last executing test programs: 2m25.877911922s ago: executing program 3 (id=371): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x23) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x380455, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '\a\x00\x00\x00\x00\x00\x00\x00\xc9\x9a\xd0\xde\xab,'}}, {@euid_gt={'euid>', r0}}, {@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0x0, "ce0edfe3181085c23e75a96da420cfa0c88d3f4ecf5ebc10d54e511ebdb8b8f6", 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000340), 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getdents(r3, &(0x7f0000000180)=""/75, 0x4b) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 2m25.828286161s ago: executing program 3 (id=372): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @remote}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x4, {0x2, 0x1000, @broadcast}, 'vlan0\x00'}) capset(&(0x7f0000000080)={0x20080522, 0xffffffffffffffff}, &(0x7f00000000c0)={0x3c, 0xffffffff, 0x3, 0x5, 0xff, 0x4}) 2m25.82792225s ago: executing program 3 (id=373): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000180), 0x1000000, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) pwritev(r2, &(0x7f0000000080), 0xc0b6dc348f142c7, 0x46, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r3, 0x0, 0x0, 0xfffffeffffff3fbf, &(0x7f0000000140)={0xa, 0x4e20, 0x3fc, @loopback}, 0x1c) r5 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x0, 0x4, 0x7, 0x8, "74a6f0d92a934ae5027c8d63be423ab98a861a68314dfb9d7c232526f89ba2288102b95d35fce61be32860f4b479682609a1eead732aa56f8af3b6be1f231c82", "1e8e7e135c27e01795acec72893f299322ded3d3967b9acf44ef6976552c1e3a", [0x175, 0xb1b]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x189e, &(0x7f0000000080)={0x0, 0xffffffff, 0x10100}, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r7], 0x1c}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x600) 2m24.928259263s ago: executing program 3 (id=374): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}, 0x1, 0x0, 0x0, 0xfffe}}, 0x26) mkdir(&(0x7f0000000380)='./file0\x00', 0x5f) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1121893, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='wg2\x00', 0x10) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x29}, 0x5a) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000800)={0x9, 0x2, {0xffffffffffffffff}, {0xee01}, 0x8, 0x9}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000940)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002a00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = getpid() sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)={0x34, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xf3, 0x0, 0x0, @pid=r9}, @nested={0x9, 0x31, 0x0, 0x1, [@generic="338ce166aa"]}]}, 0x34}], 0x1}, 0x0) lstat(&(0x7f0000002a40)='./file0/../file0\x00', &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002b00)={0x0, 0x0, 0x0}, &(0x7f0000002b40)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) prlimit64(r12, 0xf, &(0x7f0000000000)={0x3, 0x8000000000000000}, &(0x7f0000000080)) r13 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000002b80)='./file0/file0\x00', &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="dd563ba3136d42ceaa610252f996fe8f4a30f73efdf7a1503e13f3c68247481160cc37213bb897e762c021f365819fd752984c730f337e15d1a2210c9959b3fb21caf4fb7bd64918c936c3f34be23f0113ecb9b7c01978a4bfa28f33b420da93a43649c5634afa07ad1ec575d8fce14d09d5c748a92ceec7bfde1adf320f587e129e0fd59f58a05a5464069149208459e10dfe15001f58597914d71ae6cdec472aa39c39f2ff8b2ac5bb63419b3b28c67e0679d98ba8cea47067eb6a257f045a61", 0xc1}, {&(0x7f0000000540)="62b741a6c1cdcd2cd160b5f2209a008e3545fd79c7e83eb3f7d4b05d300602ff486f1a17f25fce2b31194b3191a37592c53405cfde40cb23c0e38d3078336bc130fd247e09089f72e7a3a02fe836210fec2ead91fc8f4b1676b0268469b4dc4b07603cff9019ec48c8ca681b05d3bfabaad7d1802a0935268fb791e213dab137655ab380754b8ce2913ee52299576b1a5465f178ae78849d1bd4fec35227a23012c15fead5c26dca750872badcc87a7631deaa4b44ad4e065e92974507cfd680eed23802a33cf15a0e230cf7ef40e9069041", 0xd2}, {&(0x7f0000000640)="7ba2c807a25568ec867283d13e2db73fbe0c41fbac25415745f5b07786b9910ac96eaa133af2103027d3219b379092e221b43e9aac52112961d8298baaaa36bdcd7ac459bbf3417e3713dffe3840540c576b5e5019df7d91407b736c4800906818012cd41c8fa2d935abf3e0979d56630e5282ae7e1ddb409b3216aa43296061c3745638bbf5b9a4465ad41bb56ea6ea72edcfe90b13092dfdddb2be6a13d1c8d7066686a61999cb6b1e03e79906229250b11948985c1a5484ebc5607aaba76db2a3d96c1200c379d5fa7f8797349cd9b1cb7d34196349f34a66a027b3129efec989f012bd1ad28713e9b62ec9c60c0c65a0b488fd6aeadd53", 0xf9}], 0x3, &(0x7f0000002d80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x100, 0x800}}], 0x1, 0x4040010) mount$bind(0x0, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x391070, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240), 0x100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) 2m24.927957947s ago: executing program 3 (id=375): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000002c0), 0x2200800, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f00000024c0)='./file0\x00', 0x105c42, 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000300)='./file0\x00', 0xc000, 0x31f) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000f00), 0x600, 0x0) ioctl$sock_SIOCINQ(r2, 0x7040, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}}) read$FUSE(r4, &(0x7f00000025c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0xfffffffffffffffe, r5}, 0x50) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00', 0x0, 0x0) setresuid(r3, r3, r3) write$binfmt_script(r0, 0x0, 0xffffff3c) 2m24.667683788s ago: executing program 3 (id=376): r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) socket(0x1000000000000010, 0x80802, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) (async) 2m24.634873753s ago: executing program 32 (id=376): r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) socket(0x1000000000000010, 0x80802, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) (async) 2m9.98750747s ago: executing program 4 (id=586): r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x141000, 0x129, 0x21}, 0x18) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4a8ace5d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}]}, 0x28}}, 0x4000) (async) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x100) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f00000013c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001380)={&(0x7f00000002c0)={0x108c, r3, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_IE={0x19, 0x2a, [@dsss={0x3, 0x1, 0x70}, @mic={0x8c, 0x10, {0x6a1, "90b5576c34e8", @short="c7618e935e56d4db"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_IE={0x103a, 0x2a, [@measure_req={0x26, 0x1003, {0x81, 0x2, 0x1, "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"}}, @chsw_timing={0x68, 0x4, {0x10, 0x6}}, @ibss={0x6, 0x2, 0x2}, @channel_switch={0x25, 0x3, {0x1, 0x7, 0x8}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ssid={0x0, 0x6, @default_ap_ssid}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x22, 0xf2, @device_b, 0x4, 0x0, 0x29}}]}]}, 0x108c}, 0x1, 0x0, 0x0, 0x880}, 0x8000) (async) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000001400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb65a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x0, 0x6d, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x290}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x6, 0xd}}}}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x300, 0x0, 0xf9, 0x6, 0xff, 0x7}, 0x3c, &(0x7f0000001480)={0x5, 0xf, 0x3c, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x3, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x1, 0x100}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0xd, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x88, 0x7, 0x8001}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x2, 0x8700, 0x7, [0x0, 0xf, 0xffffcf]}]}, 0x2, [{0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x1004}}, {0xcf, &(0x7f0000001500)=@string={0xcf, 0x3, "5d5a38779ddc2f5caed03c435b70643dad6657b6d5e0fb29fcc4f9b92e0427fe8792af5cfc91f5aa5431960dab50db9222b1f5ac7f1e11666d2c1876838ac17eae5aa469700c135d249f0d38cd248f09a280e6edb9ba2eaacd5e5a8697fab8484a7bfb44001f5ca54594d30806fcbff0872e243521c8548e5647c8e0af33214c6c5e2d65602b3643c47e21f4b84c44b632cb39b51e0c5bb68749d4d5fd44298adffbedd370de8b49688820b65f9a49bebabf9d99fafe04f21c22bd5e4f515d5e18f4274ed88455ac12727e22c7"}}]}) (async) ftruncate(r0, 0x100) timer_create(0x5, &(0x7f0000001780)={0x0, 0x0, 0x1, @thr={&(0x7f0000001640)="05d2548a3e9fcfe3990b68058a73f712624d0a59bbbfe0", &(0x7f0000001680)="7537c805039bb6d9b384950a26a3dbc8b100a0449fdc902ce46f391ee8558dc6d71dd18a1616e8bb91464376d6b8eaf4f82cd833b5787d330e05fa30e9d4d7e41943c95fae991867254542e000182382693e80fe7ec44e108d53ed83a057ff002973c2900169eeab667084e928be0aa191382932fc11714b2cd606bb6151d8656664b8b25d7eac89554fa73b3dca61f0f3325c838acdb118959c1b1aacd75e1cbd826b9a659bd22728f2f2840cdf91048640cbfd0ced6eca79736e91db2565738f04afd23621d588bc0b89f796adfd4f0b490cf02693c97d38a64433511faceaa3301334"}}, &(0x7f00000017c0)=0x0) (async) clock_gettime(0x0, &(0x7f0000001800)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001840)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000001880)={{r6, r7+10000000}, {r8, r9+10000000}}, &(0x7f00000018c0)) sendmsg$nl_generic(r2, &(0x7f0000003d00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000001940)={0x2380, 0x15, 0x100, 0x70bd26, 0x25dfdbfe, {0x13}, [@generic="bd29a5aa46d6e6b0a3f4773443562d1d2fa87c7dc440a4ad037d2613d2b5aaabe12a8c97a4142775b32e9c5c00701efa263e0afcdc1c3c9842a7fc0557fd6c89e4e32df489960dd5c49d22231be458e58e955095eb221814c3ebb1aa6c15b59de21a1885f0e69d338947bbffff93770e09d6e60a29bc778a2c15ccd449ad5d96bb78bff26c", @generic="7e2a8beccaf65d49ba4713632759e53574ed4a794c9c30da9fa4d4a0a387684751f38969ec0e3eda17e4ae1ef6d125098d357b058fb651a884d07dbaa7cda103ca5df362a55dc4cb495ed29bed608c76f08c0a2636643cf7e043da65fb3be84ef29b4014233e0140eec468e4edd545a5d288b6f3d5466beecfa0ce1e6aebbee12d33784fc4f1f9ad903aecb4610676be790c718f3a15abb75ccf785f16d0a9aa387675387620c00366a00a7e7b1a4cef7ab6ca5235b3f5b4054ce1e5c48d1cdcdce2838c", @generic="a6a8cd39bbbb61b4df5fdab30bdeac2a9c5c644e3a8ae34ff04879642edd7a1ab0cdcbeff0690929679237e0d46624d8b9ef0aef098d93faf888aad91ae4d6004b1a5ccfbff295a6e6547f9479983066e133e3061d04b8920f6870febbc47872379500f5ad050aeb20f9ae72", @typed={0x8, 0x1, 0x0, 0x0, @ipv4=@local}, @generic="022d1e25536dc231a7dcd665500d9d2ff9c58acd4fb75056", @nested={0xf5, 0x135, 0x0, 0x1, [@generic="b0d7aa88bc683fd88a40982129bc159ddf498b3885716533f91f5196f91b7f700decb02120bf7b090d1cd216d519387a963c528d0f048fe288a6a56a884fae7d597199e5af5836259dbbe8e7176430846a84987a71713b3dcb09387193c03f4e403ed6fb3d8c03675d486750b6cf546753c12ad04d778091a11158d3d70ff6610cc95a45d8e2137b2f91526e6e8c36e38726fcda5a639404917edd962f93e144841ffef7f907cc26c92b3d9f84af3018515fe52e47505955006b6a8477a3af5df116f4778378f1401ccd55fa191b6bd17a155552ae86e593a33e7467b5ad71c9695067bbfc5fd9cb86742f9759ec4cda7b"]}, @nested={0x209c, 0x6e, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @u32=0x3}, @generic="5d5c0cc640d2918caa92a923dbb96170e7a368365802ad8711ffaa36c1b671809fda6749aa11e62f0938be963f6185b15fabf2ef6eff973275ae8512b95051ddc01453710eecad83272b876e86ab735ce2555e118270dcc027869585ba2e0d77ca5cf7ef253f769ac905944561005164bc02d98708608b654567490c0dc42629be38f9e324dac9c9e3a70257a48b8d9de5d8dfae5181f9946081c8943a38254ad9dfcc5a42a5081f2311e16c85f708b268030bba0adfca443882825c888e7359c6be02d5900c15ce5e47f8e5ec2ae221419eefefbc0ad0ac48891496a1234072aa06ec6cc67efdd97073d122dbc7d56bb54116a9b5e27e4ecca2b5f421c94aed0581bd1e4f941185437b3b3e88592077430a6116b261cc3ffee085eb81c1d0b520f7b25239da8fc58a3e1dcf8a2f79a2287bb1cc99b8ae1629cec38be6f7b2dcefc34b6590c67494acefa036e963d90d4500ecdeb2a70ed7403cc966b811e4f9ce48895730d406d6dba7f7a3716a502d364665050bf7554cb301802a82b48e60694be4612daeca14b4f3e4a27da6aad581f45e979e0cc1e12d132c6ddb3c05fe0e2016aab889f28d549fd009d3113462d7dc462aa2a9f6beef7779352dafc75629e994adcc62b3a2542ee48e26e2d44c3bd9393267e37a845a952b800be8053c84d5a3806d99a0ff4029ce99b5a01b397a762cb597031e8189a18c2382c0f61dbc0f9716151f66f5f17c00a70a1641ce66f7c2d9eba48f2aa0ae4cb553ddabcffd299d045427c882ed70a9ee3ce87ccc14f9c339c76972e8b1d619998b9915fcc63c8aacf668f0d732ec89aba2f0f616955480d10ea40b330b7204c1c160b1366952c62db14433b969e960a4201a82cb9c367ee15add5b18d586deb95ae3ebef079d8f1016f1275e847198c08c0865ee0c5b3a5360c4e040c23a059df2ce836ae9d4666d834c90e80db582b2194f99e8536d31991b95491a13ea248a38e088ffbfcfcb6b691944bfc484bdda357e13845803709d0d58c8f8099d3bf1524c0b928434bc5d0c31ac5e2c5ceccf0c9986ea156484f401672d018108be09d1dbeaf41946d06f5b9f2241926a0d111a8a725e20c8c9a1f6e0649e7874d988357e70078c69cc52e50173ee71999438e036ffec6dec185a0f25d3100b01064b127c5a27d3016589b7c443e35c83f9f4606105cb3ddce63f8e75b6bc79e7e0ab75eddefb985272d066202a4faf47b18d1ae2d7f541cb68798e7e843199eed5e166f0cfa2c34f89b8bce9a2e656f25568e8d485136bb96a29c8c407502c48fc7eb73fe454b157c0ca19d5598c306371ef00ccdcc96ad6b318159123d125d61c3bc4fd486730dcc5626d226b24c10a8d96f5880ebf4524d4d663be65f7c144ae408ec4df7ccf3d649e4bd86c7cebed3fb898fc218d86e3cc5a6acd12da7258c9c80c1297950b2b0f3c7df4f482a05212911a063ec2d15f707319515e12b90c9f3ac0e2e09c48b5759504a982b9cd5c02ff6b09caace0c69b33356086cd839c1aa021e57384c2116d86f4b025133ada9abceb2eb5d59e00b6fd8cd546cc84e8a67bb5567fc1dad5f3fb5ff56ba839798eebc2b6bb45f25b2c5e75f54acbfefbfc056bc6b1d41fdfd0bda0570072a243dd11cae3bde49b868850212ed254bc708ce102fdd04c50f5656191b99c3a3db6f49f6fad5679a93229cf6f250965ff3525324fb202461b3104645d484b8cba867b3c5546c9e59eafbe1f3fc93a40aa9fc3e879e078165cd535eac88a1dea6859053b48f3b2ebd70a90c5632c192fb7f18b32871c670b62ec504fa7fbb61f8ff40ae217a5fbeb033dc42ad1c70e086cc5dd4a71a206fd919ccad98c5d11229676e6d5b9d367399fb85383edcca28c56084e554c769c4ee19d23a864e2beb22a706b2739a8cf88e846066fee21b1a71cf8e36c97d623ce1b6f70129daf17d93792fac10628b5a089a377e9dbc494e41c1202c46932be48aebfad1160e8e3bb659334dc3b6ab21fc13839dfe373680b73a88ff08d250a90e5010f3f1564112fd7b664ed4207c80e283635f4d7487516221d62698d4ea9efcc1c038fef9a75b8acb0c2401426a8431184aa93e2e17ae57b8f67e12d25e98c3427687b09e2b091330008acbcfff4e3cfc7fefeafd0da4a3265d8bc7a2c48644398d5a99abcb9499228e08bfe63e6d1e2150565e1caccdcf5ab30cee0600d2cc8c89f324c3cebcf12f95cd2d37f624b2266732e98f154d26745b6759a984f367604569f5b59498d7a96c1e7526e032232adf88e7577bc300af438783ad13ddbb4f7828463e2a352f92e89fd73d598f42e8ce38964fbc1d0e5d7cdbaa4e6c4fd55ff397b935e7d61401f126dce33de9f0e4af3e372e6b56758803356c2aeee75312fbf2d900887a2e60e647a1e43faa9919cff9b155b3196187e311944c1c9a3e31b3195ea42f0af8fb109241f49939b4af87b7884396573b4a9b52d06c6fac722e1424beae2531c2859a132c4eb0a8512bd7889aadb366d01c0e10aa98c4b44d9342990b74c0a170026054769d1a6f1966c6845cfa322b87eb75a2f3e01aa0203e77a62ae2c57876271e88615aa45abdb86e8dffc877d966fd6e1d5b34b95bf2057513cb8b5dbbd2b6c81ff694c84274106cab9cb7588007f05c94804b979650f82fc9f8a2c964c2515d7501e35bc40187821544b72eb1017d779fba079d22a91f9666fe7751e5847cbad868e0b2064b6a982274835ead46a8f755ee46a82c03c32f257c53198dfd7c4a76dfe9237d6bb379ead4f41b0a39ac97bfc504111151801af9c4a2c346829123f3742fa6153465b050d5a7e260dc192757357de91425bf80adb6068f5cb06e986f198b9e5bcff5cc126be52eec7c5b7492e57cf7cef8722fd8deebb0b0e2366ad2412729b747a0f2900d82d622d35638f929613c0730e9afb57df445ccf6941f76f56e645bb87ad7a5d442811d217ca5316acfe377ad34302f1c1ac18b09677829ed5a72f65861f55000c93ff0e220328fb2cb1b0c7c017b0657685be1b285f91c7acea8b5c7b14e8de6a56088cf856e4b7b02b618509b7ab6e913742fd0a73a94c7b02c5f5900527ff613c48859efe41471fde4296690d48de8191c3646a2c77c7cce88db46d35c168ce8261a2d3103ce13e3c6debcd3ebc0290f394aad224c7eed1e83640a2fb8b13980cfd1a3ff6cce31e07f8b75280d7986bd8e0672cd3ff44a7367da08c4edc7cc116d04d4b3a3f48a0862e16ebbf8a512f45f4d5d62a32687151780d8c86bd12e92052238c5480f1e5dc157f8faca41443c8dcf2de3f87afdb29ae0b6b8912809145b710791f6efd3551ae689dc9f8654097453a2cb8fc1701b68449374bcdaccdf8191a7178822c2a20eb089ab0af0c4d17ab0035274b92cdd3a34734285c7f09993e3dd2838fcfc956ec8f44f576970bc1de6bfde0dcf961f6d73c0bf197a7f50ecdb1d4ec495c9811c1e64ce141dfb43dfa73f11ffdaa93a305839c33c714530a92426a33747b81464e9c376ad44b9465ce87b7aa605a16fb7d8564ef9207757b03ac814b1f6868a413c739096b7289b66545e6ed7d5aef3e6bae60d5a71fce56ac4bf7a232e4af2af6b9d27ea6a2ad5af6a712f2a83edad75cea4e896cd993dfe98f9f512682a98367910e3b23083f1d887b35cc8cc2ec472f5cda95baff926ad69e8454b3df8d6d6b0a03756473e98711bef9ff1006b61b0daec45fefb7b82f5f0af275e654e77da60b6b34d9bc68d8063c801e9d959ec5946517c3b0873aaf44e163c5bae1a58d46b1e12f803cc36568a77ec9f3e6b60e12733dbe53bbc01d94f53650f788f89970aa800ee358530ebf6429568a1f04c7764805a2e24e73b44c1c771a1b2a5c446bc59a4c983d991225baa2fbfb21650da2c9b120493ea19df1c6dd9b6211867880863d0f5d233eb7790d1f2b989b6b2d9aa3cd6008cdafd13b034327349c3831d4d5bba9b329b192bb17776e6afecc3cdf63ef93e674240ffdc9b84ed4e77b48c32a280a8cfdcc2889bbb36640f86be0c30a8c994fbb143d38c87102b0abc9e4fe82dcb12e25d773d1027284985b150a0df858dff22689b9d55cf93948b08de531f86d4eb11efdac04353524dd58a55f8b33912947c2dcbafc939001108372b3442412bcd7f45016a12220eb74950b5498b13bf4b012817b75e1c7edc629376477b03d362493530558c0ae3268f93f7ce2a8f64ebab1506d2830ddac83b540efd010f8b5af2f651eb58144c3ace8fd008c9feef7cba1d7d74ff73e32cbc478529ce6bf27b754008008efa7ba95c4075eb58c78d4b753320c694df9698830ac2d13e6840e40bc0aa9452d2241d2c8403eb5710982bd073343d5254aece9eb441bd916cec3df7bdaf397b57419a9ebe2f8cd281abb110178d0d40b07d3cfa89d7ea8fc13f70cd97279821eb6ee5c9fe935925f5784d1fc7c84bec9a5a46847850cc4e077fe82a0817f61e74fa1782388eacf7f82da2845fee63ca3875ba787db0df0996eb43187e06536315f1dc3fccaa1101fb9ccbc6a5e27b42677d4cb0203775e9c279f679999923a6fe1d8f47d4445123c0f2deddcc2b2104b3695864f77e6874edccf0a228a57a9a94f7a42217ad455e8d4a93de9dea9ff1946ffa4527643b16ece6e338f07407fcdc0311881d38bc6d9a512e2787294763e409f438e5d7808359a5c2d0b62f17092a484898cf822761989675cb37156c6bd473d6b2e0dab0450bda2c0571958fe7721460d4ff9e7e48a3717028118cbba7451d72a3063637f0b3778df50b8f2def436a06e3ad63721755d1bc5bbabae7cc645ea8b95d1be0a4e080bad838e379b35380fa235836470b3745e73a6af7e4919362388f36b4c15f88a0fd7f56d88a2ef0ac85413679e177d33be7046c4182ea83310c88ce0c924ecd1e7f293dd302a27aa0f2fe00d106fb77c1ac6f0526fef33a82a888162763e7f8bc14ceb89c6e8457013ed2caf021919782491e7dd86ea3aaa5ffdb4d5bff967a4ac9d8e0080cc2005ba94b0a60ff5ec627f80b50a7c2247bb875a4fe54b3c040fc9a6357eca552471a898820a4020ff83550d7e788b224d3f2739c97bc8326ece3996c2d127d70b80f425682e994af2488943972f684f3ca9ec0b86a296cea4b1ef6b020121bb622ee79c328e18f0f8dfefcb115c213fd85ebfd01a68e91ea6849dd8cf64f0db9f0717b2cbd3873013d0c612e0c6645ce62121fbe6505c7b3e7753d94d9a4634be33e00f6bec38742fb39b114fc54193aac3d971f191109b2a753f97e2bf4636e49790b0b2c273297c71a2e46e189bf9cfcb1356b4edd1f1e7b5feba4870b4573ed5214d116c31f6c159b3064ad2c56970a1179bc8399f9b88cea9ab714d13b74a576e5cc756e5dfb3346116fcb5b5a643f4d0bd982705ab1d8cca181a4845ec031faf059f94f8874c31fda668e88f158bb9f8f80f68928ffdce8e7797d5213471c88149b49ed1b007180c22756cd1401e0a25469cace00819607b194ad7ae36106ec26edf12697073b79467de977760fb017175f9aa974e8b540dfa2e03cdb4e45ce74bc93dde03a70de15049262bae23dc7346c076d7d7eeb5911d2b39c5db7e2c2f71f4ce35e6b3557ad4f21954bb85955d1072cf6c44aca793ecc941a336ca4a31144729b385f8453afa43913c0c7ccf22258171ccc232871e2573a5b3d031de6e49da195d85664529a56ac6b9ce8d625e15b85e812a80d030a874d275b57338f62a0367501ccf463ef06f8a7cbbeb5a20fb3d917ad2b0", @typed={0x1004, 0x12a, 0x0, 0x0, @binary="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"}, @generic="8a61ec164a3e971e0c55721939675c5ebdd1f7782134b22c853b3b5ab751cbe1db285e0ab3418ca7274c254120884e5f58a42874c30fb24023c11c3b6bb7900b57fd507ee1374cbcbf5df5d4d7783cac229914b98c789a966b7ab59bddd68de853caea92ae9a02feccb33897cca12228d8f2f6b40a75320b2ae06ee209fe21e65b171ca70ad2ef1f0869f0a2"]}]}, 0x2380}, 0x1, 0x0, 0x0, 0xc0}, 0x4000044) (async) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003d40), 0x2, 0x0) read$FUSE(r10, &(0x7f0000003d80)={0x2020}, 0x2020) (async) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000006240)={&(0x7f0000005dc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000006200)={&(0x7f0000005e00)={0x3d0, r1, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdf}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x33084092}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x50000}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5a7a8e87}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5ed}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x274}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "acd4c40fdf7e0cfdfa3f28520cdbbf4da79f2fb52a3c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "873896e694b53f5068c619f657967045e5bbd3ab0d31b8b3a42eac204d83"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "76e2a086cea1c2f843eb7ce1faacc2697da4a5050923e55000866e5ecbd9eda1221f1a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xaa, 0x3, "d250a89d614849b7244b1fe1177151069d2ecdcf88873e8bdc7cf2ab4c6165b1c247af2495ba6c245d6f410ea25cd4f3a117ee07e3f6c46bc3b8e47b8688df34e17776cd17f2617fb8dffbaa6d65c2adb97bca29577877305e53fd2932bf3f3b81123f43d8a531e1df335e48c2319a1ed4c381726e184fa379a374d401d001447244fba247e5825669000fc6d86f96bcf684d24bac44b6d5b7b1a1077dcc2b24f905abf034ab"}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf418}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x64b}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000080) (async) syz_create_resource$binfmt(&(0x7f0000006280)='./file0\x00') socket$kcm(0x29, 0x0, 0x0) (async) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000008500)={&(0x7f00000062c0), 0xc, &(0x7f00000084c0)={&(0x7f0000006300)={0x21b4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x72}}}}, [@NL80211_PMSR_ATTR_PEERS={0x1944, 0x5, 0x0, 0x1, [{0x3f8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x184, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x148, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbe5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x3d5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xad76}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x198, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xae}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x2e4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x18c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x317}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xbc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x848, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x458, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc20f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x42}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4c}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x42}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd33e}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x50}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffd}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x21de44c5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x254, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe0f5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdc2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3a}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x300}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x293}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17b}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}, {0x414, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x268}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2dc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x62d7e828fe4175e5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x164, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x740}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x64, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x74, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x59}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}]}]}, {0x2cc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x144}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x224, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x11c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x200, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1cc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x174, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x30}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x90}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x848, 0x5, 0x0, 0x1, [{0x410, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x31c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ab}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x2b4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x210, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x114, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xf8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa58b}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x68}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}]}, 0x21b4}, 0x1, 0x0, 0x0, 0x4}, 0x80) socket$pppl2tp(0x18, 0x1, 0x1) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000008540)={0x27, 0x3, 0x0, {0x0, 0x6, 0x0, '\x02\x02\x02\x02\x02\x02'}}, 0x27) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000008600)=[@text32={0x20, &(0x7f0000008580)="b9410b0000b8adce4124ba04edef690f30b8f98f00000f23d00f21f8353000000a0f23f866baf80cb83c21fd8bef66bafc0ced26640f01c4260fc72ab9da0900000f3266b822018ee8c4c17811d20fc73b66f30f09", 0x55}], 0x1, 0x3c, &(0x7f0000008640)=[@cstype0={0x4, 0x7}, @dstype3={0x7, 0xb}], 0x2) (async) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000008680)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x9f, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xc3, 0x6}}}}}]}}]}}, &(0x7f0000008780)={0xa, &(0x7f00000086c0)={0xa, 0x6, 0x0, 0x1, 0x7, 0xf5, 0x0, 0x6}, 0x2f, &(0x7f0000008700)={0x5, 0xf, 0x2f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0x80, 0x4}, @ssp_cap={0x20, 0x10, 0xa, 0xcf, 0x5, 0x5, 0xf, 0x6, [0x0, 0x30, 0xf, 0x0, 0xc000]}]}, 0x1, [{0x4, &(0x7f0000008740)=@lang_id={0x4, 0x3, 0x42c}}]}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008800), r0) sendmsg$IPVS_CMD_NEW_DEST(r11, &(0x7f0000008980)={&(0x7f00000087c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000008940)={&(0x7f0000008840)={0xc4, r12, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xdf4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffff60e}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x801}, 0x4000) (async) recvmmsg$unix(r2, &(0x7f000000bf80)=[{{&(0x7f00000089c0), 0x6e, &(0x7f0000008bc0)=[{&(0x7f0000008a40)=""/117, 0x75}, {&(0x7f0000008ac0)=""/239, 0xef}], 0x2, &(0x7f0000008c00)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000008cc0), 0x6e, &(0x7f0000008e00)=[{&(0x7f0000008d40)=""/151, 0x97}], 0x1, &(0x7f0000008e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000008ec0)=@abs, 0x6e, &(0x7f0000009440)=[{&(0x7f0000008f40)=""/183, 0xb7}, {&(0x7f0000009000)=""/19, 0x13}, {&(0x7f0000009040)=""/199, 0xc7}, {&(0x7f0000009140)=""/220, 0xdc}, {&(0x7f0000009240)=""/184, 0xb8}, {&(0x7f0000009300)=""/55, 0x37}, {&(0x7f0000009340)=""/42, 0x2a}, {&(0x7f0000009380)=""/176, 0xb0}], 0x8}}, {{&(0x7f00000094c0)=@abs, 0x6e, &(0x7f000000b7c0)=[{&(0x7f0000009540)=""/4096, 0x1000}, {&(0x7f000000a540)=""/60, 0x3c}, {&(0x7f000000a580)=""/4096, 0x1000}, {&(0x7f000000b580)=""/122, 0x7a}, {&(0x7f000000b600)=""/71, 0x47}, {&(0x7f000000b680)=""/26, 0x1a}, {&(0x7f000000b6c0)=""/193, 0xc1}], 0x7}}, {{0x0, 0x0, &(0x7f000000bb40)=[{&(0x7f000000b840)=""/136, 0x88}, {&(0x7f000000b900)=""/82, 0x52}, {&(0x7f000000b980)=""/23, 0x17}, {&(0x7f000000b9c0)=""/247, 0xf7}, {&(0x7f000000bac0)=""/126, 0x7e}], 0x5, &(0x7f000000bbc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{0x0, 0x0, &(0x7f000000bf00)=[{&(0x7f000000bcc0)=""/246, 0xf6}, {&(0x7f000000bdc0)=""/11, 0xb}, {&(0x7f000000be00)=""/219, 0xdb}], 0x3, &(0x7f000000bf40)=[@cred={{0x1c}}], 0x20}}], 0x6, 0x12101, &(0x7f000000c100)={0x77359400}) recvmsg$inet_nvme(r14, &(0x7f000000c680)={&(0x7f000000c140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f000000c600)=[{&(0x7f000000c1c0)=""/76, 0x4c}, {&(0x7f000000c240)=""/163, 0xa3}, {&(0x7f000000c300)=""/114, 0x72}, {&(0x7f000000c380)=""/88, 0x58}, {&(0x7f000000c400)=""/76, 0x4c}, {&(0x7f000000c480)=""/108, 0x6c}, {&(0x7f000000c500)=""/97, 0x61}, {&(0x7f000000c580)=""/73, 0x49}], 0x8}, 0x40000001) sendmsg$NL80211_CMD_GET_SCAN(r13, &(0x7f000000c780)={&(0x7f000000c6c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f000000c740)={&(0x7f000000c700)={0x28, r3, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7fffffff, 0x80}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000010) 2m9.908167386s ago: executing program 4 (id=589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}}, 0x400001f) 2m9.9065728s ago: executing program 4 (id=591): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000040)={0x0, 0x5, 0x6}) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x41, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x2, 0x1, 0xf}) 2m9.848420535s ago: executing program 4 (id=592): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x851, 0x0, 0x0, 0x0, 0xff}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x27d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000e124cf4068162303ca5f000000010902"], 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 2m8.688646212s ago: executing program 4 (id=594): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x9a, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000380)={@mcast1, 0x0}, &(0x7f00000003c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000480)=0x14) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x80, 0x1, 0x985b, 0x5, {{0x30, 0x4, 0x3, 0x9, 0xc0, 0x68, 0x0, 0xe2, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x24, 0xb0, 0x1, 0x7, [{@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@private=0xa010100, 0x4}, {@empty, 0x2}]}, @timestamp={0x44, 0x2c, 0x78, 0x0, 0x4, [0x6, 0xffffffff, 0x4, 0x5c, 0x2, 0x1, 0xd0000000, 0x7ff, 0xfff, 0x5]}, @timestamp={0x44, 0x8, 0xb9, 0x0, 0x6, [0x0]}, @ssrr={0x89, 0x17, 0x4b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x2c, 0x96, 0x0, 0x7, [0x10, 0xfffff2f5, 0x1, 0x5, 0x81, 0x4, 0x80, 0x3, 0xe444, 0x101]}, @generic={0x88, 0x2}, @ssrr={0x89, 0xf, 0x4b, [@multicast1, @local, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x93, 0x7, 0x19, @local, @empty, 0x8000, 0x10, 0x5, 0x3}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000780)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f00000007c0)={0x298, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0xc0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x40885}, 0x24040001) r11 = socket$netlink(0x10, 0x3, 0x8) r12 = accept4$packet(0xffffffffffffffff, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b40)=0x14, 0x0) sendto$packet(r12, &(0x7f0000000b80)="e1bc8e1ce58a9701ed6b2f458d809a188e58fbb2fbec6d11e77acaa46667ea37f4f3c343718e813889c35dbb81bf5d89cb6868c22aa068fbae8825dd747afdf22babbb346882e8fcf6ad12cada64d7301a1d46591680d9827306a3270e86d0d1707686cad27d1fd8891505958b38f4f9951ea317740e9bb8eaead4af5d3eaca952cbba684dff95b13887c25dfcb5329b3751a005f055d163e7fcc440afe70b5955aaac1318d23f3fb47e7f6f0283e1717a08dedeadfe3b0fcb2b9779be4c87d9d623d0a75f7edbf22713b4cfe78ae2c6508d952a4e567e12f1f0", 0xda, 0x20000014, &(0x7f0000000c80)={0x11, 0x7, r6, 0x1, 0x6, 0x6, @multicast}, 0x14) (async, rerun: 64) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000cc0), 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r11, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x4, 0x18}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xb}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040040}, 0x40480c1) getsockname$packet(r12, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000e80)=0x14) (async) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async) r14 = syz_open_dev$ndb(&(0x7f0000000ec0), 0x0, 0x4100) ioctl$BLKPBSZGET(r14, 0x127b, &(0x7f0000000f00)) (async) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r11) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r15, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x404c800) (async, rerun: 64) close(r0) (async, rerun: 64) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r0) sendmsg$IPVS_CMD_GET_DEST(r11, &(0x7f0000001240)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xd0, r16, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 32) r17 = syz_genetlink_get_family_id$nl802154(&(0x7f00000012c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, r17, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xaf7a25a91ecc2027}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008880}, 0x4800) 2m8.457438995s ago: executing program 4 (id=604): syz_io_uring_setup(0x189e, &(0x7f0000000080)={0x0, 0xffffffff, 0x10100}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x6881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x1c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x48, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x3ff, 0x12) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000440)="dd7e000f01cb66b9800000c00f326635000400000f30660fc7b704006566660f2c52003e650f01c467f30fc772c226f30fa6c866b8240000000f23d80f21f86635800000b00f23f8b818018ed8", 0x4d}], 0x1, 0x10, 0x0, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000040)={0x3, 0x10001, 0x4, {0x6, @vbi={0x1, 0x5, 0xffff, 0x34565559, [0xa7], [0x7ffffff4], 0x2}}, 0x87}) syslog(0x3, &(0x7f0000001000)=""/208, 0xd0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x1d0, 0x234, 0x1d0, 0x1d0, 0x2a8, 0x2a0, 0x2a0, 0x2a8, 0x2a0, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'batadv_slave_0\x00', 'lo\x00'}, 0x0, 0x1b0, 0x1d0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "68885c7e79e21ca3170307e20889528706fbd349db09f530731c372fea7998b354ddc27b5da5f5f7965996a329d8e388b8baf015c7dba738176fa9cb0b0827f67eb37d666cf959ae24d15bbfd8b9565d0182f21fa8c64136ec8c086f3afdb3ac32b23fca167f540ca3e00102301fdbbf4a4cba14bf1bd2e224e6ac797ac22a53", 0x68, 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x2000011a) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2001c0, 0x0) 2m8.41050722s ago: executing program 33 (id=604): syz_io_uring_setup(0x189e, &(0x7f0000000080)={0x0, 0xffffffff, 0x10100}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x6881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x1c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x48, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x3ff, 0x12) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000440)="dd7e000f01cb66b9800000c00f326635000400000f30660fc7b704006566660f2c52003e650f01c467f30fc772c226f30fa6c866b8240000000f23d80f21f86635800000b00f23f8b818018ed8", 0x4d}], 0x1, 0x10, 0x0, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000040)={0x3, 0x10001, 0x4, {0x6, @vbi={0x1, 0x5, 0xffff, 0x34565559, [0xa7], [0x7ffffff4], 0x2}}, 0x87}) syslog(0x3, &(0x7f0000001000)=""/208, 0xd0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x1d0, 0x234, 0x1d0, 0x1d0, 0x2a8, 0x2a0, 0x2a0, 0x2a8, 0x2a0, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'batadv_slave_0\x00', 'lo\x00'}, 0x0, 0x1b0, 0x1d0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "68885c7e79e21ca3170307e20889528706fbd349db09f530731c372fea7998b354ddc27b5da5f5f7965996a329d8e388b8baf015c7dba738176fa9cb0b0827f67eb37d666cf959ae24d15bbfd8b9565d0182f21fa8c64136ec8c086f3afdb3ac32b23fca167f540ca3e00102301fdbbf4a4cba14bf1bd2e224e6ac797ac22a53", 0x68, 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x2000011a) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2001c0, 0x0) 1m35.696903495s ago: executing program 0 (id=984): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x538, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x468, 0xffffffff, 0xffffffff, 0x468, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'wlan0\x00', {0xab43}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x598) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @random="a6dde6557137", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="020000ffffffba00004000", 0xb, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="6d6eb1f60783"}, 0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000180)=0x9, &(0x7f00000001c0)=0x2) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000140)={0x1, "27d85592b6bfee2be57c8a209e5cfce2939c0b6b081aa505abcc55a7042fafc2", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r10, 0xffffffffffffffff}) r12 = dup(r11) r13 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r13]) bind$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1c15, 0x0, 0x0, &(0x7f0000000100)) 1m34.436935704s ago: executing program 0 (id=990): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 32) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000100)) (async) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000600), 0x2) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x140d, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x58}}]}}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x80041, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000340)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x244, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x9, 0x0, 0x0, @str='5\x00'}, @nested={0x142, 0xcf, 0x0, 0x1, [@generic="249f0432ea3b4f3c0e0eb61ebba8170459719d906e96e64405af32cf8c1ec857946b0864a95d3230", @generic="ed0dbbcda10068387b20514561a013b26cf2eb1cb4a904b992601bae6bfe3cc7f2f2ecec2cc921394659985ab8129b9d9d7f121991020dac21db0154c5a9f3c3b9f7c01001288bd23c6095906c86393f543928c0933447b8680d77f7319959efd56eb6ed8d093993499981faab0b2d009d4c131d2505155c", @generic="be012b76a47acfa2bf4626662eb8b21d6dac58a384a80be93e59b8a9b69fbdb5a7eb743d95c203b025b0861a3523f8813802200f04f7176c1c6d7ea126ab0b8a1a223e890a70116f9bfa62299d197c0d30c11857dc7dd7e4125e12c9e1ef8e118b051bf3adedb26a690ec714a9347b7c5e85e7b243dbc7e7c74e02c05876c21d1664ac9ed5f28dbe753b55cc094d9f8949c7fc2aaf10e29db0a57be623f0"]}, @generic="a9902cd0fcc1cbe0028069f57699e8206decf8ab3dbb32f0776a0b85e04e6316bb9ca6a94d57eb174ff788e427199a649c0ac407af5bf453a4e2390dae6a38d39449ba4cd47076c99c9c7b44a00c46c2bcf65dc4564d9bfcd2db8549e85ed064a9d8df2c5b76b9df1e381bf42af9ac89da3603fe2adc28b5b879ee384a2ca6053b73602eb5dfda75d4e3aa068e10b982e20d0e552897739a5c9d46fc181d712452f3d49d3b1dfb333195ae8e4493b72de78ce335692af1bf2ab28cc2bd5621c33ebd19b500e1202c", @typed={0x14, 0x9a, 0x0, 0x0, @ipv6=@empty}, @typed={0x7, 0x6f, 0x0, 0x0, @str='{*\x00'}]}, 0x244}}, 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2100) 1m34.346796687s ago: executing program 0 (id=992): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) (async) r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x25, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) (async, rerun: 64) recvfrom$inet6(r0, &(0x7f00000001c0)=""/97, 0x61, 0x2, 0x0, 0x0) (async, rerun: 64) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000647000/0x1000)=nil) 1m34.345764508s ago: executing program 0 (id=995): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', &(0x7f00000003c0)='./file0\x00') (async) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x1, 0x10}, 0xc) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000080)={@map=r4, 0x6, 0x2e, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f00000001c0), 0x4) (async) r6 = socket(0x10, 0x3, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2077) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f}}, 0x50) (async) syz_fuse_handle_req(r7, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x9c33cbf2f2cca353}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x7, 0x1c, 0xb, 0x1a, 0x4, 0x80000001, 0x1, 0x43, 0x1}}) write$FUSE_INIT(r9, 0x0, 0x0) (async) sendto$inet6(r6, &(0x7f0000000900)="7800000016002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a23000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'macsec0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x5, 0x4, 0x40, 0x7, 0x7, 0x9, 0x6, 0xe824}}) 1m34.268035402s ago: executing program 0 (id=996): getitimer(0x0, &(0x7f0000000040)) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002b80)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}}, 0x0) 1m34.048215985s ago: executing program 0 (id=1001): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x538, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x468, 0xffffffff, 0xffffffff, 0x468, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'wlan0\x00', {0xab43}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x598) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @random="a6dde6557137", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="020000ffffffba00004000", 0xb, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="6d6eb1f60783"}, 0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000180)=0x9, &(0x7f00000001c0)=0x2) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1m34.005431981s ago: executing program 34 (id=1001): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x538, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x468, 0xffffffff, 0xffffffff, 0x468, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'wlan0\x00', {0xab43}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x598) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @random="a6dde6557137", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="020000ffffffba00004000", 0xb, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="6d6eb1f60783"}, 0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000180)=0x9, &(0x7f00000001c0)=0x2) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1m19.138757375s ago: executing program 5 (id=1160): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) 1m19.077432785s ago: executing program 5 (id=1162): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x401, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, 0x0, 0x0}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002000000300600fe8000000000000000000000000000bbfe8000000000001000000000000000aa00004e22"], 0x0) 1m19.076800789s ago: executing program 5 (id=1164): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x538, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x468, 0xffffffff, 0xffffffff, 0x468, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'wlan0\x00', {0xab43}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x598) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @random="a6dde6557137", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="020000ffffffba00004000", 0xb, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="6d6eb1f60783"}, 0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000180)=0x9, &(0x7f00000001c0)=0x2) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000140)={0x1, "27d85592b6bfee2be57c8a209e5cfce2939c0b6b081aa505abcc55a7042fafc2"}) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close_range(r8, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1c15, 0x0, 0x0, &(0x7f0000000100)) 1m17.218191932s ago: executing program 5 (id=1189): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x20000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom1\x00', 0xc02, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x30, r4, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x78, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x893}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x61}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xdbf}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc9d}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0xa000) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x20, 0x4000}]}) write$ppp(r0, &(0x7f0000000480)='\x00\x00', 0x2) 1m17.108186587s ago: executing program 5 (id=1190): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x30, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) 1m16.876680408s ago: executing program 5 (id=1194): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r0, 0xfa7d1000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r0, 0xfa7d1000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r3) (async) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) 1m16.842737417s ago: executing program 35 (id=1194): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r0, 0xfa7d1000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r0, 0xfa7d1000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r3) (async) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r3, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) 28.266868444s ago: executing program 1 (id=1764): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x84, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts]}}}}}}}, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x4, 0x0, 0x0, 0xfb, &(0x7f0000000140)="32092e8b7a6a17d3fe493c6b6eaef8c4c1d51ed36b5249f7d94d9bc61053eb9aa0e41bd41b96bb595c66820ac06beb23a4ab6fccc0aee812fe8a0f72bc0b2b1bf5a6fdafbd0a65a60582b83111780f0b020cd9c4d6f5e6659c5ed7a9cbf86345223f1530a3cbf29e0d4ab4ea7566ad8091d05f8fd916739eba09edb5fbee3ea6fe0e940581afb83085d37487f47d24d409c509cecd76dc08effea3f950f1aeaf5e9395ad4442660a902ae62863b6d6e401ef2fb3547e99f73112a244f3d14f4432d56de6d9d7151d90282f1bd482c3398dceec2ee7739f7afc629c90874eacc56947d4e03e8a81079c888b235bcc4d8df41f65418caf8becbbbaf5", 0x617}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0xb, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newtaction={0x74, 0x30, 0xd2b, 0x70bd29, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}, @TCA_MPLS_LABEL={0x8, 0x5, 0xdc4c2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) recvmmsg(r2, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4045}, 0x4000044) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e21, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, @in6={0xa, 0x4e23, 0x4ca1, @mcast2, 0xc}], 0x78) 28.264937333s ago: executing program 1 (id=1765): socket$kcm(0x2, 0x2, 0x73) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000440)={[0x9dd0, 0x4, 0x6, 0x4, 0x3, 0x9, 0x6a16, 0xa, 0xb, 0xfffffff7, 0x1ff, 0x3, 0x2, 0x7, 0x7f, 0x6, 0x10000, 0x9, 0x4, 0xb87e, 0x3ff, 0xca, 0x80, 0xffff, 0x9, 0x2e, 0xffff, 0xfa, 0x6, 0x4, 0x3dc, 0x4, 0x6, 0x7f, 0x9, 0x3, 0x45e, 0x80, 0x6, 0x3, 0xfffffffd, 0x79f00, 0xada, 0x4, 0x12, 0x0, 0x5, 0x2, 0x5, 0x1, 0x5, 0xaa5, 0x9457, 0x2, 0x8, 0x8, 0x7, 0xd9f4, 0x7, 0x4, 0x5, 0x7183, 0x4, 0xf, 0xffff8000, 0x3, 0x4, 0xae, 0x40000000, 0x9, 0x3, 0x8, 0x40, 0xb, 0x2, 0x2, 0x5, 0x41b0, 0xae7, 0xe, 0x2, 0x5, 0x0, 0x0, 0x0, 0x10000, 0x7f, 0x7, 0xbf, 0x82f8, 0x709, 0x5, 0x0, 0xfffffffb, 0x3, 0x133, 0xfffffeff, 0x8, 0x60000, 0x5, 0x10, 0x0, 0x0, 0x7, 0x10001, 0x0, 0xcd5, 0x7ff, 0x0, 0x838, 0x10000, 0x3, 0x6, 0x9, 0x2f06, 0x2, 0x9, 0xb4, 0x4, 0x5, 0xfffffffd, 0x0, 0x2, 0x2, 0x2, 0x0, 0x2ed0, 0x3, 0x5, 0x0, 0x400, 0x4, 0x4, 0x4, 0x305a, 0x7, 0x5, 0xb43, 0x2, 0x2, 0x200, 0x9, 0x4b573e73, 0x10000, 0xb64, 0x9, 0x8, 0x101, 0x4, 0x401, 0x7, 0x9, 0x5857, 0xfffffffc, 0xfffff000, 0xffffff00, 0x5, 0x7, 0x401, 0x10000, 0x3, 0x916b, 0xfffffffd, 0xfffffffa, 0x0, 0xba4a, 0x8, 0x39d, 0x8, 0x6, 0x2, 0x9, 0x0, 0xc, 0x7, 0x9, 0x0, 0xfffff2a0, 0x9, 0x5, 0x0, 0x6, 0x6, 0x0, 0x35, 0x8, 0x3, 0x3ff, 0x5, 0x8001, 0x0, 0x5, 0x6, 0x9, 0x7, 0x60000, 0x9, 0x6, 0x48e, 0x9, 0x9, 0x7, 0x4, 0x4, 0x3, 0x0, 0x3, 0x1, 0x3, 0xffffffff, 0x5, 0xfffffffd, 0x70000000, 0x5, 0x4, 0x400, 0x40, 0xec, 0x253, 0x8001, 0x94, 0x1, 0x10001, 0x3ff, 0x0, 0x53, 0x2, 0x8, 0x87b1, 0x6a, 0x2, 0x2, 0x8, 0x2, 0xf49, 0x45ec, 0x1b, 0xfff, 0x6, 0x8, 0x7, 0x0, 0x3, 0xbb4, 0xa, 0x805, 0x7, 0x0, 0x5, 0x0, 0x7fff, 0x9, 0x8, 0xfffffff1, 0x7, 0xb3, 0x0, 0x0, 0x200, 0x6, 0x65e, 0x0, 0x7, 0x3, 0x3, 0x2, 0x5, 0xfffff311, 0x5, 0x220, 0x1, 0x8, 0x7, 0x17, 0x3d5d, 0x1, 0xfffffeff, 0x8, 0x8, 0x16, 0xfff, 0xf3f, 0x1, 0x3, 0x6, 0xc, 0x10, 0x1, 0x9, 0x3, 0x10, 0x4, 0xf2bd, 0x7ff, 0x8000, 0x3, 0xffff0000, 0x84c, 0x9, 0x5, 0x8, 0x5, 0x5, 0x80000000, 0x53, 0x3, 0x9, 0x100, 0x3, 0x1, 0xe00000, 0x32d, 0x3ff, 0x3, 0xffffffea, 0xa, 0x6fcc36fd, 0x4, 0x400, 0x6, 0x2, 0x4, 0x2, 0x100, 0xce3, 0xd6a, 0x4, 0x0, 0x5, 0x5b0341d6, 0xfffffff8, 0x7, 0xca000000, 0x3, 0x4, 0x10000, 0xffff, 0x1, 0xfffffffe, 0x7, 0x1, 0x100, 0xd26, 0x8001, 0x7, 0x7, 0x7, 0x4, 0x401, 0x10000, 0xd2e, 0x2, 0x80000000, 0xf5ac, 0x7, 0x8, 0x8001, 0x3, 0xb, 0x800, 0x1, 0x7, 0x2, 0x205, 0x80000000, 0xfffffffb, 0x676afd53, 0x0, 0x4, 0x6, 0x4, 0xfffffffd, 0x75f1, 0x40, 0x3, 0xbfbf, 0x4, 0x41, 0x6, 0x4, 0xd, 0x7fffffff, 0x80, 0x3, 0x5, 0x3ff, 0x4, 0x9, 0x0, 0x6458e28d, 0x80, 0x1, 0x1, 0x101, 0x3, 0x9, 0x5, 0x7fff, 0x5, 0x3, 0x5, 0x1, 0x497, 0x68fb1070, 0x9, 0x6, 0x1, 0xe2c9, 0x9, 0x0, 0x9, 0x80, 0x80, 0x7, 0x3, 0x7fffffff, 0x7, 0x8, 0x80000001, 0xfff, 0x3, 0x6, 0x0, 0x6, 0x0, 0x80, 0xcc64, 0x3, 0x0, 0x5, 0xfffffffe, 0x4, 0x7e8, 0x40, 0xffffffff, 0x1, 0xda, 0x7, 0x7, 0xffff, 0x400, 0xc, 0xf, 0x2, 0x1, 0xa, 0x7, 0x1, 0x9, 0xb, 0x2, 0x26f3400d, 0x5, 0x8, 0x60000, 0x3, 0x0, 0x0, 0x8001, 0xffff, 0x7f, 0x6, 0xf, 0x9, 0xffffb01e, 0xc5ff, 0x0, 0xfffff5dc, 0xb, 0x8, 0x2, 0xffffaf2a, 0x8, 0x9, 0x8, 0x5, 0x0, 0x10001, 0x7, 0x2, 0xb89, 0x8001, 0x8, 0x3, 0x13, 0x5, 0x8, 0xd1, 0x9, 0x9, 0x6b, 0x5, 0x2, 0x5, 0x7, 0x2, 0x8, 0xff, 0xfffff5bc, 0xffffffff, 0xffffdb8b, 0x1000, 0x33, 0x1, 0x4, 0x140, 0x0, 0x401, 0x10000, 0x593, 0x8, 0xa3, 0x5, 0x100, 0x1ff, 0x431, 0x1, 0x5, 0x3, 0x0, 0x0, 0x1, 0x4, 0xdd27, 0xc, 0xff, 0x0, 0x7fff, 0x8, 0x400, 0x0, 0xd689, 0x9, 0x8, 0x2772, 0x2, 0x100, 0x2, 0x85, 0x2, 0x6, 0x0, 0x9, 0xfff, 0x80000001, 0x2, 0x80, 0x440, 0x180, 0x81, 0x4, 0x3, 0x829, 0x4, 0x0, 0x2, 0x10000, 0x0, 0x0, 0xf, 0x0, 0x624, 0x6, 0x8000, 0x0, 0x4, 0x0, 0x1ef2c75d, 0x1, 0x2, 0x0, 0x9, 0xf28, 0x3, 0x6adf7de0, 0x9, 0xf, 0x49ea, 0x8, 0xf84, 0x1, 0xe84b, 0x3, 0x7, 0xc, 0xc3, 0x2, 0x101, 0x6, 0x101, 0x8, 0x1, 0x0, 0x80000001, 0x9, 0x2, 0x5, 0xf4, 0x1, 0x7fff, 0x407, 0x7, 0x4, 0x30, 0x3, 0x1, 0x3c, 0x6, 0xc72, 0x3, 0x2, 0x3, 0xffff8000, 0x2, 0x3, 0x6, 0x3, 0x4, 0x7, 0x1, 0x7, 0xe4fd, 0x0, 0x9, 0x80000000, 0x8a68, 0x2, 0xffff8000, 0x5, 0xa, 0x4, 0x6, 0x9, 0x2, 0x8, 0xf16, 0x1, 0x3, 0x0, 0x3, 0x1, 0x1, 0x8, 0x7, 0xb720, 0x2, 0x80000001, 0x2729, 0xd3e3, 0x3, 0x1, 0x6, 0x4, 0xeec, 0x54c0000, 0xbf2498d3, 0x9, 0x5, 0x7ff, 0x7075, 0x10001, 0x4, 0x80000001, 0xf, 0x6, 0x1, 0x0, 0xb571, 0x5, 0x4281, 0x7, 0xfffffe00, 0x9d, 0xf9, 0x4, 0xffffffff, 0x9, 0x7, 0x2f0e, 0x63, 0x7, 0x6, 0x10001, 0x8, 0x80000000, 0xfffeffff, 0x2, 0x3, 0x0, 0x40, 0xf6, 0x1, 0x4, 0x1, 0x0, 0x6cc7, 0x1, 0xfff, 0x7ff, 0x1, 0x60000000, 0x0, 0x0, 0x3, 0x1, 0x40000000, 0x7, 0x8000, 0x10001, 0xf9a, 0x7, 0xd96, 0x8, 0xf, 0x100, 0x6, 0x8, 0x8, 0x0, 0x4, 0xfa, 0x2, 0x71, 0x3, 0x1, 0xe, 0x0, 0x0, 0x9, 0x8, 0x5, 0x2, 0x6, 0x1abb, 0x4, 0x1, 0x6640, 0x7, 0x0, 0xe, 0x2, 0x1000, 0xfffffffa, 0x9, 0x0, 0x8001, 0xe, 0x0, 0x1, 0x9, 0x40, 0x0, 0x8, 0x200, 0x9, 0x6, 0x1ff, 0x7, 0xf, 0x9, 0x9, 0x8001, 0x1, 0x3, 0x6, 0x4, 0x6, 0x6, 0xb, 0xa6cb, 0x8, 0x4, 0x8, 0x6, 0x6, 0xffffffff, 0x97, 0xfffffff7, 0x8001, 0x3, 0x1ff, 0x1, 0x2, 0x9, 0x2, 0x0, 0xffff, 0x2, 0x10, 0x3, 0x8000, 0x60, 0x215, 0x7a74, 0x1, 0xb1b, 0xfffffff8, 0x1, 0x7, 0x9, 0x10001, 0x9, 0x870, 0x80000000, 0x5, 0x9, 0x0, 0x401, 0x6, 0x2, 0x4, 0xe, 0x9, 0x7, 0xfffffffc, 0x2, 0x4dde4532, 0x3, 0x6, 0x1, 0x10001, 0x7, 0x6, 0x4, 0x4, 0x2, 0x6, 0x3782, 0xb, 0x392, 0x2, 0x7fff, 0xff, 0x3, 0x8, 0xc, 0x216, 0xffffbe3f, 0x8a5, 0x4, 0x2, 0x774, 0x2, 0x3, 0x5, 0x4b3e, 0x5, 0xeca, 0x9, 0xd, 0x10e2, 0x0, 0x8, 0xc, 0x174, 0x1, 0x7497, 0x6, 0x3, 0x2, 0x9, 0xf, 0x1, 0x7, 0xd0d, 0x1, 0x7, 0xf, 0x3, 0x10, 0x2b89, 0x2, 0x1a04, 0x4, 0x9c, 0x4, 0xff, 0x69, 0x7, 0x0, 0x7fffffff, 0x2, 0x9, 0x2, 0x8, 0x66c4, 0x7ff, 0x7, 0x6, 0x100, 0x6, 0x101, 0x80000, 0x9c18, 0x7, 0x1, 0x3, 0x7ff, 0x3, 0x26b1, 0x45, 0x9, 0x76e, 0x8a21, 0x9, 0x4, 0x8001, 0x0, 0x6, 0x2, 0x6, 0x9, 0x2, 0xd, 0x33ac, 0x4, 0x848, 0x6, 0x7, 0x3, 0x1, 0x9afd, 0x4, 0x7fff, 0x1, 0x1, 0xc8c, 0x5, 0x424, 0x6, 0x1, 0x1, 0x7, 0xfffffffd, 0x87, 0x8, 0x52ba, 0x9, 0x1, 0xfffffffa, 0x200, 0x8e, 0x6, 0x7976e372, 0x93, 0x10, 0x8, 0x2, 0xfff, 0x0, 0x3, 0x0, 0x3ff, 0x2, 0x9, 0xfff, 0x8561, 0x8000, 0x9, 0xe2b2, 0xc3b, 0x1, 0x3, 0x9, 0x9, 0x5, 0xa, 0x3, 0x6, 0x1, 0x4c, 0x8, 0x8, 0x3ff, 0xc, 0x0, 0x4, 0x6, 0x1, 0x3, 0x4, 0xa, 0x8dd, 0x2, 0x7, 0x2, 0x81, 0xec96, 0x1000, 0x8000, 0x4, 0xfffffffa, 0x73ab6a07, 0x86, 0x80000000, 0x81, 0x80, 0xf7, 0x69c7, 0xd, 0x873, 0x9, 0x8e9, 0x6, 0x100, 0x7ff, 0x1, 0x3, 0x200, 0x800, 0x6, 0x3ff, 0x4, 0x3, 0x6, 0x1387, 0xfffffff8, 0xa, 0x7bf8, 0x0, 0xe, 0x1000, 0x4, 0x6]}) (async) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x0, 0x1, 0x7}, 0x1}}, 0x18) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x1e, 0x4, 0x0) (async, rerun: 64) r5 = socket(0x1e, 0x4, 0x0) (rerun: 64) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) (async) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg(r6, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e22, 0x9, @mcast1, 0x6}, {0xa, 0x4e21, 0x5, @empty, 0xdf26}, 0xffffffffffffffff, {[0xd, 0x9a2, 0x5, 0xfffffffa, 0x5, 0xa2, 0x4, 0xf22d]}}, 0x5c) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r7, @ANYRES32=r3, @ANYBLOB="02"], 0x10) (async) socket$kcm(0x2, 0x2, 0x73) 28.056964506s ago: executing program 1 (id=1770): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) write$binfmt_script(r1, &(0x7f0000001100)={'#! ', './file0'}, 0xb) 27.207872404s ago: executing program 1 (id=1773): lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) lsm_get_self_attr(0x66, &(0x7f00000003c0)={0x0, 0x0, 0x112, 0xf2, ""/242}, &(0x7f00000000c0)=0x112, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fffffff, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000080)={0x0, 0x0, 0x0}) lsm_get_self_attr(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x8a, 0x6a, ""/106}, &(0x7f0000000180)=0x8a, 0x0) lsm_get_self_attr(0x0, &(0x7f0000000500)={0x0, 0x0, 0xa7, 0x87, ""/135}, &(0x7f00000005c0)=0xa7, 0x0) lsm_get_self_attr(0x68, &(0x7f0000000280)={0x0, 0x0, 0x10e, 0xee, ""/238}, &(0x7f0000000040)=0x10e, 0x1) lsm_get_self_attr(0x67, &(0x7f0000000100)={0x0, 0x0, 0x70, 0x50, ""/80}, &(0x7f0000000080)=0x70, 0x1) 27.207397789s ago: executing program 1 (id=1774): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x538, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x468, 0xffffffff, 0xffffffff, 0x468, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'wlan0\x00', {0xab43}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x598) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @random="a6dde6557137", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="020000ffffffba00004000", 0xb, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="6d6eb1f60783"}, 0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000180)=0x9, &(0x7f00000001c0)=0x2) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", 0xffffffffffffffff, 0xffffffffffffffff}) dup(r9) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close_range(r6, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1c15, 0x0, 0x0, &(0x7f0000000100)) 26.545377466s ago: executing program 1 (id=1783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f0000fffffffffffffbff95647fffffeb"}) r2 = dup(r1) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000200)={0x9, 0x0, 0x0, 0x82f6, 0x0, "0800000000000002"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xff) ioctl$VT_DISALLOCATE(r1, 0x5608) syz_io_uring_setup(0x22a6, &(0x7f0000000300)={0x0, 0xf1f, 0x20, 0x13}, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000800)='9', 0x1}, {&(0x7f0000000180)="b5582d", 0x3}], 0x2) ioctl$IOMMU_VFIO_GET_API_VERSION(r2, 0x3b64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r5, 0x8b21, &(0x7f0000000040)) write$selinux_load(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="8cff7cf908000000"], 0x2000) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, r6, &(0x7f0000000140)={0xffffffffffffffff, 0x8, 0x0, 0x6}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164022400028008000340000000000800024000000002080001400000000f080004400000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) 11.542954439s ago: executing program 36 (id=1783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f0000fffffffffffffbff95647fffffeb"}) r2 = dup(r1) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000200)={0x9, 0x0, 0x0, 0x82f6, 0x0, "0800000000000002"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xff) ioctl$VT_DISALLOCATE(r1, 0x5608) syz_io_uring_setup(0x22a6, &(0x7f0000000300)={0x0, 0xf1f, 0x20, 0x13}, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000800)='9', 0x1}, {&(0x7f0000000180)="b5582d", 0x3}], 0x2) ioctl$IOMMU_VFIO_GET_API_VERSION(r2, 0x3b64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r5, 0x8b21, &(0x7f0000000040)) write$selinux_load(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="8cff7cf908000000"], 0x2000) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, r6, &(0x7f0000000140)={0xffffffffffffffff, 0x8, 0x0, 0x6}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164022400028008000340000000000800024000000002080001400000000f080004400000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) 3.006545522s ago: executing program 8 (id=1985): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x207, 0x0, 0x0, 0xfcb, 0x7}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x34000}], 0x1}}], 0x1, 0x0) 2.787619372s ago: executing program 6 (id=1988): shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/91) 2.787104807s ago: executing program 6 (id=1990): r0 = socket$inet(0x2, 0x2000000080002, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CDROMSUBCHNL(r1, 0x530b, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @lba, @lba}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000001000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 2.717874876s ago: executing program 6 (id=1993): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) (fail_nth: 60) 2.567300931s ago: executing program 6 (id=1994): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0xe, 0x0, &(0x7f0000000900)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0x8) listen(r2, 0x100101) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="3b000000000000003437db37d076bf98628a7714dc95231c251c208ea9e765fe5171648119913515b0c439a5c6af47ba552ea80626770ac57acb532af03eb0b946bc730e558d1ec0a99203be3e1045c7451bdcc0a9f811fd88297a20ba06b109e38ae0843a57d894247cadf9db17978c3063dd37dbc9ed62767be27daf07824b5a1671a9625aab91e50998961bc2ffdc7126031dbd74b1"], 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5}, './file0/file0\x00'}) read$FUSE(r6, &(0x7f0000000540)={0x2020}, 0xffffffffffffffcb) socket(0x10, 0x3, 0x0) r7 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4138ae84, &(0x7f0000000040)) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 2.127418062s ago: executing program 8 (id=2000): open(&(0x7f00000005c0)='./bus\x00', 0x147a42, 0x20) mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000400)='./bus\x00', &(0x7f00000004c0), 0x400801, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=rdma']) 2.127009575s ago: executing program 8 (id=2001): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001200)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381c01238c09d0ff0f1e5a47b34ae45d87cd2a6a370554f58c62b02099", 0x52) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000240)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x10) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) pipe2$watch_queue(&(0x7f0000000040), 0x80) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x0}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r6, 0xc0045002, &(0x7f0000000100)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r7, 0x5421, 0x110e22fff7) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0x100000530) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000003940)=""/9, 0x9}, {&(0x7f0000000980)=""/11, 0xb}], 0x2}}], 0x1, 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r8, 0x80044dfb, &(0x7f0000000100)) 2.047632283s ago: executing program 8 (id=2002): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x538, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x468, 0xffffffff, 0xffffffff, 0x468, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'wlan0\x00', {0xab43}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x598) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="020000ffffffba00004000", 0xb, 0x0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="6d6eb1f60783"}, 0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000180)=0x9, &(0x7f00000001c0)=0x2) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", 0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close_range(r5, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1c15, 0x0, 0x0, &(0x7f0000000100)) 1.807760974s ago: executing program 2 (id=2003): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x62040200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 1.702118966s ago: executing program 6 (id=2004): process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x1000000000000025, &(0x7f0000008640), 0x1000000000000081, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000840)=""/139, 0x8b}, {&(0x7f0000000140)=""/143, 0x8f}, {&(0x7f0000000200)=""/249, 0xf9}, {&(0x7f0000000340)=""/72, 0x48}, {&(0x7f00000007c0)=""/98, 0x62}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/71, 0x47}, {&(0x7f0000000600)=""/18, 0x12}, {&(0x7f0000000640)=""/20, 0x14}], 0xa, &(0x7f0000000740)=""/17, 0x11}, 0x1) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000019700)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x7e7a3985a6cb0b01}, 0x40000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x4, 0x4e20, 0x8}}}}}, 0x0) ioctl$SNDCTL_TMR_METRONOME(r2, 0x40045407) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000195c0)='net/kcm\x00') r5 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r5, &(0x7f00000003c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @remote, 0x7fff}}, 0x24) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x80000001, 0x0) creat(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.437666558s ago: executing program 6 (id=2005): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="8a", 0x1}], 0x1, 0x451, 0x6) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xff, 0x452], 0x0, 0x0, 0x2, 0x1}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x402, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) (async, rerun: 64) r4 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 64) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x8014) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000014c0)=""/4097, 0x1001}], 0x1}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000010001000003be8c5ee17688a2002b08030300ecff3f0200000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) (async) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) (async) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) (rerun: 64) 1.40807687s ago: executing program 37 (id=2005): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000300)="8a", 0x1}], 0x1, 0x451, 0x6) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xff, 0x452], 0x0, 0x0, 0x2, 0x1}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x402, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) (async, rerun: 64) r4 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 64) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x8014) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000014c0)=""/4097, 0x1001}], 0x1}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000010001000003be8c5ee17688a2002b08030300ecff3f0200000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) (async) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) (async) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) (rerun: 64) 1.356633306s ago: executing program 2 (id=2007): bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x454, 0x28, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x846e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}]}}]}, 0x454}}, 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (rerun: 64) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x6, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5111) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) r4 = dup(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001e00010026bd7000fddbdf2507000000", @ANYRES32=r6, @ANYBLOB="020002000005003a8a1b40355b49a03772bc75da952f01000400198008001e000300000008001c00", @ANYRES32=r1, @ANYBLOB="0a000200aaaaaaaaaabb00000800250003000000"], 0x48}}, 0x0) (async) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) (async) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = openat$cgroup_ro(r4, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) write$binfmt_script(r8, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) 768.151016ms ago: executing program 7 (id=2008): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xa}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000940), 0x180, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) sendto$inet6(r0, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e) mount$binder(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='max=00000000020000000']) 767.730317ms ago: executing program 7 (id=2009): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000040)={0x9, 0x7fff, 0x0, {0x1000, 0x371f}, 0x4, 0x8}) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f00000000c0)) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, {0x9, 0x0, 0xe}}, 0xa) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0xb, 0xffffffffffffffff, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000180)={{r2}, "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"}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x58, r4, 0x800, 0x70bd26, 0x3, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3c}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27c63e0fe3792acf}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001300)={0xb3, 0x1, 0x1000, "f5621ef724e84a24728dadd429692c2cb60563b51b6f6dd904ccaa307cc3c6a24b739dc4ef20a1acfb31ece47ea2844ed98c1f9d3d26edba0418667029787dc38e2fc596868d3bb2bf1ba42c79960d453eea8c566b0c399580a0760794179b3f5a3e3f9ba8a6a6868e1d476d76f4316243d40f048c0a39fbc2807895da997d1f6cba0df8649490e0b70e0a93950291e79ccf7ecdcd47d93cf77d311dcece4dea739732590f68e4d82eedf00a9850fa7ca581ca"}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000013c0)={r1, 0x2, {0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x6, 0x18, 0x4, "23b702ea67e9c875e6a901a6f9ea89fe9820efb00b31cc33deafbd81ca97ba24c22f45df0553f2252d1976f7be97e07686b9b6eeef706b74b2bdad34c0851ccd", "b63c1f0d7b1cf705a34e0028d3791f20813253263f512006fb1ec4c0885ec3929d8a26f48ecdd95769b7bc7a06c6965679a44930afed9a7bd277eaa781e3a941", "b452071b9bb81a9725882588dd15177899752d37ddc98944fa0f06dd5ea69e71", [0xfffffffffffffff9, 0xa2]}}) recvmmsg(r1, &(0x7f0000006a00)=[{{&(0x7f0000001500)=@l2, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001580)=""/161, 0xa1}, {&(0x7f0000001640)=""/246, 0xf6}, {&(0x7f0000001740)=""/181, 0xb5}, {&(0x7f0000001800)=""/82, 0x52}, {&(0x7f0000001880)=""/64, 0x40}, {&(0x7f00000018c0)=""/225, 0xe1}], 0x6, &(0x7f0000001a40)=""/233, 0xe9}, 0xbb87}, {{&(0x7f0000001b40)=@sco={0x1f, @none}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001bc0)=""/84, 0x54}, {&(0x7f0000001c40)=""/41, 0x29}, {&(0x7f0000001c80)=""/141, 0x8d}, {&(0x7f0000001d40)=""/86, 0x56}, {&(0x7f0000001dc0)=""/209, 0xd1}, {&(0x7f0000001ec0)=""/150, 0x96}, {&(0x7f0000001f80)=""/58, 0x3a}, {&(0x7f0000001fc0)=""/247, 0xf7}], 0x8}, 0x4}, {{&(0x7f0000002140)=@nfc_llcp, 0x80, &(0x7f00000023c0)=[{&(0x7f00000021c0)}, {&(0x7f0000002200)=""/17, 0x11}, {&(0x7f0000002240)=""/66, 0x42}, {&(0x7f00000022c0)=""/179, 0xb3}, {&(0x7f0000002380)=""/8, 0x8}], 0x5, &(0x7f0000002440)=""/241, 0xf1}, 0x8000}, {{&(0x7f0000002540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003b00)=[{&(0x7f00000025c0)=""/181, 0xb5}, {&(0x7f0000002680)=""/218, 0xda}, {&(0x7f0000002780)=""/210, 0xd2}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/204, 0xcc}, {&(0x7f0000003980)=""/50, 0x32}, {&(0x7f00000039c0)=""/151, 0x97}, {&(0x7f0000003a80)=""/123, 0x7b}], 0x8, &(0x7f0000003b80)=""/183, 0xb7}, 0x8001}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003c40)=""/175, 0xaf}], 0x1, &(0x7f0000003d40)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000004d40)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000004dc0)=""/228, 0xe4}, {&(0x7f0000004ec0)=""/52, 0x34}, {&(0x7f0000004f00)=""/179, 0xb3}], 0x3}, 0x2}, {{&(0x7f0000005000)=@nl=@unspec, 0x80, &(0x7f0000005140)=[{&(0x7f0000005080)=""/154, 0x9a}], 0x1, &(0x7f0000005180)=""/30, 0x1e}, 0x5}, {{&(0x7f00000051c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000005540)=[{&(0x7f0000005240)=""/255, 0xff}, {&(0x7f0000005340)=""/10, 0xa}, {&(0x7f0000005380)=""/24, 0x18}, {&(0x7f00000053c0)=""/145, 0x91}, {&(0x7f0000005480)=""/131, 0x83}], 0x5, &(0x7f00000055c0)=""/91, 0x5b}, 0x3}, {{&(0x7f0000005640)=@un=@abs, 0x80, &(0x7f0000006900)=[{&(0x7f00000056c0)=""/171, 0xab}, {&(0x7f0000005780)=""/23, 0x17}, {&(0x7f00000057c0)=""/26, 0x1a}, {&(0x7f0000005800)=""/4, 0x4}, {&(0x7f0000005840)=""/163, 0xa3}, {&(0x7f0000005900)=""/4096, 0x1000}], 0x6, &(0x7f0000006980)=""/105, 0x69}, 0xb6c}], 0x9, 0x80, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000006c40)=@ccm_128={{0x304}, "290cedbf2fe635af", "d8dd0c8c7e322f8cb2fc847400871a84", "7378d936", "e7110e721d655b1a"}, 0x28) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000006c80), &(0x7f0000006cc0)=@v2={0x2000000, [{0x338, 0x59}, {0x9}]}, 0x14, 0x1) syz_emit_vhci(&(0x7f0000006d00)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x7, 0xc8, 0x80}}}, 0x7) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000006e00)={&(0x7f0000006d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006dc0)={&(0x7f0000006d80)={0x28, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c004}, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f000000b900)=[{0x3, 0x1, 0x0, &(0x7f0000007000)=[{&(0x7f0000006e40)=""/57, 0x39}, {&(0x7f0000006e80)=""/110, 0x6e}, {&(0x7f0000006f00)=""/211, 0xd3}], &(0x7f0000007040)=[0x7f, 0x7, 0x6, 0x4]}, {0x2, 0x1, 0x0, &(0x7f0000007200)=[{&(0x7f0000007080)=""/177, 0xb1}, {&(0x7f0000007140)=""/185, 0xb9}], &(0x7f0000007240)=[0x4, 0x3, 0x1, 0x7fffffffffffffff, 0x8, 0x9, 0x1, 0x4]}, {0x1, 0x0, 0x0, &(0x7f0000007380)=[{&(0x7f0000007280)=""/234, 0xea}], &(0x7f00000073c0)=[0xffffffffffff7fff, 0xf0c9, 0x6, 0x7ff, 0x7, 0x4eb7, 0x8, 0x7]}, {0x5, 0x0, 0x0, &(0x7f0000009580)=[{&(0x7f0000007400)=""/73, 0x49}, {&(0x7f0000007480)=""/186, 0xba}, {&(0x7f0000007540)=""/4096, 0x1000}, {&(0x7f0000008540)=""/4096, 0x1000}, {&(0x7f0000009540)=""/24, 0x18}], &(0x7f0000009600)=[0x7, 0x4, 0x9]}, {0x7, 0x1, 0x0, &(0x7f000000b840)=[{&(0x7f0000009640)=""/4096, 0x1000}, {&(0x7f000000a640)=""/128, 0x80}, {&(0x7f000000a6c0)=""/9, 0x9}, {&(0x7f000000a700)}, {&(0x7f000000a740)=""/14, 0xe}, {&(0x7f000000a780)=""/132, 0x84}, {&(0x7f000000a840)=""/4096, 0x1000}], &(0x7f000000b8c0)=[0x13c5, 0xb6f, 0x6, 0x200000, 0x3]}], 0x5) syz_emit_vhci(&(0x7f000000b9c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f000000ba00)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f000000ccc0)=[{0x1, 0x1, 0x0, &(0x7f000000bb00)=[{&(0x7f000000ba40)=""/146, 0x92}], &(0x7f000000bb40)=[0xac7]}, {0x3, 0x1, 0x0, &(0x7f000000cc40)=[{&(0x7f000000bb80)=""/47, 0x2f}, {&(0x7f000000bbc0)=""/90, 0x5a}, {&(0x7f000000bc40)=""/4096, 0x1000}], &(0x7f000000cc80)=[0x100000000, 0x2]}], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f000000cd00)={0x0, 0x3e, "4a9759085480d7fe7bb9c921a03c7c1136ba3d7f18554609a22100fee5e6ebd4578093da46e286569a19d27e0951878bc8ebb068874780cccde30e4efdaa"}, &(0x7f000000cd80)=0x46) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f000000cdc0)={r6, @in={{0x2, 0x4e22, @loopback}}}, 0x84) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f000000ce80)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f000000cec0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f000000cf00)) r7 = openat$cgroup_ro(r0, &(0x7f000000cf40)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f000000cf80)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x16}, "bfff2391254e1b4f233ee096a75a3cf7cc04bc1b9623"}, 0x1a) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f000000d000), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f000000d0c0)={&(0x7f000000cfc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f000000d080)={&(0x7f000000d040)={0x34, r8, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x34}}, 0x4000000) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f000000d2c0)={&(0x7f000000d100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f000000d280)={&(0x7f000000d240)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) 706.108126ms ago: executing program 7 (id=2010): mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000400)='./bus\x00', &(0x7f00000004c0), 0x400801, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=rdma']) 705.236687ms ago: executing program 8 (id=2011): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0x10000}, {0x6, 0x6}, 0xab4, [0x5, 0x7a, 0x1, 0x4000000005, 0x40, 0x66, 0x1, 0x5f, 0x2, 0x1, 0x10, 0x6, 0x6, 0xffdffffffffffff7, 0x621, 0xa]}) r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r1}) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_clone(0x10318080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000600, r3, &(0x7f0000000140)={0x4, 0x6, 0x0, 0x8}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000400)={0x0, 0x0, r0}) unshare(0x40020200) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)) 704.912844ms ago: executing program 7 (id=2012): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffff8) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0xe, 0x1f, 0xe4}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000440)=0x9) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000480)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000500)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0xb, r1, 0x0, r2}) r3 = request_key(&(0x7f00000005c0)='.request_key_auth\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)='\x00', 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0xd) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @desc2}, &(0x7f0000000700)={0x0, "785f9fb46f13f093658cd3bac272124a1c421312f5be2e6a575535578a41c8791c3237b712b5dca3d600208db6a473354cd465e49c8d6473f66e962c6a2b11e6", 0x2c}, 0x48, r3) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000780), 0x4) r4 = syz_open_dev$video(&(0x7f0000001b40), 0x1, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000001cc0)={0x8001, 0x0, 0xc3, 0x806, 0x18, "1e7c0d98cea9fd3993f8eb585e13ec33e464c9"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), r4) syz_emit_vhci(&(0x7f0000001f40)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc9, "5957cf2773fbc2a8"}}}, 0xe) 704.736319ms ago: executing program 7 (id=2013): mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000210001000000000000000000010100800c000c060000000000000000140002"], 0x114}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) fcntl$setlease(r1, 0x400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}]}], {0x14}}, 0x78}}, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='exfat\x00', 0x0, 0x0) 597.405066ms ago: executing program 2 (id=2014): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40000000, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) 597.03624ms ago: executing program 7 (id=2015): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x1000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r2, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0xffb}], 0x1) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) 596.744991ms ago: executing program 2 (id=2016): ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc4}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) r1 = syz_io_uring_setup(0x358b, &(0x7f00000000c0)={0x0, 0x810c, 0x80, 0x1, 0x1fb}, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r1, 0xd57, 0xb1ee, 0x16, &(0x7f00000001c0)={[0x8]}, 0x8) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000640)={&(0x7f0000121000/0x1000)=nil, 0x1000}) 497.449054ms ago: executing program 8 (id=2017): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00007a1000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000000c0)="0f7f753ded00000000c7ba00800000c4c2790e29440f01dfc4827d0f76eb0f3235008000000f300f20c035010000000f22c00fc7b700900000f0420fbb7f000f9f7100", 0x43}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x51a4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = mq_open(&(0x7f0000000680)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xaa.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbfF\n\x04So\xe5Z\xe1\xdf\"\x9ay QR\x9d\xd2Se\xcb\x9e]\x98~\x8aY\r\x0e\xae[\xbcD\x16v\x11C\x06\x94\x8e#?\x12\xac4\xb7\x00\x00\x00\x00\x00\x00\x1c_\x8a\x9d\xa1L\xed??2P\x8b\xdf~a', 0x40, 0x0, 0x0) mq_notify(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) (async) mq_notify(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) mq_notify(r7, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000039000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="8fe848ee06380f01d10f21f83500000d000f23f8b8f83aa9970f23d80f21f835800000f00f23f80f01c866bad104b0d1eec4e3b96802ff0f97fe0f0010660f63c4360f78b9fc000000", 0x49}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="650f8a020066b9030100c00f32f20f320fc7a9406366b8005000000f23d00f21f866353000000d0f23f8f3260f32b805008ed8b800088ec80f01c40fdf840b00", 0x40}], 0x1, 0x41, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000f20000070000000700000005002200f1ffff"]) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8, 0x1) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) 424.928597ms ago: executing program 2 (id=2018): r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000540), 0x282000, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000980)={0x17b, 0xd, &(0x7f0000000580)}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="e64f2be8d3e7a2aa", 0x8) ioctl$sock_inet_SIOCSARP(r0, 0x8954, &(0x7f0000000000)={{}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast2}, 'lo\x00'}) socket$nl_rdma(0x10, 0x3, 0x14) r3 = accept4$alg(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="e9c6c5738fa2dd4d05ec80df0cdbc33da8c607086957ba1faa959d3b9b8b0feeee88867e2ce5f8f846ab9ca7d5f3894d50137c8e514938e28c75799bc4e49f06b55a526ba8fc22148cb6d511662e8ab9ec931ce69fb203687edd504252e4369a78302e1a73c27c66c27097fbe7d63a8a1541439c1bbe92f453c8fcda206ce74c83b91e835cf2f519ed895342384eb092950a421595957ef81fdf7b023c7834a4ba58880690f36547a67929d2ff68621f2306dbeece6bed94877db398ce0ee74e832bd2e1a1661bc7894ccf51c6b80f4b8d33494293e5518caa6a57e6b722dbd428361ceb9dfcb4c4a46561010c71720fc426", 0xf2}], 0x1, &(0x7f0000000200)=[@iv={0x58, 0x117, 0x2, 0x3e, "60dd6649c632113d6240f58063838907dc97dfed4285f0dac3dd7053631182cb38f9c5e7f1dc30d8e4e933519ca374412adb17ddca547ae43a52ba62f6bd"}, @iv={0xd8, 0x117, 0x2, 0xc3, "5d028c5268df3ed8e6b392bdf42f70c1368190e89fcab3444aee74a8096fc52910c050936d066f9327522d1f8039d3dc193219c67eac8408b2505c73df2032035215af58a1c88a8e62cf251793ce7b8e82dfc3cf79f4b0a6cf19ca94c0db5078d6cff0265f0f520602c5430acb52b933ef0f33ef9f083cb068dd5f8a33bea0ad459788dc888a6aa844902345b9ec0da94f9ba23ee2ee4f12586ea5a0d87429a0508cb00c52e6807c728f4ce8ee014ec57bce7b118b3a827022d7f7e3539468754b8414"}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x148, 0x20000000}, {0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="17adff779396a6254e6165df8448b81142a51d03aaa1b417fbb549c23534add9b69ad6d711133c9398fb5f139a2854d405d74b2f1a9d2ad6e9b003f106ca24deb33c538aa6d8df4b3dd7c28ffc8471e0aa0892b4790abe7d17865674b1a9f0cd2b56abaf359a2fbb85d99fe4697954cea4d66d9b0d8f307d416bd767dea0f9eba2e2ee199e0af0206e4f755bf1071da4a76e80a90af93ac2c7b7d56706", 0x9d}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x2, 0x80) 367.817395ms ago: executing program 2 (id=2019): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x538, 0xc8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x468, 0xffffffff, 0xffffffff, 0x468, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'wlan0\x00', {0xab43}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x598) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="020000ffffffba00004000", 0xb, 0x0, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="6d6eb1f60783"}, 0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001300010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000180)=0x9, &(0x7f00000001c0)=0x2) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", 0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close_range(r5, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1c15, 0x0, 0x0, &(0x7f0000000100)) 0s ago: executing program 9 (id=2006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x8004) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$RTC_SET_TIME(r4, 0x40247007, &(0x7f0000000040)={0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "3dac81baac14f8d924383cf50b2d1958641ffc0d60c8177b831c72ab2bdc0bb6", "981e22c3da3b791509a6a3fa7677d2998f0fdfede92e47ee850ab0b2ae3ff992", "e40fac137844cf672a7729349596a316f8a2eb24b2cff25e4c298ef1336df02f", "850dd015a0282f19a9e8033aefa7d38bbfd061557b31c3a5aef9f3cb106f1374", "24cb7f09ce5dab5ea3628d9eae4f2837240100000054a00bd22f2261e30f24f5", "e017dc41cf4fbf199be9d4f2"}}) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0xa, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="2800000000000000050000020c00048008000240010000070500030006000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004000) 0s ago: executing program 8 (id=2022): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x24040800) write$dsp(r0, &(0x7f00000001c0)="d1d669c10ab10de4d9f667fc4a299c794e7d7f10e7bcd821a58b563257998027500b36cc013c52493a8866d3e9c647ab77647297023cfcb44f10939f19abcb898f", 0x41) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r3, 0x1000) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) close(r0) kernel console output (not intermixed with test programs): tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 183.690060][T12071] netlink: 160 bytes leftover after parsing attributes in process `syz.6.1736'. [ 183.899629][T12079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1739'. [ 183.914845][T12079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'. [ 183.926904][T12079] xt_l2tp: invalid flags combination: c [ 184.009228][ T58] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 184.111512][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'. [ 184.127725][T12106] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1749'. [ 184.130998][T12106] misc userio: The device must be registered before sending interrupts [ 184.134401][T12106] misc userio: The device must be registered before sending interrupts [ 184.159025][T12110] xt_hashlimit: size too large, truncated to 1048576 [ 184.165577][ T58] usb 11-1: Using ep0 maxpacket: 8 [ 184.172753][ T58] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.176112][ T58] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 184.178814][ T58] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.182351][ T58] usb 11-1: config 0 descriptor?? [ 184.388762][ T58] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 184.643903][T12131] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(ááí«Qÿÿÿÿÿÿÿÿÿÿ [ 184.981386][T12142] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 184.983254][T12142] overlayfs: failed to set xattr on upper [ 184.984864][T12142] overlayfs: ...falling back to redirect_dir=nofollow. [ 184.987612][T12142] overlayfs: ...falling back to metacopy=off. [ 184.989211][T12142] overlayfs: ...falling back to index=off. [ 184.990739][T12142] overlayfs: ...falling back to uuid=null. [ 184.992292][T12142] overlayfs: maximum fs stacking depth exceeded [ 185.097080][ T5965] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 185.335547][ T1015] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 185.349939][T12151] netlink: 'syz.1.1762': attribute type 10 has an invalid length. [ 185.465503][ T1015] usb 12-1: device descriptor read/64, error -71 [ 185.554297][T12166] ALSA: mixer_oss: invalid OSS volume 'DIGITALÈ•žRSAm?2' [ 185.556981][T12166] ALSA: mixer_oss: invalid OSS volume 'åäƒÎî´@¥ Æ' [ 185.669165][ T40] audit: type=1400 audit(1731481856.453:896): avc: denied { setattr } for pid=12180 comm="syz.2.1771" path="socket:[46663]" dev="sockfs" ino=46663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.705283][ T1015] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 185.845773][ T1015] usb 12-1: device descriptor read/64, error -71 [ 185.965345][ T1015] usb usb12-port1: attempt power cycle [ 185.995278][ T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 186.145739][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 186.148598][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 186.151046][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.153634][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.156386][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.159012][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.162727][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 186.165594][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.315829][ T1015] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 186.339236][ T1015] usb 12-1: device descriptor read/8, error -71 [ 186.372234][ T9] usb 7-1: usb_control_msg returned -32 [ 186.373682][ T9] usbtmc 7-1:16.0: can't read capabilities [ 186.376805][T12183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.381234][T12183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.384865][ T58] usb 7-1: USB disconnect, device number 34 [ 186.552332][T12189] xt_hashlimit: size too large, truncated to 1048576 [ 186.575827][ T1015] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 186.625479][ T1015] usb 12-1: device descriptor read/8, error -71 [ 186.737608][ T1015] usb usb12-port1: unable to enumerate USB device [ 186.768073][ T6011] usb 11-1: USB disconnect, device number 12 [ 186.771603][ T6011] iowarrior 11-1:0.0: I/O-Warror #0 now disconnected [ 186.810929][T12195] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1775'. [ 186.813637][T12195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.816473][T12195] batadv0: mtu less than device minimum [ 186.818669][T12195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.822180][T12195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.826023][T12195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.829975][T12195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.833553][T12195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.837021][T12195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.840493][T12195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.843940][T12195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.847402][T12195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 186.868881][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1775'. [ 186.871305][T12197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1775'. [ 186.905919][T12199] support for the xor transformation has been removed. [ 186.998398][ T5965] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 187.263683][T12224] random: crng reseeded on system resumption [ 187.265643][ T40] audit: type=1400 audit(1731481858.053:897): avc: denied { write } for pid=12220 comm="syz.1.1783" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 187.483395][ T40] audit: type=1400 audit(1731481858.263:898): avc: denied { create } for pid=12233 comm="syz.2.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 187.501594][T12224] SELinux: policydb string  does not match my string SE Linux [ 187.503814][T12224] SELinux: failed to load policy [ 187.505991][T12224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1783'. [ 188.145260][T12242] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 188.147604][T12242] overlayfs: failed to set xattr on upper [ 188.149332][T12242] overlayfs: ...falling back to redirect_dir=nofollow. [ 188.151239][T12242] overlayfs: ...falling back to metacopy=off. [ 188.152926][T12242] overlayfs: ...falling back to index=off. [ 188.154537][T12242] overlayfs: ...falling back to uuid=null. [ 188.156574][T12242] overlayfs: maximum fs stacking depth exceeded [ 188.475917][ T1487] usb 12-1: new low-speed USB device number 12 using dummy_hcd [ 188.628778][ T1487] usb 12-1: unable to get BOS descriptor or descriptor too short [ 188.632293][ T1487] usb 12-1: config 1 has an invalid interface number: 222 but max is 0 [ 188.635067][ T1487] usb 12-1: config 1 has no interface number 0 [ 188.637818][ T1487] usb 12-1: config 1 interface 222 altsetting 7 endpoint 0xD has invalid maxpacket 1024, setting to 8 [ 188.641225][ T1487] usb 12-1: config 1 interface 222 has no altsetting 0 [ 188.647279][ T1487] usb 12-1: string descriptor 0 read error: -22 [ 188.649376][ T1487] usb 12-1: New USB device found, idVendor=19d2, idProduct=1057, bcdDevice= 9.6c [ 188.652564][ T1487] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.656986][T12246] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 188.661045][ T1487] option 12-1:1.222: GSM modem (1-port) converter detected [ 188.872226][ T6110] usb 12-1: USB disconnect, device number 12 [ 188.875106][ T6110] option 12-1:1.222: device disconnected [ 189.212612][T12252] xt_hashlimit: size too large, truncated to 1048576 [ 189.585224][T12265] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 189.611820][ T40] audit: type=1400 audit(1731481860.393:899): avc: denied { listen } for pid=12266 comm="syz.7.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.673576][T12271] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 189.675958][T12271] overlayfs: failed to set xattr on upper [ 189.677465][T12271] overlayfs: ...falling back to redirect_dir=nofollow. [ 189.679330][T12271] overlayfs: ...falling back to metacopy=off. [ 189.680930][T12271] overlayfs: ...falling back to index=off. [ 189.682453][T12271] overlayfs: ...falling back to uuid=null. [ 189.684027][T12271] overlayfs: maximum fs stacking depth exceeded [ 189.789880][T12280] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1800'. [ 189.847381][T12286] sctp: [Deprecated]: syz.7.1800 (pid 12286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.847381][T12286] Use struct sctp_sack_info instead [ 189.984189][T12291] ALSA: seq fatal error: cannot create timer (-22) [ 190.315833][ T6110] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 190.467757][ T6110] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 190.470114][ T6110] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.473337][ T6110] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 190.476107][ T6110] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 190.478155][ T6110] usb 7-1: Manufacturer: syz [ 190.480373][ T6110] usb 7-1: config 0 descriptor?? [ 190.535294][ T6110] rc_core: IR keymap rc-hauppauge not found [ 190.537007][ T6110] Registered IR keymap rc-empty [ 190.538879][ T6110] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 190.542315][ T6110] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input38 [ 190.620255][T12298] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 190.622244][T12298] overlayfs: failed to set xattr on upper [ 190.623851][T12298] overlayfs: ...falling back to redirect_dir=nofollow. [ 190.625800][T12298] overlayfs: ...falling back to metacopy=off. [ 190.627426][T12298] overlayfs: ...falling back to index=off. [ 190.628979][T12298] overlayfs: ...falling back to uuid=null. [ 190.630718][T12298] overlayfs: maximum fs stacking depth exceeded [ 190.749656][ T58] usb 7-1: USB disconnect, device number 35 [ 190.955363][ T6110] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 191.126750][ T6110] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.129891][ T6110] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 191.133179][ T6110] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 191.136475][ T6110] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 191.139880][ T6110] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.142521][ T6110] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.145976][ T6110] usb 12-1: config 0 descriptor?? [ 191.374849][T12311] XFS (sr0): Invalid superblock magic number [ 191.450628][T12318] xt_hashlimit: size too large, truncated to 1048576 [ 191.551373][ T6110] usbhid 12-1:0.0: can't add hid device: -71 [ 191.554624][ T6110] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 191.561259][ T6110] usb 12-1: USB disconnect, device number 13 [ 192.080518][T12325] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 192.082451][T12325] overlayfs: failed to set xattr on upper [ 192.084252][T12325] overlayfs: ...falling back to redirect_dir=nofollow. [ 192.091791][T12325] overlayfs: ...falling back to metacopy=off. [ 192.094194][T12325] overlayfs: ...falling back to index=off. [ 192.096561][T12325] overlayfs: ...falling back to uuid=null. [ 192.098876][T12325] overlayfs: maximum fs stacking depth exceeded [ 192.749889][ T5965] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 192.779988][ T40] audit: type=1400 audit(1731481863.563:900): avc: denied { audit_read } for pid=12335 comm="syz.2.1816" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.825226][T12338] FAULT_INJECTION: forcing a failure. [ 192.825226][T12338] name failslab, interval 1, probability 0, space 0, times 0 [ 192.829053][T12338] CPU: 3 UID: 0 PID: 12338 Comm: syz.6.1817 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 192.832773][T12338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.836593][T12338] Call Trace: [ 192.837710][T12338] [ 192.838538][T12338] dump_stack_lvl+0x16c/0x1f0 [ 192.840083][T12338] should_fail_ex+0x497/0x5b0 [ 192.841766][T12338] ? fs_reclaim_acquire+0xae/0x150 [ 192.843756][T12338] should_failslab+0xc2/0x120 [ 192.845483][T12338] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 192.847413][T12338] ? security_inode_alloc+0x3b/0x2b0 [ 192.849216][T12338] security_inode_alloc+0x3b/0x2b0 [ 192.850864][T12338] inode_init_always_gfp+0xc5f/0xfb0 [ 192.852676][T12338] ? debug_mutex_init+0x37/0x70 [ 192.854392][T12338] ? __pfx_ovl_inode_set+0x10/0x10 [ 192.856082][T12338] alloc_inode+0x82/0x230 [ 192.857666][T12338] iget5_locked+0x33b/0x3d0 [ 192.859362][T12338] ? __pfx_ovl_inode_test+0x10/0x10 [ 192.861307][T12338] ? __pfx_ovl_inode_set+0x10/0x10 [ 192.863047][T12338] ? __pfx_iget5_locked+0x10/0x10 [ 192.864365][T12338] ? trace_kmalloc+0x2d/0xe0 [ 192.865726][T12338] ovl_get_trap_inode+0xb2/0x200 [ 192.867474][T12338] ovl_fill_super+0x7f4/0x6720 [ 192.869152][T12338] ? shrinker_register+0x154/0x260 [ 192.870790][T12338] ? __pfx_lock_release+0x10/0x10 [ 192.872188][T12338] ? __mutex_lock+0x1a6/0x9c0 [ 192.873485][T12338] ? __pfx___mutex_lock+0x10/0x10 [ 192.874746][T12338] ? __pfx_ovl_fill_super+0x10/0x10 [ 192.876465][T12338] ? lockdep_init_map_type+0x16d/0x7d0 [ 192.878508][T12338] ? lockdep_init_map_type+0x16d/0x7d0 [ 192.880461][T12338] ? __init_swait_queue_head+0xca/0x150 [ 192.882343][T12338] ? shrinker_register+0x1a8/0x260 [ 192.884113][T12338] ? sget_fc+0x808/0xc20 [ 192.885574][T12338] ? cap_capable+0x1cf/0x240 [ 192.887194][T12338] ? __pfx_ovl_fill_super+0x10/0x10 [ 192.888981][T12338] ? get_tree_nodev+0xda/0x190 [ 192.890621][T12338] get_tree_nodev+0xda/0x190 [ 192.892239][T12338] vfs_get_tree+0x8f/0x380 [ 192.893852][T12338] path_mount+0x14e6/0x1f20 [ 192.895456][T12338] ? kmem_cache_free+0x152/0x4b0 [ 192.897308][T12338] ? __pfx_path_mount+0x10/0x10 [ 192.898946][T12338] ? putname+0x12e/0x170 [ 192.900214][T12338] __x64_sys_mount+0x294/0x320 [ 192.901554][T12338] ? __pfx___x64_sys_mount+0x10/0x10 [ 192.903011][T12338] do_syscall_64+0xcd/0x250 [ 192.904331][T12338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.906417][T12338] RIP: 0033:0x7f3918d7e719 [ 192.908023][T12338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.914735][T12338] RSP: 002b:00007f3919c62038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 192.917070][T12338] RAX: ffffffffffffffda RBX: 00007f3918f35f80 RCX: 00007f3918d7e719 [ 192.919241][T12338] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 192.921514][T12338] RBP: 00007f3919c62090 R08: 0000000020000500 R09: 0000000000000000 [ 192.924377][T12338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.927267][T12338] R13: 0000000000000000 R14: 00007f3918f35f80 R15: 00007ffcb11eec98 [ 192.930035][T12338] [ 192.931293][ C3] vkms_vblank_simulate: vblank timer overrun [ 192.971724][T12348] xt_hashlimit: size too large, truncated to 1048576 [ 193.255292][ T9] usb 12-1: new low-speed USB device number 14 using dummy_hcd [ 193.405290][ T9] usb 12-1: Invalid ep0 maxpacket: 32 [ 193.535278][ T9] usb 12-1: new low-speed USB device number 15 using dummy_hcd [ 193.685331][ T9] usb 12-1: Invalid ep0 maxpacket: 32 [ 193.688479][ T9] usb usb12-port1: attempt power cycle [ 193.803953][T12359] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 193.807126][T12359] overlayfs: failed to set xattr on upper [ 193.809079][T12359] overlayfs: ...falling back to redirect_dir=nofollow. [ 193.811182][T12359] overlayfs: ...falling back to metacopy=off. [ 193.812747][T12359] overlayfs: ...falling back to index=off. [ 193.814277][T12359] overlayfs: ...falling back to uuid=null. [ 193.815922][T12359] overlayfs: maximum fs stacking depth exceeded [ 193.825370][ T1015] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 193.882278][ T5965] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 193.952454][T12365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1826'. [ 193.977166][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.986691][ T1015] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.989766][ T1015] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 193.992704][ T1015] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 193.995653][ T1015] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.999392][ T1015] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.002325][ T1015] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.005789][ T1015] usb 11-1: config 0 descriptor?? [ 194.027773][ T9] usb 12-1: new low-speed USB device number 16 using dummy_hcd [ 194.055815][ T9] usb 12-1: Invalid ep0 maxpacket: 32 [ 194.185436][ T9] usb 12-1: new low-speed USB device number 17 using dummy_hcd [ 194.215989][ T9] usb 12-1: Invalid ep0 maxpacket: 32 [ 194.218569][ T9] usb usb12-port1: unable to enumerate USB device [ 194.612017][ T1015] usbhid 11-1:0.0: can't add hid device: -71 [ 194.613914][ T1015] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 194.621964][ T1015] usb 11-1: USB disconnect, device number 13 [ 195.151411][T12377] FAULT_INJECTION: forcing a failure. [ 195.151411][T12377] name failslab, interval 1, probability 0, space 0, times 0 [ 195.156396][T12377] CPU: 1 UID: 0 PID: 12377 Comm: syz.6.1829 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 195.160010][T12377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.163664][T12377] Call Trace: [ 195.164839][T12377] [ 195.165958][T12377] dump_stack_lvl+0x16c/0x1f0 [ 195.167840][T12377] should_fail_ex+0x497/0x5b0 [ 195.169622][T12377] ? fs_reclaim_acquire+0xae/0x150 [ 195.171488][T12377] should_failslab+0xc2/0x120 [ 195.173112][T12377] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 195.174949][T12377] ? alloc_vfsmnt+0x23/0x6e0 [ 195.177100][T12377] alloc_vfsmnt+0x23/0x6e0 [ 195.178645][T12377] clone_mnt+0x6d/0xf90 [ 195.180097][T12377] clone_private_mount+0x296/0x3a0 [ 195.181856][T12377] ovl_fill_super+0x855/0x6720 [ 195.183619][T12377] ? shrinker_register+0x154/0x260 [ 195.185649][T12377] ? __pfx_lock_release+0x10/0x10 [ 195.187798][T12377] ? __mutex_lock+0x1a6/0x9c0 [ 195.189571][T12377] ? __pfx___mutex_lock+0x10/0x10 [ 195.191347][T12377] ? __pfx_ovl_fill_super+0x10/0x10 [ 195.193142][T12377] ? lockdep_init_map_type+0x16d/0x7d0 [ 195.195049][T12377] ? lockdep_init_map_type+0x16d/0x7d0 [ 195.196910][T12377] ? __init_swait_queue_head+0xca/0x150 [ 195.198815][T12377] ? shrinker_register+0x1a8/0x260 [ 195.200562][T12377] ? sget_fc+0x808/0xc20 [ 195.202055][T12377] ? cap_capable+0x1cf/0x240 [ 195.203814][T12377] ? __pfx_ovl_fill_super+0x10/0x10 [ 195.205795][T12377] ? get_tree_nodev+0xda/0x190 [ 195.207581][T12377] get_tree_nodev+0xda/0x190 [ 195.209277][T12377] vfs_get_tree+0x8f/0x380 [ 195.210793][T12377] path_mount+0x14e6/0x1f20 [ 195.212240][T12377] ? kmem_cache_free+0x152/0x4b0 [ 195.213975][T12377] ? __pfx_path_mount+0x10/0x10 [ 195.215714][T12377] ? putname+0x12e/0x170 [ 195.217270][T12377] __x64_sys_mount+0x294/0x320 [ 195.219029][T12377] ? __pfx___x64_sys_mount+0x10/0x10 [ 195.221014][T12377] do_syscall_64+0xcd/0x250 [ 195.222834][T12377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.225086][T12377] RIP: 0033:0x7f3918d7e719 [ 195.226685][T12377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.231814][T12377] RSP: 002b:00007f3919c62038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 195.234011][T12377] RAX: ffffffffffffffda RBX: 00007f3918f35f80 RCX: 00007f3918d7e719 [ 195.236327][T12377] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 195.238665][T12377] RBP: 00007f3919c62090 R08: 0000000020000500 R09: 0000000000000000 [ 195.240874][T12377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.242951][T12377] R13: 0000000000000000 R14: 00007f3918f35f80 R15: 00007ffcb11eec98 [ 195.244997][T12377] [ 195.247994][T12377] overlayfs: failed to clone upperpath [ 195.278434][T12379] xt_hashlimit: size too large, truncated to 1048576 [ 195.305667][ T1015] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 195.455315][ T1015] usb 7-1: Using ep0 maxpacket: 8 [ 195.459308][ T1015] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 195.462374][ T1015] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 195.466747][ T1015] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.471638][ T1015] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 195.476570][ T1015] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 195.481857][ T1015] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 195.484815][ T1015] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 195.489706][ T1015] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.494641][ T1015] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 195.499484][ T1015] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 195.507319][ T1015] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 195.510968][ T1015] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 195.515420][ T1015] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.519704][ T1015] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 195.523792][ T1015] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 195.531921][ T1015] usb 7-1: string descriptor 0 read error: -22 [ 195.534797][ T1015] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 195.538454][ T1015] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.547490][ T1015] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 195.747857][ T58] usb 7-1: USB disconnect, device number 36 [ 195.862972][T12389] kAFS: Can only specify source 'none' with -o dyn [ 196.059178][T12401] bridge0: port 3(erspan0) entered blocking state [ 196.063241][T12401] bridge0: port 3(erspan0) entered disabled state [ 196.066177][ T5965] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 196.069093][T12401] erspan0: entered allmulticast mode [ 196.071099][T12401] erspan0: entered promiscuous mode [ 196.072732][T12401] bridge0: port 3(erspan0) entered blocking state [ 196.074674][T12401] bridge0: port 3(erspan0) entered forwarding state [ 196.128161][T12405] FAULT_INJECTION: forcing a failure. [ 196.128161][T12405] name failslab, interval 1, probability 0, space 0, times 0 [ 196.131480][T12405] CPU: 1 UID: 0 PID: 12405 Comm: syz.7.1838 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 196.134620][T12405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 196.138652][T12405] Call Trace: [ 196.140109][T12405] [ 196.140896][T12405] dump_stack_lvl+0x16c/0x1f0 [ 196.142308][T12405] should_fail_ex+0x497/0x5b0 [ 196.143998][T12405] ? fs_reclaim_acquire+0xae/0x150 [ 196.145871][T12405] should_failslab+0xc2/0x120 [ 196.147591][T12405] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 196.149889][T12405] ? alloc_vfsmnt+0x23/0x6e0 [ 196.152031][T12405] alloc_vfsmnt+0x23/0x6e0 [ 196.153793][T12405] clone_mnt+0x6d/0xf90 [ 196.155434][T12405] clone_private_mount+0x296/0x3a0 [ 196.157213][T12405] ovl_fill_super+0x855/0x6720 [ 196.158488][T12405] ? shrinker_register+0x154/0x260 [ 196.160333][T12405] ? __pfx_lock_release+0x10/0x10 [ 196.162175][T12405] ? __mutex_lock+0x1a6/0x9c0 [ 196.164038][T12405] ? __pfx___mutex_lock+0x10/0x10 [ 196.165859][T12405] ? __pfx_ovl_fill_super+0x10/0x10 [ 196.167482][T12405] ? lockdep_init_map_type+0x16d/0x7d0 [ 196.169234][T12405] ? lockdep_init_map_type+0x16d/0x7d0 [ 196.171269][T12405] ? __init_swait_queue_head+0xca/0x150 [ 196.173249][T12405] ? shrinker_register+0x1a8/0x260 [ 196.175074][T12405] ? sget_fc+0x808/0xc20 [ 196.176339][T12405] ? cap_capable+0x1cf/0x240 [ 196.177586][T12405] ? __pfx_ovl_fill_super+0x10/0x10 [ 196.179218][T12405] ? get_tree_nodev+0xda/0x190 [ 196.181105][T12405] get_tree_nodev+0xda/0x190 [ 196.182738][T12405] vfs_get_tree+0x8f/0x380 [ 196.184176][T12405] path_mount+0x14e6/0x1f20 [ 196.185476][T12405] ? kmem_cache_free+0x152/0x4b0 [ 196.186874][T12405] ? __pfx_path_mount+0x10/0x10 [ 196.188272][T12405] ? putname+0x12e/0x170 [ 196.189574][T12405] __x64_sys_mount+0x294/0x320 [ 196.190889][T12405] ? __pfx___x64_sys_mount+0x10/0x10 [ 196.192330][T12405] do_syscall_64+0xcd/0x250 [ 196.193551][T12405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.195750][T12405] RIP: 0033:0x7f7506b7e719 [ 196.196964][T12405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.202320][T12405] RSP: 002b:00007f7507972038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 196.204882][T12405] RAX: ffffffffffffffda RBX: 00007f7506d35f80 RCX: 00007f7506b7e719 [ 196.207601][T12405] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 196.209821][T12405] RBP: 00007f7507972090 R08: 0000000020000500 R09: 0000000000000000 [ 196.211957][T12405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.214215][T12405] R13: 0000000000000000 R14: 00007f7506d35f80 R15: 00007ffcd9777f18 [ 196.216571][T12405] [ 196.237714][T12405] overlayfs: failed to clone upperpath [ 196.321683][T12408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12408 comm=syz.7.1839 [ 196.465538][ T58] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 196.628041][ T58] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.631522][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 196.634511][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 196.637702][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.641372][ T58] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.643835][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.650844][ T58] usb 7-1: config 0 descriptor?? [ 197.257865][ T58] usbhid 7-1:0.0: can't add hid device: -71 [ 197.259661][ T58] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 197.264854][ T58] usb 7-1: USB disconnect, device number 37 [ 197.270129][T12418] netlink: 134744 bytes leftover after parsing attributes in process `syz.7.1843'. [ 197.459544][T12433] xt_hashlimit: size too large, truncated to 1048576 [ 197.534913][T12439] FAULT_INJECTION: forcing a failure. [ 197.534913][T12439] name failslab, interval 1, probability 0, space 0, times 0 [ 197.541006][T12439] CPU: 3 UID: 0 PID: 12439 Comm: syz.7.1849 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 197.544601][T12439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 197.548411][T12439] Call Trace: [ 197.549862][T12439] [ 197.551155][T12439] dump_stack_lvl+0x16c/0x1f0 [ 197.552941][T12439] should_fail_ex+0x497/0x5b0 [ 197.554511][T12439] ? fs_reclaim_acquire+0xae/0x150 [ 197.556416][T12439] should_failslab+0xc2/0x120 [ 197.557715][T12439] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 197.559260][T12439] ? security_inode_alloc+0x3b/0x2b0 [ 197.560804][T12439] security_inode_alloc+0x3b/0x2b0 [ 197.562164][T12439] inode_init_always_gfp+0xc5f/0xfb0 [ 197.563573][T12439] ? debug_mutex_init+0x37/0x70 [ 197.564857][T12439] ? __pfx_ovl_inode_set+0x10/0x10 [ 197.566391][T12439] alloc_inode+0x82/0x230 [ 197.567586][T12439] iget5_locked+0x33b/0x3d0 [ 197.568764][T12439] ? __pfx_ovl_inode_test+0x10/0x10 [ 197.570124][T12439] ? __pfx_ovl_inode_set+0x10/0x10 [ 197.571495][T12439] ? __pfx_iget5_locked+0x10/0x10 [ 197.572860][T12439] ? __pfx_lock_release+0x10/0x10 [ 197.574279][T12439] ? do_raw_spin_lock+0x12d/0x2c0 [ 197.575743][T12439] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 197.577226][T12439] ? lock_acquire+0x2f/0xb0 [ 197.578787][T12439] ? ovl_inuse_trylock+0x46/0xe0 [ 197.580206][T12439] ovl_get_trap_inode+0xb2/0x200 [ 197.581504][T12439] ovl_fill_super+0xda6/0x6720 [ 197.582765][T12439] ? shrinker_register+0x154/0x260 [ 197.584057][T12439] ? __pfx_lock_release+0x10/0x10 [ 197.585203][T12439] ? __pfx___mutex_lock+0x10/0x10 [ 197.586659][T12439] ? __pfx_ovl_fill_super+0x10/0x10 [ 197.588203][T12439] ? lockdep_init_map_type+0x16d/0x7d0 [ 197.589744][T12439] ? lockdep_init_map_type+0x16d/0x7d0 [ 197.591386][T12439] ? __init_swait_queue_head+0xca/0x150 [ 197.593038][T12439] ? shrinker_register+0x1a8/0x260 [ 197.594532][T12439] ? sget_fc+0x808/0xc20 [ 197.595708][T12439] ? cap_capable+0x1cf/0x240 [ 197.597137][T12439] ? __pfx_ovl_fill_super+0x10/0x10 [ 197.599076][T12439] ? get_tree_nodev+0xda/0x190 [ 197.600783][T12439] get_tree_nodev+0xda/0x190 [ 197.602409][T12439] vfs_get_tree+0x8f/0x380 [ 197.603998][T12439] path_mount+0x14e6/0x1f20 [ 197.605620][T12439] ? kmem_cache_free+0x152/0x4b0 [ 197.607539][T12439] ? __pfx_path_mount+0x10/0x10 [ 197.609356][T12439] ? putname+0x12e/0x170 [ 197.610806][T12439] __x64_sys_mount+0x294/0x320 [ 197.612683][T12439] ? __pfx___x64_sys_mount+0x10/0x10 [ 197.614705][T12439] do_syscall_64+0xcd/0x250 [ 197.616284][T12439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.617981][T12439] RIP: 0033:0x7f7506b7e719 [ 197.619187][T12439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.624200][T12439] RSP: 002b:00007f7507972038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 197.626591][T12439] RAX: ffffffffffffffda RBX: 00007f7506d35f80 RCX: 00007f7506b7e719 [ 197.629589][T12439] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 197.632608][T12439] RBP: 00007f7507972090 R08: 0000000020000500 R09: 0000000000000000 [ 197.635341][T12439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.638107][T12439] R13: 0000000000000000 R14: 00007f7506d35f80 R15: 00007ffcd9777f18 [ 197.640902][T12439] [ 197.935307][ T6010] usb 12-1: new full-speed USB device number 18 using dummy_hcd [ 198.033402][ T40] audit: type=1400 audit(1731481868.813:901): avc: denied { getopt } for pid=12447 comm="syz.2.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.081798][ T40] audit: type=1400 audit(1731481868.873:902): avc: denied { setopt } for pid=12454 comm="syz.6.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 198.097327][ T6010] usb 12-1: unable to get BOS descriptor or descriptor too short [ 198.101099][ T6010] usb 12-1: not running at top speed; connect to a high speed hub [ 198.104216][ T6010] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.107199][ T6010] usb 12-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 198.110815][ T6010] usb 12-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 198.114843][ T6010] usb 12-1: config 1 interface 0 has no altsetting 0 [ 198.120998][ T40] audit: type=1400 audit(1731481868.903:903): avc: denied { mounton } for pid=12458 comm="syz.6.1858" path="/proc/648/cgroup" dev="proc" ino=49255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 198.124795][ T6010] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.131291][T12459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=12459 comm=syz.6.1858 [ 198.132194][ T6010] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.140266][ T6010] usb 12-1: Product: syz [ 198.141460][ T6010] usb 12-1: Manufacturer: syz [ 198.142819][ T6010] usb 12-1: SerialNumber: syz [ 198.354379][T12466] FAULT_INJECTION: forcing a failure. [ 198.354379][T12466] name failslab, interval 1, probability 0, space 0, times 0 [ 198.359474][T12466] CPU: 3 UID: 0 PID: 12466 Comm: syz.2.1860 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 198.363170][T12466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 198.366327][T12466] Call Trace: [ 198.367508][T12466] [ 198.368585][T12466] dump_stack_lvl+0x16c/0x1f0 [ 198.370253][T12466] should_fail_ex+0x497/0x5b0 [ 198.371917][T12466] ? fs_reclaim_acquire+0xae/0x150 [ 198.373776][T12466] should_failslab+0xc2/0x120 [ 198.375533][T12466] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 198.377532][T12466] ? __d_alloc+0x31/0xaa0 [ 198.379063][T12466] __d_alloc+0x31/0xaa0 [ 198.380503][T12466] ? avc_has_perm_noaudit+0x119/0x3a0 [ 198.382054][T12466] d_alloc+0x4a/0x1e0 [ 198.383459][T12466] d_alloc_parallel+0xe9/0x12b0 [ 198.385234][T12466] ? __pfx_d_alloc_parallel+0x10/0x10 [ 198.387138][T12466] ? lockdep_init_map_type+0x16d/0x7d0 [ 198.389077][T12466] ? mark_lock+0xb5/0xc60 [ 198.390620][T12466] ? lockdep_init_map_type+0x16d/0x7d0 [ 198.392449][T12466] __lookup_slow+0x194/0x460 [ 198.393902][T12466] ? __pfx___lookup_slow+0x10/0x10 [ 198.395304][T12466] ? __pfx_lock_release+0x10/0x10 [ 198.396904][T12466] ? d_lookup+0xe9/0x180 [ 198.398130][T12466] lookup_one+0x185/0x1c0 [ 198.398326][ T40] audit: type=1400 audit(1731481869.183:904): avc: denied { getopt } for pid=12440 comm="syz.7.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 198.399307][T12466] ? __pfx_lookup_one+0x10/0x10 [ 198.406174][T12466] ? __pfx___lock_acquire+0x10/0x10 [ 198.407767][T12466] ? inode_init_always_gfp+0xc80/0xfb0 [ 198.409374][T12466] ovl_workdir_create+0x1d6/0x820 [ 198.411056][T12466] ? __pfx_ovl_workdir_create+0x10/0x10 [ 198.412717][T12466] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 198.414284][T12466] ? mnt_get_write_access+0x6a/0x300 [ 198.415761][T12466] ? lock_acquire+0x2f/0xb0 [ 198.417020][T12466] ? mnt_get_write_access+0x6a/0x300 [ 198.418479][T12466] ? mnt_get_write_access+0x6a/0x300 [ 198.420254][T12466] ? mnt_get_write_access+0x20c/0x300 [ 198.422103][T12466] ovl_fill_super+0xe6b/0x6720 [ 198.423738][T12466] ? shrinker_register+0x154/0x260 [ 198.425150][T12466] ? __pfx_lock_release+0x10/0x10 [ 198.426908][T12466] ? __pfx___mutex_lock+0x10/0x10 [ 198.428388][T12466] ? __pfx_ovl_fill_super+0x10/0x10 [ 198.429976][T12466] ? lockdep_init_map_type+0x16d/0x7d0 [ 198.431594][T12466] ? lockdep_init_map_type+0x16d/0x7d0 [ 198.433129][T12466] ? __init_swait_queue_head+0xca/0x150 [ 198.434775][T12466] ? shrinker_register+0x1a8/0x260 [ 198.436251][T12466] ? sget_fc+0x808/0xc20 [ 198.437420][T12466] ? cap_capable+0x1cf/0x240 [ 198.438788][T12466] ? __pfx_ovl_fill_super+0x10/0x10 [ 198.440264][T12466] ? get_tree_nodev+0xda/0x190 [ 198.441611][T12466] get_tree_nodev+0xda/0x190 [ 198.442884][T12466] vfs_get_tree+0x8f/0x380 [ 198.444143][T12466] path_mount+0x14e6/0x1f20 [ 198.445435][T12466] ? kmem_cache_free+0x152/0x4b0 [ 198.446821][T12466] ? __pfx_path_mount+0x10/0x10 [ 198.448630][T12466] ? putname+0x12e/0x170 [ 198.450326][T12466] __x64_sys_mount+0x294/0x320 [ 198.452034][T12466] ? __pfx___x64_sys_mount+0x10/0x10 [ 198.453149][T12467] misc userio: Invalid payload size [ 198.453758][T12466] do_syscall_64+0xcd/0x250 [ 198.453784][T12466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.453805][T12466] RIP: 0033:0x7faecad7e719 [ 198.459766][T12466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.464980][T12466] RSP: 002b:00007faecbadb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 198.467590][T12466] RAX: ffffffffffffffda RBX: 00007faecaf35f80 RCX: 00007faecad7e719 [ 198.470389][T12466] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 198.473150][T12466] RBP: 00007faecbadb090 R08: 0000000020000500 R09: 0000000000000000 [ 198.475350][T12466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.477754][T12466] R13: 0000000000000000 R14: 00007faecaf35f80 R15: 00007ffc2be40aa8 [ 198.479997][T12466] [ 198.483876][T12466] overlayfs: failed to create directory ./bus/work (errno: 12); mounting read-only [ 198.487132][T12466] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 198.489969][T12466] overlayfs: maximum fs stacking depth exceeded [ 198.535999][ T58] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 198.547913][T12471] xt_hashlimit: size too large, truncated to 1048576 [ 198.697482][ T58] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.701458][ T58] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 198.705823][ T58] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 198.709347][ T58] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 198.714052][ T58] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.717382][ T58] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.722310][ T58] usb 11-1: config 0 descriptor?? [ 198.860325][ T6010] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -22 [ 198.867612][ T6010] usb 12-1: USB disconnect, device number 18 [ 199.330420][ T58] usbhid 11-1:0.0: can't add hid device: -71 [ 199.332465][ T58] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 199.338270][ T58] usb 11-1: USB disconnect, device number 14 [ 199.462141][T12487] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 199.464692][T12487] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock [ 199.468671][T12487] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 199.470840][T12487] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock [ 199.507306][T12489] FAULT_INJECTION: forcing a failure. [ 199.507306][T12489] name failslab, interval 1, probability 0, space 0, times 0 [ 199.510614][T12489] CPU: 3 UID: 0 PID: 12489 Comm: syz.7.1869 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 199.513565][T12489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 199.516341][T12489] Call Trace: [ 199.517199][T12489] [ 199.517968][T12489] dump_stack_lvl+0x16c/0x1f0 [ 199.519302][T12489] should_fail_ex+0x497/0x5b0 [ 199.520572][T12489] ? fs_reclaim_acquire+0xae/0x150 [ 199.522082][T12489] should_failslab+0xc2/0x120 [ 199.523500][T12489] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 199.525223][T12489] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 199.526921][T12489] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 199.528533][T12489] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 199.530085][T12489] alloc_inode+0x5d/0x230 [ 199.531282][T12489] new_inode+0x22/0x210 [ 199.532495][T12489] ? __pfx_may_create+0x10/0x10 [ 199.533805][T12489] hugetlbfs_get_inode+0x53/0x530 [ 199.535167][T12489] hugetlbfs_mknod+0x5e/0x140 [ 199.536435][T12489] hugetlbfs_mkdir+0x31/0x80 [ 199.537703][T12489] vfs_mkdir+0x57d/0x860 [ 199.538848][T12489] ovl_mkdir_real+0xb5/0x380 [ 199.540219][T12489] ovl_workdir_create+0x3e2/0x820 [ 199.541556][T12489] ? __pfx_ovl_workdir_create+0x10/0x10 [ 199.543185][T12489] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 199.544720][T12489] ? mnt_get_write_access+0x6a/0x300 [ 199.546121][T12489] ? mnt_get_write_access+0x20c/0x300 [ 199.547697][T12489] ovl_fill_super+0xe6b/0x6720 [ 199.549150][T12489] ? shrinker_register+0x154/0x260 [ 199.550513][T12489] ? __pfx_lock_release+0x10/0x10 [ 199.551882][T12489] ? __pfx___mutex_lock+0x10/0x10 [ 199.553218][T12489] ? __pfx_ovl_fill_super+0x10/0x10 [ 199.554612][T12489] ? lockdep_init_map_type+0x16d/0x7d0 [ 199.556071][T12489] ? lockdep_init_map_type+0x16d/0x7d0 [ 199.557501][T12489] ? __init_swait_queue_head+0xca/0x150 [ 199.558943][T12489] ? shrinker_register+0x1a8/0x260 [ 199.560318][T12489] ? sget_fc+0x808/0xc20 [ 199.561446][T12489] ? cap_capable+0x1cf/0x240 [ 199.562694][T12489] ? __pfx_ovl_fill_super+0x10/0x10 [ 199.564128][T12489] ? get_tree_nodev+0xda/0x190 [ 199.565434][T12489] get_tree_nodev+0xda/0x190 [ 199.566674][T12489] vfs_get_tree+0x8f/0x380 [ 199.568246][T12489] path_mount+0x14e6/0x1f20 [ 199.569457][T12489] ? kmem_cache_free+0x152/0x4b0 [ 199.570778][T12489] ? __pfx_path_mount+0x10/0x10 [ 199.572121][T12489] ? putname+0x12e/0x170 [ 199.573419][T12489] __x64_sys_mount+0x294/0x320 [ 199.574719][T12489] ? __pfx___x64_sys_mount+0x10/0x10 [ 199.576208][T12489] do_syscall_64+0xcd/0x250 [ 199.577462][T12489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.579151][T12489] RIP: 0033:0x7f7506b7e719 [ 199.580556][T12489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.585894][T12489] RSP: 002b:00007f7507972038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 199.588109][T12489] RAX: ffffffffffffffda RBX: 00007f7506d35f80 RCX: 00007f7506b7e719 [ 199.590340][T12489] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 199.592439][T12489] RBP: 00007f7507972090 R08: 0000000020000500 R09: 0000000000000000 [ 199.594593][T12489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.596762][T12489] R13: 0000000000000000 R14: 00007f7506d35f80 R15: 00007ffcd9777f18 [ 199.599353][T12489] [ 199.602584][T12489] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 199.606807][T12489] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 199.610675][T12489] overlayfs: maximum fs stacking depth exceeded [ 199.655764][ T6110] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 199.662643][T12495] xt_hashlimit: size too large, truncated to 1048576 [ 199.817035][ T6110] usb 7-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 199.820129][ T6110] usb 7-1: config 0 interface 0 has no altsetting 0 [ 199.823536][ T6110] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 199.835675][ T6110] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.837897][ T6110] usb 7-1: Product: syz [ 199.839155][ T6110] usb 7-1: Manufacturer: syz [ 199.840464][ T6110] usb 7-1: SerialNumber: syz [ 199.842862][ T6110] usb 7-1: config 0 descriptor?? [ 199.877307][ T6110] keyspan 7-1:0.0: Keyspan 2 port adapter converter detected [ 199.880137][ T6110] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7 [ 199.883559][ T6110] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81 [ 199.886052][ T6110] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 199.888193][ T6110] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 199.890222][ T6110] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85 [ 199.892166][ T6110] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5 [ 199.896373][ T6110] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 199.903586][ T6110] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 83 [ 199.907169][ T6110] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 3 [ 199.909333][ T6110] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4 [ 199.911354][ T6110] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 86 [ 199.913421][ T6110] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6 [ 199.916881][ T6110] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 200.079840][T12481] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 200.084663][ T6110] usb 7-1: USB disconnect, device number 38 [ 200.094212][ T6110] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 200.102546][ T6110] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 200.110327][ T6110] keyspan 7-1:0.0: device disconnected [ 200.120342][ T40] audit: type=1400 audit(1731481870.903:905): avc: denied { accept } for pid=12506 comm="syz.6.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 200.202285][T12513] qrtr: Invalid version 0 [ 200.205113][T12513] netlink: 'syz.6.1877': attribute type 1 has an invalid length. [ 200.228210][T12513] bond3: entered promiscuous mode [ 200.230145][T12513] bond3: entered allmulticast mode [ 200.232362][T12513] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.247965][T12513] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 200.250677][T12513] bond3: (slave batadv1): making interface the new active one [ 200.252789][T12513] batadv1: entered promiscuous mode [ 200.254350][T12513] batadv1: entered allmulticast mode [ 200.256866][T12513] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 200.281578][ T40] audit: type=1400 audit(1731481871.063:906): avc: denied { ioctl } for pid=12515 comm="syz.6.1878" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 200.333182][ T40] audit: type=1400 audit(1731481871.113:907): avc: denied { bind } for pid=12515 comm="syz.6.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 200.376828][T12520] FAULT_INJECTION: forcing a failure. [ 200.376828][T12520] name failslab, interval 1, probability 0, space 0, times 0 [ 200.380055][T12520] CPU: 2 UID: 0 PID: 12520 Comm: syz.6.1879 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 200.382686][T12520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 200.385921][T12520] Call Trace: [ 200.386855][T12520] [ 200.387668][T12520] dump_stack_lvl+0x16c/0x1f0 [ 200.388901][T12520] should_fail_ex+0x497/0x5b0 [ 200.390159][T12520] ? fs_reclaim_acquire+0xae/0x150 [ 200.391551][T12520] should_failslab+0xc2/0x120 [ 200.392800][T12520] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 200.394289][T12520] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 200.395661][T12520] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 200.396965][T12520] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 200.398476][T12520] alloc_inode+0x5d/0x230 [ 200.399588][T12520] new_inode+0x22/0x210 [ 200.400656][T12520] ? __pfx_may_create+0x10/0x10 [ 200.401915][T12520] hugetlbfs_get_inode+0x53/0x530 [ 200.403360][T12520] hugetlbfs_mknod+0x5e/0x140 [ 200.404763][T12520] hugetlbfs_mkdir+0x31/0x80 [ 200.406121][T12520] vfs_mkdir+0x57d/0x860 [ 200.407244][T12520] ovl_mkdir_real+0xb5/0x380 [ 200.408435][T12520] ovl_workdir_create+0x3e2/0x820 [ 200.409710][T12520] ? __pfx_ovl_workdir_create+0x10/0x10 [ 200.411114][T12520] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 200.412537][T12520] ? mnt_get_write_access+0x6a/0x300 [ 200.413881][T12520] ? mnt_get_write_access+0x20c/0x300 [ 200.415250][T12520] ovl_fill_super+0xe6b/0x6720 [ 200.416447][T12520] ? shrinker_register+0x154/0x260 [ 200.417772][T12520] ? __pfx_lock_release+0x10/0x10 [ 200.419091][T12520] ? __pfx___mutex_lock+0x10/0x10 [ 200.420336][T12520] ? __pfx_ovl_fill_super+0x10/0x10 [ 200.421669][T12520] ? lockdep_init_map_type+0x16d/0x7d0 [ 200.423106][T12520] ? lockdep_init_map_type+0x16d/0x7d0 [ 200.424516][T12520] ? __init_swait_queue_head+0xca/0x150 [ 200.425999][T12520] ? shrinker_register+0x1a8/0x260 [ 200.427390][T12520] ? sget_fc+0x808/0xc20 [ 200.428520][T12520] ? cap_capable+0x1cf/0x240 [ 200.429757][T12520] ? __pfx_ovl_fill_super+0x10/0x10 [ 200.431088][T12520] ? get_tree_nodev+0xda/0x190 [ 200.432355][T12520] get_tree_nodev+0xda/0x190 [ 200.433549][T12520] vfs_get_tree+0x8f/0x380 [ 200.434706][T12520] path_mount+0x14e6/0x1f20 [ 200.435874][T12520] ? kmem_cache_free+0x152/0x4b0 [ 200.437103][T12520] ? __pfx_path_mount+0x10/0x10 [ 200.438323][T12520] ? putname+0x12e/0x170 [ 200.439460][T12520] __x64_sys_mount+0x294/0x320 [ 200.440698][T12520] ? __pfx___x64_sys_mount+0x10/0x10 [ 200.442128][T12520] do_syscall_64+0xcd/0x250 [ 200.443416][T12520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.445066][T12520] RIP: 0033:0x7f3918d7e719 [ 200.446240][T12520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.451050][T12520] RSP: 002b:00007f3919c62038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 200.453114][T12520] RAX: ffffffffffffffda RBX: 00007f3918f35f80 RCX: 00007f3918d7e719 [ 200.455129][T12520] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 200.457248][T12520] RBP: 00007f3919c62090 R08: 0000000020000500 R09: 0000000000000000 [ 200.459449][T12520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.461510][T12520] R13: 0000000000000000 R14: 00007f3918f35f80 R15: 00007ffcb11eec98 [ 200.463589][T12520] [ 200.466309][T12520] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 200.470108][T12520] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 200.474383][T12520] overlayfs: maximum fs stacking depth exceeded [ 200.729078][ T40] audit: type=1400 audit(1731481871.513:908): avc: denied { getopt } for pid=12533 comm="syz.2.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 200.755965][ T6110] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 200.800864][T12547] FAULT_INJECTION: forcing a failure. [ 200.800864][T12547] name failslab, interval 1, probability 0, space 0, times 0 [ 200.804241][T12547] CPU: 0 UID: 0 PID: 12547 Comm: syz.7.1888 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 200.807040][T12547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 200.810061][T12547] Call Trace: [ 200.811041][T12547] [ 200.811836][T12547] dump_stack_lvl+0x16c/0x1f0 [ 200.813057][T12547] should_fail_ex+0x497/0x5b0 [ 200.814299][T12547] ? fs_reclaim_acquire+0xae/0x150 [ 200.815648][T12547] should_failslab+0xc2/0x120 [ 200.816872][T12547] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 200.818258][T12547] ? security_inode_alloc+0x3b/0x2b0 [ 200.819630][T12547] security_inode_alloc+0x3b/0x2b0 [ 200.820914][T12547] inode_init_always_gfp+0xc5f/0xfb0 [ 200.822247][T12547] alloc_inode+0x82/0x230 [ 200.823369][T12547] new_inode+0x22/0x210 [ 200.824835][T12547] ? __pfx_may_create+0x10/0x10 [ 200.826719][T12547] hugetlbfs_get_inode+0x53/0x530 [ 200.828317][T12547] hugetlbfs_mknod+0x5e/0x140 [ 200.829533][T12547] hugetlbfs_mkdir+0x31/0x80 [ 200.830751][T12547] vfs_mkdir+0x57d/0x860 [ 200.831872][T12547] ovl_mkdir_real+0xb5/0x380 [ 200.833329][T12547] ovl_workdir_create+0x3e2/0x820 [ 200.835180][T12547] ? __pfx_ovl_workdir_create+0x10/0x10 [ 200.837110][T12547] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 200.839122][T12547] ? mnt_get_write_access+0x6a/0x300 [ 200.841097][T12547] ? mnt_get_write_access+0x20c/0x300 [ 200.843160][T12547] ovl_fill_super+0xe6b/0x6720 [ 200.844963][T12547] ? shrinker_register+0x154/0x260 [ 200.846780][T12547] ? __pfx_lock_release+0x10/0x10 [ 200.848592][T12547] ? __pfx___mutex_lock+0x10/0x10 [ 200.850402][T12547] ? __pfx_ovl_fill_super+0x10/0x10 [ 200.852346][T12547] ? lockdep_init_map_type+0x16d/0x7d0 [ 200.854409][T12547] ? lockdep_init_map_type+0x16d/0x7d0 [ 200.856425][T12547] ? __init_swait_queue_head+0xca/0x150 [ 200.858317][T12547] ? shrinker_register+0x1a8/0x260 [ 200.860163][T12547] ? sget_fc+0x808/0xc20 [ 200.861631][T12547] ? cap_capable+0x1cf/0x240 [ 200.863245][T12547] ? __pfx_ovl_fill_super+0x10/0x10 [ 200.865088][T12547] ? get_tree_nodev+0xda/0x190 [ 200.866780][T12547] get_tree_nodev+0xda/0x190 [ 200.868384][T12547] vfs_get_tree+0x8f/0x380 [ 200.869674][T12547] path_mount+0x14e6/0x1f20 [ 200.870854][T12547] ? kmem_cache_free+0x152/0x4b0 [ 200.872131][T12547] ? __pfx_path_mount+0x10/0x10 [ 200.873417][T12547] ? putname+0x12e/0x170 [ 200.874644][T12547] __x64_sys_mount+0x294/0x320 [ 200.875946][T12547] ? __pfx___x64_sys_mount+0x10/0x10 [ 200.877306][T12547] do_syscall_64+0xcd/0x250 [ 200.878451][T12547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.879978][T12547] RIP: 0033:0x7f7506b7e719 [ 200.881106][T12547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.886530][T12547] RSP: 002b:00007f7507972038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 200.888636][T12547] RAX: ffffffffffffffda RBX: 00007f7506d35f80 RCX: 00007f7506b7e719 [ 200.890612][T12547] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 200.892833][T12547] RBP: 00007f7507972090 R08: 0000000020000500 R09: 0000000000000000 [ 200.895117][T12547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.897322][T12547] R13: 0000000000000000 R14: 00007f7506d35f80 R15: 00007ffcd9777f18 [ 200.899574][T12547] [ 200.900958][T12547] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 200.903597][T12547] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 200.907280][T12547] overlayfs: maximum fs stacking depth exceeded [ 200.933450][T12549] xt_hashlimit: size too large, truncated to 1048576 [ 200.976630][ T6110] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.979889][ T6110] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 200.982570][ T6110] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 200.984929][ T6110] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.990156][T12551] batman_adv: batadv0: Interface deactivated: dummy0 [ 200.992124][T12551] batman_adv: batadv0: Removing interface: dummy0 [ 201.005306][ T6110] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.007701][ T6110] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.015709][ T6110] usb 11-1: config 0 descriptor?? [ 201.180628][ T40] audit: type=1400 audit(1731481871.963:909): avc: denied { ioctl } for pid=12557 comm="syz.2.1891" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 201.625062][ T6110] usbhid 11-1:0.0: can't add hid device: -71 [ 201.627095][ T6110] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 201.635949][ T6110] usb 11-1: USB disconnect, device number 15 [ 202.041271][ T40] audit: type=1400 audit(1731481872.823:910): avc: denied { getopt } for pid=12562 comm="syz.2.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 202.085979][ T5965] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 202.194040][T12574] FAULT_INJECTION: forcing a failure. [ 202.194040][T12574] name failslab, interval 1, probability 0, space 0, times 0 [ 202.198035][T12574] CPU: 3 UID: 0 PID: 12574 Comm: syz.7.1898 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 202.200965][T12574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 202.203840][T12574] Call Trace: [ 202.204762][T12574] [ 202.205572][T12574] dump_stack_lvl+0x16c/0x1f0 [ 202.206822][T12574] should_fail_ex+0x497/0x5b0 [ 202.208082][T12574] ? fs_reclaim_acquire+0xae/0x150 [ 202.209422][T12574] should_failslab+0xc2/0x120 [ 202.210644][T12574] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 202.212269][T12574] ? security_inode_alloc+0x3b/0x2b0 [ 202.213697][T12574] security_inode_alloc+0x3b/0x2b0 [ 202.215128][T12574] inode_init_always_gfp+0xc5f/0xfb0 [ 202.216772][T12574] ? debug_mutex_init+0x37/0x70 [ 202.218151][T12574] ? __pfx_ovl_inode_set+0x10/0x10 [ 202.219591][T12574] alloc_inode+0x82/0x230 [ 202.221066][T12574] iget5_locked+0x33b/0x3d0 [ 202.222542][T12574] ? __pfx_ovl_inode_test+0x10/0x10 [ 202.224000][T12574] ? __pfx_ovl_inode_set+0x10/0x10 [ 202.225393][T12574] ? __pfx_ovl_workdir_create+0x10/0x10 [ 202.226831][T12574] ? __pfx_iget5_locked+0x10/0x10 [ 202.228131][T12574] ? mnt_get_write_access+0x20c/0x300 [ 202.229535][T12574] ovl_get_trap_inode+0xb2/0x200 [ 202.230947][T12574] ovl_fill_super+0xed6/0x6720 [ 202.232380][T12574] ? shrinker_register+0x154/0x260 [ 202.233900][T12574] ? __pfx_lock_release+0x10/0x10 [ 202.235742][T12574] ? __pfx___mutex_lock+0x10/0x10 [ 202.237034][T12574] ? __pfx_ovl_fill_super+0x10/0x10 [ 202.238386][T12574] ? lockdep_init_map_type+0x16d/0x7d0 [ 202.239799][T12574] ? lockdep_init_map_type+0x16d/0x7d0 [ 202.241261][T12574] ? __init_swait_queue_head+0xca/0x150 [ 202.242796][T12574] ? shrinker_register+0x1a8/0x260 [ 202.244247][T12574] ? sget_fc+0x808/0xc20 [ 202.245446][T12574] ? cap_capable+0x1cf/0x240 [ 202.246688][T12574] ? __pfx_ovl_fill_super+0x10/0x10 [ 202.248069][T12574] ? get_tree_nodev+0xda/0x190 [ 202.249343][T12574] get_tree_nodev+0xda/0x190 [ 202.250570][T12574] vfs_get_tree+0x8f/0x380 [ 202.251791][T12574] path_mount+0x14e6/0x1f20 [ 202.253024][T12574] ? kmem_cache_free+0x152/0x4b0 [ 202.254461][T12574] ? __pfx_path_mount+0x10/0x10 [ 202.255965][T12574] ? putname+0x12e/0x170 [ 202.257159][T12574] __x64_sys_mount+0x294/0x320 [ 202.258460][T12574] ? __pfx___x64_sys_mount+0x10/0x10 [ 202.259828][T12574] do_syscall_64+0xcd/0x250 [ 202.261011][T12574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.262517][T12574] RIP: 0033:0x7f7506b7e719 [ 202.263711][T12574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.268591][T12574] RSP: 002b:00007f7507972038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 202.270760][T12574] RAX: ffffffffffffffda RBX: 00007f7506d35f80 RCX: 00007f7506b7e719 [ 202.272819][T12574] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 202.274974][T12574] RBP: 00007f7507972090 R08: 0000000020000500 R09: 0000000000000000 [ 202.277209][T12574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.279353][T12574] R13: 0000000000000000 R14: 00007f7506d35f80 R15: 00007ffcd9777f18 [ 202.281352][T12574] [ 202.289166][ T5956] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.294356][ T5956] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.304173][ T5956] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.307243][ T5956] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.310808][ T5956] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 202.314970][ T5956] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.419618][T12578] chnl_net:caif_netlink_parms(): no params data found [ 202.504113][T12578] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.506675][T12578] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.509006][T12578] bridge_slave_0: entered allmulticast mode [ 202.511258][T12578] bridge_slave_0: entered promiscuous mode [ 202.514357][T12578] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.516986][T12578] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.518920][T12578] bridge_slave_1: entered allmulticast mode [ 202.521636][T12578] bridge_slave_1: entered promiscuous mode [ 202.558057][T12578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.561978][T12578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.606984][T12578] team0: Port device team_slave_0 added [ 202.610797][T12578] team0: Port device team_slave_1 added [ 202.632286][T12578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.634193][T12578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.641107][T12578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.645481][T12578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.647275][T12578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.653742][T12578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.679931][T12578] hsr_slave_0: entered promiscuous mode [ 202.683060][T12578] hsr_slave_1: entered promiscuous mode [ 202.685081][T12578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.687938][T12578] Cannot create hsr debugfs directory [ 202.767816][T12578] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 202.772405][T12578] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 202.776263][T12578] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 202.779405][T12578] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 202.790699][T12578] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.792601][T12578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.794781][T12578] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.797004][T12578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.820764][T12578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.828691][ T7936] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.832292][ T7936] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.845829][T12578] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.853363][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.855444][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.858835][ T58] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 202.862750][ T7936] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.865351][ T7936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.967826][T12578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.017446][ T58] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.022045][ T58] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.026959][ T58] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 203.031320][ T58] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.033018][T12621] xt_hashlimit: size too large, truncated to 1048576 [ 203.035664][ T58] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.040072][ T58] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.046040][T12622] FAULT_INJECTION: forcing a failure. [ 203.046040][T12622] name failslab, interval 1, probability 0, space 0, times 0 [ 203.050393][T12622] CPU: 3 UID: 0 PID: 12622 Comm: syz.6.1908 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 203.054215][T12622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.058090][T12622] Call Trace: [ 203.059448][T12622] [ 203.060612][T12622] dump_stack_lvl+0x16c/0x1f0 [ 203.062429][T12622] should_fail_ex+0x497/0x5b0 [ 203.063777][T12622] ? fs_reclaim_acquire+0xae/0x150 [ 203.065127][T12622] should_failslab+0xc2/0x120 [ 203.066554][T12622] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 203.067981][T12622] ? __pfx_make_vfsuid+0x10/0x10 [ 203.069255][T12622] ? alloc_empty_file+0x73/0x1e0 [ 203.070551][T12622] alloc_empty_file+0x73/0x1e0 [ 203.071845][T12622] dentry_open+0x46/0xd0 [ 203.072949][T12622] ovl_path_open+0x198/0x1f0 [ 203.074149][T12622] ovl_check_d_type_supported+0x9c/0x220 [ 203.075735][T12622] ? __pfx_ovl_check_d_type_supported+0x10/0x10 [ 203.077951][T12622] ? __pfx_ovl_check_d_type+0x10/0x10 [ 203.079854][T12622] ? do_raw_spin_unlock+0x172/0x230 [ 203.081624][T12622] ? _raw_spin_unlock+0x28/0x50 [ 203.083350][T12622] ovl_fill_super+0xf2f/0x6720 [ 203.085067][T12622] ? shrinker_register+0x154/0x260 [ 203.086707][T12622] ? __pfx_lock_release+0x10/0x10 [ 203.088154][T12622] ? __pfx___mutex_lock+0x10/0x10 [ 203.089868][T12622] ? __pfx_ovl_fill_super+0x10/0x10 [ 203.091646][T12622] ? lockdep_init_map_type+0x16d/0x7d0 [ 203.093519][T12622] ? lockdep_init_map_type+0x16d/0x7d0 [ 203.094263][T12578] veth0_vlan: entered promiscuous mode [ 203.095130][T12622] ? __init_swait_queue_head+0xca/0x150 [ 203.095162][T12622] ? shrinker_register+0x1a8/0x260 [ 203.095183][T12622] ? sget_fc+0x808/0xc20 [ 203.101643][T12622] ? cap_capable+0x1cf/0x240 [ 203.102954][T12578] veth1_vlan: entered promiscuous mode [ 203.103181][T12622] ? __pfx_ovl_fill_super+0x10/0x10 [ 203.106955][T12622] ? get_tree_nodev+0xda/0x190 [ 203.108490][T12622] get_tree_nodev+0xda/0x190 [ 203.109803][T12622] vfs_get_tree+0x8f/0x380 [ 203.111212][T12622] path_mount+0x14e6/0x1f20 [ 203.112772][T12622] ? kmem_cache_free+0x152/0x4b0 [ 203.114559][T12622] ? __pfx_path_mount+0x10/0x10 [ 203.116239][T12622] ? putname+0x12e/0x170 [ 203.117414][T12622] __x64_sys_mount+0x294/0x320 [ 203.118675][T12622] ? __pfx___x64_sys_mount+0x10/0x10 [ 203.120235][T12622] do_syscall_64+0xcd/0x250 [ 203.121501][T12622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.123188][T12622] RIP: 0033:0x7f3918d7e719 [ 203.124535][T12622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.127026][T12578] veth0_macvtap: entered promiscuous mode [ 203.130070][T12622] RSP: 002b:00007f3919c62038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 203.133866][T12622] RAX: ffffffffffffffda RBX: 00007f3918f35f80 RCX: 00007f3918d7e719 [ 203.134247][T12578] veth1_macvtap: entered promiscuous mode [ 203.136171][T12622] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 203.136184][T12622] RBP: 00007f3919c62090 R08: 0000000020000500 R09: 0000000000000000 [ 203.136191][T12622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.136197][T12622] R13: 0000000000000000 R14: 00007f3918f35f80 R15: 00007ffcb11eec98 [ 203.136213][T12622] [ 203.137378][ T58] usb 12-1: config 0 descriptor?? [ 203.151554][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.154241][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.160873][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.164055][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.167261][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.170000][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.174450][T12578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.181287][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.184408][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.187471][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.190202][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.192819][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.196106][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.198572][T12578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.201189][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.207685][T12578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.211943][T12578] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.214194][T12578] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.219112][T12578] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.221468][T12578] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.269665][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.271912][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.282924][T12578] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 203.288601][T12578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.294197][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.297303][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.361610][T12637] netlink: 'syz.6.1912': attribute type 11 has an invalid length. [ 203.377537][T12637] netlink: 'syz.6.1912': attribute type 4 has an invalid length. [ 203.394962][T12637] netlink: 'syz.6.1912': attribute type 4 has an invalid length. [ 203.422575][T12644] net_ratelimit: 11 callbacks suppressed [ 203.422587][T12644] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 203.431889][T12644] syz.6.1916: attempt to access beyond end of device [ 203.431889][T12644] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 203.448189][T12647] FAULT_INJECTION: forcing a failure. [ 203.448189][T12647] name failslab, interval 1, probability 0, space 0, times 0 [ 203.452053][T12647] CPU: 0 UID: 0 PID: 12647 Comm: syz.8.1917 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 203.454814][T12647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.457583][T12647] Call Trace: [ 203.458465][T12647] [ 203.459255][T12647] dump_stack_lvl+0x16c/0x1f0 [ 203.460489][T12647] should_fail_ex+0x497/0x5b0 [ 203.461726][T12647] ? fs_reclaim_acquire+0xae/0x150 [ 203.463175][T12647] should_failslab+0xc2/0x120 [ 203.464418][T12647] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 203.465811][T12647] ? security_inode_alloc+0x3b/0x2b0 [ 203.467186][T12647] security_inode_alloc+0x3b/0x2b0 [ 203.468523][T12647] inode_init_always_gfp+0xc5f/0xfb0 [ 203.469903][T12647] ? debug_mutex_init+0x37/0x70 [ 203.471209][T12647] ? __pfx_ovl_inode_set+0x10/0x10 [ 203.472564][T12647] alloc_inode+0x82/0x230 [ 203.473745][T12647] iget5_locked+0x33b/0x3d0 [ 203.474909][T12647] ? __pfx_ovl_inode_test+0x10/0x10 [ 203.476352][T12647] ? __pfx_ovl_inode_set+0x10/0x10 [ 203.477838][T12647] ? __pfx_ovl_workdir_create+0x10/0x10 [ 203.479508][T12647] ? __pfx_iget5_locked+0x10/0x10 [ 203.480905][T12647] ? mnt_get_write_access+0x20c/0x300 [ 203.482333][T12647] ovl_get_trap_inode+0xb2/0x200 [ 203.483624][T12647] ovl_fill_super+0xed6/0x6720 [ 203.484853][T12647] ? shrinker_register+0x154/0x260 [ 203.486211][T12647] ? __pfx_lock_release+0x10/0x10 [ 203.487544][T12647] ? __pfx___mutex_lock+0x10/0x10 [ 203.488861][T12647] ? __pfx_ovl_fill_super+0x10/0x10 [ 203.490218][T12647] ? lockdep_init_map_type+0x16d/0x7d0 [ 203.491652][T12647] ? lockdep_init_map_type+0x16d/0x7d0 [ 203.493077][T12647] ? __init_swait_queue_head+0xca/0x150 [ 203.494526][T12647] ? shrinker_register+0x1a8/0x260 [ 203.495878][T12647] ? sget_fc+0x808/0xc20 [ 203.497002][T12647] ? cap_capable+0x1cf/0x240 [ 203.498244][T12647] ? __pfx_ovl_fill_super+0x10/0x10 [ 203.499635][T12647] ? get_tree_nodev+0xda/0x190 [ 203.500916][T12647] get_tree_nodev+0xda/0x190 [ 203.502171][T12647] vfs_get_tree+0x8f/0x380 [ 203.503391][T12647] path_mount+0x14e6/0x1f20 [ 203.504730][T12647] ? kmem_cache_free+0x152/0x4b0 [ 203.506092][T12647] ? __pfx_path_mount+0x10/0x10 [ 203.507456][T12647] ? putname+0x12e/0x170 [ 203.508603][T12647] __x64_sys_mount+0x294/0x320 [ 203.509989][T12647] ? __pfx___x64_sys_mount+0x10/0x10 [ 203.511372][T12647] do_syscall_64+0xcd/0x250 [ 203.512584][T12647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.514159][T12647] RIP: 0033:0x7fd13397e719 [ 203.515347][T12647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.520171][T12647] RSP: 002b:00007fd1346bd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 203.522257][T12647] RAX: ffffffffffffffda RBX: 00007fd133b35f80 RCX: 00007fd13397e719 [ 203.524249][T12647] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 203.526264][T12647] RBP: 00007fd1346bd090 R08: 0000000020000500 R09: 0000000000000000 [ 203.528395][T12647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.530478][T12647] R13: 0000000000000000 R14: 00007fd133b35f80 R15: 00007ffe054e0e68 [ 203.532496][T12647] [ 203.588303][T12649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1918'. [ 203.592721][T12649] macsec0: entered promiscuous mode [ 203.783853][ T58] usbhid 12-1:0.0: can't add hid device: -71 [ 203.787316][ T58] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 203.806499][ T58] usb 12-1: USB disconnect, device number 19 [ 203.939621][T12672] Trying to write to read-only block-device nullb0 [ 204.005331][ T1015] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 204.155302][ T1015] usb 11-1: Using ep0 maxpacket: 8 [ 204.179607][ T1015] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 204.181776][ T1015] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.184231][ T1015] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 204.199165][ T1015] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 204.201727][ T1015] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.204943][ T1015] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 204.213016][ T1015] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.372434][ T5965] Bluetooth: hci4: command tx timeout [ 204.426228][ T1015] usb 11-1: usb_control_msg returned -32 [ 204.427799][ T1015] usbtmc 11-1:16.0: can't read capabilities [ 204.483140][T12678] FAULT_INJECTION: forcing a failure. [ 204.483140][T12678] name failslab, interval 1, probability 0, space 0, times 0 [ 204.487839][T12678] CPU: 3 UID: 0 PID: 12678 Comm: syz.7.1928 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 204.491247][T12678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 204.494264][T12678] Call Trace: [ 204.495209][T12678] [ 204.495443][ T828] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 204.495994][T12678] dump_stack_lvl+0x16c/0x1f0 [ 204.499559][T12678] should_fail_ex+0x497/0x5b0 [ 204.500943][T12678] ? fs_reclaim_acquire+0xae/0x150 [ 204.502463][T12678] should_failslab+0xc2/0x120 [ 204.503716][T12678] __kmalloc_noprof+0xcb/0x400 [ 204.504903][T12678] tomoyo_realpath_from_path+0xb9/0x720 [ 204.506332][T12678] tomoyo_check_open_permission+0x2a7/0x3b0 [ 204.507790][T12678] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 204.509431][T12678] ? __pfx___lock_acquire+0x10/0x10 [ 204.510790][T12678] ? __pfx_hook_file_open+0x10/0x10 [ 204.512222][T12678] ? path_get+0x61/0x80 [ 204.513831][T12678] tomoyo_file_open+0x6b/0x90 [ 204.513857][T12678] security_file_open+0x64c/0x9d0 [ 204.513874][T12678] do_dentry_open+0x57c/0x1530 [ 204.513888][T12678] vfs_open+0x82/0x3f0 [ 204.513902][T12678] dentry_open+0x71/0xd0 [ 204.520348][T12678] ovl_path_open+0x198/0x1f0 [ 204.520374][T12678] ovl_check_d_type_supported+0x9c/0x220 [ 204.520389][T12678] ? __pfx_ovl_check_d_type_supported+0x10/0x10 [ 204.520403][T12678] ? __pfx_ovl_check_d_type+0x10/0x10 [ 204.520420][T12678] ? do_raw_spin_unlock+0x172/0x230 [ 204.522533][T12680] syz.2.1929 (12680) used greatest stack depth: 19840 bytes left [ 204.523422][T12678] ? _raw_spin_unlock+0x28/0x50 [ 204.531251][T12678] ovl_fill_super+0xf2f/0x6720 [ 204.532533][T12678] ? shrinker_register+0x154/0x260 [ 204.533922][T12678] ? __pfx_lock_release+0x10/0x10 [ 204.535259][T12678] ? __pfx___mutex_lock+0x10/0x10 [ 204.536942][T12678] ? __pfx_ovl_fill_super+0x10/0x10 [ 204.538581][T12678] ? lockdep_init_map_type+0x16d/0x7d0 [ 204.540252][T12678] ? lockdep_init_map_type+0x16d/0x7d0 [ 204.541829][T12678] ? __init_swait_queue_head+0xca/0x150 [ 204.543452][T12678] ? shrinker_register+0x1a8/0x260 [ 204.544868][T12678] ? sget_fc+0x808/0xc20 [ 204.546003][T12678] ? cap_capable+0x1cf/0x240 [ 204.547246][T12678] ? __pfx_ovl_fill_super+0x10/0x10 [ 204.548615][T12678] ? get_tree_nodev+0xda/0x190 [ 204.549901][T12678] get_tree_nodev+0xda/0x190 [ 204.551138][T12678] vfs_get_tree+0x8f/0x380 [ 204.552309][T12678] path_mount+0x14e6/0x1f20 [ 204.553543][T12678] ? kmem_cache_free+0x152/0x4b0 [ 204.554860][T12678] ? __pfx_path_mount+0x10/0x10 [ 204.556159][T12678] ? putname+0x12e/0x170 [ 204.557300][T12678] __x64_sys_mount+0x294/0x320 [ 204.558592][T12678] ? __pfx___x64_sys_mount+0x10/0x10 [ 204.560025][T12678] do_syscall_64+0xcd/0x250 [ 204.561270][T12678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.562889][T12678] RIP: 0033:0x7f7506b7e719 [ 204.564124][T12678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.569277][T12678] RSP: 002b:00007f7507972038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 204.571579][T12678] RAX: ffffffffffffffda RBX: 00007f7506d35f80 RCX: 00007f7506b7e719 [ 204.573569][T12678] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 204.575592][T12678] RBP: 00007f7507972090 R08: 0000000020000500 R09: 0000000000000000 [ 204.577591][T12678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.579801][T12678] R13: 0000000000000000 R14: 00007f7506d35f80 R15: 00007ffcd9777f18 [ 204.581912][T12678] [ 204.583627][T12678] ERROR: Out of memory at tomoyo_realpath_from_path. [ 204.586446][T12678] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 204.588316][T12678] overlayfs: failed to set xattr on upper [ 204.589801][T12678] overlayfs: ...falling back to redirect_dir=nofollow. [ 204.591545][T12678] overlayfs: ...falling back to metacopy=off. [ 204.593106][T12678] overlayfs: ...falling back to index=off. [ 204.594658][T12678] overlayfs: ...falling back to uuid=null. [ 204.596246][T12678] overlayfs: maximum fs stacking depth exceeded [ 204.645413][ T828] usb 13-1: Using ep0 maxpacket: 32 [ 204.651976][ T828] usb 13-1: config 1 has an invalid descriptor of length 239, skipping remainder of the config [ 204.654725][ T828] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.659949][ T828] usb 13-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.662416][ T828] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.664584][ T828] usb 13-1: Product: й [ 204.666056][ T828] usb 13-1: Manufacturer: ▹쎔擵邡ꗫ [ 204.668094][ T828] usb 13-1: SerialNumber: à š [ 204.766854][ T5965] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 204.801769][T12698] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 204.803947][T12698] overlayfs: failed to set xattr on upper [ 204.806717][T12698] overlayfs: ...falling back to redirect_dir=nofollow. [ 204.808686][T12698] overlayfs: ...falling back to metacopy=off. [ 204.810354][T12698] overlayfs: ...falling back to index=off. [ 204.811905][T12698] overlayfs: ...falling back to uuid=null. [ 204.813541][T12698] overlayfs: maximum fs stacking depth exceeded [ 205.072703][T12674] binder: 12673:12674 ioctl c018620c 20000080 returned -22 [ 205.079168][ T828] usb 13-1: 0:2 : does not exist [ 205.091306][ T828] usb 13-1: USB disconnect, device number 2 [ 205.110550][T12703] gre1: entered promiscuous mode [ 205.112435][T12703] team0: Device gre1 is of different type [ 205.135343][ T9] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 205.208652][T12705] xt_hashlimit: size too large, truncated to 1048576 [ 205.295975][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.299101][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 205.302007][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 205.304614][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.309609][ T6074] udevd[6074]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.314718][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.317270][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.320745][ T9] usb 7-1: config 0 descriptor?? [ 205.781622][T12711] FAULT_INJECTION: forcing a failure. [ 205.781622][T12711] name failslab, interval 1, probability 0, space 0, times 0 [ 205.785354][T12711] CPU: 1 UID: 0 PID: 12711 Comm: syz.7.1939 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 205.788605][T12711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 205.791410][T12711] Call Trace: [ 205.792300][T12711] [ 205.793088][T12711] dump_stack_lvl+0x16c/0x1f0 [ 205.794352][T12711] should_fail_ex+0x497/0x5b0 [ 205.795596][T12711] ? fs_reclaim_acquire+0xae/0x150 [ 205.796958][T12711] should_failslab+0xc2/0x120 [ 205.798188][T12711] __kmalloc_noprof+0xcb/0x400 [ 205.799446][T12711] ? d_absolute_path+0x137/0x1b0 [ 205.800729][T12711] tomoyo_encode2+0x100/0x3e0 [ 205.801944][T12711] tomoyo_encode+0x29/0x50 [ 205.803080][T12711] tomoyo_realpath_from_path+0x19d/0x720 [ 205.804480][T12711] tomoyo_check_open_permission+0x2a7/0x3b0 [ 205.806071][T12711] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 205.807911][T12711] ? __pfx___lock_acquire+0x10/0x10 [ 205.809258][T12711] ? __pfx_hook_file_open+0x10/0x10 [ 205.810619][T12711] ? path_get+0x61/0x80 [ 205.811697][T12711] tomoyo_file_open+0x6b/0x90 [ 205.812903][T12711] security_file_open+0x64c/0x9d0 [ 205.814183][T12711] do_dentry_open+0x57c/0x1530 [ 205.815439][T12711] vfs_open+0x82/0x3f0 [ 205.816507][T12711] dentry_open+0x71/0xd0 [ 205.817629][T12711] ovl_path_open+0x198/0x1f0 [ 205.818862][T12711] ovl_check_d_type_supported+0x9c/0x220 [ 205.820350][T12711] ? __pfx_ovl_check_d_type_supported+0x10/0x10 [ 205.821992][T12711] ? __pfx_ovl_check_d_type+0x10/0x10 [ 205.823418][T12711] ? do_raw_spin_unlock+0x172/0x230 [ 205.824765][T12711] ? _raw_spin_unlock+0x28/0x50 [ 205.826056][T12711] ovl_fill_super+0xf2f/0x6720 [ 205.827301][T12711] ? shrinker_register+0x154/0x260 [ 205.828673][T12711] ? __pfx_lock_release+0x10/0x10 [ 205.830418][T12711] ? __pfx___mutex_lock+0x10/0x10 [ 205.832222][T12711] ? __pfx_ovl_fill_super+0x10/0x10 [ 205.834411][T12711] ? lockdep_init_map_type+0x16d/0x7d0 [ 205.836403][T12711] ? lockdep_init_map_type+0x16d/0x7d0 [ 205.838299][T12711] ? __init_swait_queue_head+0xca/0x150 [ 205.840109][T12711] ? shrinker_register+0x1a8/0x260 [ 205.841468][T12711] ? sget_fc+0x808/0xc20 [ 205.842826][T12711] ? cap_capable+0x1cf/0x240 [ 205.844079][T12711] ? __pfx_ovl_fill_super+0x10/0x10 [ 205.845453][T12711] ? get_tree_nodev+0xda/0x190 [ 205.846754][T12711] get_tree_nodev+0xda/0x190 [ 205.848029][T12711] vfs_get_tree+0x8f/0x380 [ 205.849192][T12711] path_mount+0x14e6/0x1f20 [ 205.850387][T12711] ? kmem_cache_free+0x152/0x4b0 [ 205.851675][T12711] ? __pfx_path_mount+0x10/0x10 [ 205.852970][T12711] ? putname+0x12e/0x170 [ 205.854097][T12711] __x64_sys_mount+0x294/0x320 [ 205.855566][T12711] ? __pfx___x64_sys_mount+0x10/0x10 [ 205.857480][T12711] do_syscall_64+0xcd/0x250 [ 205.859164][T12711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.861253][T12711] RIP: 0033:0x7f7506b7e719 [ 205.862833][T12711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.865371][ T829] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 205.869672][T12711] RSP: 002b:00007f7507972038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 205.873704][T12711] RAX: ffffffffffffffda RBX: 00007f7506d35f80 RCX: 00007f7506b7e719 [ 205.876006][T12711] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 205.878785][T12711] RBP: 00007f7507972090 R08: 0000000020000500 R09: 0000000000000000 [ 205.881613][T12711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.884541][T12711] R13: 0000000000000000 R14: 00007f7506d35f80 R15: 00007ffcd9777f18 [ 205.887321][T12711] [ 205.889725][T12711] ERROR: Out of memory at tomoyo_realpath_from_path. [ 205.892460][T12711] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 205.894225][T12711] overlayfs: failed to set xattr on upper [ 205.895827][T12711] overlayfs: ...falling back to redirect_dir=nofollow. [ 205.898175][T12711] overlayfs: ...falling back to metacopy=off. [ 205.900251][T12711] overlayfs: ...falling back to index=off. [ 205.901745][T12711] overlayfs: ...falling back to uuid=null. [ 205.903295][T12711] overlayfs: maximum fs stacking depth exceeded [ 205.926708][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 205.929095][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 205.933899][ T9] usb 7-1: USB disconnect, device number 39 [ 206.015417][ T829] usb 13-1: Using ep0 maxpacket: 16 [ 206.018441][ T829] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.021577][ T829] usb 13-1: config 0 has no interfaces? [ 206.023256][ T829] usb 13-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 206.026197][ T829] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.029420][ T829] usb 13-1: config 0 descriptor?? [ 206.196042][ T58] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 206.243240][ T25] usb 13-1: USB disconnect, device number 3 [ 206.345362][ T58] usb 12-1: Using ep0 maxpacket: 32 [ 206.348321][ T58] usb 12-1: config 0 has no interfaces? [ 206.350174][ T58] usb 12-1: New USB device found, idVendor=f269, idProduct=0094, bcdDevice= 0.1f [ 206.353220][ T58] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.358828][ T58] usb 12-1: config 0 descriptor?? [ 206.445600][ T5965] Bluetooth: hci4: command tx timeout [ 206.476993][ T5965] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 206.501395][T12719] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 206.503535][T12719] overlayfs: failed to set xattr on upper [ 206.505053][T12719] overlayfs: ...falling back to redirect_dir=nofollow. [ 206.509196][T12719] overlayfs: ...falling back to metacopy=off. [ 206.510724][T12719] overlayfs: ...falling back to index=off. [ 206.512325][T12719] overlayfs: ...falling back to uuid=null. [ 206.513813][T12719] overlayfs: maximum fs stacking depth exceeded [ 206.640185][ T25] usb 12-1: USB disconnect, device number 20 [ 206.837029][T12729] xt_hashlimit: size too large, truncated to 1048576 [ 207.296465][T12733] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12733 comm=syz.7.1948 [ 207.352757][T12736] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1948'. [ 207.356386][T12736] netlink: 'syz.7.1948': attribute type 12 has an invalid length. [ 207.366203][T12736] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.370580][T12736] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.373811][T12736] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.377129][T12736] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.382122][T12736] vxlan0: entered promiscuous mode [ 207.695663][ T6011] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 207.846978][ T6011] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.849976][ T6011] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 207.852953][ T6011] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 207.855886][ T6011] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.859035][ T6011] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.861306][ T6011] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.868617][ T6011] usb 7-1: config 0 descriptor?? [ 208.113361][T12740] FAULT_INJECTION: forcing a failure. [ 208.113361][T12740] name failslab, interval 1, probability 0, space 0, times 0 [ 208.117030][T12740] CPU: 3 UID: 0 PID: 12740 Comm: syz.8.1950 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 208.119887][T12740] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 208.122720][T12740] Call Trace: [ 208.123745][T12740] [ 208.124600][T12740] dump_stack_lvl+0x16c/0x1f0 [ 208.126059][T12740] should_fail_ex+0x497/0x5b0 [ 208.127445][T12740] ? fs_reclaim_acquire+0xae/0x150 [ 208.128960][T12740] should_failslab+0xc2/0x120 [ 208.130319][T12740] __kmalloc_noprof+0xcb/0x400 [ 208.131621][T12740] tomoyo_realpath_from_path+0xb9/0x720 [ 208.133142][T12740] tomoyo_check_open_permission+0x2a7/0x3b0 [ 208.134997][T12740] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 208.136942][T12740] ? __pfx___lock_acquire+0x10/0x10 [ 208.138592][T12740] ? __pfx_hook_file_open+0x10/0x10 [ 208.140066][T12740] ? path_get+0x61/0x80 [ 208.141212][T12740] tomoyo_file_open+0x6b/0x90 [ 208.142585][T12740] security_file_open+0x64c/0x9d0 [ 208.144338][T12740] do_dentry_open+0x57c/0x1530 [ 208.146124][T12740] vfs_open+0x82/0x3f0 [ 208.147401][T12740] dentry_open+0x71/0xd0 [ 208.148639][T12740] ovl_path_open+0x198/0x1f0 [ 208.149877][T12740] ovl_check_d_type_supported+0x9c/0x220 [ 208.151373][T12740] ? __pfx_ovl_check_d_type_supported+0x10/0x10 [ 208.153172][T12740] ? __pfx_ovl_check_d_type+0x10/0x10 [ 208.154613][T12740] ? do_raw_spin_unlock+0x172/0x230 [ 208.156053][T12740] ? _raw_spin_unlock+0x28/0x50 [ 208.157354][T12740] ovl_fill_super+0xf2f/0x6720 [ 208.158670][T12740] ? shrinker_register+0x154/0x260 [ 208.160391][T12740] ? __pfx_lock_release+0x10/0x10 [ 208.162083][T12740] ? __pfx___mutex_lock+0x10/0x10 [ 208.163553][T12740] ? __pfx_ovl_fill_super+0x10/0x10 [ 208.164975][T12740] ? lockdep_init_map_type+0x16d/0x7d0 [ 208.166677][T12740] ? lockdep_init_map_type+0x16d/0x7d0 [ 208.168698][T12740] ? __init_swait_queue_head+0xca/0x150 [ 208.170535][T12740] ? shrinker_register+0x1a8/0x260 [ 208.172194][T12740] ? sget_fc+0x808/0xc20 [ 208.173476][T12740] ? cap_capable+0x1cf/0x240 [ 208.174782][T12740] ? __pfx_ovl_fill_super+0x10/0x10 [ 208.176137][T12740] ? get_tree_nodev+0xda/0x190 [ 208.177429][T12740] get_tree_nodev+0xda/0x190 [ 208.178710][T12740] vfs_get_tree+0x8f/0x380 [ 208.179935][T12740] path_mount+0x14e6/0x1f20 [ 208.181300][T12740] ? kmem_cache_free+0x152/0x4b0 [ 208.182673][T12740] ? __pfx_path_mount+0x10/0x10 [ 208.184143][T12740] ? putname+0x12e/0x170 [ 208.185266][T12740] __x64_sys_mount+0x294/0x320 [ 208.186533][T12740] ? __pfx___x64_sys_mount+0x10/0x10 [ 208.187985][T12740] do_syscall_64+0xcd/0x250 [ 208.189217][T12740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.191226][T12740] RIP: 0033:0x7fd13397e719 [ 208.192813][T12740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.198348][T12740] RSP: 002b:00007fd1346bd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 208.200755][T12740] RAX: ffffffffffffffda RBX: 00007fd133b35f80 RCX: 00007fd13397e719 [ 208.202778][T12740] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 208.204895][T12740] RBP: 00007fd1346bd090 R08: 0000000020000500 R09: 0000000000000000 [ 208.207054][T12740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.209398][T12740] R13: 0000000000000000 R14: 00007fd133b35f80 R15: 00007ffe054e0e68 [ 208.211510][T12740] [ 208.213688][T12740] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.215773][T12740] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 208.217675][T12740] overlayfs: failed to set xattr on upper [ 208.219589][T12740] overlayfs: ...falling back to redirect_dir=nofollow. [ 208.222102][T12740] overlayfs: ...falling back to metacopy=off. [ 208.224175][T12740] overlayfs: ...falling back to index=off. [ 208.226144][T12740] overlayfs: ...falling back to uuid=null. [ 208.227694][T12740] overlayfs: maximum fs stacking depth exceeded [ 208.333041][ T1133] Bluetooth: hci5: Frame reassembly failed (-84) [ 208.354531][T12752] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 208.357744][T12752] overlayfs: failed to set xattr on upper [ 208.359784][T12752] overlayfs: ...falling back to redirect_dir=nofollow. [ 208.362141][T12752] overlayfs: ...falling back to metacopy=off. [ 208.364300][T12752] overlayfs: ...falling back to index=off. [ 208.366538][T12752] overlayfs: ...falling back to uuid=null. [ 208.368595][T12752] overlayfs: maximum fs stacking depth exceeded [ 208.471260][T12762] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1957'. [ 208.495542][T12765] xt_hashlimit: size too large, truncated to 1048576 [ 208.500701][ T6011] usbhid 7-1:0.0: can't add hid device: -71 [ 208.502477][ T6011] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 208.511032][ T6011] usb 7-1: USB disconnect, device number 40 [ 208.526271][ T5956] Bluetooth: hci4: command tx timeout [ 209.031198][T12769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1959'. [ 209.070600][T12772] FAULT_INJECTION: forcing a failure. [ 209.070600][T12772] name failslab, interval 1, probability 0, space 0, times 0 [ 209.074877][T12772] CPU: 0 UID: 0 PID: 12772 Comm: syz.8.1960 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 209.077766][T12772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 209.080572][T12772] Call Trace: [ 209.081453][T12772] [ 209.082276][T12772] dump_stack_lvl+0x16c/0x1f0 [ 209.083568][ T5956] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 209.085698][T12772] should_fail_ex+0x497/0x5b0 [ 209.087089][T12772] ? fs_reclaim_acquire+0xae/0x150 [ 209.088621][T12772] should_failslab+0xc2/0x120 [ 209.089888][T12772] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 209.091311][T12772] ? alloc_empty_file_noaccount+0x23/0xd0 [ 209.092825][T12772] alloc_empty_file_noaccount+0x23/0xd0 [ 209.094294][T12772] kernel_tmpfile_open+0x28/0x90 [ 209.095647][T12772] ovl_fill_super+0x109e/0x6720 [ 209.096979][T12772] ? __pfx_lock_release+0x10/0x10 [ 209.098318][T12772] ? __pfx___mutex_lock+0x10/0x10 [ 209.099658][T12772] ? __pfx_ovl_fill_super+0x10/0x10 [ 209.101085][T12772] ? lockdep_init_map_type+0x16d/0x7d0 [ 209.102575][T12772] ? lockdep_init_map_type+0x16d/0x7d0 [ 209.104353][T12772] ? __init_swait_queue_head+0xca/0x150 [ 209.106148][T12772] ? shrinker_register+0x1a8/0x260 [ 209.107586][T12772] ? sget_fc+0x808/0xc20 [ 209.108733][T12772] ? cap_capable+0x1cf/0x240 [ 209.110046][T12772] ? __pfx_ovl_fill_super+0x10/0x10 [ 209.111491][T12772] ? get_tree_nodev+0xda/0x190 [ 209.112773][T12772] get_tree_nodev+0xda/0x190 [ 209.114025][T12772] vfs_get_tree+0x8f/0x380 [ 209.115229][T12772] path_mount+0x14e6/0x1f20 [ 209.116464][T12772] ? kmem_cache_free+0x152/0x4b0 [ 209.117775][T12772] ? __pfx_path_mount+0x10/0x10 [ 209.119072][T12772] ? putname+0x12e/0x170 [ 209.120210][T12772] __x64_sys_mount+0x294/0x320 [ 209.121503][T12772] ? __pfx___x64_sys_mount+0x10/0x10 [ 209.122897][T12772] do_syscall_64+0xcd/0x250 [ 209.124119][T12772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.125673][T12772] RIP: 0033:0x7fd13397e719 [ 209.126859][T12772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.131968][T12772] RSP: 002b:00007fd1346bd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 209.134312][T12772] RAX: ffffffffffffffda RBX: 00007fd133b35f80 RCX: 00007fd13397e719 [ 209.136459][T12772] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 209.138534][T12772] RBP: 00007fd1346bd090 R08: 0000000020000500 R09: 0000000000000000 [ 209.140591][T12772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.142662][T12772] R13: 0000000000000000 R14: 00007fd133b35f80 R15: 00007ffe054e0e68 [ 209.144773][T12772] [ 209.147845][T12772] overlayfs: upper fs does not support tmpfile. [ 209.149804][T12772] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 209.151732][T12772] overlayfs: failed to set xattr on upper [ 209.153325][T12772] overlayfs: ...falling back to redirect_dir=nofollow. [ 209.155268][T12772] overlayfs: ...falling back to metacopy=off. [ 209.157417][T12772] overlayfs: ...falling back to index=off. [ 209.159439][T12772] overlayfs: ...falling back to uuid=null. [ 209.161438][T12772] overlayfs: maximum fs stacking depth exceeded [ 209.195760][T12784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12784 comm=syz.2.1965 [ 209.199720][T12784] netlink: 'syz.2.1965': attribute type 1 has an invalid length. [ 209.217089][T12784] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.221958][T12784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1965'. [ 209.228062][T12784] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 209.231700][T12784] bond2: (slave batadv1): making interface the new active one [ 209.234419][T12784] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 209.575498][ T6010] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 209.727191][ T6010] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.731132][ T6010] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 209.734830][ T6010] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 209.738332][ T6010] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 209.742652][ T6010] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.745816][ T6010] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.750029][ T6010] usb 7-1: config 0 descriptor?? [ 209.810009][T12663] usbtmc 11-1:16.0: usb_control_msg returned -110 [ 209.819697][ T6011] usb 11-1: USB disconnect, device number 16 [ 209.843189][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 209.843200][ T40] audit: type=1400 audit(1731481880.623:912): avc: denied { relabelfrom } for pid=12790 comm="syz.6.1968" name="UNIX-STREAM" dev="sockfs" ino=49951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 209.843401][T12791] SELinux: Context system_u:object_r:getty_exec_t:s0 is not valid (left unmapped). [ 209.855019][ T40] audit: type=1400 audit(1731481880.633:913): avc: denied { relabelto } for pid=12790 comm="syz.6.1968" name="UNIX-STREAM" dev="sockfs" ino=49951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="system_u:object_r:getty_exec_t:s0" [ 210.045062][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1970'. [ 210.127518][T12802] FAULT_INJECTION: forcing a failure. [ 210.127518][T12802] name failslab, interval 1, probability 0, space 0, times 0 [ 210.131010][T12802] CPU: 2 UID: 0 PID: 12802 Comm: syz.8.1973 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 210.133864][T12802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 210.136675][T12802] Call Trace: [ 210.137559][T12802] [ 210.138342][T12802] dump_stack_lvl+0x16c/0x1f0 [ 210.139594][T12802] should_fail_ex+0x497/0x5b0 [ 210.140836][T12802] ? fs_reclaim_acquire+0xae/0x150 [ 210.142179][T12802] should_failslab+0xc2/0x120 [ 210.143686][T12802] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 210.145778][T12802] ? alloc_empty_file_noaccount+0x23/0xd0 [ 210.147914][T12802] alloc_empty_file_noaccount+0x23/0xd0 [ 210.149995][T12802] kernel_tmpfile_open+0x28/0x90 [ 210.151577][T12802] ovl_fill_super+0x109e/0x6720 [ 210.152908][T12802] ? __pfx_lock_release+0x10/0x10 [ 210.154243][T12802] ? __pfx___mutex_lock+0x10/0x10 [ 210.155572][T12802] ? __pfx_ovl_fill_super+0x10/0x10 [ 210.156960][T12802] ? lockdep_init_map_type+0x16d/0x7d0 [ 210.158919][T12802] ? lockdep_init_map_type+0x16d/0x7d0 [ 210.160910][T12802] ? __init_swait_queue_head+0xca/0x150 [ 210.162840][T12802] ? shrinker_register+0x1a8/0x260 [ 210.164478][T12802] ? sget_fc+0x808/0xc20 [ 210.165878][T12802] ? cap_capable+0x1cf/0x240 [ 210.167111][T12802] ? __pfx_ovl_fill_super+0x10/0x10 [ 210.168594][T12802] ? get_tree_nodev+0xda/0x190 [ 210.170275][T12802] get_tree_nodev+0xda/0x190 [ 210.171920][T12802] vfs_get_tree+0x8f/0x380 [ 210.173504][T12802] path_mount+0x14e6/0x1f20 [ 210.175102][T12802] ? kmem_cache_free+0x152/0x4b0 [ 210.176753][T12802] ? __pfx_path_mount+0x10/0x10 [ 210.178019][T12802] ? putname+0x12e/0x170 [ 210.179160][T12802] __x64_sys_mount+0x294/0x320 [ 210.180415][T12802] ? __pfx___x64_sys_mount+0x10/0x10 [ 210.182158][T12802] do_syscall_64+0xcd/0x250 [ 210.183841][T12802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.186006][T12802] RIP: 0033:0x7fd13397e719 [ 210.187659][T12802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.193124][T12802] RSP: 002b:00007fd1346bd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 210.195348][T12802] RAX: ffffffffffffffda RBX: 00007fd133b35f80 RCX: 00007fd13397e719 [ 210.197437][T12802] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 210.199489][T12802] RBP: 00007fd1346bd090 R08: 0000000020000500 R09: 0000000000000000 [ 210.201752][T12802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.203945][T12802] R13: 0000000000000000 R14: 00007fd133b35f80 R15: 00007ffe054e0e68 [ 210.206031][T12802] [ 210.208229][T12802] overlayfs: upper fs does not support tmpfile. [ 210.210200][T12802] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 210.212090][T12802] overlayfs: failed to set xattr on upper [ 210.213630][T12802] overlayfs: ...falling back to redirect_dir=nofollow. [ 210.215951][T12802] overlayfs: ...falling back to metacopy=off. [ 210.217552][T12802] overlayfs: ...falling back to index=off. [ 210.219129][T12802] overlayfs: ...falling back to uuid=null. [ 210.220664][T12802] overlayfs: maximum fs stacking depth exceeded [ 210.272778][T12808] netlink: 'syz.8.1975': attribute type 1 has an invalid length. [ 210.274879][T12808] netlink: 168864 bytes leftover after parsing attributes in process `syz.8.1975'. [ 210.365537][ T5965] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 210.365600][ T5956] Bluetooth: hci5: command 0xfc11 tx timeout [ 210.377022][T12810] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 210.410697][ T6010] usbhid 7-1:0.0: can't add hid device: -71 [ 210.412458][ T6010] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 210.421049][ T6010] usb 7-1: USB disconnect, device number 41 [ 210.470572][T12821] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1979'. [ 210.547562][T12825] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 210.549466][T12825] overlayfs: failed to set xattr on upper [ 210.551050][T12825] overlayfs: ...falling back to redirect_dir=nofollow. [ 210.552892][T12825] overlayfs: ...falling back to metacopy=off. [ 210.554544][T12825] overlayfs: ...falling back to index=off. [ 210.556341][T12825] overlayfs: ...falling back to uuid=null. [ 210.557891][T12825] overlayfs: maximum fs stacking depth exceeded [ 210.589785][T12828] FAULT_INJECTION: forcing a failure. [ 210.589785][T12828] name failslab, interval 1, probability 0, space 0, times 0 [ 210.593105][T12828] CPU: 1 UID: 0 PID: 12828 Comm: syz.8.1982 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 210.595987][T12828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 210.598787][T12828] Call Trace: [ 210.599671][T12828] [ 210.600445][T12828] dump_stack_lvl+0x16c/0x1f0 [ 210.601675][T12828] should_fail_ex+0x497/0x5b0 [ 210.602920][T12828] ? fs_reclaim_acquire+0xae/0x150 [ 210.604549][T12828] should_failslab+0xc2/0x120 [ 210.605726][ T5965] Bluetooth: hci4: command tx timeout [ 210.606372][T12828] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 210.609479][T12828] ? __d_alloc+0x31/0xaa0 [ 210.610668][T12828] __d_alloc+0x31/0xaa0 [ 210.611829][T12828] ? bpf_lsm_inode_permission+0x9/0x10 [ 210.613321][T12828] d_alloc+0x4a/0x1e0 [ 210.614518][T12828] vfs_tmpfile+0x146/0x8a0 [ 210.615756][T12828] ? init_file+0x179/0x230 [ 210.617017][T12828] kernel_tmpfile_open+0x59/0x90 [ 210.618440][T12828] ovl_fill_super+0x109e/0x6720 [ 210.620032][T12828] ? __pfx_lock_release+0x10/0x10 [ 210.621505][T12828] ? __pfx___mutex_lock+0x10/0x10 [ 210.622880][T12828] ? __pfx_ovl_fill_super+0x10/0x10 [ 210.624516][T12828] ? lockdep_init_map_type+0x16d/0x7d0 [ 210.626472][T12828] ? lockdep_init_map_type+0x16d/0x7d0 [ 210.628458][T12828] ? __init_swait_queue_head+0xca/0x150 [ 210.630312][T12828] ? shrinker_register+0x1a8/0x260 [ 210.631676][T12828] ? sget_fc+0x808/0xc20 [ 210.632801][T12828] ? cap_capable+0x1cf/0x240 [ 210.634152][T12828] ? __pfx_ovl_fill_super+0x10/0x10 [ 210.635694][T12828] ? get_tree_nodev+0xda/0x190 [ 210.637080][T12828] get_tree_nodev+0xda/0x190 [ 210.638480][T12828] vfs_get_tree+0x8f/0x380 [ 210.639789][T12828] path_mount+0x14e6/0x1f20 [ 210.641037][T12828] ? kmem_cache_free+0x152/0x4b0 [ 210.642379][T12828] ? __pfx_path_mount+0x10/0x10 [ 210.643721][T12828] ? putname+0x12e/0x170 [ 210.645267][T12828] __x64_sys_mount+0x294/0x320 [ 210.646955][T12828] ? __pfx___x64_sys_mount+0x10/0x10 [ 210.648361][T12828] do_syscall_64+0xcd/0x250 [ 210.649584][T12828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.651199][T12828] RIP: 0033:0x7fd13397e719 [ 210.652415][T12828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.657602][T12828] RSP: 002b:00007fd1346bd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 210.659895][T12828] RAX: ffffffffffffffda RBX: 00007fd133b35f80 RCX: 00007fd13397e719 [ 210.662033][T12828] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 210.664235][T12828] RBP: 00007fd1346bd090 R08: 0000000020000500 R09: 0000000000000000 [ 210.666401][T12828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.668557][T12828] R13: 0000000000000000 R14: 00007fd133b35f80 R15: 00007ffe054e0e68 [ 210.670699][T12828] [ 210.671635][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.674878][T12828] overlayfs: upper fs does not support tmpfile. [ 210.677208][T12828] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 210.679185][T12828] overlayfs: failed to set xattr on upper [ 210.680715][T12828] overlayfs: ...falling back to redirect_dir=nofollow. [ 210.682587][T12828] overlayfs: ...falling back to metacopy=off. [ 210.684465][T12828] overlayfs: ...falling back to index=off. [ 210.686278][T12828] overlayfs: ...falling back to uuid=null. [ 210.688315][T12828] overlayfs: maximum fs stacking depth exceeded [ 210.787094][T12839] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1984'. [ 210.853655][T12844] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1986'. [ 210.859259][T12844] openvswitch: netlink: Flow key attr not present in new flow. [ 211.046809][T12859] FAULT_INJECTION: forcing a failure. [ 211.046809][T12859] name failslab, interval 1, probability 0, space 0, times 0 [ 211.050143][T12859] CPU: 0 UID: 0 PID: 12859 Comm: syz.6.1993 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 211.052941][T12859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 211.055832][T12859] Call Trace: [ 211.056774][T12859] [ 211.057582][T12859] dump_stack_lvl+0x16c/0x1f0 [ 211.058904][T12859] should_fail_ex+0x497/0x5b0 [ 211.060304][T12859] ? fs_reclaim_acquire+0xae/0x150 [ 211.061717][T12859] should_failslab+0xc2/0x120 [ 211.062969][T12859] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 211.064372][T12859] ? security_file_alloc+0x34/0x2b0 [ 211.065731][T12859] security_file_alloc+0x34/0x2b0 [ 211.067052][T12859] init_file+0x93/0x230 [ 211.068143][T12859] alloc_empty_file_noaccount+0x3d/0xd0 [ 211.069570][T12859] kernel_tmpfile_open+0x28/0x90 [ 211.070861][T12859] ovl_fill_super+0x109e/0x6720 [ 211.072163][T12859] ? __pfx_lock_release+0x10/0x10 [ 211.073509][T12859] ? __pfx___mutex_lock+0x10/0x10 [ 211.074988][T12859] ? __pfx_ovl_fill_super+0x10/0x10 [ 211.076440][T12859] ? lockdep_init_map_type+0x16d/0x7d0 [ 211.077953][T12859] ? lockdep_init_map_type+0x16d/0x7d0 [ 211.079585][T12859] ? __init_swait_queue_head+0xca/0x150 [ 211.081149][T12859] ? shrinker_register+0x1a8/0x260 [ 211.082582][T12859] ? sget_fc+0x808/0xc20 [ 211.083720][T12859] ? cap_capable+0x1cf/0x240 [ 211.084928][T12859] ? __pfx_ovl_fill_super+0x10/0x10 [ 211.086305][T12859] ? get_tree_nodev+0xda/0x190 [ 211.087596][T12859] get_tree_nodev+0xda/0x190 [ 211.088940][T12859] vfs_get_tree+0x8f/0x380 [ 211.090243][T12859] path_mount+0x14e6/0x1f20 [ 211.091569][T12859] ? kmem_cache_free+0x152/0x4b0 [ 211.092963][T12859] ? __pfx_path_mount+0x10/0x10 [ 211.094339][T12859] ? putname+0x12e/0x170 [ 211.095512][T12859] __x64_sys_mount+0x294/0x320 [ 211.096773][T12859] ? __pfx___x64_sys_mount+0x10/0x10 [ 211.098149][T12859] do_syscall_64+0xcd/0x250 [ 211.099348][T12859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.100929][T12859] RIP: 0033:0x7f3918d7e719 [ 211.102104][T12859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.106991][T12859] RSP: 002b:00007f3919c62038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 211.109016][T12859] RAX: ffffffffffffffda RBX: 00007f3918f35f80 RCX: 00007f3918d7e719 [ 211.111007][T12859] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 211.113068][T12859] RBP: 00007f3919c62090 R08: 0000000020000500 R09: 0000000000000000 [ 211.115319][T12859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.117401][T12859] R13: 0000000000000000 R14: 00007f3918f35f80 R15: 00007ffcb11eec98 [ 211.119537][T12859] [ 211.121029][T12859] overlayfs: upper fs does not support tmpfile. [ 211.122845][T12859] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 211.124737][T12859] overlayfs: failed to set xattr on upper [ 211.126751][T12859] overlayfs: ...falling back to redirect_dir=nofollow. [ 211.128662][T12859] overlayfs: ...falling back to metacopy=off. [ 211.130324][T12859] overlayfs: ...falling back to index=off. [ 211.131872][T12859] overlayfs: ...falling back to uuid=null. [ 211.133505][T12859] overlayfs: maximum fs stacking depth exceeded [ 211.287182][ T40] audit: type=1400 audit(1731481882.073:914): avc: denied { ioctl } for pid=12860 comm="syz.6.1994" path="socket:[50794]" dev="sockfs" ino=50794 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 211.605689][ T1015] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 211.630572][T12883] veth1_to_team: entered promiscuous mode [ 211.634177][T12883] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12883 comm=syz.8.2001 [ 211.642254][T12882] veth1_to_team: left promiscuous mode [ 211.672451][T12885] xt_hashlimit: size too large, truncated to 1048576 [ 211.777169][ T1015] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.781287][ T1015] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 211.785082][ T1015] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 211.789779][ T1015] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 211.794663][ T1015] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.798177][ T1015] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.802550][ T1015] usb 12-1: config 0 descriptor?? [ 212.412444][ T1015] usbhid 12-1:0.0: can't add hid device: -71 [ 212.414158][ T1015] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 212.419767][ T1015] usb 12-1: USB disconnect, device number 21 [ 212.443053][ T5956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.447353][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.450246][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.452439][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.454678][ T5956] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.457078][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.568081][T12897] chnl_net:caif_netlink_parms(): no params data found [ 212.635299][ T58] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 212.639516][T12897] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.641481][T12897] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.643436][T12897] bridge_slave_0: entered allmulticast mode [ 212.645552][T12897] bridge_slave_0: entered promiscuous mode [ 212.651585][T12897] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.653520][T12897] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.655940][T12897] bridge_slave_1: entered allmulticast mode [ 212.658157][T12897] bridge_slave_1: entered promiscuous mode [ 212.681500][T12897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.685828][T12897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.710251][T12897] team0: Port device team_slave_0 added [ 212.714618][T12897] team0: Port device team_slave_1 added [ 212.733645][T12897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.735889][T12897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.742752][T12897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.746814][T12897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.748929][T12897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.756373][T12897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.791598][T12897] hsr_slave_0: entered promiscuous mode [ 212.794632][T12897] hsr_slave_1: entered promiscuous mode [ 212.798304][ T58] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.801152][ T58] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 212.803794][ T58] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 212.804981][T12897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.807608][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.811896][T12897] Cannot create hsr debugfs directory [ 212.814279][T12896] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 212.818611][ T58] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.959525][T12907] binder: Bad value for 'max' [ 213.018190][T12897] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 213.026402][T12897] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 213.033894][T12897] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 213.040882][T12897] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 213.053241][T12920] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2013'. [ 213.062491][T12920] syz.7.2013: attempt to access beyond end of device [ 213.062491][T12920] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 213.063628][T12897] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.068298][T12897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.068640][T12920] exFAT-fs (nbd7): unable to read boot sector [ 213.070239][T12897] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.071778][T12920] exFAT-fs (nbd7): failed to read boot sector [ 213.073546][T12897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.075134][T12920] exFAT-fs (nbd7): failed to recognize exfat type [ 213.099550][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.103241][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.105358][ T9] usb 7-1: USB disconnect, device number 42 [ 213.125773][T12923] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 213.127700][T12923] overlayfs: failed to set xattr on upper [ 213.131103][T12923] overlayfs: ...falling back to redirect_dir=nofollow. [ 213.133101][T12923] overlayfs: ...falling back to metacopy=off. [ 213.134824][T12923] overlayfs: ...falling back to index=off. [ 213.137244][T12923] overlayfs: ...falling back to uuid=null. [ 213.138852][T12923] overlayfs: maximum fs stacking depth exceeded [ 213.192935][T12897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.202687][T12897] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.221923][ T7931] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.223797][ T7931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.231284][ T7959] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.233303][ T7959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.352787][T12945] xt_hashlimit: size too large, truncated to 1048576 [ 213.359319][T12897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.385687][ T58] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 213.512389][T12897] veth0_vlan: entered promiscuous mode [ 213.521799][T12897] veth1_vlan: entered promiscuous mode [ 213.538260][ T58] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.541134][ T58] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 213.543915][ T58] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 213.549840][T12897] veth0_macvtap: entered promiscuous mode [ 213.552812][T12897] veth1_macvtap: entered promiscuous mode [ 213.559375][ T58] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.562545][ T58] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.564837][ T58] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.572946][ T58] usb 12-1: config 0 descriptor?? [ 213.575657][T12897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.578431][T12897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.581172][T12897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.583936][T12897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.593564][T12897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.598028][T12897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.600615][T12897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.603255][T12897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.607154][T12897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.612530][T12897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.615751][T12897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.618138][T12897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.621039][T12897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.623525][T12897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.626484][T12897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.629117][T12897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.631838][T12897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.634365][T12897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.637111][T12897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.640852][T12897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.646229][T12897] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.649104][T12897] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.651906][T12897] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.654312][T12897] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.697208][ T7959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.705411][ T7959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.715876][T12897] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 213.718564][T12897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.724913][ T7931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.727472][ T7931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.826335][T12963] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 213.828385][T12963] #PF: supervisor instruction fetch in kernel mode [ 213.830445][T12963] #PF: error_code(0x0010) - not-present page [ 213.833460][T12963] PGD 62ff8067 P4D 62ff8067 PUD 375a0067 PMD 0 [ 213.835104][T12963] Oops: Oops: 0010 [#1] PREEMPT SMP KASAN NOPTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 213.836685][T12963] CPU: 3 UID: 0 PID: 12963 Comm: syz.8.2022 Not tainted 6.12.0-rc7-syzkaller-00012-g3022e9d00ebe #0 [ 213.840074][T12963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 213.842915][T12963] RIP: 0010:0x0 [ 213.843824][T12963] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 213.845994][T12963] RSP: 0018:ffffc90005d079c8 EFLAGS: 00010287 [ 213.847657][T12963] RAX: 0000000000000b05 RBX: 0000000000000000 RCX: ffffc90024e72000 [ 213.849745][T12963] RDX: 0000000000040000 RSI: ffffea00014f2f40 RDI: ffff88802aba8380 [ 213.851939][T12963] RBP: ffffea00014f2f40 R08: 0000000000000007 R09: 0000000000000000 [ 213.853864][T12963] R10: 0000000000000000 R11: ffffffff961d8908 R12: 1ffff92000ba0f3a [ 213.855833][T12963] R13: ffff88802aba8380 R14: 0000000000000000 R15: dffffc0000000000 [ 213.857743][T12963] FS: 00007fd1346bd6c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 213.859939][T12963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.861610][T12963] CR2: ffffffffffffffd6 CR3: 00000000315ca000 CR4: 0000000000352ef0 [ 213.863607][T12963] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.865607][T12963] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 213.867633][T12963] Call Trace: [ 213.868508][T12963] [ 213.869337][T12963] ? __die+0x1e/0x60 [ 213.870418][T12963] ? page_fault_oops+0x3b6/0xb80 [ 213.871792][T12963] ? __pfx_page_fault_oops+0x10/0x10 [ 213.873257][T12963] ? __pfx___lock_acquire+0x10/0x10 [ 213.874698][T12963] ? do_user_addr_fault+0xa90/0x13f0 [ 213.876139][T12963] ? rcu_is_watching+0x12/0xc0 [ 213.877408][T12963] ? exc_page_fault+0x5c/0xc0 [ 213.878637][T12963] ? asm_exc_page_fault+0x26/0x30 [ 213.879973][T12963] filemap_read_folio+0xc6/0x2a0 [ 213.881291][T12963] ? __pfx_filemap_read_folio+0x10/0x10 [ 213.882726][T12963] ? __filemap_get_folio+0x2a5/0xaf0 [ 213.884093][T12963] do_read_cache_folio+0x263/0x5c0 [ 213.885396][T12963] freader_get_folio+0x337/0x8e0 [ 213.886655][T12963] freader_fetch+0xc2/0x5f0 [ 213.887784][T12963] ? mt_find+0x4c8/0xa20 [ 213.888850][T12963] __build_id_parse.isra.0+0xed/0x7a0 [ 213.890239][T12963] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 213.891784][T12963] ? __pfx_find_vma+0x10/0x10 [ 213.892975][T12963] do_procmap_query+0xd62/0x1030 [ 213.894293][T12963] ? __pfx_do_procmap_query+0x10/0x10 [ 213.895722][T12963] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 213.897408][T12963] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 213.899065][T12963] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 213.900782][T12963] ? selinux_file_ioctl+0x180/0x270 [ 213.902126][T12963] ? selinux_file_ioctl+0xb4/0x270 [ 213.903435][T12963] procfs_procmap_ioctl+0x7d/0xb0 [ 213.904941][T12963] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 213.906354][T12963] __x64_sys_ioctl+0x18f/0x220 [ 213.907555][T12963] do_syscall_64+0xcd/0x250 [ 213.908692][T12963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.910251][T12963] RIP: 0033:0x7fd13397e719 [ 213.911401][T12963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.916446][T12963] RSP: 002b:00007fd1346bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.918575][T12963] RAX: ffffffffffffffda RBX: 00007fd133b35f80 RCX: 00007fd13397e719 [ 213.920546][T12963] RDX: 0000000020000180 RSI: 00000000c0686611 RDI: 0000000000000006 [ 213.922586][T12963] RBP: 00007fd1339f1616 R08: 0000000000000000 R09: 0000000000000000 [ 213.924675][T12963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.926824][T12963] R13: 0000000000000000 R14: 00007fd133b35f80 R15: 00007ffe054e0e68 [ 213.929039][T12963] [ 213.929894][T12963] Modules linked in: [ 213.930935][T12963] CR2: 0000000000000000 [ 213.932104][T12963] ---[ end trace 0000000000000000 ]--- [ 213.933549][T12963] RIP: 0010:0x0 [ 213.934467][T12963] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 213.936308][T12963] RSP: 0018:ffffc90005d079c8 EFLAGS: 00010287 [ 213.937890][T12963] RAX: 0000000000000b05 RBX: 0000000000000000 RCX: ffffc90024e72000 [ 213.940012][T12963] RDX: 0000000000040000 RSI: ffffea00014f2f40 RDI: ffff88802aba8380 [ 213.942102][T12963] RBP: ffffea00014f2f40 R08: 0000000000000007 R09: 0000000000000000 [ 213.944310][T12963] R10: 0000000000000000 R11: ffffffff961d8908 R12: 1ffff92000ba0f3a [ 213.946453][T12963] R13: ffff88802aba8380 R14: 0000000000000000 R15: dffffc0000000000 [ 213.948616][T12963] FS: 00007fd1346bd6c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 213.950963][T12963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.952680][T12963] CR2: ffffffffffffffd6 CR3: 00000000315ca000 CR4: 0000000000352ef0 [ 213.954783][T12963] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 213.956932][T12963] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 213.959065][T12963] Kernel panic - not syncing: Fatal exception [ 213.961283][T12963] Kernel Offset: disabled [ 213.962416][T12963] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:11:24 Registers: info registers vcpu 0 CPU#0 RAX=00000000001ce624 RBX=0000000000000000 RCX=ffffffff8b238489 RDX=ffffed100d4c7026 RSI=ffffffff8bd1b3c0 RDI=ffffffff816477cc RBP=fffffbfff1bd2af8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c7025 R10=ffff88806a63812b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8de957c0 R14=ffffffff905f5988 R15=0000000000000000 RIP=ffffffff8b23986f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c27d96d CR3=0000000058eee000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00636e79735f7773 2f636e79732f6775 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faecadf24b3 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faecadf24c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faecadf24ba ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faecadf24ce ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faecadf2554 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faecadf2632 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000200cd4a f97ea3e4cc1a0dfe ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faecba6d100 00007faecaf0c440 00007faecaf00004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007faecaf0c498 00007faecaf0c490 00007faecaf0c488 00007faecaf0c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90003cbfc20 RBX=0000000000000010 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffc90003cbfc68 RBP=dffffc0000000000 RSP=ffffc90003cbfa60 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90003cbfc20 R11=00000000000a4001 R12=1ffff92000797f62 R13=0000000000000093 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff844c7317 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555592a41500 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffe5664ff8 CR3=0000000053776000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000001000002 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffe5666350 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8dedf24b3 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8dedf24c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8dedf24ba ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8dedf24ce ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8dedf2554 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8dedf2632 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000007 0000000000000000 0000000000000000 0000000000000200 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000000 RCX=1ffffffff20bf193 RDX=0000000000000000 RSI=0000000000000201 RDI=0000000000000000 RBP=ffff888027ac2440 RSP=ffffc90005b97bc0 R8 =0000000000000004 R9 =0000000000000000 R10=00000000000c33e0 R11=0000000000000000 R12=00000000000c33e0 R13=1ffff92000b72f87 R14=0000000000000000 R15=ffffc90030801000 RIP=ffffffff816af960 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe8ded64200 CR3=000000000df7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8dedf24b3 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8dedf24c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8dedf24ba ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8dedf24ce ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8dedf2554 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8dedf2632 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8def0c488 00007fe8def0c480 00007fe8def0c478 00007fe8def0c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8dfa6d100 00007fe8def0c440 00007fe8def0c458 00007fe8def0c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe8def0c498 00007fe8def0c490 00007fe8def0c488 00007fe8def0c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850b9b15 RDI=ffffffff9aaebc40 RBP=ffffffff9aaebc00 RSP=ffffc90005d07278 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=000000000000006f R14=ffffffff850b9ab0 R15=0000000000000000 RIP=ffffffff850b9b3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd1346bd6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000315ca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1346bcf90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1339f24b3 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1339f24c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1339f24ba ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1339f24ce ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1339f2554 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1339f2632 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000