ 58.282319][ T4662] __kmalloc_node_noprof+0xad/0x410 [ 58.282346][ T4662] ? __vmalloc_node_range_noprof+0x3dc/0xe80 [ 58.282383][ T4662] __vmalloc_node_range_noprof+0x3dc/0xe80 [ 58.282496][ T4662] ? sel_write_load+0x152/0x360 [ 58.282599][ T4662] vmalloc_noprof+0x5e/0x70 [ 58.282700][ T4662] ? sel_write_load+0x152/0x360 [ 58.282733][ T4662] sel_write_load+0x152/0x360 [ 58.282772][ T4662] ? __pfx_sel_write_load+0x10/0x10 [ 58.282806][ T4662] vfs_write+0x281/0x920 [ 58.282856][ T4662] ? __fget_files+0x17c/0x1c0 [ 58.282913][ T4662] ksys_write+0xe8/0x1b0 [ 58.282990][ T4662] __x64_sys_write+0x42/0x50 [ 58.283019][ T4662] x64_sys_call+0x287e/0x2dc0 [ 58.283042][ T4662] do_syscall_64+0xc9/0x1c0 [ 58.283091][ T4662] ? clear_bhb_loop+0x55/0xb0 [ 58.283113][ T4662] ? clear_bhb_loop+0x55/0xb0 [ 58.283134][ T4662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.283230][ T4662] RIP: 0033:0x7f1b6d5e5d29 [ 58.283249][ T4662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.283272][ T4662] RSP: 002b:00007f1b6bc57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.283292][ T4662] RAX: ffffffffffffffda RBX: 00007f1b6d7d5fa0 RCX: 00007f1b6d5e5d29 [ 58.283306][ T4662] RDX: 0000000000002000 RSI: 0000000020000180 RDI: 0000000000000004 [ 58.283343][ T4662] RBP: 00007f1b6bc57090 R08: 0000000000000000 R09: 0000000000000000 [ 58.283356][ T4662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.283369][ T4662] R13: 0000000000000000 R14: 00007f1b6d7d5fa0 R15: 00007ffc2955a038 [ 58.283388][ T4662] [ 58.283396][ T4662] syz.3.430: vmalloc error: size 8192, failed to allocated page array size 16, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0 [ 58.283445][ T4662] CPU: 1 UID: 0 PID: 4662 Comm: syz.3.430 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 58.283501][ T4662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.283513][ T4662] Call Trace: [ 58.283519][ T4662] [ 58.283526][ T4662] dump_stack_lvl+0xf2/0x150 [ 58.283561][ T4662] dump_stack+0x15/0x1a [ 58.283615][ T4662] warn_alloc+0x145/0x1b0 [ 58.283667][ T4662] __vmalloc_node_range_noprof+0x473/0xe80 [ 58.283787][ T4662] ? sel_write_load+0x152/0x360 [ 58.283830][ T4662] vmalloc_noprof+0x5e/0x70 [ 58.283857][ T4662] ? sel_write_load+0x152/0x360 [ 58.283898][ T4662] sel_write_load+0x152/0x360 [ 58.283926][ T4662] ? __pfx_sel_write_load+0x10/0x10 [ 58.284016][ T4662] vfs_write+0x281/0x920 [ 58.284050][ T4662] ? __fget_files+0x17c/0x1c0 [ 58.284094][ T4662] ksys_write+0xe8/0x1b0 [ 58.587132][ T4662] __x64_sys_write+0x42/0x50 [ 58.591796][ T4662] x64_sys_call+0x287e/0x2dc0 [ 58.596481][ T4662] do_syscall_64+0xc9/0x1c0 [ 58.601049][ T4662] ? clear_bhb_loop+0x55/0xb0 [ 58.605763][ T4662] ? clear_bhb_loop+0x55/0xb0 [ 58.610456][ T4662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.616375][ T4662] RIP: 0033:0x7f1b6d5e5d29 [ 58.620883][ T4662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.640612][ T4662] RSP: 002b:00007f1b6bc57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.649059][ T4662] RAX: ffffffffffffffda RBX: 00007f1b6d7d5fa0 RCX: 00007f1b6d5e5d29 [ 58.657057][ T4662] RDX: 0000000000002000 RSI: 0000000020000180 RDI: 0000000000000004 [ 58.665103][ T4662] RBP: 00007f1b6bc57090 R08: 0000000000000000 R09: 0000000000000000 [ 58.673078][ T4662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.681057][ T4662] R13: 0000000000000000 R14: 00007f1b6d7d5fa0 R15: 00007ffc2955a038 [ 58.689042][ T4662] [ 58.692170][ T4662] Mem-Info: [ 58.695420][ T4662] active_anon:4206 inactive_anon:1 isolated_anon:0 [ 58.695420][ T4662] active_file:9116 inactive_file:16832 isolated_file:0 [ 58.695420][ T4662] unevictable:0 dirty:539 writeback:29 [ 58.695420][ T4662] slab_reclaimable:2780 slab_unreclaimable:13967 [ 58.695420][ T4662] mapped:28746 shmem:277 pagetables:749 [ 58.695420][ T4662] sec_pagetables:0 bounce:0 [ 58.695420][ T4662] kernel_misc_reclaimable:0 [ 58.695420][ T4662] free:1867618 free_pcp:27546 free_cma:0 [ 58.740764][ T4662] Node 0 active_anon:16824kB inactive_anon:4kB active_file:36464kB inactive_file:67328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114984kB dirty:2156kB writeback:116kB shmem:1108kB writeback_tmp:0kB kernel_stack:3168kB pagetables:2996kB sec_pagetables:0kB all_unreclaimable? no [ 58.768919][ T4662] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 58.795853][ T4662] lowmem_reserve[]: 0 2866 7844 0 [ 58.801000][ T4662] Node 0 DMA32 free:2950384kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953916kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 58.829480][ T4662] lowmem_reserve[]: 0 0 4978 0 [ 58.834427][ T4662] Node 0 Normal free:4513196kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:16596kB inactive_anon:4kB active_file:36464kB inactive_file:67328kB unevictable:0kB writepending:2112kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:98540kB local_pcp:22104kB free_cma:0kB [ 58.864869][ T4662] lowmem_reserve[]: 0 0 0 0 [ 58.869482][ T4662] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 58.882342][ T4662] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 4*16kB (M) 6*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950384kB [ 58.898611][ T4662] Node 0 Normal: 104*4kB (UME) 220*8kB (UME) 246*16kB (UME) 176*32kB (UME) 220*64kB (UME) 114*128kB (UM) 76*256kB (UM) 56*512kB (UM) 37*1024kB (UME) 17*2048kB (UME) 1062*4096kB (UM) = 4511200kB [ 58.917976][ T4662] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 58.927303][ T4662] 29126 total pagecache pages [ 58.931993][ T4662] 1 pages in swap cache [ 58.936174][ T4662] Free swap = 124988kB [ 58.940372][ T4662] Total swap = 124996kB [ 58.944559][ T4662] 2097051 pages RAM [ 58.948455][ T4662] 0 pages HighMem/MovableOnly [ 58.953142][ T4662] 80180 pages reserved [ 59.022391][ T29] kauditd_printk_skb: 505 callbacks suppressed [ 59.022439][ T29] audit: type=1400 audit(1735089432.552:1837): avc: denied { ioctl } for pid=4680 comm="syz.1.438" path="socket:[7933]" dev="sockfs" ino=7933 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.101728][ T29] audit: type=1326 audit(1735089432.632:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 59.125146][ T29] audit: type=1326 audit(1735089432.632:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 59.148606][ T29] audit: type=1326 audit(1735089432.632:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 59.172054][ T29] audit: type=1326 audit(1735089432.632:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 59.195842][ T29] audit: type=1326 audit(1735089432.632:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 59.220200][ T29] audit: type=1326 audit(1735089432.632:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 59.243651][ T29] audit: type=1326 audit(1735089432.632:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 59.267056][ T29] audit: type=1326 audit(1735089432.632:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcdb7865d63 code=0x7ffc0000 [ 59.290370][ T29] audit: type=1326 audit(1735089432.632:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcdb78647df code=0x7ffc0000 [ 59.465741][ T4702] lo speed is unknown, defaulting to 1000 [ 59.609141][ T4714] 9pnet_fd: Insufficient options for proto=fd [ 59.870903][ T4728] lo speed is unknown, defaulting to 1000 [ 59.920415][ T4733] xt_CT: No such helper "syz1" [ 60.054965][ T4743] xt_CT: No such helper "syz1" [ 60.542897][ T4778] block device autoloading is deprecated and will be removed. [ 60.745683][ T4781] xt_HMARK: spi-set and port-set can't be combined [ 61.070762][ T4791] loop3: detected capacity change from 0 to 512 [ 61.139980][ T4791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.152924][ T4791] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.222135][ T4791] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.477: Failed to acquire dquot type 1 [ 61.254827][ T4801] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.477: Failed to acquire dquot type 1 [ 61.370793][ T4816] team0 (unregistering): Port device team_slave_0 removed [ 61.382251][ T4816] team0 (unregistering): Port device team_slave_1 removed [ 61.490222][ T4809] bond1: entered promiscuous mode [ 61.495321][ T4809] bond1: entered allmulticast mode [ 61.501462][ T4809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.511809][ T4809] bond1 (unregistering): Released all slaves [ 61.524537][ T4816] 9pnet_fd: Insufficient options for proto=fd [ 61.686574][ T4838] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 61.693235][ T4838] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 61.700799][ T4838] vhci_hcd vhci_hcd.0: Device attached [ 61.926043][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.947699][ T9] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 62.207154][ T4839] vhci_hcd: connection reset by peer [ 62.223190][ T11] vhci_hcd: stop threads [ 62.227659][ T11] vhci_hcd: release socket [ 62.232119][ T11] vhci_hcd: disconnect device [ 62.257632][ T4852] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 62.728934][ T4872] can: request_module (can-proto-3) failed. [ 62.752288][ T4882] __nla_validate_parse: 13 callbacks suppressed [ 62.752304][ T4882] netlink: 256 bytes leftover after parsing attributes in process `syz.4.506'. [ 62.849869][ T4890] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.507'. [ 62.871339][ T4889] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 62.877902][ T4889] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 62.885705][ T4889] vhci_hcd vhci_hcd.0: Device attached [ 62.886505][ T4886] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.507'. [ 62.922713][ T4896] loop3: detected capacity change from 0 to 512 [ 62.932708][ T4896] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.968460][ T4900] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.509'. [ 62.987636][ T4896] EXT4-fs (loop3): 1 truncate cleaned up [ 62.996830][ T4892] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.509'. [ 63.020421][ T4896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.141698][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.156502][ T3362] usb 10-1: SetAddress Request (2) to port 0 [ 63.162739][ T3362] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 63.179230][ T4904] lo speed is unknown, defaulting to 1000 [ 63.236601][ T4911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'. [ 63.273020][ T4911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'. [ 63.362449][ T4917] loop3: detected capacity change from 0 to 512 [ 63.383317][ T4917] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.420976][ T4917] EXT4-fs (loop3): 1 truncate cleaned up [ 63.446850][ T4917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.566385][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.587283][ T4920] FAULT_INJECTION: forcing a failure. [ 63.587283][ T4920] name failslab, interval 1, probability 0, space 0, times 0 [ 63.600029][ T4920] CPU: 1 UID: 0 PID: 4920 Comm: +}[@ Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 63.610213][ T4920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 63.620353][ T4920] Call Trace: [ 63.623648][ T4920] [ 63.626737][ T4920] dump_stack_lvl+0xf2/0x150 [ 63.631373][ T4920] dump_stack+0x15/0x1a [ 63.635597][ T4920] should_fail_ex+0x223/0x230 [ 63.640300][ T4920] ? audit_log_d_path+0x96/0x250 [ 63.645312][ T4920] should_failslab+0x8f/0xb0 [ 63.650007][ T4920] __kmalloc_cache_noprof+0x4e/0x320 [ 63.655320][ T4920] audit_log_d_path+0x96/0x250 [ 63.660188][ T4920] ? __rcu_read_unlock+0x4e/0x70 [ 63.665156][ T4920] audit_log_d_path_exe+0x42/0x70 [ 63.670265][ T4920] audit_log_task+0x192/0x1c0 [ 63.675087][ T4920] audit_seccomp+0x68/0x130 [ 63.679681][ T4920] __seccomp_filter+0x6fa/0x1180 [ 63.684694][ T4920] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 63.690445][ T4920] ? vfs_write+0x596/0x920 [ 63.694914][ T4920] __secure_computing+0x9f/0x1c0 [ 63.699936][ T4920] syscall_trace_enter+0xd1/0x1f0 [ 63.705011][ T4920] ? fpregs_assert_state_consistent+0x83/0xa0 [ 63.711185][ T4920] do_syscall_64+0xaa/0x1c0 [ 63.715724][ T4920] ? clear_bhb_loop+0x55/0xb0 [ 63.720461][ T4920] ? clear_bhb_loop+0x55/0xb0 [ 63.725145][ T4920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.731074][ T4920] RIP: 0033:0x7f464fee5d29 [ 63.735502][ T4920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.755163][ T4920] RSP: 002b:00007f464e557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 63.763617][ T4920] RAX: ffffffffffffffda RBX: 00007f46500d5fa0 RCX: 00007f464fee5d29 [ 63.771593][ T4920] RDX: 0000000000000054 RSI: 0000000020001580 RDI: 00000000200012c0 [ 63.779573][ T4920] RBP: 00007f464e557090 R08: 0000000000000000 R09: 0000000000000000 [ 63.787548][ T4920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.795581][ T4920] R13: 0000000000000000 R14: 00007f46500d5fa0 R15: 00007ffcda747208 [ 63.803605][ T4920] [ 63.806768][ T4893] vhci_hcd: connection reset by peer [ 63.820992][ T3382] vhci_hcd: stop threads [ 63.825325][ T3382] vhci_hcd: release socket [ 63.829853][ T3382] vhci_hcd: disconnect device [ 64.029411][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 64.029446][ T29] audit: type=1326 audit(1735089437.562:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4937 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6d5e5d29 code=0x7ffc0000 [ 64.066580][ T29] audit: type=1326 audit(1735089437.602:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4937 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1b6d5e5d29 code=0x7ffc0000 [ 64.090046][ T29] audit: type=1326 audit(1735089437.602:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4937 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6d5e5d29 code=0x7ffc0000 [ 64.113438][ T29] audit: type=1326 audit(1735089437.602:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4937 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6d5e5d29 code=0x7ffc0000 [ 64.136907][ T29] audit: type=1326 audit(1735089437.602:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4937 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b6d5e5d29 code=0x7ffc0000 [ 64.160380][ T29] audit: type=1326 audit(1735089437.602:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4937 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6d5e5d29 code=0x7ffc0000 [ 64.183808][ T29] audit: type=1326 audit(1735089437.602:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4937 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b6d5e5d29 code=0x7ffc0000 [ 64.207311][ T29] audit: type=1326 audit(1735089437.602:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4937 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6d5e5d29 code=0x7ffc0000 [ 64.230831][ T29] audit: type=1326 audit(1735089437.602:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4937 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b6d5e5d29 code=0x7ffc0000 [ 64.240801][ T4941] lo speed is unknown, defaulting to 1000 [ 64.379115][ T29] audit: type=1326 audit(1735089437.722:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4937 comm="syz.3.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b6d5e5d29 code=0x7ffc0000 [ 64.507178][ T4958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.534'. [ 64.614989][ T4966] netlink: 256 bytes leftover after parsing attributes in process `syz.3.535'. [ 64.755036][ T4973] xt_CT: No such helper "syz1" [ 65.064974][ T4995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 65.148160][ T4987] netlink: 'syz.0.545': attribute type 7 has an invalid length. [ 65.328813][ T5008] lo speed is unknown, defaulting to 1000 [ 65.503232][ T5031] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 65.509794][ T5031] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 65.517703][ T5031] vhci_hcd vhci_hcd.0: Device attached [ 65.584438][ T4145] kernel write not supported for file /300/attr/exec (pid: 4145 comm: kworker/0:4) [ 65.623741][ T5032] vhci_hcd: connection closed [ 65.725922][ T3389] vhci_hcd: stop threads [ 65.734958][ T3389] vhci_hcd: release socket [ 65.739446][ T3389] vhci_hcd: disconnect device [ 65.812054][ T5051] FAULT_INJECTION: forcing a failure. [ 65.812054][ T5051] name failslab, interval 1, probability 0, space 0, times 0 [ 65.824941][ T5051] CPU: 0 UID: 0 PID: 5051 Comm: syz.1.560 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 65.835651][ T5051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.845737][ T5051] Call Trace: [ 65.849025][ T5051] [ 65.851972][ T5051] dump_stack_lvl+0xf2/0x150 [ 65.856610][ T5051] dump_stack+0x15/0x1a [ 65.860855][ T5051] should_fail_ex+0x223/0x230 [ 65.865594][ T5051] should_failslab+0x8f/0xb0 [ 65.870313][ T5051] kmem_cache_alloc_noprof+0x52/0x320 [ 65.875820][ T5051] ? copy_fs_struct+0x31/0x110 [ 65.880762][ T5051] ? __fget_files+0x17c/0x1c0 [ 65.885559][ T5051] copy_fs_struct+0x31/0x110 [ 65.890193][ T5051] ksys_unshare+0x2c0/0x6e0 [ 65.894780][ T5051] ? ksys_write+0x176/0x1b0 [ 65.899314][ T5051] __x64_sys_unshare+0x1f/0x30 [ 65.904152][ T5051] x64_sys_call+0x1a3e/0x2dc0 [ 65.908853][ T5051] do_syscall_64+0xc9/0x1c0 [ 65.913439][ T5051] ? clear_bhb_loop+0x55/0xb0 [ 65.918226][ T5051] ? clear_bhb_loop+0x55/0xb0 [ 65.922948][ T5051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.928887][ T5051] RIP: 0033:0x7f464fee5d29 [ 65.933351][ T5051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.952983][ T5051] RSP: 002b:00007f464e515038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 65.961496][ T5051] RAX: ffffffffffffffda RBX: 00007f46500d6160 RCX: 00007f464fee5d29 [ 65.969487][ T5051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 65.977677][ T5051] RBP: 00007f464e515090 R08: 0000000000000000 R09: 0000000000000000 [ 65.985660][ T5051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.993667][ T5051] R13: 0000000000000000 R14: 00007f46500d6160 R15: 00007ffcda747208 [ 66.001705][ T5051] [ 66.332241][ T5052] lo speed is unknown, defaulting to 1000 [ 66.664945][ T5064] xt_CT: No such helper "syz1" [ 66.712936][ T5068] lo speed is unknown, defaulting to 1000 [ 66.810683][ T5086] syz.1.575[5086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.810765][ T5086] syz.1.575[5086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.822519][ T5086] syz.1.575[5086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.836159][ T5086] SELinux: syz.1.575 (5086) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 67.021126][ T5100] lo speed is unknown, defaulting to 1000 [ 67.026948][ T9] usb 1-1: enqueue for inactive port 0 [ 67.027001][ T9] usb 1-1: enqueue for inactive port 0 [ 67.079852][ T5100] 9pnet_fd: Insufficient options for proto=fd [ 67.206766][ T9] vhci_hcd: vhci_device speed not set [ 67.703513][ T5125] lo speed is unknown, defaulting to 1000 [ 67.805951][ T5132] siw: device registration error -23 [ 67.961689][ T5143] __nla_validate_parse: 4 callbacks suppressed [ 67.961707][ T5143] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.592'. [ 67.996770][ T5138] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.592'. [ 68.042026][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 68.153269][ T5154] xt_CT: No such helper "syz1" [ 68.245308][ T3362] usb 10-1: device descriptor read/8, error -110 [ 68.312216][ T5169] lo speed is unknown, defaulting to 1000 [ 68.356596][ T3362] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 68.384599][ T3362] usb 10-1: enqueue for inactive port 0 [ 68.392543][ T3362] usb 10-1: enqueue for inactive port 0 [ 68.401056][ T5182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 68.410359][ T3362] usb 10-1: enqueue for inactive port 0 [ 68.582523][ T5196] xt_CT: No such helper "syz1" [ 68.778390][ T5207] netlink: 'syz.0.622': attribute type 153 has an invalid length. [ 68.872982][ T5212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 69.085239][ T3371] IPVS: starting estimator thread 0... [ 69.206697][ T5214] IPVS: using max 2208 ests per chain, 110400 per kthread [ 69.368900][ T5216] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 69.375511][ T5216] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 69.375629][ T5216] vhci_hcd vhci_hcd.0: Device attached [ 69.410320][ T29] kauditd_printk_skb: 889 callbacks suppressed [ 69.410338][ T29] audit: type=1326 audit(1735089442.942:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464fee5d29 code=0x7ffc0000 [ 69.441950][ T29] audit: type=1326 audit(1735089442.942:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464fee5d29 code=0x7ffc0000 [ 69.465458][ T29] audit: type=1326 audit(1735089442.942:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f464fee5d29 code=0x7ffc0000 [ 69.489102][ T29] audit: type=1326 audit(1735089442.942:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464fee5d29 code=0x7ffc0000 [ 69.505550][ T3374] kernel write not supported for file /299/attr/exec (pid: 3374 comm: kworker/1:5) [ 69.512476][ T29] audit: type=1326 audit(1735089442.942:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464fee5d29 code=0x7ffc0000 [ 69.545285][ T29] audit: type=1326 audit(1735089442.942:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f464fee5d29 code=0x7ffc0000 [ 69.568710][ T29] audit: type=1326 audit(1735089442.942:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464fee5d29 code=0x7ffc0000 [ 69.592104][ T29] audit: type=1326 audit(1735089442.942:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f464fee5d29 code=0x7ffc0000 [ 69.615585][ T29] audit: type=1326 audit(1735089442.942:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f464fee5d29 code=0x7ffc0000 [ 69.615617][ T29] audit: type=1326 audit(1735089442.942:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5218 comm="syz.1.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f464fee47df code=0x7ffc0000 [ 69.642540][ T5217] vhci_hcd: connection closed [ 69.663375][ T5227] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 69.679221][ T5227] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 69.682471][ T3389] vhci_hcd: stop threads [ 69.686996][ T5227] vhci_hcd vhci_hcd.0: Device attached [ 69.691244][ T3389] vhci_hcd: release socket [ 69.691263][ T3389] vhci_hcd: disconnect device [ 69.696906][ T3371] usb 8-1: SetAddress Request (2) to port 0 [ 69.717380][ T4145] kernel write not supported for file /326/attr/exec (pid: 4145 comm: kworker/0:4) [ 69.719657][ T3371] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 69.749489][ T5228] vhci_hcd: connection closed [ 69.749802][ T36] vhci_hcd: stop threads [ 69.758853][ T36] vhci_hcd: release socket [ 69.763355][ T36] vhci_hcd: disconnect device [ 69.765222][ T5233] xt_CT: No such helper "syz1" [ 69.796312][ T5243] block device autoloading is deprecated and will be removed. [ 69.876898][ T3362] usb usb10-port1: attempt power cycle [ 69.965698][ T5255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.636'. [ 69.995396][ T5257] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 70.503719][ T5278] xt_HMARK: proto mask must be zero with L3 mode [ 70.723750][ T5288] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 70.730397][ T5288] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 70.738181][ T5288] vhci_hcd vhci_hcd.0: Device attached [ 70.792747][ T5290] lo speed is unknown, defaulting to 1000 [ 70.807620][ T35] kernel write not supported for file /341/attr/exec (pid: 35 comm: kworker/1:1) [ 70.835770][ T5289] vhci_hcd: connection closed [ 70.836790][ T11] vhci_hcd: stop threads [ 70.845820][ T11] vhci_hcd: release socket [ 70.850277][ T11] vhci_hcd: disconnect device [ 71.290873][ T5330] siw: device registration error -23 [ 71.387569][ T5337] lo speed is unknown, defaulting to 1000 [ 71.426203][ T5338] netlink: 'syz.3.664': attribute type 2 has an invalid length. [ 71.433934][ T5338] netlink: 'syz.3.664': attribute type 1 has an invalid length. [ 71.441614][ T5338] netlink: 132 bytes leftover after parsing attributes in process `syz.3.664'. [ 71.726828][ T3362] usb usb10-port1: unable to enumerate USB device [ 72.220019][ T5368] syz.1.676[5368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.220105][ T5368] syz.1.676[5368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.236659][ T5368] syz.1.676[5368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.347593][ T5375] xt_hashlimit: max too large, truncated to 1048576 [ 72.620419][ T5398] FAULT_INJECTION: forcing a failure. [ 72.620419][ T5398] name failslab, interval 1, probability 0, space 0, times 0 [ 72.633274][ T5398] CPU: 1 UID: 0 PID: 5398 Comm: syz.1.687 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 72.643902][ T5398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.653974][ T5398] Call Trace: [ 72.657298][ T5398] [ 72.660241][ T5398] dump_stack_lvl+0xf2/0x150 [ 72.664941][ T5398] dump_stack+0x15/0x1a [ 72.669170][ T5398] should_fail_ex+0x223/0x230 [ 72.673920][ T5398] ? audit_log_d_path+0x96/0x250 [ 72.678886][ T5398] should_failslab+0x8f/0xb0 [ 72.683532][ T5398] __kmalloc_cache_noprof+0x4e/0x320 [ 72.688860][ T5398] audit_log_d_path+0x96/0x250 [ 72.693686][ T5398] ? __rcu_read_unlock+0x4e/0x70 [ 72.698682][ T5398] audit_log_d_path_exe+0x42/0x70 [ 72.703735][ T5398] audit_log_task+0x192/0x1c0 [ 72.708494][ T5398] audit_seccomp+0x68/0x130 [ 72.713028][ T5398] __seccomp_filter+0x6fa/0x1180 [ 72.718000][ T5398] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 72.723804][ T5398] ? vfs_write+0x596/0x920 [ 72.728266][ T5398] __secure_computing+0x9f/0x1c0 [ 72.733241][ T5398] syscall_trace_enter+0xd1/0x1f0 [ 72.738326][ T5398] ? fpregs_assert_state_consistent+0x83/0xa0 [ 72.744494][ T5398] do_syscall_64+0xaa/0x1c0 [ 72.749039][ T5398] ? clear_bhb_loop+0x55/0xb0 [ 72.753751][ T5398] ? clear_bhb_loop+0x55/0xb0 [ 72.758484][ T5398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.764424][ T5398] RIP: 0033:0x7f464fee5d29 [ 72.768895][ T5398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.788526][ T5398] RSP: 002b:00007f464e557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 72.797049][ T5398] RAX: ffffffffffffffda RBX: 00007f46500d5fa0 RCX: 00007f464fee5d29 [ 72.805042][ T5398] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 72.813044][ T5398] RBP: 00007f464e557090 R08: 0000000000000000 R09: 0000000000000000 [ 72.821043][ T5398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.829043][ T5398] R13: 0000000000000000 R14: 00007f46500d5fa0 R15: 00007ffcda747208 [ 72.837084][ T5398] [ 72.918638][ T5410] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 72.925192][ T5410] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 72.932963][ T5410] vhci_hcd vhci_hcd.0: Device attached [ 72.950295][ T5408] siw: device registration error -23 [ 73.003218][ T3372] kernel write not supported for file /355/attr/exec (pid: 3372 comm: kworker/1:4) [ 73.024866][ T5413] vhci_hcd: connection closed [ 73.025192][ T54] vhci_hcd: stop threads [ 73.034310][ T54] vhci_hcd: release socket [ 73.038837][ T54] vhci_hcd: disconnect device [ 73.736860][ T5451] lo speed is unknown, defaulting to 1000 [ 74.398281][ T5481] lo speed is unknown, defaulting to 1000 [ 74.436216][ T29] kauditd_printk_skb: 546 callbacks suppressed [ 74.436235][ T29] audit: type=1326 audit(1735089447.962:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bd705d29 code=0x7ffc0000 [ 74.468579][ T29] audit: type=1326 audit(1735089447.962:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bd705d29 code=0x7ffc0000 [ 74.492035][ T29] audit: type=1326 audit(1735089447.962:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4bd705d29 code=0x7ffc0000 [ 74.515397][ T29] audit: type=1326 audit(1735089447.962:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bd705d29 code=0x7ffc0000 [ 74.538815][ T29] audit: type=1326 audit(1735089447.962:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4bd705d29 code=0x7ffc0000 [ 74.562254][ T29] audit: type=1326 audit(1735089447.962:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bd705d29 code=0x7ffc0000 [ 74.585635][ T29] audit: type=1326 audit(1735089447.962:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4bd705d29 code=0x7ffc0000 [ 74.609067][ T29] audit: type=1326 audit(1735089447.962:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bd705d29 code=0x7ffc0000 [ 74.632506][ T29] audit: type=1326 audit(1735089447.962:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff4bd705d29 code=0x7ffc0000 [ 74.656051][ T29] audit: type=1326 audit(1735089447.962:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bd705d29 code=0x7ffc0000 [ 74.786557][ T3371] usb 8-1: device descriptor read/8, error -110 [ 74.907207][ T3371] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 75.152480][ T5506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 75.373620][ T5513] FAULT_INJECTION: forcing a failure. [ 75.373620][ T5513] name failslab, interval 1, probability 0, space 0, times 0 [ 75.386490][ T5513] CPU: 1 UID: 0 PID: 5513 Comm: syz.1.730 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 75.397112][ T5513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.407188][ T5513] Call Trace: [ 75.410528][ T5513] [ 75.413470][ T5513] dump_stack_lvl+0xf2/0x150 [ 75.418215][ T5513] dump_stack+0x15/0x1a [ 75.422408][ T5513] should_fail_ex+0x223/0x230 [ 75.427103][ T5513] should_failslab+0x8f/0xb0 [ 75.431728][ T5513] kmem_cache_alloc_noprof+0x52/0x320 [ 75.437129][ T5513] ? skb_clone+0x154/0x1f0 [ 75.441589][ T5513] skb_clone+0x154/0x1f0 [ 75.445922][ T5513] __netlink_deliver_tap+0x2bd/0x4f0 [ 75.451252][ T5513] netlink_unicast+0x64a/0x670 [ 75.456120][ T5513] netlink_sendmsg+0x5cc/0x6e0 [ 75.461180][ T5513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.466505][ T5513] __sock_sendmsg+0x140/0x180 [ 75.471263][ T5513] ____sys_sendmsg+0x312/0x410 [ 75.476153][ T5513] __sys_sendmsg+0x19d/0x230 [ 75.480805][ T5513] __x64_sys_sendmsg+0x46/0x50 [ 75.485596][ T5513] x64_sys_call+0x2734/0x2dc0 [ 75.490390][ T5513] do_syscall_64+0xc9/0x1c0 [ 75.494934][ T5513] ? clear_bhb_loop+0x55/0xb0 [ 75.499667][ T5513] ? clear_bhb_loop+0x55/0xb0 [ 75.504403][ T5513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.510367][ T5513] RIP: 0033:0x7f464fee5d29 [ 75.514892][ T5513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.534558][ T5513] RSP: 002b:00007f464e557038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.543002][ T5513] RAX: ffffffffffffffda RBX: 00007f46500d5fa0 RCX: 00007f464fee5d29 [ 75.550990][ T5513] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 75.558983][ T5513] RBP: 00007f464e557090 R08: 0000000000000000 R09: 0000000000000000 [ 75.566968][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.575008][ T5513] R13: 0000000000000000 R14: 00007f46500d5fa0 R15: 00007ffcda747208 [ 75.583055][ T5513] [ 75.680660][ T5520] FAULT_INJECTION: forcing a failure. [ 75.680660][ T5520] name failslab, interval 1, probability 0, space 0, times 0 [ 75.693386][ T5520] CPU: 0 UID: 0 PID: 5520 Comm: syz.1.733 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 75.704085][ T5520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.714141][ T5520] Call Trace: [ 75.717418][ T5520] [ 75.720430][ T5520] dump_stack_lvl+0xf2/0x150 [ 75.725082][ T5520] dump_stack+0x15/0x1a [ 75.729312][ T5520] should_fail_ex+0x223/0x230 [ 75.734072][ T5520] ? allocate_cgrp_cset_links+0x7f/0x1f0 [ 75.739709][ T5520] should_failslab+0x8f/0xb0 [ 75.744408][ T5520] __kmalloc_cache_noprof+0x4e/0x320 [ 75.749697][ T5520] ? find_css_set+0x577/0xd60 [ 75.754400][ T5520] allocate_cgrp_cset_links+0x7f/0x1f0 [ 75.759917][ T5520] find_css_set+0x59f/0xd60 [ 75.764450][ T5520] cgroup_migrate_prepare_dst+0x75/0x3e0 [ 75.770091][ T5520] cgroup_attach_task+0x1c2/0x460 [ 75.775134][ T5520] __cgroup_procs_write+0x1af/0x210 [ 75.780338][ T5520] ? __pfx_cgroup_procs_write+0x10/0x10 [ 75.786000][ T5520] cgroup_procs_write+0x29/0x50 [ 75.790850][ T5520] ? __pfx_cgroup_procs_write+0x10/0x10 [ 75.796458][ T5520] cgroup_file_write+0x16f/0x320 [ 75.801471][ T5520] ? __check_object_size+0x364/0x520 [ 75.806768][ T5520] ? __pfx_cgroup_file_write+0x10/0x10 [ 75.812281][ T5520] kernfs_fop_write_iter+0x1c8/0x2c0 [ 75.817625][ T5520] vfs_write+0x77f/0x920 [ 75.821900][ T5520] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 75.827871][ T5520] ksys_write+0xe8/0x1b0 [ 75.832210][ T5520] __x64_sys_write+0x42/0x50 [ 75.836829][ T5520] x64_sys_call+0x287e/0x2dc0 [ 75.841610][ T5520] do_syscall_64+0xc9/0x1c0 [ 75.846150][ T5520] ? clear_bhb_loop+0x55/0xb0 [ 75.850895][ T5520] ? clear_bhb_loop+0x55/0xb0 [ 75.855583][ T5520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.861499][ T5520] RIP: 0033:0x7f464fee5d29 [ 75.865915][ T5520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.885609][ T5520] RSP: 002b:00007f464e557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 75.894226][ T5520] RAX: ffffffffffffffda RBX: 00007f46500d5fa0 RCX: 00007f464fee5d29 [ 75.902276][ T5520] RDX: 0000000000000012 RSI: 0000000020000080 RDI: 0000000000000007 [ 75.910246][ T5520] RBP: 00007f464e557090 R08: 0000000000000000 R09: 0000000000000000 [ 75.918223][ T5520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.926329][ T5520] R13: 0000000000000000 R14: 00007f46500d5fa0 R15: 00007ffcda747208 [ 75.934348][ T5520] [ 76.018356][ T5528] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 76.024986][ T5528] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 76.032722][ T5528] vhci_hcd vhci_hcd.0: Device attached [ 76.095051][ T4145] kernel write not supported for file /410/attr/exec (pid: 4145 comm: kworker/0:4) [ 76.112427][ T5529] vhci_hcd: connection closed [ 76.112769][ T54] vhci_hcd: stop threads [ 76.121984][ T54] vhci_hcd: release socket [ 76.126501][ T54] vhci_hcd: disconnect device [ 76.136081][ T5534] FAULT_INJECTION: forcing a failure. [ 76.136081][ T5534] name failslab, interval 1, probability 0, space 0, times 0 [ 76.148850][ T5534] CPU: 0 UID: 0 PID: 5534 Comm: syz.2.738 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 76.159504][ T5534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.169716][ T5534] Call Trace: [ 76.173098][ T5534] [ 76.176123][ T5534] dump_stack_lvl+0xf2/0x150 [ 76.180794][ T5534] dump_stack+0x15/0x1a [ 76.185000][ T5534] should_fail_ex+0x223/0x230 [ 76.189682][ T5534] should_failslab+0x8f/0xb0 [ 76.194345][ T5534] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 76.200814][ T5534] ? sidtab_sid2str_get+0xb8/0x140 [ 76.205954][ T5534] kmemdup_noprof+0x2a/0x60 [ 76.210562][ T5534] sidtab_sid2str_get+0xb8/0x140 [ 76.215513][ T5534] security_sid_to_context_core+0x1eb/0x2f0 [ 76.221460][ T5534] security_sid_to_context+0x27/0x30 [ 76.226775][ T5534] selinux_lsmprop_to_secctx+0x2c/0x40 [ 76.232278][ T5534] security_lsmprop_to_secctx+0x4a/0x90 [ 76.237970][ T5534] audit_log_task_context+0x93/0x1c0 [ 76.243313][ T5534] audit_log_task+0xf9/0x1c0 [ 76.247934][ T5534] audit_seccomp+0x68/0x130 [ 76.252572][ T5534] __seccomp_filter+0x6fa/0x1180 [ 76.257619][ T5534] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 76.263449][ T5534] ? vfs_write+0x596/0x920 [ 76.267900][ T5534] __secure_computing+0x9f/0x1c0 [ 76.272909][ T5534] syscall_trace_enter+0xd1/0x1f0 [ 76.278036][ T5534] ? fpregs_assert_state_consistent+0x83/0xa0 [ 76.284179][ T5534] do_syscall_64+0xaa/0x1c0 [ 76.288735][ T5534] ? clear_bhb_loop+0x55/0xb0 [ 76.293434][ T5534] ? clear_bhb_loop+0x55/0xb0 [ 76.298228][ T5534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.304164][ T5534] RIP: 0033:0x7fcdb7865d29 [ 76.308578][ T5534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.328236][ T5534] RSP: 002b:00007fcdb5ed7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 76.336651][ T5534] RAX: ffffffffffffffda RBX: 00007fcdb7a55fa0 RCX: 00007fcdb7865d29 [ 76.344630][ T5534] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000080 [ 76.352619][ T5534] RBP: 00007fcdb5ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.360629][ T5534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.368715][ T5534] R13: 0000000000000000 R14: 00007fcdb7a55fa0 R15: 00007ffcfc160668 [ 76.376719][ T5534] [ 76.496946][ T5546] FAULT_INJECTION: forcing a failure. [ 76.496946][ T5546] name failslab, interval 1, probability 0, space 0, times 0 [ 76.509866][ T5546] CPU: 1 UID: 0 PID: 5546 Comm: syz.2.742 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 76.520489][ T5546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.530593][ T5546] Call Trace: [ 76.533870][ T5546] [ 76.536811][ T5546] dump_stack_lvl+0xf2/0x150 [ 76.541443][ T5546] dump_stack+0x15/0x1a [ 76.545629][ T5546] should_fail_ex+0x223/0x230 [ 76.550337][ T5546] ? p9_client_create+0x57/0xaf0 [ 76.555303][ T5546] should_failslab+0x8f/0xb0 [ 76.560140][ T5546] __kmalloc_cache_noprof+0x4e/0x320 [ 76.565449][ T5546] p9_client_create+0x57/0xaf0 [ 76.570268][ T5546] ? should_failslab+0x8f/0xb0 [ 76.575134][ T5546] ? __kmalloc_node_track_caller_noprof+0x1e4/0x410 [ 76.581754][ T5546] ? v9fs_session_init+0x79/0xda0 [ 76.586819][ T5546] v9fs_session_init+0xf9/0xda0 [ 76.591722][ T5546] ? should_failslab+0x55/0xb0 [ 76.596549][ T5546] ? should_fail_ex+0xd7/0x230 [ 76.601342][ T5546] ? v9fs_mount+0x53/0x570 [ 76.605812][ T5546] ? should_failslab+0x8f/0xb0 [ 76.610607][ T5546] ? __kmalloc_cache_noprof+0x186/0x320 [ 76.616211][ T5546] v9fs_mount+0x69/0x570 [ 76.620478][ T5546] ? __pfx_v9fs_mount+0x10/0x10 [ 76.625418][ T5546] legacy_get_tree+0x77/0xd0 [ 76.630050][ T5546] vfs_get_tree+0x56/0x1e0 [ 76.634553][ T5546] do_new_mount+0x227/0x690 [ 76.639156][ T5546] path_mount+0x49b/0xb30 [ 76.643588][ T5546] __se_sys_mount+0x27c/0x2d0 [ 76.648338][ T5546] __x64_sys_mount+0x67/0x80 [ 76.652961][ T5546] x64_sys_call+0x2c84/0x2dc0 [ 76.657658][ T5546] do_syscall_64+0xc9/0x1c0 [ 76.662184][ T5546] ? clear_bhb_loop+0x55/0xb0 [ 76.666934][ T5546] ? clear_bhb_loop+0x55/0xb0 [ 76.671700][ T5546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.677688][ T5546] RIP: 0033:0x7fcdb7865d29 [ 76.682170][ T5546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.701803][ T5546] RSP: 002b:00007fcdb5ed7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 76.710227][ T5546] RAX: ffffffffffffffda RBX: 00007fcdb7a55fa0 RCX: 00007fcdb7865d29 [ 76.718272][ T5546] RDX: 00000000200002c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 76.726261][ T5546] RBP: 00007fcdb5ed7090 R08: 0000000020000400 R09: 0000000000000000 [ 76.734280][ T5546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 76.742366][ T5546] R13: 0000000000000000 R14: 00007fcdb7a55fa0 R15: 00007ffcfc160668 [ 76.750380][ T5546] [ 76.772318][ T5548] FAULT_INJECTION: forcing a failure. [ 76.772318][ T5548] name failslab, interval 1, probability 0, space 0, times 0 [ 76.785002][ T5548] CPU: 0 UID: 0 PID: 5548 Comm: syz.2.743 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 76.795674][ T5548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.805840][ T5548] Call Trace: [ 76.809159][ T5548] [ 76.812119][ T5548] dump_stack_lvl+0xf2/0x150 [ 76.816755][ T5548] dump_stack+0x15/0x1a [ 76.821017][ T5548] should_fail_ex+0x223/0x230 [ 76.825201][ T5550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.744'. [ 76.825801][ T5548] ? audit_log_d_path+0x96/0x250 [ 76.839624][ T5548] should_failslab+0x8f/0xb0 [ 76.844343][ T5548] __kmalloc_cache_noprof+0x4e/0x320 [ 76.849689][ T5548] audit_log_d_path+0x96/0x250 [ 76.854509][ T5548] ? __rcu_read_unlock+0x4e/0x70 [ 76.859538][ T5548] audit_log_d_path_exe+0x42/0x70 [ 76.864712][ T5548] audit_log_task+0x192/0x1c0 [ 76.869425][ T5548] audit_seccomp+0x68/0x130 [ 76.873941][ T5548] __seccomp_filter+0x6fa/0x1180 [ 76.878965][ T5548] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 76.884624][ T5548] ? vfs_write+0x596/0x920 [ 76.889109][ T5548] __secure_computing+0x9f/0x1c0 [ 76.894084][ T5548] syscall_trace_enter+0xd1/0x1f0 [ 76.899217][ T5548] ? fpregs_assert_state_consistent+0x83/0xa0 [ 76.905515][ T5548] do_syscall_64+0xaa/0x1c0 [ 76.910135][ T5548] ? clear_bhb_loop+0x55/0xb0 [ 76.914844][ T5548] ? clear_bhb_loop+0x55/0xb0 [ 76.919598][ T5548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.925611][ T5548] RIP: 0033:0x7fcdb7865d29 [ 76.930105][ T5548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.950088][ T5548] RSP: 002b:00007fcdb5ed7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 76.958520][ T5548] RAX: ffffffffffffffda RBX: 00007fcdb7a55fa0 RCX: 00007fcdb7865d29 [ 76.966518][ T5548] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffffff [ 76.974500][ T5548] RBP: 00007fcdb5ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.982498][ T5548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.990502][ T5548] R13: 0000000000000000 R14: 00007fcdb7a55fa0 R15: 00007ffcfc160668 [ 76.998491][ T5548] [ 77.013377][ T5552] netlink: 4 bytes leftover after parsing attributes in process `‡&/ç'. [ 77.023430][ T5552] netlink: 4 bytes leftover after parsing attributes in process `‡&/ç'. [ 77.062617][ T5555] lo speed is unknown, defaulting to 1000 [ 77.084241][ T5554] lo speed is unknown, defaulting to 1000 [ 77.112576][ T5562] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.746'. [ 77.195682][ T5567] program syz.1.748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.374680][ T5576] FAULT_INJECTION: forcing a failure. [ 77.374680][ T5576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.387962][ T5576] CPU: 0 UID: 0 PID: 5576 Comm: syz.1.752 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 77.399370][ T5576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 77.409581][ T5576] Call Trace: [ 77.412909][ T5576] [ 77.415886][ T5576] dump_stack_lvl+0xf2/0x150 [ 77.420599][ T5576] dump_stack+0x15/0x1a [ 77.424811][ T5576] should_fail_ex+0x223/0x230 [ 77.429582][ T5576] should_fail+0xb/0x10 [ 77.433777][ T5576] should_fail_usercopy+0x1a/0x20 [ 77.438869][ T5576] strncpy_from_user+0x25/0x210 [ 77.443841][ T5576] strncpy_from_user_nofault+0x66/0xe0 [ 77.449500][ T5576] bpf_probe_read_user_str+0x2a/0x70 [ 77.454855][ T5576] bpf_prog_5e25788f09ba7a41+0x4f/0x53 [ 77.460447][ T5576] bpf_trace_run2+0x104/0x1d0 [ 77.465178][ T5576] ? selinux_release_secctx+0x15/0x20 [ 77.470593][ T5576] ? security_sid_to_context_core+0x2b8/0x2f0 [ 77.476713][ T5576] ? selinux_release_secctx+0x15/0x20 [ 77.482156][ T5576] kfree+0x247/0x2f0 [ 77.486072][ T5576] ? audit_log_format+0x8b/0xc0 [ 77.490964][ T5576] ? security_sid_to_context+0x27/0x30 [ 77.496477][ T5576] selinux_release_secctx+0x15/0x20 [ 77.501720][ T5576] security_release_secctx+0x38/0x50 [ 77.507085][ T5576] audit_log_task_context+0x103/0x1c0 [ 77.512538][ T5576] audit_log_task+0xf9/0x1c0 [ 77.517169][ T5576] audit_seccomp+0x68/0x130 [ 77.521704][ T5576] __seccomp_filter+0x6fa/0x1180 [ 77.526714][ T5576] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 77.532453][ T5576] ? vfs_write+0x596/0x920 [ 77.536902][ T5576] __secure_computing+0x9f/0x1c0 [ 77.541952][ T5576] syscall_trace_enter+0xd1/0x1f0 [ 77.547009][ T5576] ? fpregs_assert_state_consistent+0x83/0xa0 [ 77.553140][ T5576] do_syscall_64+0xaa/0x1c0 [ 77.557694][ T5576] ? clear_bhb_loop+0x55/0xb0 [ 77.562395][ T5576] ? clear_bhb_loop+0x55/0xb0 [ 77.567083][ T5576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.573024][ T5576] RIP: 0033:0x7f464fee5d29 [ 77.577452][ T5576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.597253][ T5576] RSP: 002b:00007f464e557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 77.605674][ T5576] RAX: ffffffffffffffda RBX: 00007f46500d5fa0 RCX: 00007f464fee5d29 [ 77.613699][ T5576] RDX: 00000000200009c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 77.621680][ T5576] RBP: 00007f464e557090 R08: 0000000000000000 R09: 0000000000000000 [ 77.629681][ T5576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.637657][ T5576] R13: 0000000000000000 R14: 00007f46500d5fa0 R15: 00007ffcda747208 [ 77.645667][ T5576] [ 77.775202][ T5583] wireguard0: entered promiscuous mode [ 77.780740][ T5583] wireguard0: entered allmulticast mode [ 77.796477][ T5580] wireguard0: entered promiscuous mode [ 77.801987][ T5580] wireguard0: entered allmulticast mode [ 79.328602][ T5615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 79.337513][ T5615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 79.513922][ T5627] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.769'. [ 79.523564][ T5624] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.769'. [ 79.690834][ T5638] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.772'. [ 80.339001][ T5652] FAULT_INJECTION: forcing a failure. [ 80.339001][ T5652] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 80.352324][ T5652] CPU: 0 UID: 0 PID: 5652 Comm: syz.4.778 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 80.363000][ T5652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.373072][ T5652] Call Trace: [ 80.376381][ T5652] [ 80.379321][ T5652] dump_stack_lvl+0xf2/0x150 [ 80.383971][ T5652] dump_stack+0x15/0x1a [ 80.388160][ T5652] should_fail_ex+0x223/0x230 [ 80.392923][ T5652] should_fail_alloc_page+0xfd/0x110 [ 80.398327][ T5652] __alloc_pages_noprof+0x109/0x340 [ 80.403574][ T5652] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 80.409012][ T5652] folio_alloc_mpol_noprof+0x36/0x70 [ 80.414311][ T5652] shmem_get_folio_gfp+0x3d1/0xd90 [ 80.419567][ T5652] shmem_write_begin+0xa2/0x180 [ 80.424470][ T5652] generic_perform_write+0x1a8/0x4a0 [ 80.429835][ T5652] shmem_file_write_iter+0xc2/0xe0 [ 80.434968][ T5652] do_iter_readv_writev+0x394/0x450 [ 80.440192][ T5652] vfs_writev+0x2d4/0x880 [ 80.444611][ T5652] ? proc_fail_nth_write+0x12a/0x150 [ 80.449993][ T5652] __se_sys_pwritev2+0x100/0x1c0 [ 80.455103][ T5652] __x64_sys_pwritev2+0x78/0x90 [ 80.460015][ T5652] x64_sys_call+0x2afe/0x2dc0 [ 80.464698][ T5652] do_syscall_64+0xc9/0x1c0 [ 80.469253][ T5652] ? clear_bhb_loop+0x55/0xb0 [ 80.474000][ T5652] ? clear_bhb_loop+0x55/0xb0 [ 80.478785][ T5652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.484748][ T5652] RIP: 0033:0x7ff4bd705d29 [ 80.489167][ T5652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.508833][ T5652] RSP: 002b:00007ff4bbd71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 80.517350][ T5652] RAX: ffffffffffffffda RBX: 00007ff4bd8f5fa0 RCX: 00007ff4bd705d29 [ 80.525406][ T5652] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 80.533415][ T5652] RBP: 00007ff4bbd71090 R08: 0000000000000000 R09: 0000000000000003 [ 80.541399][ T5652] R10: 0000000000001200 R11: 0000000000000246 R12: 0000000000000002 [ 80.549386][ T5652] R13: 0000000000000000 R14: 00007ff4bd8f5fa0 R15: 00007ffd663f9b98 [ 80.557378][ T5652] [ 80.590232][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 80.590249][ T29] audit: type=1326 audit(1735089454.122:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 80.634519][ T29] audit: type=1326 audit(1735089454.162:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 80.657910][ T29] audit: type=1326 audit(1735089454.162:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 80.681447][ T29] audit: type=1326 audit(1735089454.162:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 80.704914][ T29] audit: type=1326 audit(1735089454.162:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 80.728582][ T29] audit: type=1326 audit(1735089454.162:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 80.751843][ T29] audit: type=1326 audit(1735089454.162:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 80.775403][ T29] audit: type=1326 audit(1735089454.162:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 80.798796][ T29] audit: type=1326 audit(1735089454.162:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 80.822203][ T29] audit: type=1326 audit(1735089454.162:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.2.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 80.865471][ T5664] lo speed is unknown, defaulting to 1000 [ 80.940238][ T5672] block device autoloading is deprecated and will be removed. [ 81.014431][ T5678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5678 comm=syz.4.789 [ 81.880212][ T5700] FAULT_INJECTION: forcing a failure. [ 81.880212][ T5700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.893496][ T5700] CPU: 1 UID: 0 PID: 5700 Comm: syz.2.798 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 81.904119][ T5700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.914257][ T5700] Call Trace: [ 81.917567][ T5700] [ 81.920575][ T5700] dump_stack_lvl+0xf2/0x150 [ 81.925353][ T5700] dump_stack+0x15/0x1a [ 81.929580][ T5700] should_fail_ex+0x223/0x230 [ 81.934271][ T5700] should_fail+0xb/0x10 [ 81.938522][ T5700] should_fail_usercopy+0x1a/0x20 [ 81.943789][ T5700] _copy_from_user+0x1e/0xb0 [ 81.948399][ T5700] __se_sys_io_uring_setup+0xf3/0x1e0 [ 81.953893][ T5700] __x64_sys_io_uring_setup+0x31/0x40 [ 81.959298][ T5700] x64_sys_call+0x270c/0x2dc0 [ 81.964013][ T5700] do_syscall_64+0xc9/0x1c0 [ 81.968568][ T5700] ? clear_bhb_loop+0x55/0xb0 [ 81.973279][ T5700] ? clear_bhb_loop+0x55/0xb0 [ 81.978022][ T5700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.984000][ T5700] RIP: 0033:0x7fcdb7865d29 [ 81.988417][ T5700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.008085][ T5700] RSP: 002b:00007fcdb5ed6fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 82.016531][ T5700] RAX: ffffffffffffffda RBX: 00007fcdb7a55fa0 RCX: 00007fcdb7865d29 [ 82.024525][ T5700] RDX: 0000000020000500 RSI: 0000000020000140 RDI: 0000000000000367 [ 82.032500][ T5700] RBP: 0000000020000140 R08: 0000000000000000 R09: 0000000020000500 [ 82.040571][ T5700] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 82.048635][ T5700] R13: 0000000020000480 R14: 0000000000000367 R15: 0000000020000500 [ 82.056616][ T5700] [ 82.245222][ T5715] lo speed is unknown, defaulting to 1000 [ 84.071951][ T5783] __nla_validate_parse: 1 callbacks suppressed [ 84.071993][ T5783] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.826'. [ 84.088964][ T5778] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.826'. [ 84.325005][ T5808] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.831'. [ 84.335598][ T5802] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.831'. [ 84.394864][ T5812] lo speed is unknown, defaulting to 1000 [ 84.983426][ T5858] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.836'. [ 84.998619][ T5850] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.836'. [ 85.187790][ T5886] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.842'. [ 85.217208][ T5878] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.842'. [ 85.656111][ T29] kauditd_printk_skb: 513 callbacks suppressed [ 85.656176][ T29] audit: type=1326 audit(1735089459.182:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 85.686141][ T29] audit: type=1326 audit(1735089459.182:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 85.713551][ T29] audit: type=1326 audit(1735089459.252:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 85.737345][ T29] audit: type=1326 audit(1735089459.252:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 85.760933][ T29] audit: type=1326 audit(1735089459.252:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 85.784635][ T29] audit: type=1326 audit(1735089459.252:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 85.808216][ T29] audit: type=1326 audit(1735089459.252:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 85.831654][ T29] audit: type=1326 audit(1735089459.252:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 85.855678][ T29] audit: type=1326 audit(1735089459.252:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 85.879048][ T29] audit: type=1326 audit(1735089459.252:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5938 comm="syz.2.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdb7865d29 code=0x7ffc0000 [ 86.361892][ T5960] ================================================================== [ 86.370031][ T5960] BUG: KCSAN: data-race in rxrpc_input_call_event / rxrpc_send_data [ 86.378063][ T5960] [ 86.380392][ T5960] write to 0xffff8881191461f4 of 4 bytes by task 5962 on cpu 1: [ 86.388043][ T5960] rxrpc_input_call_event+0x8ef/0x12e0 [ 86.393537][ T5960] rxrpc_io_thread+0x30e/0x1fb0 [ 86.398414][ T5960] kthread+0x1d1/0x210 [ 86.402505][ T5960] ret_from_fork+0x4b/0x60 [ 86.406959][ T5960] ret_from_fork_asm+0x1a/0x30 [ 86.411754][ T5960] [ 86.414092][ T5960] read to 0xffff8881191461f4 of 4 bytes by task 5960 on cpu 0: [ 86.421711][ T5960] rxrpc_send_data+0x889/0x1820 [ 86.426596][ T5960] rxrpc_do_sendmsg+0xb92/0xc30 [ 86.431496][ T5960] rxrpc_sendmsg+0x417/0x520 [ 86.436113][ T5960] __sock_sendmsg+0x140/0x180 [ 86.440841][ T5960] ____sys_sendmsg+0x312/0x410 [ 86.445641][ T5960] __sys_sendmsg+0x19d/0x230 [ 86.450354][ T5960] __x64_sys_sendmsg+0x46/0x50 [ 86.455157][ T5960] x64_sys_call+0x2734/0x2dc0 [ 86.459872][ T5960] do_syscall_64+0xc9/0x1c0 [ 86.464401][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.470350][ T5960] [ 86.472773][ T5960] value changed: 0x00000003 -> 0x00000004 [ 86.478670][ T5960] [ 86.481019][ T5960] Reported by Kernel Concurrency Sanitizer on: [ 86.487282][ T5960] CPU: 0 UID: 0 PID: 5960 Comm: syz.2.863 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 86.497911][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 86.508009][ T5960] ================================================================== [ 90.076512][ T3371] usb 8-1: device descriptor read/8, error -110 [ 90.316522][ T3371] usb 8-1: SetAddress Request (3) to port 0 [ 90.322520][ T3371] usb 8-1: new SuperSpeed USB device number 3 using vhci_hcd [ 95.426491][ T3371] usb 8-1: device descriptor read/8, error -110 [ 95.546456][ T3371] usb 8-1: new SuperSpeed USB device number 3 using vhci_hcd