last executing test programs: 5.874216039s ago: executing program 0 (id=1): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000d010000a016000000f8b50d307d74af37e4da9707f653e812f340ace5733a33dc5af03aa1939e28153eb8282b1da382161fd80f7757e423f45751fd1dd4586f5d99cbaaf8b332233f03df712bf739f28a323b6d44e413c1089d71502447fe5006a5d376986592fee567248d9f9b60e173b328d9e60ce88400ae485abe7373a1c65bfa90691ccd5d36e50bf149696cbf50acc6fb7ecd198772da88700a5a347d05fa33a6f2a75e4b93463888a2377101ffdee15f37"], 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) poll(&(0x7f0000000340)=[{0xffffffffffffffff, 0xc400}], 0x1, 0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r3, 0x5452, &(0x7f0000001840)=0x5d4) write$P9_RLOPEN(r3, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x1, 0x4, 0x7}, 0x3}}, 0x18) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r5 = dup3(r2, r4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x3b, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=r5], 0xc8}}, 0x20000084) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) 5.526209818s ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6000}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x23}]}], {0x14, 0x10}}, 0x98}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x30}}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x40000) ioctl$SG_SET_DEBUG(r6, 0x227e, &(0x7f0000000240)=0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r9, 0x0) execve(0x0, 0x0, 0x0) sendmsg$key(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2, 0x11, 0x1, 0x9, 0x25, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d6}, @sadb_x_nat_t_type={0x1}, @sadb_address={0x5, 0x17, 0x32, 0x20, 0x0, @in6={0xa, 0x4e22, 0x5, @local, 0x9}}, @sadb_x_sa2={0x2, 0x13, 0xff, 0x0, 0x0, 0x70bd2d, 0x3503}, @sadb_key={0x19, 0x9, 0x5e0, 0x0, "4a64dfde1ea2a1d84c953da5c363b2048f14eb00e5c2233e9117964b8cac40c7ba25dd93ca2ebb9334962415192e7e3f997a497becfc696da721013b4c367119e25827b2ec5cc742e475cda32c9fec1f7ad500eb5f23506a696ddfe5cd5866f293bfb3d5ce86f0a48c9ff4f405bd56e321d2e99f2c10acb3a6611cce85bcabec6d00656ccdde157643b85acb2d185dda633bb4660b5ee962658d569f8afcb1f946ffdeeeef95dc6f10811be784b3db9ab190bb768cc30acaf8b9f855"}]}, 0x128}}, 0x1) write$selinux_load(r8, &(0x7f0000000000)=ANY=[], 0x2000) 3.331358979s ago: executing program 1 (id=6): modify_ldt$write2(0x11, &(0x7f0000000340)={0x0, 0x100000, 0x2000, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) (fail_nth: 1) 3.31940873s ago: executing program 4 (id=5): socket$netlink(0x10, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 2.647414632s ago: executing program 1 (id=7): modify_ldt$write2(0x11, &(0x7f0000000340)={0x0, 0x100000, 0x2000, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) 2.640750109s ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1000}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6000}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x23}]}], {0x14, 0x10}}, 0x98}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x30}}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x40000) ioctl$SG_SET_DEBUG(r6, 0x227e, &(0x7f0000000240)=0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r9, 0x0) execve(0x0, 0x0, 0x0) sendmsg$key(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2, 0x11, 0x1, 0x9, 0x25, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d6}, @sadb_x_nat_t_type={0x1}, @sadb_address={0x5, 0x17, 0x32, 0x20, 0x0, @in6={0xa, 0x4e22, 0x5, @local, 0x9}}, @sadb_x_sa2={0x2, 0x13, 0xff, 0x0, 0x0, 0x70bd2d, 0x3503}, @sadb_key={0x19, 0x9, 0x5e0, 0x0, "4a64dfde1ea2a1d84c953da5c363b2048f14eb00e5c2233e9117964b8cac40c7ba25dd93ca2ebb9334962415192e7e3f997a497becfc696da721013b4c367119e25827b2ec5cc742e475cda32c9fec1f7ad500eb5f23506a696ddfe5cd5866f293bfb3d5ce86f0a48c9ff4f405bd56e321d2e99f2c10acb3a6611cce85bcabec6d00656ccdde157643b85acb2d185dda633bb4660b5ee962658d569f8afcb1f946ffdeeeef95dc6f10811be784b3db9ab190bb768cc30acaf8b9f855"}]}, 0x128}}, 0x1) write$selinux_load(r8, &(0x7f0000000000)=ANY=[], 0x2000) 2.564087578s ago: executing program 1 (id=8): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x24000040) r0 = socket$netlink(0x10, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x3, &(0x7f0000000440)=ANY=[@ANYRES64=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3f}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) (async) connect$can_bcm(r1, &(0x7f0000000180)={0x1d, r3}, 0x10) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, 0x0, 0x0) (async) r7 = syz_open_dev$vbi(&(0x7f0000000240), 0x0, 0x2) syz_open_dev$sndctrl(&(0x7f00000002c0), 0x8, 0x694000) (async) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r8, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/60, 0x3c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/149, 0x95}], 0x1}}], 0x4, 0x400120a0, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a", 0x23}], 0x1}, 0x0) (async) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000000280)=0xff) (async) r10 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) 2.542289481s ago: executing program 0 (id=9): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x14}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0) rseq(0x0, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x1440, 0x0) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x5, 0x10, '\x00', 0x1, &(0x7f0000002580)=[0x0, 0x0]}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000002c0)={0xfffffffd, 0x5, {0xffffffffffffffff}, {0xee01}, 0x3, 0x100}) r4 = fcntl$getown(r0, 0x9) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000300)=0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000340)=0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)=0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = getpgrp(0xffffffffffffffff) read$FUSE(r2, &(0x7f0000004000)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000024c0)={&(0x7f0000000400)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) syz_clone3(&(0x7f0000002500)={0x2040000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f00000025c0)=""/103, 0x67, &(0x7f0000000200)=""/186, &(0x7f00000003c0)=[r3, r4, r5, r6, r7, 0x0, r4, r9, r8], 0x9, {r10}}, 0x58) 2.539356442s ago: executing program 3 (id=10): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 2.348326534s ago: executing program 4 (id=11): socket$netlink(0x10, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 2.322176457s ago: executing program 3 (id=12): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x19, 0x30}, &(0x7f0000000100)=0xc) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x81, 0x0, 0x31424752, 0x4, 0x4, [{0xff}, {0xffffffff}, {0x0, 0x1}, {0x0, 0x76dfbff1}, {0xfffffffe, 0x2}, {0xfffffffd}, {0x0, 0x10}], 0x0, 0x20}}) setpriority(0x0, 0x0, 0xd3b) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1e, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_012={0x2, 0x2, 0x9, "e57b"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x3, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r2, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r2, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 2.253805984s ago: executing program 1 (id=13): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) migrate_pages(0x0, 0x5, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x1) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x4, 0x6, @local}, 0x14) 2.239062248s ago: executing program 2 (id=14): socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x9725}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x2}, 0x0, [0x0, 0x3, 0x403, 0x1, 0x8, 0x100, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x3ec7c00, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0xff, 0xa8, 0x3, 0x0, 0xa9a4, 0x4, 0xc], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x4, 0x800, 0x4, 0x0, 0x0, 0x80000, 0x0, 0xfffffffb, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x10, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7fff0, 0x7f, 0x0, 0x100, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x5, 0x40, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x100, 0xd572, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xa0000000, 0x0, 0xfffffffe, 0x1, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x1, 0xfffffffc, 0x6492, 0x8, 0x0, 0x9], [0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x2000005, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x800, 0x100000]}, 0x45c) socket(0x40000000015, 0x5, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r4, 0x1000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 1.40610967s ago: executing program 4 (id=15): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)="2009f5", 0x3}], 0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f00006ef000/0x1000)=nil, 0x1000, 0x4000, 0x0, 0x100000000000000, 0x2) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(0x0, 0x8, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) keyctl$read(0xb, 0x0, &(0x7f0000002e40)=""/72, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d0c, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) 1.404118672s ago: executing program 1 (id=16): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) r1 = socket$netlink(0x10, 0x3, 0x12) recvmmsg(r1, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/183, 0xb7}], 0x2, &(0x7f0000003180)=""/4096, 0x1000}, 0x6f2}, {{&(0x7f0000004180)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004600)=[{&(0x7f0000004200)=""/98, 0x62}, {&(0x7f0000004280)=""/131, 0x83}, {&(0x7f0000004340)=""/113, 0x71}, {&(0x7f00000043c0)=""/247, 0xf7}, {&(0x7f00000044c0)=""/51, 0x33}, {&(0x7f0000004500)=""/218, 0xda}], 0x6, &(0x7f0000004680)=""/225, 0xe1}, 0x4}, {{&(0x7f0000004780)=@nfc_llcp, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004800)=""/46, 0x2e}, {&(0x7f0000004840)=""/174, 0xae}, {&(0x7f0000004900)=""/137, 0x89}, {&(0x7f00000049c0)=""/161, 0xa1}, {&(0x7f0000004a80)=""/255, 0xff}, {&(0x7f0000004b80)=""/192, 0xc0}], 0x6, &(0x7f0000004cc0)=""/200, 0xc8}, 0xcc}, {{&(0x7f0000004dc0)=@caif=@rfm, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004e40)=""/252, 0xfc}], 0x1, &(0x7f0000004f80)=""/64, 0x40}, 0x3}], 0x4, 0x20, &(0x7f00000050c0)) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000005100), 0x1, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000005140)=""/17) lremovexattr(&(0x7f0000005180)='./file0\x00', &(0x7f00000051c0)=@random={'trusted.', '@\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005200)={'wlan0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000005240)={0x50000000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000052c0), r2) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000006600)={&(0x7f0000005280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000065c0)={&(0x7f0000005300)={0x12a8, r5, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_MEASUREMENTS={0x14c, 0x111, 0x0, 0x1, {0x148, 0x5, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xbc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x35c}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x80, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x768, 0x111, 0x0, 0x1, {0x764, 0x5, 0x0, 0x1, [{0x3b8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x308, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd3f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x11c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800e}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x98}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x55}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x130, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb36d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa4b}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x1c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x188, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbb}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf0}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x9b8, 0x111, 0x0, 0x1, {0x9b4, 0x5, 0x0, 0x1, [{0x4c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xe8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x129}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x60}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffc5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x21}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x230, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x79}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd9}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x158, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xbe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x104, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xcc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x61c39b92}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf682}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2bd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x244, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x28}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x200, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x11c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x9954}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x40000}, 0xc4) syz_genetlink_get_family_id$devlink(&(0x7f0000006640), r4) io_setup(0x3ff, &(0x7f0000006680)=0x0) io_cancel(r6, &(0x7f0000006700)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f00000066c0)="77b80d1782026f3d", 0x8, 0x100000000, 0x0, 0x2, r2}, &(0x7f0000006740)) r7 = socket$inet6(0xa, 0xa, 0x7f) ioctl$sock_inet_SIOCGIFDSTADDR(r7, 0x8917, &(0x7f0000006780)={'team_slave_1\x00'}) io_uring_enter(r2, 0x7721, 0xd56, 0x7f, &(0x7f00000067c0)={[0x3]}, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000006800), 0x602c80, 0x0) ioctl$VIDIOC_STREAMOFF(r9, 0x40045613, &(0x7f0000006840)=0x1000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000006880), 0x100, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000006c40)={&(0x7f00000068c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000006c00)={&(0x7f0000006900)={0x2f4, 0x15, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0xb1, 0x8, "c942c4c904e66900044f6e6feee508da563de7846befeb01eef792a78427dab74b0de34091f80808467fd54271af9fe4166b6457e769f875a63129465030805b0c7d2ed0337766100b8abc9b97622573596d397dee8de93a04f4d09f96f57b2959e37ac9a1ba6808d049c6d404cba22b3f18afb6147393ec7dfd2674b688ca67fbadc5f2203de1f720518592a33c5bd11996436ab410606c78a873092293334df6ec29cc8b7ebe8b1e602ce742"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x9a, 0x8, "f8eae1a792a20f52694276e328d3150cbec1ba3559232debb268639cddb58b818b8f58501a2cc8b4eb849b2c81e9bef139a48ff7a059c5a5e29870b491b16051652343824e57125048fbe913dbab5b2ae0f8e6a2875a31f5df370c73d8ab31f148f5d43bb830c63e8bc9a4529973f6e403698f1c1c964541aabae154cf2faa298dfcbf670b6cf83f55797e614b2bc4c170ca6d2631fd"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xd8, 0x8, "cf2b5f1c16636bec269f1ebfdbac0735c1f7780618e891d553ee11fa02c2e0544ebf6614fbdad43f1de173490b88f0368570e73583897829dd94e7729ba414a3569eb773bf47dc721f2959c3a8a7f8c0f4ec6c1efafe1192c889fb6e23fbbfacb0365f00b0d1a1c3edb4e7f4ee4383037493f48ff555d2717b650aaabc0ff2b15412e144324d93d15cb759b3aa6038e07d905d16d08d6de4703d1d5f3781d359c0f24b58e3ff2211ac80a42e42331fb05266173e87d1937f801c78d9dad0a2ae19f775221a2b6c398213a0a5f0cc3963df587d85"}, @NFTA_OBJ_USERDATA={0xa0, 0x8, "cfe40b9f55786cf83b511adfdb618d5aa858bee834f880f40f156e898a74b0d627354da4f87af982d35cbb6255913680717f500a56a6f60617682346ab7e1fa727065a824aa671975c1d834ce8bcbce687a133ec27a47f3fc2217808a5739547845495458ccde7965a8ff0c3f6176b7d22769075b4394c19e0cca3c1a513da926194f16eccc4bf8f975d13aec8a73c1de8eb202133633900c6fb5e97"}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) openat$iommufd(0xffffffffffffff9c, &(0x7f0000006c80), 0x200, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000006d40)={'team0\x00', 0x0}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007e80)={&(0x7f0000006d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x3, [@enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x472}]}, @float={0xe, 0x0, 0x0, 0x10, 0x2}, @ptr={0xe}, @restrict={0x9, 0x0, 0x0, 0xb, 0x3}, @struct={0x2, 0x1, 0x0, 0x4, 0x0, 0x9, [{0xf, 0x5, 0xdb}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x45, 0x0, 0x56, 0x5}, @enum={0x4, 0x7, 0x0, 0x6, 0x4, [{0x6, 0x100}, {0x3, 0x4}, {0x3, 0x5}, {0x0, 0xc97}, {0x2}, {0x1, 0x2}, {0x5}]}, @enum64={0xb, 0x1, 0x0, 0x13, 0x0, 0xc, [{0x5, 0xfff, 0x4}]}]}, {0x0, [0x0]}}, &(0x7f0000006e80)=""/4096, 0xd7, 0x1000, 0x1, 0x7}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007f00)={0x6, 0x3, &(0x7f0000006cc0)=@raw=[@ldst={0x3, 0x2, 0xb, 0x1, 0x0, 0x8, 0xfffffffffffffff0}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}], &(0x7f0000006d00)='syzkaller\x00', 0xb38f, 0x0, 0x0, 0x41000, 0x0, '\x00', r10, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000007ec0)={0x5, 0x7, 0x4, 0x800}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc008ae05, &(0x7f0000007fc0)=""/219) setsockopt$netrom_NETROM_T1(r9, 0x103, 0x1, &(0x7f00000080c0)=0x5, 0x4) 1.403379181s ago: executing program 2 (id=17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'8255\x00', [0xfffffffb, 0x2166, 0x2, 0x100000, 0x88d6, 0x8f, 0xfffffffd, 0x10, 0x2, 0xffffffff, 0x200, 0xfff, 0x344, 0x1, 0x2, 0x200, 0x9, 0x3, 0x3, 0xe, 0x4, 0x0, 0x80, 0x7ff, 0x1, 0x1, 0xb0c2, 0x7df, 0x8, 0xf3, 0x80000001]}) ioctl$COMEDI_INSNLIST(r2, 0x8010640b, &(0x7f0000000000)={0x1, &(0x7f00000edb00)=[{0x4000000, 0x0, 0x0, 0x4, 0x9}]}) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000008000200000000030005000000000002000000e0000401"], 0x50}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000d0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000180)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x30}}, 0x0) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8f38, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x8000, 0x0, 0x0, 0x41000, 0x20, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r9, 0x40096100, &(0x7f0000000880)={{}, 0x6}) 1.274017481s ago: executing program 0 (id=18): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1fffffffffffffac, &(0x7f0000000380)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200000, 0xa9be, &(0x7f00000003c0)) ioprio_get$pid(0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0xff0f, 0x0, 0x2ffffffff}, 0xc) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x5b, 0x7fffffff}]}) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r7, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) close_range(r6, 0xffffffffffffffff, 0x0) getpid() r8 = open(&(0x7f0000000000)='./file0\x00', 0xc0, 0x28) fcntl$notify(r8, 0x402, 0x40000034) fcntl$setown(r8, 0x8, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 404.682693ms ago: executing program 0 (id=19): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, 0x0) (fail_nth: 1) 1.905482ms ago: executing program 0 (id=20): socketpair(0x25, 0x80000, 0x83, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840), 0x80100, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, 0x0) 0s ago: executing program 1 (id=21): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.233' (ED25519) to the list of known hosts. [ 59.513912][ T30] audit: type=1400 audit(1752768670.171:62): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.517759][ T5817] cgroup: Unknown subsys name 'net' [ 59.536687][ T30] audit: type=1400 audit(1752768670.171:63): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.564284][ T30] audit: type=1400 audit(1752768670.201:64): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.687915][ T5817] cgroup: Unknown subsys name 'cpuset' [ 59.695782][ T5817] cgroup: Unknown subsys name 'rlimit' [ 59.840736][ T30] audit: type=1400 audit(1752768670.501:65): avc: denied { setattr } for pid=5817 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.873143][ T30] audit: type=1400 audit(1752768670.501:66): avc: denied { create } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.900532][ T30] audit: type=1400 audit(1752768670.501:67): avc: denied { write } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.923505][ T30] audit: type=1400 audit(1752768670.501:68): avc: denied { read } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.944049][ T30] audit: type=1400 audit(1752768670.511:69): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 59.969309][ T30] audit: type=1400 audit(1752768670.511:70): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.992751][ T30] audit: type=1400 audit(1752768670.541:71): avc: denied { read } for pid=5499 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.995334][ T5819] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 60.887054][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.004141][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.012010][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.029182][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.037056][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.045515][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.053170][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.061948][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.063544][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.077054][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.077208][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.097224][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.107421][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.115225][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.115460][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.129575][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.130095][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.142438][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.144467][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.150945][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.170506][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.178334][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.178493][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.186783][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.193466][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.214843][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.627520][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 63.639148][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 63.723979][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 63.733707][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 63.865999][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.873226][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.881033][ T5828] bridge_slave_0: entered allmulticast mode [ 63.888159][ T5828] bridge_slave_0: entered promiscuous mode [ 63.896533][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.903612][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.911084][ T5828] bridge_slave_1: entered allmulticast mode [ 63.918238][ T5828] bridge_slave_1: entered promiscuous mode [ 63.925770][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.932850][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.940227][ T5835] bridge_slave_0: entered allmulticast mode [ 63.946931][ T5835] bridge_slave_0: entered promiscuous mode [ 63.991804][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.999011][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.006288][ T5835] bridge_slave_1: entered allmulticast mode [ 64.012939][ T5835] bridge_slave_1: entered promiscuous mode [ 64.049350][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.056807][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.063939][ T5827] bridge_slave_0: entered allmulticast mode [ 64.071512][ T5827] bridge_slave_0: entered promiscuous mode [ 64.078305][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.086031][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.093225][ T5839] bridge_slave_0: entered allmulticast mode [ 64.100043][ T5839] bridge_slave_0: entered promiscuous mode [ 64.121984][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.130374][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.137552][ T5827] bridge_slave_1: entered allmulticast mode [ 64.144204][ T5827] bridge_slave_1: entered promiscuous mode [ 64.151104][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.158891][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.166451][ T5839] bridge_slave_1: entered allmulticast mode [ 64.173106][ T5839] bridge_slave_1: entered promiscuous mode [ 64.181431][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.196262][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.207415][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.231409][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 64.249261][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.301830][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.313004][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.324529][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.341480][ T5828] team0: Port device team_slave_0 added [ 64.349268][ T5835] team0: Port device team_slave_0 added [ 64.357115][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.367377][ T5835] team0: Port device team_slave_1 added [ 64.402125][ T5828] team0: Port device team_slave_1 added [ 64.433903][ T5839] team0: Port device team_slave_0 added [ 64.455995][ T5827] team0: Port device team_slave_0 added [ 64.477465][ T5839] team0: Port device team_slave_1 added [ 64.492164][ T5827] team0: Port device team_slave_1 added [ 64.498540][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.505856][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.531865][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.543788][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.552250][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.578699][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.629585][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.636815][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.662845][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.674255][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.682737][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.709102][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.720405][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.727616][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.753778][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.764695][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.772419][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.782120][ T5833] bridge_slave_0: entered allmulticast mode [ 64.788993][ T5833] bridge_slave_0: entered promiscuous mode [ 64.822201][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.829247][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.855619][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.866650][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.873725][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.881266][ T5833] bridge_slave_1: entered allmulticast mode [ 64.888071][ T5833] bridge_slave_1: entered promiscuous mode [ 64.895217][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.902156][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.928291][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.962323][ T5828] hsr_slave_0: entered promiscuous mode [ 64.968790][ T5828] hsr_slave_1: entered promiscuous mode [ 64.981849][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.990123][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.016758][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.061316][ T5835] hsr_slave_0: entered promiscuous mode [ 65.067373][ T5835] hsr_slave_1: entered promiscuous mode [ 65.073204][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.081116][ T5835] Cannot create hsr debugfs directory [ 65.106505][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.118192][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.141309][ T5839] hsr_slave_0: entered promiscuous mode [ 65.148195][ T5839] hsr_slave_1: entered promiscuous mode [ 65.154021][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.161654][ T5839] Cannot create hsr debugfs directory [ 65.175890][ T5847] Bluetooth: hci4: command tx timeout [ 65.175893][ T5836] Bluetooth: hci1: command tx timeout [ 65.223589][ T5833] team0: Port device team_slave_0 added [ 65.239595][ T5833] team0: Port device team_slave_1 added [ 65.255111][ T5847] Bluetooth: hci3: command tx timeout [ 65.255203][ T5155] Bluetooth: hci0: command tx timeout [ 65.266848][ T5836] Bluetooth: hci2: command tx timeout [ 65.294366][ T5827] hsr_slave_0: entered promiscuous mode [ 65.300915][ T5827] hsr_slave_1: entered promiscuous mode [ 65.307075][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.314607][ T5827] Cannot create hsr debugfs directory [ 65.341213][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.348282][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.374483][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.405684][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.412642][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.438757][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.616958][ T5833] hsr_slave_0: entered promiscuous mode [ 65.622980][ T5833] hsr_slave_1: entered promiscuous mode [ 65.629021][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.636685][ T5833] Cannot create hsr debugfs directory [ 65.722069][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.741324][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.763906][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.788808][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.846034][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.856607][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.872801][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.881746][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.949500][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.969846][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.990733][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.002023][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.067333][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.086942][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.110765][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.119392][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.140626][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.200068][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.209885][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.218193][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.227531][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.259809][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.267000][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.280835][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.287945][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.301203][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.308997][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.319457][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.351290][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.358423][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.380589][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.387710][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.484647][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.512426][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.533352][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.568636][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.575845][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.601907][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.607107][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 66.607120][ T30] audit: type=1400 audit(1752768677.271:86): avc: denied { sys_module } for pid=5835 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.641794][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.648962][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.666947][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.674080][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.699988][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.707119][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.832092][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.919991][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.938403][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.973968][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.981154][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.042143][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.083010][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.090184][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.137522][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.223738][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.260191][ T5155] Bluetooth: hci4: command tx timeout [ 67.265703][ T5836] Bluetooth: hci1: command tx timeout [ 67.277116][ T5835] veth0_vlan: entered promiscuous mode [ 67.309559][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.336823][ T5155] Bluetooth: hci3: command tx timeout [ 67.349574][ T5155] Bluetooth: hci0: command tx timeout [ 67.354712][ T5835] veth1_vlan: entered promiscuous mode [ 67.358152][ T5836] Bluetooth: hci2: command tx timeout [ 67.382540][ T5839] veth0_vlan: entered promiscuous mode [ 67.432356][ T5839] veth1_vlan: entered promiscuous mode [ 67.453786][ T5835] veth0_macvtap: entered promiscuous mode [ 67.499987][ T5835] veth1_macvtap: entered promiscuous mode [ 67.520916][ T5827] veth0_vlan: entered promiscuous mode [ 67.532349][ T5827] veth1_vlan: entered promiscuous mode [ 67.562255][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.573757][ T5839] veth0_macvtap: entered promiscuous mode [ 67.594806][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.608146][ T5839] veth1_macvtap: entered promiscuous mode [ 67.619452][ T5828] veth0_vlan: entered promiscuous mode [ 67.630808][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.643564][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.653434][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.663624][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.672908][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.687197][ T5828] veth1_vlan: entered promiscuous mode [ 67.716463][ T5827] veth0_macvtap: entered promiscuous mode [ 67.747875][ T5827] veth1_macvtap: entered promiscuous mode [ 67.766805][ T5828] veth0_macvtap: entered promiscuous mode [ 67.777496][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.797821][ T5828] veth1_macvtap: entered promiscuous mode [ 67.819769][ T5833] veth0_vlan: entered promiscuous mode [ 67.834013][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.844609][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.864301][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.878120][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.909404][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.918252][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.927211][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.935944][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.951501][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.962171][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.971504][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.980416][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.996145][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.006318][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.006652][ T5833] veth1_vlan: entered promiscuous mode [ 68.014208][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.044556][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.054613][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.065900][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.074604][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.131200][ T5833] veth0_macvtap: entered promiscuous mode [ 68.140301][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.155132][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.171993][ T5833] veth1_macvtap: entered promiscuous mode [ 68.205806][ T30] audit: type=1400 audit(1752768678.861:87): avc: denied { mounton } for pid=5835 comm="syz-executor" path="/root/syzkaller.N2fBFM/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.239865][ T30] audit: type=1400 audit(1752768678.861:88): avc: denied { mount } for pid=5835 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.256982][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.274813][ T30] audit: type=1400 audit(1752768678.861:89): avc: denied { mounton } for pid=5835 comm="syz-executor" path="/root/syzkaller.N2fBFM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.314069][ T30] audit: type=1400 audit(1752768678.861:90): avc: denied { mount } for pid=5835 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.326564][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.337898][ T30] audit: type=1400 audit(1752768678.901:91): avc: denied { mounton } for pid=5835 comm="syz-executor" path="/root/syzkaller.N2fBFM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.348500][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.378843][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.380116][ T30] audit: type=1400 audit(1752768678.901:92): avc: denied { mounton } for pid=5835 comm="syz-executor" path="/root/syzkaller.N2fBFM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.412591][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.430217][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.443051][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.461298][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.474059][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.483140][ T30] audit: type=1400 audit(1752768678.901:93): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.483350][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.505077][ T30] audit: type=1400 audit(1752768678.971:94): avc: denied { mounton } for pid=5835 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.511529][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.543284][ T30] audit: type=1400 audit(1752768678.971:95): avc: denied { mount } for pid=5835 comm="syz-executor" name="/" dev="gadgetfs" ino=7490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.642207][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.656370][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.664209][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.676579][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.778067][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.786877][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.838619][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.854746][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.007205][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.033241][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.065334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 69.365864][ T5836] Bluetooth: hci4: command tx timeout [ 69.372054][ T5836] Bluetooth: hci1: command tx timeout [ 69.425287][ T5836] Bluetooth: hci2: command tx timeout [ 69.431409][ T5836] Bluetooth: hci0: command tx timeout [ 69.441076][ T5836] Bluetooth: hci3: command tx timeout [ 71.124897][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.145260][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.158751][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.315304][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.385361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.416041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.425085][ T5836] Bluetooth: hci4: command tx timeout [ 71.430552][ T5155] Bluetooth: hci1: command tx timeout [ 71.448944][ T5967] FAULT_INJECTION: forcing a failure. [ 71.448944][ T5967] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 71.496895][ T5155] Bluetooth: hci3: command tx timeout [ 71.502363][ T5836] Bluetooth: hci0: command tx timeout [ 71.505548][ T5969] Zero length message leads to an empty skb [ 71.508417][ T5836] Bluetooth: hci2: command tx timeout [ 71.517075][ T5958] SELinux: policydb magic number 0x52000 does not match expected magic number 0xf97cff8c [ 71.533298][ T5967] CPU: 0 UID: 0 PID: 5967 Comm: syz.1.6 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 71.533324][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.533333][ T5967] Call Trace: [ 71.533339][ T5967] [ 71.533346][ T5967] dump_stack_lvl+0x16c/0x1f0 [ 71.533378][ T5967] should_fail_ex+0x512/0x640 [ 71.533409][ T5967] _copy_from_user+0x2e/0xd0 [ 71.533426][ T5967] write_ldt+0xfc/0xd20 [ 71.533444][ T5967] ? __fget_files+0x20e/0x3c0 [ 71.533461][ T5967] ? __pfx_write_ldt+0x10/0x10 [ 71.533477][ T5967] ? fput+0x70/0xf0 [ 71.533495][ T5967] ? ksys_write+0x1ac/0x250 [ 71.533519][ T5967] ? __pfx_ksys_write+0x10/0x10 [ 71.533548][ T5967] __x64_sys_modify_ldt+0xdb/0x170 [ 71.533566][ T5967] do_syscall_64+0xcd/0x4c0 [ 71.533584][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.533601][ T5967] RIP: 0033:0x7ff5f118e929 [ 71.533615][ T5967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.533631][ T5967] RSP: 002b:00007ff5f1f70038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 71.533648][ T5967] RAX: ffffffffffffffda RBX: 00007ff5f13b5fa0 RCX: 00007ff5f118e929 [ 71.533659][ T5967] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 0000000000000011 [ 71.533669][ T5967] RBP: 00007ff5f1f70090 R08: 0000000000000000 R09: 0000000000000000 [ 71.533678][ T5967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.533688][ T5967] R13: 0000000000000001 R14: 00007ff5f13b5fa0 R15: 00007ffe8dfff348 [ 71.533710][ T5967] [ 71.536536][ T5958] SELinux: failed to load policy [ 71.612859][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 71.625372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.635516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.726674][ C1] vkms_vblank_simulate: vblank timer overrun [ 72.024475][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 72.024489][ T30] audit: type=1400 audit(1752768682.681:123): avc: denied { create } for pid=5974 comm="syz.1.8" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.143118][ T5971] SELinux: ebitmap: truncated map [ 72.156355][ T30] audit: type=1400 audit(1752768682.721:124): avc: denied { ioctl } for pid=5974 comm="syz.1.8" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8022 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.196583][ T5971] SELinux: failed to load policy [ 72.283837][ T30] audit: type=1400 audit(1752768682.731:125): avc: denied { read write } for pid=5974 comm="syz.1.8" name="vbi4" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 72.333417][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11'. [ 72.356568][ T30] audit: type=1400 audit(1752768682.731:126): avc: denied { open } for pid=5974 comm="syz.1.8" path="/dev/vbi4" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 72.555412][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.580451][ T30] audit: type=1400 audit(1752768682.731:127): avc: denied { create } for pid=5974 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.648512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.815673][ T30] audit: type=1400 audit(1752768682.921:128): avc: denied { create } for pid=5985 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.872461][ T30] audit: type=1400 audit(1752768682.921:129): avc: denied { create } for pid=5988 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.893768][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 72.906700][ T30] audit: type=1400 audit(1752768682.931:130): avc: denied { getopt } for pid=5988 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.977648][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.028273][ T30] audit: type=1400 audit(1752768682.931:131): avc: denied { ioctl } for pid=5988 comm="syz.3.12" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 73.059475][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 73.092093][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 73.124169][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.184206][ T6007] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffb,4) [ 73.209453][ T30] audit: type=1400 audit(1752768682.931:132): avc: denied { read write } for pid=5988 comm="syz.3.12" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.233266][ T6007] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 73.388841][ T10] usb 4-1: config 0 descriptor?? [ 73.399915][ T6007] comedi comedi3: 8255: I/O port conflict (0x100000,4) [ 73.450484][ T6007] comedi comedi3: 8255: I/O port conflict (0x8f,4) [ 73.468037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.477288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.604537][ T6007] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 73.613616][ T6007] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 73.645075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 73.653364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 74.075868][ T6021] FAULT_INJECTION: forcing a failure. [ 74.075868][ T6021] name failslab, interval 1, probability 0, space 0, times 1 [ 74.095701][ T6007] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 74.102908][ T6021] CPU: 1 UID: 0 PID: 6021 Comm: syz.0.19 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 74.102930][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.102940][ T6021] Call Trace: [ 74.102945][ T6021] [ 74.102952][ T6021] dump_stack_lvl+0x16c/0x1f0 [ 74.102981][ T6021] should_fail_ex+0x512/0x640 [ 74.103002][ T6021] ? fs_reclaim_acquire+0xae/0x150 [ 74.103017][ T6021] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 74.103027][ T6021] should_failslab+0xc2/0x120 [ 74.103037][ T6021] __kmalloc_noprof+0xd2/0x510 [ 74.103056][ T6021] tomoyo_realpath_from_path+0xc2/0x6e0 [ 74.103074][ T6021] ? tomoyo_profile+0x47/0x60 [ 74.103094][ T6021] tomoyo_path_number_perm+0x245/0x580 [ 74.103114][ T6021] ? tomoyo_path_number_perm+0x237/0x580 [ 74.103137][ T6021] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 74.103153][ T6021] ? find_held_lock+0x2b/0x80 [ 74.103179][ T6021] ? find_held_lock+0x2b/0x80 [ 74.103191][ T6021] ? hook_file_ioctl_common+0x145/0x410 [ 74.103209][ T6021] ? __fget_files+0x20e/0x3c0 [ 74.103229][ T6021] security_file_ioctl+0x9b/0x240 [ 74.103256][ T6021] __x64_sys_ioctl+0xb7/0x210 [ 74.103279][ T6021] do_syscall_64+0xcd/0x4c0 [ 74.103291][ T6021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.103302][ T6021] RIP: 0033:0x7f84e078e929 [ 74.103310][ T6021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.103320][ T6021] RSP: 002b:00007f84e1693038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.103330][ T6021] RAX: ffffffffffffffda RBX: 00007f84e09b5fa0 RCX: 00007f84e078e929 [ 74.103336][ T6021] RDX: 0000000000000000 RSI: 0000000040096100 RDI: 0000000000000003 [ 74.103342][ T6021] RBP: 00007f84e1693090 R08: 0000000000000000 R09: 0000000000000000 [ 74.103349][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.103357][ T6021] R13: 0000000000000000 R14: 00007f84e09b5fa0 R15: 00007fff51dbb618 [ 74.103380][ T6021] [ 74.103386][ T6021] ERROR: Out of memory at tomoyo_realpath_from_path. [ 74.355389][ T6007] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 74.363254][ T6007] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 74.371581][ T6021] QAT: failed to copy from user cfg_data. [ 74.382924][ T6007] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 74.402222][ T6007] comedi comedi3: 8255: I/O port conflict (0x200,4) [ 74.441150][ T6007] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 74.453458][ T6007] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 74.475131][ T6007] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 74.482157][ T6007] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 74.491169][ T6007] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 74.501246][ T6011] ------------[ cut here ]------------ [ 74.506893][ T6011] WARNING: CPU: 1 PID: 6011 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 74.517146][ T6011] Modules linked in: [ 74.521191][ T6011] CPU: 1 UID: 0 PID: 6011 Comm: syz.2.17 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 74.533069][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.543210][ T6011] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 74.549968][ T6011] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 7b 3d 7d 0e 00 75 0b c6 05 72 3d 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 74.569746][ T6011] RSP: 0018:ffffc9000481f908 EFLAGS: 00010246 [ 74.575828][ T6011] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 74.583779][ T6011] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000040dc0 [ 74.591801][ T6011] RBP: 000000000bec8b18 R08: 0000000000000007 R09: 0000000000000000 [ 74.600101][ T6011] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000010 [ 74.608347][ T6011] R13: 1ffff92000903f36 R14: 000000000bec8b18 R15: 0000000000000010 [ 74.616471][ T6011] FS: 00007f50ccc3f6c0(0000) GS:ffff888124822000(0000) knlGS:0000000000000000 [ 74.625422][ T6011] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.631994][ T6011] CR2: 00007f19471fa990 CR3: 0000000029ccf000 CR4: 00000000003526f0 [ 74.639984][ T6011] Call Trace: [ 74.643251][ T6011] [ 74.646229][ T6011] ? __lock_acquire+0xb8a/0x1c90 [ 74.651171][ T6011] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 74.657550][ T6011] ? do_raw_spin_lock+0x12c/0x2b0 [ 74.662572][ T6011] ? __lock_acquire+0xb8a/0x1c90 [ 74.667520][ T6011] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 74.673144][ T6011] __alloc_pages_noprof+0xb/0x1b0 [ 74.678180][ T6011] ___kmalloc_large_node+0x84/0x1e0 [ 74.683361][ T6011] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 74.689027][ T6011] __kmalloc_large_node_noprof+0x1c/0x70 [ 74.694642][ T6011] __kmalloc_noprof.cold+0xc/0x61 [ 74.699915][ T6011] comedi_unlocked_ioctl+0x1757/0x2e90 [ 74.705723][ T6011] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.711616][ T6011] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 74.717448][ T6011] ? do_vfs_ioctl+0x523/0x1a60 [ 74.722194][ T6011] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 74.727251][ T6011] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 74.733755][ T6011] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 74.740343][ T6011] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 74.747261][ T6011] ? hook_file_ioctl_common+0x145/0x410 [ 74.752817][ T6011] ? selinux_file_ioctl+0x180/0x270 [ 74.758053][ T6011] ? selinux_file_ioctl+0xb4/0x270 [ 74.763251][ T6011] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 74.769138][ T6011] __x64_sys_ioctl+0x18b/0x210 [ 74.773892][ T6011] do_syscall_64+0xcd/0x4c0 [ 74.778466][ T6011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.784445][ T6011] RIP: 0033:0x7f50cbd8e929 [ 74.788870][ T6011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.808839][ T6011] RSP: 002b:00007f50ccc3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.817495][ T6011] RAX: ffffffffffffffda RBX: 00007f50cbfb6080 RCX: 00007f50cbd8e929 [ 74.825488][ T6011] RDX: 0000200000000000 RSI: 000000008010640b RDI: 0000000000000005 [ 74.833449][ T6011] RBP: 00007f50cbe10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 74.841425][ T6011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.849419][ T6011] R13: 0000000000000001 R14: 00007f50cbfb6080 R15: 00007fff9928df88 [ 74.857622][ T6011] [ 74.860636][ T6011] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.867913][ T6011] CPU: 1 UID: 0 PID: 6011 Comm: syz.2.17 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 74.879714][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.889754][ T6011] Call Trace: [ 74.893028][ T6011] [ 74.895946][ T6011] dump_stack_lvl+0x3d/0x1f0 [ 74.900527][ T6011] panic+0x71c/0x800 [ 74.904451][ T6011] ? __pfx_panic+0x10/0x10 [ 74.908861][ T6011] ? show_trace_log_lvl+0x29b/0x3e0 [ 74.914052][ T6011] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 74.920122][ T6011] check_panic_on_warn+0xab/0xb0 [ 74.925062][ T6011] __warn+0xf6/0x3c0 [ 74.928974][ T6011] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 74.935043][ T6011] report_bug+0x3c3/0x580 [ 74.939382][ T6011] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 74.945450][ T6011] handle_bug+0x184/0x210 [ 74.949762][ T6011] exc_invalid_op+0x17/0x50 [ 74.954245][ T6011] asm_exc_invalid_op+0x1a/0x20 [ 74.959084][ T6011] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 74.965752][ T6011] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 7b 3d 7d 0e 00 75 0b c6 05 72 3d 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 74.985343][ T6011] RSP: 0018:ffffc9000481f908 EFLAGS: 00010246 [ 74.991398][ T6011] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 74.999361][ T6011] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000040dc0 [ 75.007322][ T6011] RBP: 000000000bec8b18 R08: 0000000000000007 R09: 0000000000000000 [ 75.015277][ T6011] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000010 [ 75.023237][ T6011] R13: 1ffff92000903f36 R14: 000000000bec8b18 R15: 0000000000000010 [ 75.031200][ T6011] ? __lock_acquire+0xb8a/0x1c90 [ 75.036127][ T6011] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 75.042466][ T6011] ? do_raw_spin_lock+0x12c/0x2b0 [ 75.047485][ T6011] ? __lock_acquire+0xb8a/0x1c90 [ 75.052418][ T6011] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 75.058035][ T6011] __alloc_pages_noprof+0xb/0x1b0 [ 75.063052][ T6011] ___kmalloc_large_node+0x84/0x1e0 [ 75.068246][ T6011] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 75.073857][ T6011] __kmalloc_large_node_noprof+0x1c/0x70 [ 75.079472][ T6011] __kmalloc_noprof.cold+0xc/0x61 [ 75.084505][ T6011] comedi_unlocked_ioctl+0x1757/0x2e90 [ 75.089968][ T6011] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.095836][ T6011] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 75.101633][ T6011] ? do_vfs_ioctl+0x523/0x1a60 [ 75.106396][ T6011] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 75.111426][ T6011] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 75.117916][ T6011] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 75.124404][ T6011] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 75.131242][ T6011] ? hook_file_ioctl_common+0x145/0x410 [ 75.136777][ T6011] ? selinux_file_ioctl+0x180/0x270 [ 75.141961][ T6011] ? selinux_file_ioctl+0xb4/0x270 [ 75.147060][ T6011] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 75.152854][ T6011] __x64_sys_ioctl+0x18b/0x210 [ 75.157625][ T6011] do_syscall_64+0xcd/0x4c0 [ 75.162115][ T6011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.168003][ T6011] RIP: 0033:0x7f50cbd8e929 [ 75.172420][ T6011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.192010][ T6011] RSP: 002b:00007f50ccc3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.200400][ T6011] RAX: ffffffffffffffda RBX: 00007f50cbfb6080 RCX: 00007f50cbd8e929 [ 75.208356][ T6011] RDX: 0000200000000000 RSI: 000000008010640b RDI: 0000000000000005 [ 75.216324][ T6011] RBP: 00007f50cbe10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 75.224288][ T6011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.232267][ T6011] R13: 0000000000000001 R14: 00007f50cbfb6080 R15: 00007fff9928df88 [ 75.240252][ T6011] [ 75.243527][ T6011] Kernel Offset: disabled [ 75.247836][ T6011] Rebooting in 86400 seconds..