last executing test programs: 5.972262962s ago: executing program 2 (id=732): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000d7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8}, 0x90) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x18080, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/79, 0x4f}], 0x1, 0x1003, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x3, &(0x7f00000003c0)=0x3d9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001000000fb651225c3ebddb243e0c78a3591ad0ec2921b000506f3a2f6467de310d68b5e7562ef0b820100000000000076b3c779c96ad3eb317ac20f7a46af5f976c3cf01511b5c883b81b771283cc27d42370c2d74cc424595b2c6621eff9a5fb3ecedbe82667f8fcdee1aaa3bda658fa29f6e0f92e9f022be991c0f24f06c17c900792d4c0e3fca28b0c15d9aeab9381f831a6c2513d1435"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000002030000000000000000000500000008000340fffffffa"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000010300d18243756a1e35330db306490f48e2c5498950829414"], 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x13) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000001c0)=0xc8, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='uid_map\x00') 5.881565339s ago: executing program 0 (id=733): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="97020000000000005c00128009000100626f6e64000000004c00028008000a00000000001800088000000000e00000017f000001640101020000000005000100000000000800070001"], 0x8c}}, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f0000000100)=""/179, 0xb3}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/109, 0x6d}, {&(0x7f0000000500)=""/237, 0xed}, {&(0x7f0000000600)=""/90, 0x5a}, {&(0x7f0000000680)=""/91, 0x5b}], 0x7, &(0x7f0000000700)=""/194, 0xc2}, 0x7}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000001880)=""/164, 0xa4}, {&(0x7f0000000440)=""/25, 0x19}, {&(0x7f0000000800)=""/10, 0xa}, {&(0x7f0000001940)=""/11, 0xb}, {&(0x7f0000001980)=""/196, 0xc4}], 0x6}, 0x8000}, {{&(0x7f0000001ac0), 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b40)=""/223, 0xdf}], 0x1, &(0x7f0000001c80)=""/82, 0x52}}], 0x3, 0x10040, &(0x7f0000001d80)={0x77359400}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000040)='./file0\x00', 0xb) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$qrtr(0x2a, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$ndb(0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@broadcast, @empty, @void, {@canfd={0xd, {{0x1, 0x0, 0x1, 0x1}, 0x14, 0x3, 0x0, 0x0, "8e8a2178e31cb570cdc5780fb30928b3b3b7f5e3dfc80400069f00e330fc80c937798bd6de7d0de064313388c6ed421e766db2054534e4c69e4fed4531818723"}}}}, 0x0) 4.962204176s ago: executing program 2 (id=735): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c40), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001000000008000100", @ANYRES32=0x0, @ANYBLOB="010731645aacc07ea11cff2d00116e55ce890005000f0000000000"], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x20, &(0x7f00000000c0)={&(0x7f0000000280)=""/161, 0xa1, 0x0, &(0x7f0000000340)=""/158, 0x9e}}, 0x10) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0xfffffffffffffe96) sendmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000000)={r10}, 0xc) 4.002756711s ago: executing program 2 (id=739): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000002d40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002d00)={&(0x7f00000005c0)={0xebc, 0x0, 0x300, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x910, 0x5, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x18c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xda}]}]}, {0x3b0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x340, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x50}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9820}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2cf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1979734b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x350, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x180, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x25}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d0}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x188, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffd}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x909e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x590, 0x5, 0x0, 0x1, [{0x504, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x15c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x24c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xbc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x53}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x68, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}]}]}]}]}]}, 0xebc}, 0x1, 0x0, 0x0, 0x4000054}, 0x4040800) 3.902176583s ago: executing program 2 (id=740): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$pvfs2(&(0x7f0000000100), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x1, &(0x7f0000000800)=ANY=[]) r1 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x15) r2 = openat$cgroup_ro(r1, &(0x7f00000004c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000001140)=ANY=[@ANYRES16=r1], 0x3f3) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x20100000, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000240)='./file1\x00', &(0x7f0000000880), &(0x7f00000008c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x6) io_submit(0x0, 0x0, &(0x7f0000000700)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000c40)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = syz_open_dev$video4linux(&(0x7f0000000100), 0x7fffffff, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @raw_data}) pipe2(&(0x7f0000000000), 0x4000) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in=@broadcast, 0x4e24, 0x0, 0x4e22, 0x0, 0x2, 0x140, 0xe0, 0x2b, 0x0, r7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0xffffffffffffffff, 0x3, 0xfffffffffffff800}, 0x2, 0x0, 0x0, 0x3, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x15}}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe4) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) setreuid(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x20006, 0x5}, 0x48) setuid(0x0) 3.732187225s ago: executing program 0 (id=741): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$pvfs2(&(0x7f0000000100), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x1, &(0x7f0000000800)=ANY=[]) r1 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x15) r2 = openat$cgroup_ro(r1, &(0x7f00000004c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000001140)=ANY=[@ANYRES16=r1], 0x3f3) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x20100000, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000240)='./file1\x00', &(0x7f0000000880), &(0x7f00000008c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x6) io_submit(0x0, 0x0, &(0x7f0000000700)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000c40)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = syz_open_dev$video4linux(&(0x7f0000000100), 0x7fffffff, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @raw_data}) pipe2(&(0x7f0000000000), 0x4000) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in=@broadcast, 0x4e24, 0x0, 0x4e22, 0x0, 0x2, 0x140, 0xe0, 0x2b, 0x0, r7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0xffffffffffffffff, 0x3, 0xfffffffffffff800}, 0x2, 0x0, 0x0, 0x3, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x15}}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe4) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) setreuid(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x20006, 0x5}, 0x48) setuid(0x0) 3.337540716s ago: executing program 3 (id=742): syz_open_pts(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000e00)={&(0x7f00000002c0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000002000000000009b00000400000000000000100ce377f808bc0dc11e430000000000000020000000000000006a6c5c2794ee070300000000000000f1178b8d6b74e17011e30f9ba2097e571ad0a4922990bcfce16499e33a3f83196c8af21500f736f270e74c8d5f942cb1de6a90947457f4df36f2d9acc7c0376ae467d478a99ee76b822a9dc3beefd900136ecaebc0337810f3fce46754659dbc1d032863af13e6c1d2f496"], 0x24, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x4004662b, &(0x7f0000000180)={@id={0x2, 0x0, @c}}) 3.150677076s ago: executing program 1 (id=743): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r0, &(0x7f0000000100)=@unlock_all, 0xb) r1 = dup(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x645c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x808}, 0x901) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x154, 0x0, 0x148, 0x154, 0x148, 0x26c, 0x240, 0x240, 0x26c, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'dvmrp0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0xec, 0x154, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@ttl={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x35c) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000000bd7000fedb00000000000200020300", @ANYRES32=r6, @ANYBLOB="050019010b000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xfe33) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = io_uring_setup(0x146a, &(0x7f0000000180)) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000002000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000000900010073797a3100000000140000001000010000000000000000000084000a"], 0xbc}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x16, 0x20000002, r10) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000000406010100000000ffffffffffffff040500010007"], 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={r1}) 3.085668344s ago: executing program 1 (id=744): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xe2200, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x88a80) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x80100, 0x0, 0x39}, 0x18) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x41c21c49b1a76e92}) open_tree(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x0, 0x40000000000ead}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, 0xffffffffffffffff, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1104440, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x813014, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r3, &(0x7f0000004180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@uid={'uid', 0x3d, r4}}, {@gid={'gid', 0x3d, r5}}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') 2.690990459s ago: executing program 2 (id=745): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x10}, 0x43) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000800)) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100000000100000001000000b3"], 0x10}}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) socket$kcm(0x10, 0x7, 0x10) r10 = getpid() process_vm_readv(r10, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) rseq(0x0, 0x0, 0x0, 0x0) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000000000160af365040014000d0002008bc3a0e640e51753cd60bc24eab556a705251e6182940800000000001282bb2352d1f006ba", 0x4d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8}]}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00&\x00\x00\x00'], 0x2c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 2.59045726s ago: executing program 0 (id=746): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa120000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000850000002300000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001800), 0xc) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r9}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x3, 0x0) r10 = getpid() process_vm_readv(r10, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r11 = dup(r8) setuid(0xee00) r12 = getpid() r13 = syz_pidfd_open(r12, 0x0) setns(r13, 0x8000000) write$UHID_INPUT(r11, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r14 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r14}, @generic={0x66}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x21) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xc9, 0x0, &(0x7f0000000340)="0000000000000000000051229dc9ffa5ff65084960e227d1a0f0d9e5da780ffbf9e662bccf66a23f2932f9ed280f4a19adf07dd8440dccddd63b18e068cdb6ec0f703c8262ed85a5875846954e6d1c63860fd3af97ebdaf43cc89501005bfee6a8e7db55ee98637aebdd9c102e47860be97c6c226656e59437c351801ca70ce50cecd2c6568064252ea508a27e672b6735f95319e1a42edc2f77ea411d313f493b9278c09294ff46def1880b39d12fd3443192d23f22992713f62a00"/201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x4c) 2.246004491s ago: executing program 3 (id=747): r0 = getpgid(0x0) getpriority(0x1, r0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x6}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r5 = syz_socket_connect_nvme_tcp() fcntl$dupfd(r1, 0x406, r5) 1.968385773s ago: executing program 3 (id=748): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000002d40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002d00)={&(0x7f00000005c0)={0xe90, 0x0, 0x300, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x910, 0x5, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x18c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xda}]}]}, {0x3b0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x340, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x50}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9820}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2cf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1979734b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x350, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x180, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x25}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d0}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x188, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffd}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x909e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x564, 0x5, 0x0, 0x1, [{0x4d8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x15c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x220, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xbc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x53}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x68, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}]}]}]}]}]}, 0xe90}, 0x1, 0x0, 0x0, 0x4000054}, 0x4040800) 1.837349025s ago: executing program 3 (id=749): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {&(0x7f0000000240)=""/238, 0xee}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f00000004c0)=""/121, 0x79}], 0x4, 0x4, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd2(0x0, 0x0) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index, 0x0, 0x0}) setresuid(0x0, 0xee01, 0x0) keyctl$link(0x15, 0x0, 0xfffffffffffffffc) keyctl$search(0x7, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) open(&(0x7f0000000140)='./file0\x00', 0x400080, 0x9) bind$can_j1939(r5, &(0x7f00000001c0)={0x1d, r6}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000380)={&(0x7f0000000200), 0x18, &(0x7f0000000000)={&(0x7f00000000c0)="10", 0x1}, 0x3f}, 0xfeffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x90) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) write$binfmt_script(r7, 0x0, 0x0) 1.594760977s ago: executing program 2 (id=750): mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x4, 0x7f, 0x4, 0x4, 0x20, 0x4, 0x5}, &(0x7f0000000100)=0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000600)={r3, @in={{0x2, 0x4e23, @remote}}, 0x0, 0x2, 0x9, 0x1b0f, 0xb1c}, &(0x7f0000000300)=0x98) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c00018006000100020000000800050000000000080006007369"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc1f883bc6f3c8751, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088", 0x0, 0x0, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) close(0xffffffffffffffff) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x0) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000380)={0x4, [0x9, 0xa5a8, 0x60, 0x7f]}, &(0x7f00000003c0)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x4}, 0x5, 0x40, 0x1, 0x0, 0xfffffffffffffe43, 0x4, 'syz0\x00', 0x0, 0xfffffffffffffef5}) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 1.247488737s ago: executing program 0 (id=751): prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount(0x0, &(0x7f0000000380)='./bus\x00', 0x0, 0x3021002, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000200)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x9201, 0x1}, &(0x7f0000000040), &(0x7f0000000240)) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x80020000, 0x2, {0x5, @raw_data="439e73c82bad769c1516d4c77a5c5885be9b70b538ec45e7ba36827b0dcf53cc22c46c7ddae950c8f87629ac052d399516111996f2f068d4314f1a6a19db3bdb291cb1a830152d32b2ad880e24ae29ce49a0ba071236284d59f28276b7b6322d4d3e89d8d8fb5d51ce9ef9dea4663ae9ce4c521f2918fad161726fe27dd15cc6520d466d80c07cd248fcf58332bf0ee0e5061d4377b24a0c253e86d27c5edcd2ae36ce31344898571a1a4f7f4af1de4747103ee0bb34830f53b67d1578af4dab6f19403d8c88fd8e"}}) connect$inet6(r4, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) 760.70072ms ago: executing program 3 (id=752): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x1a, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2c, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x2c}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x24d8}], 0x1, 0x0, 0x0, 0x4089}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000000)=0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getpid() r4 = openat$nmem0(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r4, 0x8044610a, &(0x7f00000003c0)) prlimit64(0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r5, 0x101, 0xa, &(0x7f0000000480)=0x11003, 0x4) sched_setscheduler(0x0, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$dsp(r6, &(0x7f00000000c0)="1359a7b637341adbff62ec6add15460c682304e4fccad9e34173348bfa33359731791967c61a51691f2e3d3d44601d5154e3516d956d4645ec724600"/84, 0x54) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="00005500a01100000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05040500d3fc09000000478803", 0xd, 0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r11, @ANYRES16=r10, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYRESHEX=r5], 0x398}, 0x1, 0x0, 0x0, 0x40080}, 0x20044850) ioctl$SOUND_MIXER_READ_RECSRC(r7, 0x80044dff, &(0x7f0000000180)) 401.945457ms ago: executing program 1 (id=753): socket(0x1e, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/4099, 0x1003}], 0x1) 231.805988ms ago: executing program 1 (id=754): prctl$PR_SET_NAME(0xf, &(0x7f0000000240)=')-/\x00') (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)=')-/\x00') r0 = socket$inet(0xa, 0x80006, 0x6) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='=dev\x00\x00sp\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0xffff, 0x3, 0x0, 0x1, 0x8}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = fanotify_init(0x44, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r3, 0x101, 0x48001051, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r6 = fanotify_init(0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) getpgid(0x0) fanotify_mark(r6, 0x101, 0x48001051, r7, 0x0) (async) fanotify_mark(r6, 0x101, 0x48001051, r7, 0x0) fanotify_mark(r6, 0x102, 0x48001050, r5, 0x0) (async) fanotify_mark(r6, 0x102, 0x48001050, r5, 0x0) fanotify_mark(r6, 0x8, 0x48001040, r5, 0x0) (async) fanotify_mark(r6, 0x8, 0x48001040, r5, 0x0) socket$inet(0x2, 0xa6a80c82801cde47, 0xfffffff8) (async) r8 = socket$inet(0x2, 0xa6a80c82801cde47, 0xfffffff8) r9 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r9, 0x1) (async) ftruncate(r9, 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffc, 0x4002011, r6, 0x0) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f000023e000/0x4000)=nil) (async) mremap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f000023e000/0x4000)=nil) mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000002000/0x1000)=nil) (async) mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000002000/0x1000)=nil) setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES16=r8], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f00000008c0)=""/145, 0x0, 0x3}, 0x80) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRES16=r8], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f00000008c0)=""/145, 0x0, 0x3}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) close_range(r10, r1, 0x2) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x8, 0x6, 0x7fff, 0x7fff, 0x0, 0x3}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x400) 231.43549ms ago: executing program 0 (id=755): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = open(&(0x7f0000000000)='./file0\x00', 0x20b02, 0xc) ioctl$KVM_SMI(r0, 0xaeb7) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a8050005006a0000000a"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x393, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f449487219195806840106a86dd", 0x0, 0xfd33, 0x0, 0xb1, 0xffffffffffffff19, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e0798e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="675901b49f4914256e6e8d2aa26c9567dbec07a38cc0bec64eeba31aad6c0da339f977f6873cf1c73e0218cc94c8c0b4b438ca1e7f4987540d92492448791407e6f37a521ba9b42d969a3ce903efb9a39fa05bdbe7424e36a542c3b00485fcef3be43c5d45a5b3d63291adda6d81d771cacea20e5f33ca681f54a044d1862f38b4dfc849614974842fef9114b4e01d957e5e8c523a62190362cfb27c82bb1d6f9efaada5bccb1ca44f56b191ebcd2580b61194842af36549aa2359742c48ed9d3c2a61c51c1ca0d724cf0bf1c0d6ed1705", 0x0, 0x0, 0x2}, 0x23) 122.377782ms ago: executing program 3 (id=756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELTABLE={0x170, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xbc, 0x6, "38fecc6805a1f5bd96977d7daf732f72f080558951a203b3d980a37b6da30b57be280c15c65c6c3db7c45d593aeb3c51fb47f7696eacc60700662c11b1790eb2226c8024527fab04d353481380248f2ca87617677624528ad1491cb1dfed4c490d247f148f9c0b2810679b57fc6aa2bd62ebd87bd3dd6244c10dd5836772065ba057f29f4f2b2d887bd267b0b1bbbe3eb9c0fbae557658437575dd7b2a04be5ea7895d828fcb50b0401e2ef7a78c1b63f8337f8f79212f9a"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x3c, 0x6, "107e6b69d5b967bb12849262ae7948f3e8ef29eaf32848b61a464093dbb60150ae32f249862c71323d90549b7abaac3b95defad19843b2e6"}, @NFTA_TABLE_USERDATA={0x55, 0x6, "e7202522ba801bbcfddeb4068e6c1cafe26963ceee3ada46821f513bad1709b34ad12291f07f9f69217c65c3bffe625cb4242fc89dc88da1f02fa2bc78deb2add05771f8dce8f4190a0e791f435451b0d9"}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x1c4}}, 0x24000054) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000080)='\xc1$],(+%,\x00', &(0x7f00000000c0)='*)}!]/\x00'], &(0x7f0000000300)=[&(0x7f00000001c0)='!/\\\x00', &(0x7f0000000200)='\x00', &(0x7f00000002c0)='$\\[\x00'], 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0104000000000000000001000000080002400000000209000100c2007a300000000014000000110001"], 0x50}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@getchain={0x4c, 0x66, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xd, 0xf}, {0xfff3, 0xffff}}, [{0x8}, {0x8, 0xb, 0x9fa4}, {0x8, 0xb, 0x19}, {0x8}, {0x8, 0xb, 0x9}]}, 0x4c}}, 0x40000) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'ipvlan0\x00', {0x2, 0x0, @private=0xac141437}}) ioctl$EVIOCGMASK(r5, 0x80015b1b, 0x0) 71.720393ms ago: executing program 1 (id=757): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000002d40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002d00)={&(0x7f00000005c0)={0xe90, 0x0, 0x300, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x910, 0x5, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x18c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xda}]}]}, {0x3b0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x340, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x50}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9820}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2cf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1979734b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x350, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x180, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x25}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d0}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x188, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffd}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x909e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x564, 0x5, 0x0, 0x1, [{0x4d8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x15c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x220, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xbc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x53}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x68, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}]}]}]}]}]}, 0xe90}, 0x1, 0x0, 0x0, 0x4000054}, 0x4040800) 2.20818ms ago: executing program 1 (id=758): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$pvfs2(&(0x7f0000000100), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x1, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x15) r2 = openat$cgroup_ro(r1, &(0x7f00000004c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000001140)=ANY=[@ANYRES16=r1], 0x3f3) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x20100000, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000240)='./file1\x00', &(0x7f0000000880), &(0x7f00000008c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x6) io_submit(0x0, 0x0, &(0x7f0000000700)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000c40)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = syz_open_dev$video4linux(&(0x7f0000000100), 0x7fffffff, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @raw_data}) pipe2(&(0x7f0000000000), 0x4000) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@loopback, @in=@broadcast, 0x4e24, 0x0, 0x4e22, 0x0, 0x2, 0x140, 0xe0, 0x2b, 0x0, r7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0xffffffffffffffff, 0x3, 0xfffffffffffff800}, 0x2, 0x0, 0x0, 0x3, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x15}}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe4) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) setreuid(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x20006, 0x5}, 0x48) setuid(0x0) 0s ago: executing program 0 (id=759): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000140)=0xfffffffffffffd4c) io_setup(0x8, &(0x7f00000002c0)=0x0) r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000600), 0xa0040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x9000, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1000, 0x0, 0xfffffffe}, 0x48) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffe}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000000000000000002000000005f88b963083bae1e0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000308500000005000000bca900000000000035090100000000009500500000000006bf980000000000003608000002000000850000008b000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x48d5) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9f, 0x9f, 0x2, [@int={0xf, 0x0, 0x0, 0x1, 0x0, 0x13, 0x0, 0x9, 0x1}, @enum={0x5, 0x2, 0x0, 0x6, 0x4, [{0x8, 0xbf}, {0xc, 0x4}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0xfffffffd}, @datasec={0x2, 0x5, 0x0, 0xf, 0x3, [{0x4, 0x18000000, 0x4}, {0x7, 0x6, 0xf0}, {0x4, 0x9, 0xffffffff}, {0x4, 0x2, 0x1}, {0x3, 0x0, 0x2}], "df09d3"}, @const={0xe, 0x0, 0x0, 0xa, 0x1}, @var={0xa, 0x0, 0x0, 0xe, 0x1, 0x1}]}}, &(0x7f0000000400)=""/127, 0xba, 0x7f, 0x0, 0x4ab}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6}, 0x90) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r9 = fsmount(r8, 0x0, 0x0) openat$cgroup_procs(r9, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r11, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r10, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="0000b85f", @ANYRES16=r10, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x20008800}, 0x804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r7}, 0x10) r12 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x2103, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r12, 0xc008640a, &(0x7f0000000140)) r13 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r13, 0x104, 0x4, 0x0, &(0x7f00000000c0)) dup3(r0, r13, 0x80000) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x3, 0x0, r0, &(0x7f0000000040)="0300ffff00", 0x5, 0x2}]) kernel console output (not intermixed with test programs): : no channels available for device syz [ 74.916238][ T5565] orangefs_mount: mount request failed with -4 [ 75.704035][ T5594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 75.884773][ T5590] orangefs_mount: mount request failed with -4 [ 76.567157][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.570210][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.101045][ T5607] orangefs_mount: mount request failed with -4 [ 77.572199][ T35] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 77.772116][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 77.778849][ T35] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.786768][ T35] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.795876][ T35] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 124 [ 77.802016][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.811218][ T35] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 77.817374][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.824044][ T35] usb 6-1: config 0 descriptor?? [ 77.827044][ T5626] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 77.834556][ T35] hso 6-1:0.0: Can't find BULK OUT endpoint [ 78.057731][ T5397] usb 6-1: USB disconnect, device number 3 [ 78.103382][ T5619] orangefs_mount: mount request failed with -4 [ 78.847236][ T5637] orangefs_mount: mount request failed with -4 [ 79.034740][ T5641] orangefs_mount: mount request failed with -4 [ 81.296722][ T5677] orangefs_mount: mount request failed with -4 [ 81.503076][ T5691] 9pnet_virtio: no channels available for device syz [ 82.845623][ T5698] 9pnet_virtio: no channels available for device syz [ 83.735553][ T5696] orangefs_mount: mount request failed with -4 [ 85.215147][ T5724] orangefs_mount: mount request failed with -4 [ 85.498385][ T5739] 9pnet_fd: Insufficient options for proto=fd [ 85.782224][ T35] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 85.974785][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 85.979150][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.984263][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.988511][ T35] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 85.993015][ T35] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 85.999966][ T35] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.004087][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.007583][ T35] usb 8-1: Product: syz [ 86.009476][ T35] usb 8-1: Manufacturer: syz [ 86.011519][ T35] usb 8-1: SerialNumber: syz [ 86.097771][ T5734] orangefs_mount: mount request failed with -4 [ 86.192262][ T5257] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 86.286436][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 86.331896][ T35] cdc_ncm 8-1:1.0: bind() failure [ 86.338579][ T35] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 86.341818][ T35] cdc_ncm 8-1:1.1: bind() failure [ 86.348419][ T35] usb 8-1: USB disconnect, device number 4 [ 86.372299][ T5257] usb 6-1: Using ep0 maxpacket: 8 [ 86.378298][ T5257] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.381930][ T5257] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 86.387529][ T5257] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 86.391456][ T5257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.396182][ T5257] usb 6-1: config 0 descriptor?? [ 86.401797][ T5257] hso 6-1:0.0: Can't find BULK IN endpoint [ 86.617568][ T5257] usb 6-1: USB disconnect, device number 4 [ 86.806279][ T832] cfg80211: failed to load regulatory.db [ 88.783902][ T5767] orangefs_mount: mount request failed with -4 [ 89.502182][ T5524] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.682797][ T5524] usb 5-1: Using ep0 maxpacket: 8 [ 89.686977][ T5524] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.691060][ T5524] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 89.696340][ T5524] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 89.700027][ T5524] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.704406][ T5524] usb 5-1: config 0 descriptor?? [ 89.724837][ T5524] hso 5-1:0.0: Can't find BULK IN endpoint [ 89.793818][ T5803] Zero length message leads to an empty skb [ 89.796745][ T5803] netlink: 'syz.2.105': attribute type 7 has an invalid length. [ 89.799709][ T5803] netlink: 'syz.2.105': attribute type 39 has an invalid length. [ 89.935785][ T5524] usb 5-1: USB disconnect, device number 3 [ 90.991692][ T5827] trusted_key: encrypted_key: insufficient parameters specified [ 91.277012][ T5830] IPVS: Error connecting to the multicast addr [ 91.518173][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.123'. [ 91.575831][ T5846] nfs: Unknown parameter '¹·ü' [ 91.725876][ T5849] 9pnet_fd: Insufficient options for proto=fd [ 91.827902][ T5823] orangefs_mount: mount request failed with -4 [ 91.927558][ T5852] FAULT_INJECTION: forcing a failure. [ 91.927558][ T5852] name failslab, interval 1, probability 0, space 0, times 1 [ 91.932626][ T5852] CPU: 2 UID: 0 PID: 5852 Comm: syz.0.118 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 91.936682][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.940783][ T5852] Call Trace: [ 91.942097][ T5852] [ 91.943248][ T5852] dump_stack_lvl+0x16c/0x1f0 [ 91.945105][ T5852] should_fail_ex+0x497/0x5b0 [ 91.947016][ T5852] ? fs_reclaim_acquire+0xae/0x160 [ 91.948709][ T5852] should_failslab+0xc2/0x120 [ 91.950287][ T5852] __kmalloc_cache_noprof+0x6b/0x310 [ 91.952015][ T5852] ? nf_ct_tmpl_alloc+0x90/0x270 [ 91.953660][ T5852] nf_ct_tmpl_alloc+0x90/0x270 [ 91.955280][ T5852] xt_ct_tg_check+0x26d/0xd80 [ 91.957239][ T5852] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 91.959353][ T5852] ? xt_find_target.part.0+0x17f/0x250 [ 91.961656][ T5852] xt_ct_tg_check_v0+0x1ff/0x2f0 [ 91.963810][ T5852] ? __pfx_xt_ct_tg_check_v0+0x10/0x10 [ 91.966062][ T5852] ? __pfx___mutex_lock+0x10/0x10 [ 91.968031][ T5852] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 91.970571][ T5852] ? __pfx_xt_ct_tg_check_v0+0x10/0x10 [ 91.972961][ T5852] xt_check_target+0x272/0xa30 [ 91.975098][ T5852] ? __pfx_xt_check_target+0x10/0x10 [ 91.977413][ T5852] ? xt_find_target.part.0+0x1b6/0x250 [ 91.979830][ T5852] ? xt_find_target.part.0+0x1b6/0x250 [ 91.982199][ T5852] find_check_entry.constprop.0+0x7cf/0x9c0 [ 91.984823][ T5852] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 91.987605][ T5852] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.989889][ T5852] ? kfree+0x12a/0x3b0 [ 91.991739][ T5852] ? kvfree+0x47/0x50 [ 91.993495][ T5852] translate_table+0xc88/0x1730 [ 91.995599][ T5852] ? __pfx_translate_table+0x10/0x10 [ 91.997842][ T5852] translate_compat_table+0x13d9/0x18c0 [ 92.000223][ T5852] ? __pfx_translate_compat_table+0x10/0x10 [ 92.002819][ T5852] ? __might_fault+0x13b/0x190 [ 92.004947][ T5852] ? __pfx_lock_release+0x10/0x10 [ 92.007183][ T5852] compat_do_replace+0x35d/0x500 [ 92.009346][ T5852] ? __pfx_compat_do_replace+0x10/0x10 [ 92.011605][ T5852] ? __pfx_aa_get_newest_label+0x10/0x10 [ 92.013676][ T5852] ? lock_acquire+0x1b1/0x560 [ 92.015546][ T5852] ? bpf_lsm_capable+0x9/0x10 [ 92.017423][ T5852] ? security_capable+0x98/0xd0 [ 92.019350][ T5852] do_ipt_set_ctl+0x686/0xc10 [ 92.020961][ T5852] ? trace_contention_end+0xea/0x140 [ 92.022997][ T5852] ? __mutex_lock+0x1a6/0x9c0 [ 92.024781][ T5852] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 92.026842][ T5852] ? __pfx___mutex_lock+0x10/0x10 [ 92.028646][ T5852] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 92.030810][ T5852] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 92.033037][ T5852] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 92.035038][ T5852] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 92.036973][ T5852] nf_setsockopt+0x8a/0xf0 [ 92.038678][ T5852] ip_setsockopt+0xcb/0xf0 [ 92.040532][ T5852] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 92.042970][ T5852] do_sock_setsockopt+0x222/0x480 [ 92.044932][ T5852] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 92.047180][ T5852] ? __fget_light+0x173/0x210 [ 92.048772][ T5852] __sys_setsockopt+0x1a4/0x270 [ 92.050430][ T5852] ? __pfx___sys_setsockopt+0x10/0x10 [ 92.052391][ T5852] ? fput+0x32/0x390 [ 92.054094][ T5852] ? ksys_write+0x1ab/0x260 [ 92.056002][ T5852] ? __pfx_ksys_write+0x10/0x10 [ 92.058046][ T5852] __ia32_sys_setsockopt+0xbc/0x160 [ 92.060252][ T5852] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.062446][ T5852] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 92.065187][ T5852] __do_fast_syscall_32+0x73/0x120 [ 92.067332][ T5852] do_fast_syscall_32+0x32/0x80 [ 92.069385][ T5852] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.071944][ T5852] RIP: 0023:0xf7f56579 [ 92.073636][ T5852] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 92.081522][ T5852] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 92.084997][ T5852] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 92.088306][ T5852] RDX: 0000000000000040 RSI: 0000000020000000 RDI: 00000000000002e0 [ 92.091522][ T5852] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.094612][ T5852] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 92.097964][ T5852] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.101302][ T5852] [ 92.172713][ T832] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 92.217188][ T39] audit: type=1326 audit(1723434229.452:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.0.119" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f56579 code=0x0 [ 92.364444][ T832] usb 6-1: Using ep0 maxpacket: 32 [ 92.369150][ T832] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.373860][ T832] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.377181][ T832] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 92.380365][ T832] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 92.387220][ T832] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.390753][ T832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.394035][ T832] usb 6-1: Product: syz [ 92.396009][ T832] usb 6-1: Manufacturer: syz [ 92.398103][ T832] usb 6-1: SerialNumber: syz [ 92.672716][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 92.685334][ T832] cdc_ncm 6-1:1.0: bind() failure [ 92.693929][ T832] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 92.696962][ T832] cdc_ncm 6-1:1.1: bind() failure [ 92.701844][ T832] usb 6-1: USB disconnect, device number 5 [ 92.722367][ T5345] Bluetooth: hci3: command 0x0405 tx timeout [ 93.445485][ T5886] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 93.964435][ T5880] orangefs_mount: mount request failed with -4 [ 94.145239][ T39] audit: type=1326 audit(1723434231.382:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5898 comm="syz.3.133" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x0 [ 95.022285][ T5524] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 95.213338][ T5524] usb 7-1: Using ep0 maxpacket: 32 [ 95.217236][ T5524] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 95.223902][ T5524] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 95.227362][ T5524] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 95.230812][ T5524] usb 7-1: Product: syz [ 95.232853][ T5524] usb 7-1: Manufacturer: syz [ 95.234936][ T5524] usb 7-1: SerialNumber: syz [ 95.240049][ T5524] usb 7-1: config 0 descriptor?? [ 95.243213][ T5914] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.911385][ T5918] orangefs_mount: mount request failed with -4 [ 96.099524][ T832] usb 7-1: USB disconnect, device number 2 [ 96.550274][ T5950] input: syz0 as /devices/virtual/input/input6 [ 96.962154][ T30] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.142167][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 97.155865][ T30] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 97.158962][ T30] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 97.166002][ T30] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 97.182336][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.186892][ T30] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.191339][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 97.202341][ T30] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 97.205914][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.232290][ T30] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 97.236357][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.254254][ T30] usb 5-1: config 0 descriptor?? [ 97.477062][ T5951] syz.0.144 uses obsolete (PF_INET,SOCK_PACKET) [ 97.494385][ T30] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 97.856929][ T5974] syz.1.150: attempt to access beyond end of device [ 97.856929][ T5974] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 97.864440][ T5974] syz.1.150: attempt to access beyond end of device [ 97.864440][ T5974] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 97.869406][ T5974] Mount JFS Failure: -5 [ 97.871296][ T5974] jfs_mount failed w/return code = -5 [ 98.476081][ T5967] orangefs_mount: mount request failed with -4 [ 99.159253][ T39] audit: type=1326 audit(1723434236.392:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.1.155" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x0 [ 99.654647][ T5615] usb 5-1: USB disconnect, device number 4 [ 99.666404][ T5615] usblp0: removed [ 99.902158][ T35] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 100.092917][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 100.099603][ T35] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 100.111871][ T35] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.115756][ T35] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.122230][ T35] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.129535][ T35] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.140179][ T35] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.146939][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.206327][ T6014] MTD: Couldn't look up '/dev/sg0': -15 [ 100.370217][ T6018] FAULT_INJECTION: forcing a failure. [ 100.370217][ T6018] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.373466][ T35] usb 8-1: usb_control_msg returned -32 [ 100.375953][ T6018] CPU: 1 UID: 0 PID: 6018 Comm: syz.2.163 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 100.379035][ T35] usbtmc 8-1:16.0: can't read capabilities [ 100.382306][ T6018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.382319][ T6018] Call Trace: [ 100.382326][ T6018] [ 100.382334][ T6018] dump_stack_lvl+0x16c/0x1f0 [ 100.382362][ T6018] should_fail_ex+0x497/0x5b0 [ 100.382386][ T6018] _copy_to_user+0x30/0xc0 [ 100.382407][ T6018] simple_read_from_buffer+0xd0/0x160 [ 100.382429][ T6018] proc_fail_nth_read+0x1b0/0x290 [ 100.402307][ T6018] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.404716][ T6018] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.407153][ T6018] vfs_read+0x1d4/0xbd0 [ 100.409006][ T6018] ? __fdget_pos+0xeb/0x180 [ 100.410915][ T6018] ? __pfx_vfs_read+0x10/0x10 [ 100.412770][ T6018] ? __pfx___mutex_lock+0x10/0x10 [ 100.414937][ T6018] ? __fget_files+0x256/0x400 [ 100.416992][ T6018] ksys_read+0x12f/0x260 [ 100.418868][ T6018] ? __pfx_ksys_read+0x10/0x10 [ 100.420982][ T6018] __do_fast_syscall_32+0x73/0x120 [ 100.423115][ T6018] do_fast_syscall_32+0x32/0x80 [ 100.425171][ T6018] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.427940][ T6018] RIP: 0023:0xf7fa4579 [ 100.429737][ T6018] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 100.438089][ T6018] RSP: 002b:00000000f57565a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 100.441333][ T6018] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5756620 [ 100.444619][ T6018] RDX: 000000000000000f RSI: 00000000f742cff4 RDI: 0000000000000000 [ 100.447959][ T6018] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 100.451343][ T6018] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 100.454660][ T6018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.458031][ T6018] [ 101.452029][ T6042] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 101.473551][ T1298] IPVS: starting estimator thread 0... [ 101.572349][ T6043] IPVS: using max 35 ests per chain, 84000 per kthread [ 102.607144][ T5524] usb 8-1: USB disconnect, device number 5 [ 102.806219][ T6063] FAULT_INJECTION: forcing a failure. [ 102.806219][ T6063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.812369][ T6063] CPU: 3 UID: 0 PID: 6063 Comm: syz.3.175 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 102.817129][ T6063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.821422][ T6063] Call Trace: [ 102.822884][ T6063] [ 102.824259][ T6063] dump_stack_lvl+0x16c/0x1f0 [ 102.826384][ T6063] should_fail_ex+0x497/0x5b0 [ 102.828533][ T6063] _copy_from_user+0x30/0xf0 [ 102.830651][ T6063] io_sqe_files_register+0x25e/0x730 [ 102.833053][ T6063] ? __pfx_io_sqe_files_register+0x10/0x10 [ 102.835635][ T6063] ? __fget_files+0x256/0x400 [ 102.837687][ T6063] __do_sys_io_uring_register+0xf4f/0x2240 [ 102.840250][ T6063] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 102.843210][ T6063] ? syscall_user_dispatch+0x77/0x140 [ 102.846041][ T6063] __do_fast_syscall_32+0x73/0x120 [ 102.848219][ T6063] do_fast_syscall_32+0x32/0x80 [ 102.850175][ T6063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.853075][ T6063] RIP: 0023:0xf73ae579 [ 102.854867][ T6063] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 102.863253][ T6063] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 00000000000001ab [ 102.866517][ T6063] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000002 [ 102.869754][ T6063] RDX: 0000000020000140 RSI: 0000000000000020 RDI: 0000000000000000 [ 102.873114][ T6063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.876670][ T6063] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 102.880227][ T6063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.883667][ T6063] [ 104.556114][ T6082] orangefs_mount: mount request failed with -4 [ 104.623933][ T6101] FAULT_INJECTION: forcing a failure. [ 104.623933][ T6101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.630561][ T6101] CPU: 1 UID: 0 PID: 6101 Comm: syz.1.184 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 104.635772][ T6101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.640659][ T6101] Call Trace: [ 104.642192][ T6101] [ 104.643551][ T6101] dump_stack_lvl+0x16c/0x1f0 [ 104.645694][ T6101] should_fail_ex+0x497/0x5b0 [ 104.648221][ T6101] _copy_from_user+0x30/0xf0 [ 104.650346][ T6101] packet_setsockopt+0x1851/0x4000 [ 104.652602][ T6101] ? __pfx_packet_setsockopt+0x10/0x10 [ 104.654954][ T6101] ? __pfx___might_resched+0x10/0x10 [ 104.657292][ T6101] ? __pfx___lock_acquire+0x10/0x10 [ 104.659636][ T6101] ? __pfx_lock_release+0x10/0x10 [ 104.661838][ T6101] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 104.664394][ T6101] ? __pfx_aa_sk_perm+0x10/0x10 [ 104.666573][ T6101] ? security_socket_setsockopt+0x8c/0xc0 [ 104.669117][ T6101] ? __pfx_packet_setsockopt+0x10/0x10 [ 104.671341][ T6101] do_sock_setsockopt+0x222/0x480 [ 104.673293][ T6101] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 104.675704][ T6101] ? __fget_light+0x173/0x210 [ 104.677324][ T6101] __sys_setsockopt+0x1a4/0x270 [ 104.679013][ T6101] ? __pfx___sys_setsockopt+0x10/0x10 [ 104.680861][ T6101] ? fput+0x32/0x390 [ 104.682215][ T6101] ? ksys_write+0x1ab/0x260 [ 104.683773][ T6101] ? __pfx_ksys_write+0x10/0x10 [ 104.685716][ T6101] __ia32_sys_setsockopt+0xbc/0x160 [ 104.688053][ T6101] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.690432][ T6101] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 104.693273][ T6101] __do_fast_syscall_32+0x73/0x120 [ 104.695401][ T6101] do_fast_syscall_32+0x32/0x80 [ 104.697344][ T6101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.700048][ T6101] RIP: 0023:0xf743e579 [ 104.701868][ T6101] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 104.710277][ T6101] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 104.713940][ T6101] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000107 [ 104.717475][ T6101] RDX: 0000000000000005 RSI: 0000000020000040 RDI: 000000000000001c [ 104.720849][ T6101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.723763][ T6101] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 104.726866][ T6101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.729958][ T6101] [ 105.012323][ T832] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 105.192192][ T832] usb 5-1: Using ep0 maxpacket: 8 [ 105.195983][ T832] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 105.198596][ T832] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.201869][ T832] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.205357][ T832] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.208495][ T832] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.212659][ T832] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.215265][ T832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.449412][ T832] usb 5-1: usb_control_msg returned -32 [ 105.452032][ T832] usbtmc 5-1:16.0: can't read capabilities [ 105.511983][ T6125] FAULT_INJECTION: forcing a failure. [ 105.511983][ T6125] name failslab, interval 1, probability 0, space 0, times 0 [ 105.517220][ T6125] CPU: 3 UID: 0 PID: 6125 Comm: syz.2.190 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 105.521508][ T6125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.525848][ T6125] Call Trace: [ 105.527235][ T6125] [ 105.528432][ T6125] dump_stack_lvl+0x16c/0x1f0 [ 105.530270][ T6125] should_fail_ex+0x497/0x5b0 [ 105.532102][ T6125] ? fs_reclaim_acquire+0xae/0x160 [ 105.534088][ T6125] should_failslab+0xc2/0x120 [ 105.536021][ T6125] __kmalloc_cache_noprof+0x6b/0x310 [ 105.538215][ T6125] ? apparmor_sk_alloc_security+0x87/0x150 [ 105.540594][ T6125] apparmor_sk_alloc_security+0x87/0x150 [ 105.542917][ T6125] security_sk_alloc+0x75/0xc0 [ 105.544893][ T6125] sk_prot_alloc+0x1c7/0x2a0 [ 105.546817][ T6125] sk_alloc+0x36/0xb90 [ 105.548477][ T6125] caif_create+0x10b/0x430 [ 105.550236][ T6125] __sock_create+0x32e/0x800 [ 105.552140][ T6125] __sys_socketpair+0x25d/0x5a0 [ 105.554214][ T6125] ? __pfx___sys_socketpair+0x10/0x10 [ 105.556382][ T6125] ? fput+0x32/0x390 [ 105.557992][ T6125] ? __pfx_ksys_write+0x10/0x10 [ 105.559988][ T6125] __ia32_sys_socketpair+0x95/0x100 [ 105.562163][ T6125] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 105.564832][ T6125] __do_fast_syscall_32+0x73/0x120 [ 105.566949][ T6125] do_fast_syscall_32+0x32/0x80 [ 105.568950][ T6125] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.571580][ T6125] RIP: 0023:0xf7fa4579 [ 105.573254][ T6125] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 105.581042][ T6125] RSP: 002b:00000000f573556c EFLAGS: 00000296 ORIG_RAX: 0000000000000168 [ 105.584437][ T6125] RAX: ffffffffffffffda RBX: 0000000000000025 RCX: 0000000000000001 [ 105.587596][ T6125] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000000 [ 105.590738][ T6125] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.593972][ T6125] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 105.597167][ T6125] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.600421][ T6125] [ 107.156333][ T6150] overlayfs: missing 'workdir' [ 107.364827][ T6136] orangefs_mount: mount request failed with -4 [ 107.692274][ T1298] usb 5-1: USB disconnect, device number 5 [ 107.737257][ T6157] fuse: Unknown parameter '000000000000000000040x0000000000000004' [ 107.799632][ T6160] netlink: 'syz.3.199': attribute type 5 has an invalid length. [ 107.811969][ T6160] netlink: 7 bytes leftover after parsing attributes in process `syz.3.199'. [ 108.829451][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.834438][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.058704][ T6179] process 'syz.2.203' launched './file1' with NULL argv: empty string added [ 109.835357][ T6193] nfs: Unknown parameter '¹·ü' [ 110.052191][ T30] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 110.282173][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 110.293368][ T30] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 110.302307][ T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.307606][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.311879][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.316345][ T30] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.321725][ T30] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.325622][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.550172][ T30] usb 5-1: usb_control_msg returned -32 [ 110.552621][ T30] usbtmc 5-1:16.0: can't read capabilities [ 111.235166][ T6223] mmap: syz.3.213 (6223) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.778311][ T1298] usb 5-1: USB disconnect, device number 6 [ 112.779360][ T6249] nfs: Unknown parameter '¹·ü' [ 112.849527][ T6257] 9pnet_virtio: no channels available for device syz [ 115.203253][ T4773] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 115.207159][ T4773] Bluetooth: hci0: Injecting HCI hardware error event [ 115.210932][ T4773] Bluetooth: hci0: hardware error 0x00 [ 116.364714][ T6306] orangefs_mount: mount request failed with -4 [ 116.602193][ T5524] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 116.802417][ T5524] usb 8-1: Using ep0 maxpacket: 32 [ 116.808309][ T5524] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 116.814747][ T5524] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 116.822229][ T5524] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 116.832298][ T5524] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.842560][ T5524] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 116.846597][ T5524] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 116.852257][ T5524] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 116.862149][ T5524] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.871205][ T5524] usb 8-1: config 0 descriptor?? [ 116.882484][ T6323] MTD: Couldn't look up '/dev/sg0': -15 [ 117.087044][ T5524] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 117.107993][ T6332] FAULT_INJECTION: forcing a failure. [ 117.107993][ T6332] name failslab, interval 1, probability 0, space 0, times 0 [ 117.113667][ T6332] CPU: 2 UID: 0 PID: 6332 Comm: syz.1.238 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 117.118195][ T6332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.122785][ T6332] Call Trace: [ 117.124291][ T6332] [ 117.125614][ T6332] dump_stack_lvl+0x16c/0x1f0 [ 117.127681][ T6332] should_fail_ex+0x497/0x5b0 [ 117.129727][ T6332] ? fs_reclaim_acquire+0xae/0x160 [ 117.131959][ T6332] should_failslab+0xc2/0x120 [ 117.133917][ T6332] __kmalloc_cache_noprof+0x6b/0x310 [ 117.136083][ T6332] ? legacy_init_fs_context+0x42/0xe0 [ 117.138165][ T6332] ? __pfx_legacy_init_fs_context+0x10/0x10 [ 117.140382][ T6332] legacy_init_fs_context+0x42/0xe0 [ 117.142535][ T6332] alloc_fs_context+0x54a/0x9c0 [ 117.144562][ T6332] path_mount+0xbfb/0x1f10 [ 117.146374][ T6332] ? __pfx_path_mount+0x10/0x10 [ 117.148104][ T6332] ? putname+0x12e/0x170 [ 117.149571][ T6332] ? putname+0x12e/0x170 [ 117.151194][ T6332] __ia32_sys_mount+0x292/0x310 [ 117.153031][ T6332] ? __pfx___ia32_sys_mount+0x10/0x10 [ 117.154890][ T6332] __do_fast_syscall_32+0x73/0x120 [ 117.156748][ T6332] do_fast_syscall_32+0x32/0x80 [ 117.158764][ T6332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.161387][ T6332] RIP: 0023:0xf743e579 [ 117.163139][ T6332] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 117.170905][ T6332] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 117.174294][ T6332] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 00000000200002c0 [ 117.177538][ T6332] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.180872][ T6332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.183998][ T6332] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 117.187156][ T6332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.190442][ T6332] [ 117.292269][ T4773] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 117.349502][ T6339] vivid-006: disconnect [ 117.376918][ T1298] IPVS: starting estimator thread 0... [ 117.462249][ T6343] IPVS: using max 20 ests per chain, 48000 per kthread [ 119.104901][ T6361] Illegal XDP return value 4294967274 on prog (id 54) dev N/A, expect packet loss! [ 119.237577][ T6368] FAULT_INJECTION: forcing a failure. [ 119.237577][ T6368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.244169][ T6368] CPU: 0 UID: 0 PID: 6368 Comm: syz.1.250 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 119.248595][ T6368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.253286][ T6368] Call Trace: [ 119.254769][ T6368] [ 119.256054][ T6368] dump_stack_lvl+0x16c/0x1f0 [ 119.257983][ T6368] should_fail_ex+0x497/0x5b0 [ 119.259588][ T6368] _copy_to_user+0x30/0xc0 [ 119.261116][ T6368] simple_read_from_buffer+0xd0/0x160 [ 119.263170][ T6368] proc_fail_nth_read+0x1b0/0x290 [ 119.265286][ T6368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.267673][ T6368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 119.270107][ T6368] vfs_read+0x1d4/0xbd0 [ 119.271973][ T6368] ? __fdget_pos+0xeb/0x180 [ 119.273995][ T6368] ? __pfx_vfs_read+0x10/0x10 [ 119.276216][ T6368] ? __pfx___mutex_lock+0x10/0x10 [ 119.278493][ T6368] ? __fget_files+0x256/0x400 [ 119.280585][ T6368] ksys_read+0x12f/0x260 [ 119.282479][ T6368] ? __pfx_ksys_read+0x10/0x10 [ 119.284582][ T6368] __do_fast_syscall_32+0x73/0x120 [ 119.286745][ T6368] do_fast_syscall_32+0x32/0x80 [ 119.288744][ T6368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.291039][ T6368] RIP: 0023:0xf743e579 [ 119.292647][ T6368] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 119.300470][ T6368] RSP: 002b:00000000f57565a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 119.304014][ T6368] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5756620 [ 119.307347][ T6368] RDX: 000000000000000f RSI: 00000000f742cff4 RDI: 0000000000000000 [ 119.310219][ T6368] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 119.313048][ T6368] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 119.316292][ T6368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.319359][ T6368] [ 119.510206][ T6346] vivid-006: reconnect [ 119.514787][ T5524] usb 8-1: USB disconnect, device number 6 [ 119.523508][ T5524] usblp0: removed [ 119.703291][ T6380] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.218351][ T6407] syz.1.260: attempt to access beyond end of device [ 121.218351][ T6407] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 121.224390][ T6407] syz.1.260: attempt to access beyond end of device [ 121.224390][ T6407] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 121.230038][ T6407] Mount JFS Failure: -5 [ 121.231964][ T6407] jfs_mount failed w/return code = -5 [ 122.219073][ T6432] sctp: [Deprecated]: syz.1.269 (pid 6432) Use of int in maxseg socket option. [ 122.219073][ T6432] Use struct sctp_assoc_value instead [ 122.234009][ T6432] netlink: 184472 bytes leftover after parsing attributes in process `syz.1.269'. [ 122.438295][ T6438] input: syz0 as /devices/virtual/input/input7 [ 122.521469][ T6433] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 122.556605][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 122.560234][ T5399] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max [ 122.567041][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.570568][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.574236][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.577779][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.580884][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.584653][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.587983][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.591072][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.594405][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.597805][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.603468][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.607574][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.610799][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.614893][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.618237][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.623554][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.626887][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.630514][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.636536][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.641477][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.649541][ T5399] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 122.661415][ T5399] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 122.684232][ T6442] FAULT_INJECTION: forcing a failure. [ 122.684232][ T6442] name failslab, interval 1, probability 0, space 0, times 0 [ 122.692436][ T6442] CPU: 2 UID: 0 PID: 6442 Comm: syz.0.272 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 122.696771][ T6442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 122.700675][ T6442] Call Trace: [ 122.701920][ T6442] [ 122.702978][ T6442] dump_stack_lvl+0x16c/0x1f0 [ 122.704567][ T6442] should_fail_ex+0x497/0x5b0 [ 122.706454][ T6442] ? fs_reclaim_acquire+0xae/0x160 [ 122.708775][ T6442] should_failslab+0xc2/0x120 [ 122.710668][ T6442] __kmalloc_noprof+0xcb/0x410 [ 122.712305][ T6442] kobject_get_path+0xcb/0x230 [ 122.714128][ T6442] kobject_uevent_env+0x289/0x1670 [ 122.715982][ T6442] ? __pfx_dev_uevent_name+0x10/0x10 [ 122.717899][ T6442] ? kobject_put+0xbe/0x5b0 [ 122.719562][ T6442] device_del+0x623/0x9f0 [ 122.721129][ T6442] ? __pfx_enable_work+0x10/0x10 [ 122.723034][ T6442] ? __pfx_device_del+0x10/0x10 [ 122.724949][ T6442] ? mark_held_locks+0x9f/0xe0 [ 122.726721][ T6442] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 122.729025][ T6442] hid_destroy_device+0xe5/0x150 [ 122.730968][ T6442] uhid_char_write+0xbf4/0x1110 [ 122.732794][ T6442] ? rw_verify_area+0xd1/0x6c0 [ 122.734690][ T6442] ? __pfx_uhid_char_write+0x10/0x10 [ 122.736617][ T6442] vfs_write+0x29a/0x1140 [ 122.738186][ T6442] ? __pfx_vfs_write+0x10/0x10 [ 122.740155][ T6442] ? __fget_files+0x256/0x400 [ 122.742103][ T6442] ? __fget_light+0x173/0x210 [ 122.744084][ T6442] ksys_write+0x1f8/0x260 [ 122.745957][ T6442] ? __pfx_ksys_write+0x10/0x10 [ 122.748099][ T6442] __do_fast_syscall_32+0x73/0x120 [ 122.750231][ T6442] do_fast_syscall_32+0x32/0x80 [ 122.752360][ T6442] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.755203][ T6442] RIP: 0023:0xf7f56579 [ 122.757023][ T6442] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 122.765500][ T6442] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 122.769159][ T6442] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 122.772425][ T6442] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.775880][ T6442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.779364][ T6442] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 122.782124][ T6442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.785659][ T6442] [ 122.862246][ T5524] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 123.042270][ T5524] usb 8-1: Using ep0 maxpacket: 32 [ 123.053092][ T5524] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 123.055977][ T5524] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 123.059730][ T5524] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 123.064090][ T5524] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.067898][ T5524] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 123.071816][ T5524] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.076301][ T5524] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 123.079836][ T5524] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 123.085587][ T5524] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 123.089166][ T5524] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.102164][ T5524] usb 8-1: config 0 descriptor?? [ 123.521316][ T5524] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 124.093521][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.188610][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.280883][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.385149][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.520314][ T5345] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.529876][ T5345] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.535885][ T5345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.543260][ T5345] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.555092][ T5345] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 124.558211][ T5345] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.594264][ T11] bridge_slave_1: left allmulticast mode [ 124.597030][ T11] bridge_slave_1: left promiscuous mode [ 124.601404][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.662400][ T11] bridge_slave_0: left allmulticast mode [ 124.669628][ T11] bridge_slave_0: left promiscuous mode [ 124.684693][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.693913][ T6469] input: syz1 as /devices/virtual/input/input8 [ 124.787484][ T6470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.829595][ T6470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.034451][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.043130][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.049864][ T11] bond0 (unregistering): Released all slaves [ 125.373400][ T6465] chnl_net:caif_netlink_parms(): no params data found [ 125.584048][ T11] hsr_slave_0: left promiscuous mode [ 125.588658][ T11] hsr_slave_1: left promiscuous mode [ 125.595094][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.598403][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.603380][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.606941][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.643990][ T11] veth1_macvtap: left promiscuous mode [ 125.646691][ T11] veth0_macvtap: left promiscuous mode [ 125.649129][ T11] veth1_vlan: left promiscuous mode [ 125.651819][ T11] veth0_vlan: left promiscuous mode [ 126.022458][ T6470] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 126.516516][ T11] team0 (unregistering): Port device team_slave_1 removed [ 126.591941][ T11] team0 (unregistering): Port device team_slave_0 removed [ 126.645079][ T4773] Bluetooth: hci1: command tx timeout [ 127.066730][ T6465] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.069642][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.072606][ T6465] bridge_slave_0: entered allmulticast mode [ 127.076012][ T6465] bridge_slave_0: entered promiscuous mode [ 127.104475][ T6465] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.107643][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.110807][ T6465] bridge_slave_1: entered allmulticast mode [ 127.115177][ T6465] bridge_slave_1: entered promiscuous mode [ 127.183771][ T30] usb 8-1: USB disconnect, device number 7 [ 127.200179][ T6465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.200715][ T30] usblp0: removed [ 127.207514][ T6465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.312791][ T6465] team0: Port device team_slave_0 added [ 127.317924][ T6465] team0: Port device team_slave_1 added [ 127.406445][ T6524] 9pnet_virtio: no channels available for device syz [ 127.416927][ T6465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.420467][ T6465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.427614][ T6525] 9pnet_virtio: no channels available for device syz [ 127.431339][ T6465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.441239][ T6465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.448609][ T6465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.460519][ T6465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.555456][ T6465] hsr_slave_0: entered promiscuous mode [ 127.560894][ T6465] hsr_slave_1: entered promiscuous mode [ 127.567687][ T6465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.571460][ T6465] Cannot create hsr debugfs directory [ 127.699937][ T11] IPVS: stop unused estimator thread 0... [ 128.289140][ T6465] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 128.305452][ T6465] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 128.315784][ T6465] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 128.321964][ T6465] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 128.411061][ T6465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.428941][ T6465] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.436296][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.440543][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.461257][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.464517][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.678865][ T6465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.730734][ T6465] veth0_vlan: entered promiscuous mode [ 128.732539][ T4773] Bluetooth: hci1: command tx timeout [ 128.739398][ T6465] veth1_vlan: entered promiscuous mode [ 128.772571][ T6465] veth0_macvtap: entered promiscuous mode [ 128.778975][ T6465] veth1_macvtap: entered promiscuous mode [ 128.795129][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.799759][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.805494][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.810211][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.819292][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.826716][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.832639][ T6465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.854609][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.859747][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.864158][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.869346][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.873895][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.878483][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.885153][ T6465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.896748][ T6465] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.900497][ T6465] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.904479][ T6465] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.908462][ T6465] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.962912][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.966397][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.043611][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.066548][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.827030][ T6595] fuse: Unknown parameter '000000000000000000040x0000000000000004' [ 129.941149][ T6598] netlink: 'syz.2.295': attribute type 5 has an invalid length. [ 129.946115][ T6598] netlink: 7 bytes leftover after parsing attributes in process `syz.2.295'. [ 130.813309][ T4773] Bluetooth: hci1: command tx timeout [ 132.136061][ T6648] netlink: 'syz.1.309': attribute type 25 has an invalid length. [ 132.139652][ T6648] netlink: 'syz.1.309': attribute type 7 has an invalid length. [ 132.152209][ T5398] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 132.312840][ T5398] usb 5-1: device descriptor read/64, error -71 [ 132.595474][ T5398] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 132.683029][ T6664] FAULT_INJECTION: forcing a failure. [ 132.683029][ T6664] name failslab, interval 1, probability 0, space 0, times 0 [ 132.688808][ T6664] CPU: 2 UID: 0 PID: 6664 Comm: syz.3.313 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 132.693244][ T6664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.697779][ T6664] Call Trace: [ 132.699227][ T6664] [ 132.700510][ T6664] dump_stack_lvl+0x16c/0x1f0 [ 132.702492][ T6664] should_fail_ex+0x497/0x5b0 [ 132.704556][ T6664] ? fs_reclaim_acquire+0xae/0x160 [ 132.706807][ T6664] should_failslab+0xc2/0x120 [ 132.708953][ T6664] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 132.711910][ T6664] ? __d_alloc+0x35/0x8c0 [ 132.714284][ T6664] __d_alloc+0x35/0x8c0 [ 132.716112][ T6664] d_alloc+0x4a/0x1e0 [ 132.717847][ T6664] d_alloc_parallel+0xe9/0x12b0 [ 132.719806][ T6664] ? walk_component+0xfc/0x5b0 [ 132.721620][ T6664] ? __pfx_d_alloc_parallel+0x10/0x10 [ 132.723958][ T6664] ? lockdep_init_map_type+0x16d/0x7d0 [ 132.726248][ T6664] ? lockdep_init_map_type+0x16d/0x7d0 [ 132.728721][ T6664] __lookup_slow+0x194/0x460 [ 132.730950][ T6664] ? __pfx___lookup_slow+0x10/0x10 [ 132.733337][ T6664] ? __startup_64+0x120/0x2a0 [ 132.735486][ T6664] ? __startup_64+0x120/0x2a0 [ 132.737378][ T6664] ? lookup_fast+0x155/0x540 [ 132.740028][ T6664] walk_component+0x350/0x5b0 [ 132.742355][ T6664] path_lookupat+0x17f/0x770 [ 132.744353][ T6664] path_openat+0x1c87/0x2d20 [ 132.746124][ T6664] ? __lock_acquire+0x1620/0x3cb0 [ 132.748155][ T6664] ? __pfx_path_openat+0x10/0x10 [ 132.750154][ T6664] ? __pfx___lock_acquire+0x10/0x10 [ 132.751300][ T6666] Cannot find add_set index 0 as target [ 132.752224][ T6664] ? find_held_lock+0x2d/0x110 [ 132.752276][ T6664] do_filp_open+0x1dc/0x430 [ 132.759325][ T6664] ? __pfx_do_filp_open+0x10/0x10 [ 132.761541][ T6664] ? find_held_lock+0x2d/0x110 [ 132.763879][ T6664] ? _raw_spin_unlock+0x28/0x50 [ 132.766107][ T6664] ? alloc_fd+0x2d7/0x6c0 [ 132.768153][ T6664] do_sys_openat2+0x17a/0x1e0 [ 132.770303][ T6664] ? __pfx_do_sys_openat2+0x10/0x10 [ 132.772590][ T6664] __ia32_compat_sys_openat+0x16e/0x210 [ 132.774950][ T6664] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 132.777500][ T6664] ? ksys_write+0x1ab/0x260 [ 132.779508][ T6664] __do_fast_syscall_32+0x73/0x120 [ 132.782040][ T6664] do_fast_syscall_32+0x32/0x80 [ 132.784254][ T6664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.786892][ T6664] RIP: 0023:0xf73ae579 [ 132.788537][ T6664] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 132.797165][ T6664] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 132.800842][ T6664] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020003340 [ 132.804437][ T6664] RDX: 0000000000240000 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.808256][ T6664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.812606][ T6664] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 132.816083][ T6664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.819559][ T6664] [ 132.821246][ T5398] usb 5-1: device descriptor read/64, error -71 [ 132.900561][ T4773] Bluetooth: hci1: command tx timeout [ 132.925802][ C3] vkms_vblank_simulate: vblank timer overrun [ 132.952424][ T5398] usb usb5-port1: attempt power cycle [ 133.068041][ T6686] netlink: 24 bytes leftover after parsing attributes in process `syz.1.319'. [ 133.072451][ T6686] netlink: 272 bytes leftover after parsing attributes in process `syz.1.319'. [ 133.077591][ T6686] netlink: 56 bytes leftover after parsing attributes in process `syz.1.319'. [ 133.091283][ T6687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.320'. [ 133.095099][ T6687] netlink: 272 bytes leftover after parsing attributes in process `syz.2.320'. [ 133.099242][ T6687] netlink: 56 bytes leftover after parsing attributes in process `syz.2.320'. [ 133.352320][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 133.382381][ T5398] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 133.416931][ T5398] usb 5-1: device descriptor read/8, error -71 [ 133.620598][ T6707] 9pnet_virtio: no channels available for device syz [ 133.694234][ T5398] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 133.723482][ T5398] usb 5-1: device descriptor read/8, error -71 [ 133.854346][ T5398] usb usb5-port1: unable to enumerate USB device [ 135.112232][ T5524] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 135.194263][ T6723] FAULT_INJECTION: forcing a failure. [ 135.194263][ T6723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.199411][ T6723] CPU: 0 UID: 0 PID: 6723 Comm: syz.1.329 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 135.203369][ T6723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.207123][ T6723] Call Trace: [ 135.208560][ T6723] [ 135.209888][ T6723] dump_stack_lvl+0x16c/0x1f0 [ 135.211995][ T6723] should_fail_ex+0x497/0x5b0 [ 135.214096][ T6723] _copy_from_iter+0x27a/0xfc0 [ 135.216088][ T6723] ? __alloc_skb+0x200/0x380 [ 135.218174][ T6723] ? __pfx__copy_from_iter+0x10/0x10 [ 135.220520][ T6723] ? __virt_addr_valid+0x5e/0x590 [ 135.222779][ T6723] ? __phys_addr_symbol+0x30/0x80 [ 135.225044][ T6723] ? __check_object_size+0x497/0x720 [ 135.227423][ T6723] netlink_sendmsg+0x813/0xd70 [ 135.229230][ T6723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.231465][ T6723] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 135.233727][ T6723] ____sys_sendmsg+0x9b4/0xb50 [ 135.235812][ T6723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.238047][ T6723] ? get_compat_msghdr+0x11b/0x170 [ 135.239772][ T6723] ? __pfx___lock_acquire+0x10/0x10 [ 135.241991][ T6723] ___sys_sendmsg+0x135/0x1e0 [ 135.244044][ T6723] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.245838][ T6723] ? ksys_write+0x21c/0x260 [ 135.247641][ T6723] ? __fget_light+0x173/0x210 [ 135.249711][ T6723] __sys_sendmsg+0x117/0x1f0 [ 135.251648][ T6723] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.253874][ T6723] __do_fast_syscall_32+0x73/0x120 [ 135.256111][ T6723] do_fast_syscall_32+0x32/0x80 [ 135.257791][ T6723] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.260204][ T6723] RIP: 0023:0xf7fc0579 [ 135.261969][ T6723] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 135.268975][ T6723] RSP: 002b:00000000f575556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 135.272524][ T6723] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000200003c0 [ 135.275303][ T6723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.278395][ T6723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.281799][ T6723] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 135.284757][ T6723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.287903][ T6723] [ 135.295958][ T5524] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.300292][ T5524] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.305654][ T5524] usb 8-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 135.309516][ T5524] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.322698][ T5524] usb 8-1: config 0 descriptor?? [ 135.551615][ T4773] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 135.578908][ T5524] usbhid 8-1:0.0: can't add hid device: -71 [ 135.588321][ T5524] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 135.602937][ T5524] usb 8-1: USB disconnect, device number 8 [ 135.874415][ T6715] orangefs_mount: mount request failed with -4 [ 136.094268][ T6744] netlink: 104 bytes leftover after parsing attributes in process `syz.2.335'. [ 136.105171][ T6745] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 136.109236][ T6747] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 136.796421][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 138.006593][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.009488][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.094613][ T6770] orangefs_mount: mount request failed with -4 [ 138.232559][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 138.626934][ T6824] binder_alloc: 6823: binder_alloc_buf, no vma [ 138.684087][ T6827] netlink: 'syz.1.356': attribute type 16 has an invalid length. [ 138.852224][ T5398] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 138.872414][ T6832] cgroup: release_agent respecified [ 138.967682][ T6830] pim6reg: entered allmulticast mode [ 139.042528][ T5398] usb 7-1: Using ep0 maxpacket: 8 [ 139.063474][ T5398] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 139.066616][ T5398] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.070195][ T5398] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.075182][ T5398] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.078934][ T5398] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.085667][ T5398] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.089371][ T5398] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.332165][ T5398] usb 7-1: usb_control_msg returned -32 [ 139.334373][ T5398] usbtmc 7-1:16.0: can't read capabilities [ 139.433426][ T6866] FAULT_INJECTION: forcing a failure. [ 139.433426][ T6866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.438640][ T6866] CPU: 1 UID: 0 PID: 6866 Comm: syz.3.369 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 139.442438][ T6866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.447227][ T6866] Call Trace: [ 139.448822][ T6866] [ 139.450204][ T6866] dump_stack_lvl+0x16c/0x1f0 [ 139.452617][ T6866] should_fail_ex+0x497/0x5b0 [ 139.454765][ T6866] _copy_from_iter+0x27a/0xfc0 [ 139.456910][ T6866] ? __alloc_skb+0x200/0x380 [ 139.459049][ T6866] ? __pfx__copy_from_iter+0x10/0x10 [ 139.461475][ T6866] ? __virt_addr_valid+0x5e/0x590 [ 139.463667][ T6866] ? __phys_addr_symbol+0x30/0x80 [ 139.465824][ T6866] ? __check_object_size+0x497/0x720 [ 139.468298][ T6866] netlink_sendmsg+0x813/0xd70 [ 139.470493][ T6866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.472950][ T6866] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 139.475032][ T6866] ____sys_sendmsg+0x9b4/0xb50 [ 139.476688][ T6866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.478798][ T6866] ? get_compat_msghdr+0x11b/0x170 [ 139.480976][ T6866] ? __pfx___lock_acquire+0x10/0x10 [ 139.483211][ T6866] ___sys_sendmsg+0x135/0x1e0 [ 139.485369][ T6866] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.487694][ T6866] ? ksys_write+0x21c/0x260 [ 139.489864][ T6866] ? __fget_light+0x173/0x210 [ 139.492291][ T6866] __sys_sendmsg+0x117/0x1f0 [ 139.494746][ T6866] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.497104][ T6866] __do_fast_syscall_32+0x73/0x120 [ 139.499493][ T6866] do_fast_syscall_32+0x32/0x80 [ 139.501722][ T6866] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.504534][ T6866] RIP: 0023:0xf73ae579 [ 139.506403][ T6866] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 139.514626][ T6866] RSP: 002b:00000000f56a556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 139.518362][ T6866] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000200000c0 [ 139.521938][ T6866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.526133][ T6866] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.529966][ T6866] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 139.533874][ T6866] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.537865][ T6866] [ 140.333519][ T6878] FAULT_INJECTION: forcing a failure. [ 140.333519][ T6878] name failslab, interval 1, probability 0, space 0, times 0 [ 140.339778][ T6878] CPU: 3 UID: 0 PID: 6878 Comm: syz.1.373 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 140.344297][ T6878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.348850][ T6878] Call Trace: [ 140.350304][ T6878] [ 140.351587][ T6878] dump_stack_lvl+0x16c/0x1f0 [ 140.353646][ T6878] should_fail_ex+0x497/0x5b0 [ 140.355695][ T6878] ? fs_reclaim_acquire+0xae/0x160 [ 140.357915][ T6878] should_failslab+0xc2/0x120 [ 140.359957][ T6878] __kmalloc_node_noprof+0xd1/0x440 [ 140.362215][ T6878] ? __kvmalloc_node_noprof+0x9d/0x1a0 [ 140.364287][ T6878] __kvmalloc_node_noprof+0x9d/0x1a0 [ 140.366372][ T6878] alloc_fdtable+0xef/0x290 [ 140.368280][ T6878] dup_fd+0x7da/0xcd0 [ 140.370051][ T6878] copy_process+0x226a/0x6f50 [ 140.372112][ T6878] ? __pfx_copy_process+0x10/0x10 [ 140.374313][ T6878] ? find_held_lock+0x2d/0x110 [ 140.376388][ T6878] kernel_clone+0xfd/0x980 [ 140.378335][ T6878] ? __pfx_kernel_clone+0x10/0x10 [ 140.380508][ T6878] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.383036][ T6878] __do_compat_sys_ia32_clone+0xb7/0x100 [ 140.385299][ T6878] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 140.387713][ T6878] __do_fast_syscall_32+0x73/0x120 [ 140.389916][ T6878] do_fast_syscall_32+0x32/0x80 [ 140.391861][ T6878] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.394585][ T6878] RIP: 0023:0xf7fc0579 [ 140.396369][ T6878] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 140.404336][ T6878] RSP: 002b:00000000f577651c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 140.407897][ T6878] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 140.411311][ T6878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.414697][ T6878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.418095][ T6878] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 140.421466][ T6878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.424915][ T6878] [ 141.136928][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.378'. [ 141.577911][ T5397] usb 7-1: USB disconnect, device number 3 [ 142.467373][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.387'. [ 142.502374][ T5615] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 142.584971][ T6928] fuse: Unknown parameter 'ºh500000000000000000000' [ 142.609684][ T39] audit: type=1326 audit(1723434279.842:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6927 comm="syz.1.388" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc0579 code=0x0 [ 142.691456][ T5615] usb 5-1: device descriptor read/64, error -71 [ 142.706327][ T6911] orangefs_mount: mount request failed with -4 [ 142.994589][ T5615] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 143.154125][ T5615] usb 5-1: device descriptor read/64, error -71 [ 143.272402][ T5615] usb usb5-port1: attempt power cycle [ 143.703041][ T5615] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 143.712190][ T5524] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 143.720200][ T6947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.393'. [ 143.734153][ T5615] usb 5-1: device descriptor read/8, error -71 [ 143.872270][ T5524] usb 6-1: device descriptor read/64, error -71 [ 144.012475][ T5615] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 144.044470][ T5615] usb 5-1: device descriptor read/8, error -71 [ 144.142224][ T5524] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 144.165497][ T5615] usb usb5-port1: unable to enumerate USB device [ 144.302348][ T5524] usb 6-1: device descriptor read/64, error -71 [ 144.423264][ T5524] usb usb6-port1: attempt power cycle [ 144.640704][ T6963] input: syz1 as /devices/virtual/input/input9 [ 144.856754][ T5524] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 144.867091][ T6964] netlink: 'syz.2.400': attribute type 4 has an invalid length. [ 144.883372][ T5524] usb 6-1: device descriptor read/8, error -71 [ 145.162314][ T5524] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 145.198034][ T5524] usb 6-1: device descriptor read/8, error -71 [ 145.321004][ T5524] usb usb6-port1: unable to enumerate USB device [ 145.676125][ T6965] rtc_cmos 00:05: Alarms can be up to one day in the future [ 145.830143][ T832] rtc_cmos 00:05: Alarms can be up to one day in the future [ 145.834807][ T832] rtc_cmos 00:05: Alarms can be up to one day in the future [ 145.839019][ T832] rtc_cmos 00:05: Alarms can be up to one day in the future [ 145.844148][ T832] rtc_cmos 00:05: Alarms can be up to one day in the future [ 145.847355][ T832] rtc rtc0: __rtc_set_alarm: err=-22 [ 146.294753][ T5524] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 146.307816][ T5524] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 146.744341][ T6994] orangefs_mount: mount request failed with -4 [ 147.338614][ T7025] netlink: 'syz.3.419': attribute type 4 has an invalid length. [ 147.372042][ T7025] netlink: 'syz.3.419': attribute type 4 has an invalid length. [ 148.652812][ T5257] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 148.671392][ T7059] [U] iý€ [ 148.672992][ T7059] [U] % [ 148.674488][ T7059] [U] ëVëA*ôèÁ’L4°jn$²ð [ 148.676383][ T7059] [U] [ 148.677560][ T7059] [U] [ 148.678705][ T7059] [U] [ 148.680157][ T7059] [U] [ 148.681133][ T7059] [U] [ 148.682310][ T7059] [U] [ 148.683502][ T7059] [U] [ 148.684681][ T7059] [U] [ 148.686441][ T7059] [U] [ 148.687629][ T7059] [U] [ 148.688816][ T7059] [U] [ 148.690013][ T7059] [U] [ 148.691300][ T7059] [U] [ 148.692461][ T7059] [U] [ 148.693543][ T7059] [U] [ 148.694820][ T7059] [U] [ 148.697639][ T7059] [U] [ 148.698785][ T7059] [U] [ 148.699910][ T7059] [U] [ 148.701042][ T7059] [U] [ 148.703165][ T7059] [U] [ 148.704432][ T7059] [U] [ 148.705717][ T7059] [U] [ 148.707011][ T7059] [U] [ 148.708504][ T7059] [U] [ 148.709796][ T7059] [U] [ 148.711072][ T7059] [U] [ 148.712349][ T7059] [U] [ 148.714773][ T7059] [U] [ 148.716051][ T7059] [U] [ 148.717322][ T7059] [U] [ 148.718615][ T7059] [U] [ 148.720113][ T7059] [U] [ 148.721391][ T7059] [U] [ 148.722677][ T7059] [U] [ 148.723950][ T7059] [U] [ 148.726544][ T7059] [U] [ 148.727853][ T7059] [U] [ 148.729129][ T7059] [U] [ 148.730443][ T7059] [U] [ 148.736579][ T7059] [U] [ 148.737934][ T7059] [U] [ 148.739207][ T7059] [U] [ 148.740472][ T7059] [U] [ 148.742752][ T7059] [U] [ 148.744038][ T7059] [U] [ 148.745300][ T7059] [U] [ 148.746581][ T7059] [U] [ 148.748070][ T7059] [U] [ 148.749344][ T7059] [U] [ 148.750623][ T7059] [U] [ 148.751887][ T7059] [U] [ 148.755216][ T7059] [U] [ 148.756520][ T7059] [U] [ 148.757809][ T7059] [U] [ 148.759095][ T7059] [U] [ 148.760477][ T7059] [U] [ 148.761766][ T7059] [U] [ 148.763074][ T7059] [U] [ 148.764336][ T7059] [U] [ 148.767407][ T7059] [U] [ 148.768716][ T7059] [U] [ 148.769994][ T7059] [U] [ 148.771260][ T7059] [U] [ 148.773204][ T7059] [U] [ 148.774499][ T7059] [U] [ 148.775779][ T7059] [U] [ 148.777069][ T7059] [U] [ 148.778580][ T7059] [U] [ 148.779862][ T7059] [U] [ 148.781128][ T7059] [U] [ 148.782406][ T7059] [U] [ 148.784940][ T7059] [U] [ 148.786249][ T7059] [U] [ 148.787503][ T7059] [U] [ 148.788747][ T7059] [U] [ 148.790244][ T7059] [U] [ 148.791519][ T7059] [U] [ 148.792783][ T7059] [U] [ 148.794069][ T7059] [U] [ 148.796514][ T7059] [U] [ 148.797818][ T7059] [U] [ 148.799089][ T7059] [U] [ 148.800367][ T7059] [U] [ 148.801886][ T7059] [U] [ 148.803190][ T7059] [U] [ 148.804437][ T7059] [U] [ 148.805713][ T7059] [U] [ 148.808316][ T7059] [U] [ 148.809637][ T7059] [U] [ 148.810900][ T7059] [U] [ 148.812189][ T7059] [U] [ 148.814234][ T7059] [U] [ 148.815517][ T7059] [U] [ 148.816776][ T7059] [U] [ 148.818046][ T7059] [U] [ 148.819415][ T7059] [U] [ 148.820681][ T7059] [U] [ 148.821956][ T7059] [U] [ 148.823252][ T7059] [U] [ 148.825621][ T7059] [U] [ 148.826823][ T7059] [U] [ 148.828011][ T7059] [U] [ 148.829267][ T7059] [U] [ 148.830640][ T7059] [U] [ 148.831915][ T7059] [U] [ 148.833198][ T7059] [U] [ 148.834461][ T7059] [U] [ 148.836389][ T5257] usb 5-1: Using ep0 maxpacket: 8 [ 148.840601][ T7059] [U] [ 148.841940][ T7059] [U] [ 148.843223][ T7059] [U] [ 148.844475][ T7059] [U] [ 148.847987][ T5257] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 148.852224][ T5257] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.856546][ T5257] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.860837][ T5257] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.865498][ T7059] [U] [ 148.866775][ T7059] [U] [ 148.867992][ T7059] [U] [ 148.869269][ T7059] [U] [ 148.870671][ T7059] [U] [ 148.871930][ T7059] [U] [ 148.873219][ T7059] [U] [ 148.874495][ T7059] [U] [ 148.877020][ T5257] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.883547][ T7059] [U] [ 148.884844][ T7059] [U] [ 148.886134][ T7059] [U] [ 148.887384][ T7059] [U] [ 148.888753][ T7059] [U] [ 148.890046][ T7059] [U] [ 148.891320][ T7059] [U] [ 148.893481][ T5257] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.897619][ T5257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.911330][ T7058] [U] [ 149.109790][ T5257] usb 5-1: usb_control_msg returned -32 [ 149.111750][ T5257] usbtmc 5-1:16.0: can't read capabilities [ 149.469876][ T7073] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 149.673368][ T30] usb 5-1: USB disconnect, device number 15 [ 151.251941][ T7098] fuse: Unknown parameter './file0/../file0' [ 151.274271][ T7098] netlink: 60 bytes leftover after parsing attributes in process `syz.0.446'. [ 152.498069][ T39] audit: type=1326 audit(1723434289.732:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7111 comm="syz.3.450" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x0 [ 154.795443][ T7154] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 154.808338][ T7154] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 154.838789][ T7157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.461'. [ 155.269476][ T7160] netlink: 48 bytes leftover after parsing attributes in process `syz.0.462'. [ 155.606694][ T7165] raw_sendmsg: syz.3.464 forgot to set AF_INET. Fix it! [ 156.298732][ T7186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.468'. [ 157.177446][ T7203] FAULT_INJECTION: forcing a failure. [ 157.177446][ T7203] name failslab, interval 1, probability 0, space 0, times 0 [ 157.186591][ T7203] CPU: 0 UID: 0 PID: 7203 Comm: syz.3.474 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 157.191267][ T7203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.195951][ T7203] Call Trace: [ 157.197451][ T7203] [ 157.198782][ T7203] dump_stack_lvl+0x16c/0x1f0 [ 157.200894][ T7203] should_fail_ex+0x497/0x5b0 [ 157.203011][ T7203] ? fs_reclaim_acquire+0xae/0x160 [ 157.205295][ T7203] should_failslab+0xc2/0x120 [ 157.207390][ T7203] __kmalloc_noprof+0xcb/0x410 [ 157.209512][ T7203] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 157.212397][ T7203] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 157.214622][ T7203] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 157.217118][ T7203] ? __radix_tree_lookup+0x21f/0x2c0 [ 157.219340][ T7203] genl_rcv_msg+0x565/0x800 [ 157.221396][ T7203] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.223681][ T7203] ? __pfx_ctrl_getfamily+0x10/0x10 [ 157.225986][ T7203] netlink_rcv_skb+0x165/0x410 [ 157.227699][ T7203] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.229430][ T7203] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.231403][ T7203] ? down_read+0xc9/0x330 [ 157.233326][ T7203] ? __pfx_down_read+0x10/0x10 [ 157.235470][ T7203] ? netlink_deliver_tap+0x1ae/0xcf0 [ 157.237243][ T7203] genl_rcv+0x28/0x40 [ 157.238610][ T7203] netlink_unicast+0x544/0x830 [ 157.240228][ T7203] ? __pfx_netlink_unicast+0x10/0x10 [ 157.242381][ T7203] ? __phys_addr_symbol+0x30/0x80 [ 157.244653][ T7203] ? __check_object_size+0x497/0x720 [ 157.246940][ T7203] netlink_sendmsg+0x8b8/0xd70 [ 157.249094][ T7203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.251461][ T7203] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 157.253781][ T7203] __sys_sendto+0x47f/0x4e0 [ 157.255817][ T7203] ? __pfx___sys_sendto+0x10/0x10 [ 157.258097][ T7203] ? __might_fault+0x13b/0x190 [ 157.260226][ T7203] ? __pfx_lock_release+0x10/0x10 [ 157.262434][ T7203] __do_compat_sys_socketcall+0x5e2/0x700 [ 157.264938][ T7203] ? __pfx___do_compat_sys_socketcall+0x10/0x10 [ 157.267723][ T7203] ? fput+0x32/0x390 [ 157.269489][ T7203] __do_fast_syscall_32+0x73/0x120 [ 157.271797][ T7203] do_fast_syscall_32+0x32/0x80 [ 157.274019][ T7203] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.276753][ T7203] RIP: 0023:0xf73ae579 [ 157.278603][ T7203] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 157.287077][ T7203] RSP: 002b:00000000f56c5440 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 157.290765][ T7203] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f56c5454 [ 157.294239][ T7203] RDX: 0000000000000000 RSI: 00000000f56c5570 RDI: 00000000f739cff4 [ 157.297667][ T7203] RBP: 00000000f56c5570 R08: 0000000000000000 R09: 0000000000000000 [ 157.301066][ T7203] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 157.304574][ T7203] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.308041][ T7203] [ 158.138359][ T7219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.478'. [ 158.142226][ T4773] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 158.327562][ T7222] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 158.331177][ T7222] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 159.064774][ T39] audit: type=1326 audit(1723434296.302:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7232 comm="syz.1.481" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc0579 code=0x0 [ 159.456161][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.459554][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.469396][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.476516][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.479355][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.485728][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.488589][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.491576][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.494784][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.497921][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.501142][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.504444][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.507683][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.510755][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.515217][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.518360][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.521119][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.524186][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.527343][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.530473][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.533250][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.535861][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.538917][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.541896][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.544690][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.547464][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.550650][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.554012][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.557042][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.560161][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.563475][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.566557][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.569303][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.572458][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.575298][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.577703][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.580272][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.583737][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.587831][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.590847][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.593774][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.596580][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.599965][ T35] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 159.606526][ T35] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 159.843218][ T7244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.484'. [ 160.013094][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 160.202288][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 160.206509][ T10] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 160.210115][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.222711][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.226383][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.243987][ T10] usbtmc 8-1:16.0: bulk endpoints not found [ 161.258577][ T7260] warning: `syz.3.485' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 161.327129][ T7262] netlink: 'syz.2.488': attribute type 4 has an invalid length. [ 162.348981][ T7270] 9pnet_virtio: no channels available for device syz [ 162.803888][ T10] usb 8-1: USB disconnect, device number 9 [ 163.803508][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88802754d800: rx timeout, send abort [ 164.232860][ T7283] netlink: 172 bytes leftover after parsing attributes in process `syz.0.494'. [ 164.308382][ C3] vxcan0: j1939_tp_rxtimer: 0xffff88802754d800: abort rx timeout. Force session deactivation [ 164.902210][ T30] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 165.102129][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 165.106250][ T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.110361][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.114637][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.119460][ T30] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.125244][ T30] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 165.129430][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.353860][ T30] usb 7-1: GET_CAPABILITIES returned 0 [ 165.356523][ T30] usbtmc 7-1:16.0: can't read capabilities [ 165.683483][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.687646][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.691692][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.694858][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.698513][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.702339][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.706186][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.744193][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.747966][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.751824][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.756323][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.760152][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.763791][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.767198][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.770934][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.775197][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 165.784512][ T35] usb 7-1: USB disconnect, device number 4 [ 165.811356][ T7314] binder_alloc: 7312: binder_alloc_buf, no vma [ 166.923878][ T7330] bridge_slave_0: left allmulticast mode [ 166.926017][ T7330] bridge_slave_0: left promiscuous mode [ 166.928530][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.943406][ T7330] bridge_slave_1: left allmulticast mode [ 166.945372][ T7330] bridge_slave_1: left promiscuous mode [ 166.948596][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.971355][ T7330] bond0: (slave bond_slave_0): Releasing backup interface [ 166.984216][ T7330] bond0: (slave bond_slave_1): Releasing backup interface [ 167.021904][ T7330] team0: Port device team_slave_0 removed [ 167.038599][ T7330] team0: Port device team_slave_1 removed [ 167.041288][ T7330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.047289][ T7330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.051812][ T7330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.063575][ T7330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.336541][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888012c14800: rx timeout, send abort [ 167.342244][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888012c15400: rx timeout, send abort [ 167.346085][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888012c14800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 167.353370][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888012c15400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 168.643068][ T7355] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 168.932226][ T7363] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 170.212345][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 170.226229][ T7397] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 170.865766][ T7406] binder: 7403:7406 ioctl 541b 0 returned -22 [ 172.058386][ T7411] netlink: 'syz.0.534': attribute type 9 has an invalid length. [ 172.061413][ T7411] netlink: 204988 bytes leftover after parsing attributes in process `syz.0.534'. [ 172.254665][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 172.559548][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802b7af000: rx timeout, send abort [ 173.062882][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802b7af000: abort rx timeout. Force session deactivation [ 174.294706][ T39] audit: type=1326 audit(1723434311.532:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.3.546" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x0 [ 174.808757][ T7468] random: crng reseeded on system resumption [ 175.237146][ T7486] evm: overlay not supported [ 175.249524][ T39] audit: type=1804 audit(1723434312.482:9): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.559" name="/newroot/130/bus/file0" dev="overlay" ino=730 res=1 errno=0 [ 176.518825][ T7509] netlink: 120 bytes leftover after parsing attributes in process `syz.3.565'. [ 177.027450][ T7520] sit0: entered allmulticast mode [ 180.790195][ T7577] netlink: 'syz.3.584': attribute type 1 has an invalid length. [ 180.793814][ T7577] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.584'. [ 180.797897][ T7577] netlink: 'syz.3.584': attribute type 1 has an invalid length. [ 180.934707][ T7584] 9pnet_fd: Insufficient options for proto=fd [ 181.044313][ T4773] Bluetooth: hci2: command 0x0406 tx timeout [ 181.414526][ T7601] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 182.078297][ T7624] FAULT_INJECTION: forcing a failure. [ 182.078297][ T7624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.087089][ T7624] CPU: 0 UID: 0 PID: 7624 Comm: syz.1.595 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 182.091473][ T7624] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 182.095700][ T7624] Call Trace: [ 182.097127][ T7624] [ 182.098401][ T7624] dump_stack_lvl+0x16c/0x1f0 [ 182.100518][ T7624] should_fail_ex+0x497/0x5b0 [ 182.102600][ T7624] _copy_from_user+0x30/0xf0 [ 182.104629][ T7624] kstrtouint_from_user+0xd7/0x1c0 [ 182.106735][ T7624] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 182.109022][ T7624] ? __pfx_lock_acquire+0x10/0x10 [ 182.111254][ T7624] proc_fail_nth_write+0x84/0x270 [ 182.113524][ T7624] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 182.116027][ T7624] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 182.118526][ T7624] vfs_write+0x29a/0x1140 [ 182.120210][ T7624] ? __fdget_pos+0xeb/0x180 [ 182.122083][ T7624] ? __pfx_vfs_write+0x10/0x10 [ 182.124268][ T7624] ? __pfx___mutex_lock+0x10/0x10 [ 182.126490][ T7624] ? __fget_files+0x256/0x400 [ 182.137798][ T7624] ksys_write+0x12f/0x260 [ 182.139646][ T7624] ? __pfx_ksys_write+0x10/0x10 [ 182.141718][ T7624] __do_fast_syscall_32+0x73/0x120 [ 182.143941][ T7624] do_fast_syscall_32+0x32/0x80 [ 182.146210][ T7624] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 182.149141][ T7624] RIP: 0023:0xf7fc0579 [ 182.151055][ T7624] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 182.159860][ T7624] RSP: 002b:00000000f57555a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 182.163514][ T7624] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5755620 [ 182.166881][ T7624] RDX: 0000000000000001 RSI: 00000000f744cff4 RDI: 0000000000000000 [ 182.170188][ T7624] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 182.173783][ T7624] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 182.177127][ T7624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.180305][ T7624] [ 183.148975][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 183.946760][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.605'. [ 183.983269][ T5345] Bluetooth: hci1: unexpected cc 0x2007 length: 100 > 2 [ 183.989592][ T7652] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 183.992466][ T7652] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 183.998496][ T7652] vhci_hcd vhci_hcd.0: Device attached [ 184.014571][ T7655] vhci_hcd: connection closed [ 184.016760][ T11] vhci_hcd: stop threads [ 184.020952][ T11] vhci_hcd: release socket [ 184.023179][ T11] vhci_hcd: disconnect device [ 185.080210][ T39] audit: type=1326 audit(1723434322.312:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7667 comm="syz.3.609" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x0 [ 185.407808][ T4773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.414764][ T4773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.422489][ T4773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.427435][ T4773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.431365][ T4773] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 185.437480][ T4773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.816204][ T7686] chnl_net:caif_netlink_parms(): no params data found [ 185.949725][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.614'. [ 185.954623][ T7698] netlink: 'syz.1.614': attribute type 2 has an invalid length. [ 185.958131][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.614'. [ 186.059690][ T7686] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.062783][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.065698][ T7686] bridge_slave_0: entered allmulticast mode [ 186.069402][ T7686] bridge_slave_0: entered promiscuous mode [ 186.074546][ T39] audit: type=1326 audit(1723434323.312:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.1.614" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc0579 code=0x0 [ 186.074657][ T7686] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.087285][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.090131][ T7686] bridge_slave_1: entered allmulticast mode [ 186.093910][ T7686] bridge_slave_1: entered promiscuous mode [ 186.155242][ T7686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.162849][ T7686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.227703][ T7686] team0: Port device team_slave_0 added [ 186.234293][ T7686] team0: Port device team_slave_1 added [ 186.326293][ T7686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.329236][ T7686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.339865][ T7686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.348690][ T7686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.351552][ T7686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.361948][ T7686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.444517][ T7686] hsr_slave_0: entered promiscuous mode [ 186.448393][ T7686] hsr_slave_1: entered promiscuous mode [ 186.451530][ T7686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.454969][ T7686] Cannot create hsr debugfs directory [ 186.677444][ T7686] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.848326][ T7706] netlink: 'syz.3.615': attribute type 7 has an invalid length. [ 186.854585][ T7706] netlink: 'syz.3.615': attribute type 8 has an invalid length. [ 186.863210][ T7686] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.881173][ T7707] loop0: detected capacity change from 0 to 16384 [ 186.890402][ T7707] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.921770][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'. [ 186.926197][ T7709] netlink: 152 bytes leftover after parsing attributes in process `syz.3.618'. [ 186.943788][ T7709] netlink: 152 bytes leftover after parsing attributes in process `syz.3.618'. [ 186.997503][ T7686] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.022193][ T7711] team0: Port device virt_wifi0 added [ 187.106013][ T7686] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.259917][ T7717] tmpfs: Bad value for 'mpol' [ 187.352889][ T39] audit: type=1326 audit(1723434324.582:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.2.619" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x0 [ 187.413843][ T7686] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.424688][ T7686] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 187.435441][ T7686] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 187.459298][ T7686] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.532748][ T5345] Bluetooth: hci4: command tx timeout [ 187.538148][ T7686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.568750][ T7686] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.580369][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.583721][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.597314][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.600653][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.787426][ T7686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.837598][ T7686] veth0_vlan: entered promiscuous mode [ 187.849441][ T7686] veth1_vlan: entered promiscuous mode [ 187.852499][ T5397] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 187.883711][ T7686] veth0_macvtap: entered promiscuous mode [ 187.889937][ T7686] veth1_macvtap: entered promiscuous mode [ 187.906094][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.911400][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.916270][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.921556][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.926498][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.931137][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.937848][ T7686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.944825][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.949787][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.955140][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.960128][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.965680][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.970693][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.976728][ T7686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.989402][ T7686] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.994809][ T7686] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.999176][ T7686] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.003428][ T5345] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 188.007846][ T5345] Bluetooth: hci1: Injecting HCI hardware error event [ 188.009907][ T7686] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.011709][ T5345] Bluetooth: hci1: hardware error 0x00 [ 188.057848][ T5397] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 188.065295][ T5397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.069988][ T5397] usb 6-1: config 0 descriptor?? [ 188.078157][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.081460][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.083102][ T5397] cp210x 6-1:0.0: cp210x converter detected [ 188.108723][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.114318][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.691229][ T5397] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 188.700185][ T5397] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 188.704353][ T5397] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 188.740065][ T5397] usb 6-1: cp210x converter now attached to ttyUSB0 [ 188.770059][ T5397] usb 6-1: USB disconnect, device number 10 [ 188.781486][ T5397] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 188.787429][ T5397] cp210x 6-1:0.0: device disconnected [ 189.614725][ T4773] Bluetooth: hci4: command tx timeout [ 190.090716][ T5345] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 190.237906][ T112] EXT4-fs warning (device sda1): es_reclaim_extents:1827: forced shrink of precached extents [ 190.251498][ T112] EXT4-fs warning (device sda1): es_reclaim_extents:1827: forced shrink of precached extents [ 190.321669][ T7768] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.319304][ T7799] FAULT_INJECTION: forcing a failure. [ 191.319304][ T7799] name failslab, interval 1, probability 0, space 0, times 0 [ 191.328237][ T7799] CPU: 0 UID: 0 PID: 7799 Comm: syz.2.640 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 191.333064][ T7799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 191.337964][ T7799] Call Trace: [ 191.339502][ T7799] [ 191.340872][ T7799] dump_stack_lvl+0x16c/0x1f0 [ 191.343093][ T7799] should_fail_ex+0x497/0x5b0 [ 191.345284][ T7799] ? fs_reclaim_acquire+0xae/0x160 [ 191.347756][ T7799] should_failslab+0xc2/0x120 [ 191.349936][ T7799] __kmalloc_noprof+0xcb/0x410 [ 191.352146][ T7799] ? __pfx_lock_acquire+0x10/0x10 [ 191.354484][ T7799] tomoyo_realpath_from_path+0xbf/0x710 [ 191.357063][ T7799] ? tomoyo_profile+0x47/0x60 [ 191.359218][ T7799] tomoyo_path_number_perm+0x245/0x5b0 [ 191.361692][ T7799] ? tomoyo_path_number_perm+0x232/0x5b0 [ 191.364176][ T7799] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 191.366947][ T7799] ? __pfx_lock_release+0x10/0x10 [ 191.369302][ T7799] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 191.372061][ T7799] ? __fget_files+0x256/0x400 [ 191.374250][ T7799] security_file_ioctl_compat+0x75/0xc0 [ 191.376788][ T7799] __do_compat_sys_ioctl+0x5d/0x330 [ 191.379222][ T7799] __do_fast_syscall_32+0x73/0x120 [ 191.381588][ T7799] do_fast_syscall_32+0x32/0x80 [ 191.383851][ T7799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.386659][ T7799] RIP: 0023:0xf7fa4579 [ 191.388545][ T7799] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 191.397197][ T7799] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 191.401023][ T7799] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 191.404640][ T7799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.408239][ T7799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.411855][ T7799] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 191.415287][ T7799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.418672][ T7799] [ 191.449835][ T7799] ERROR: Out of memory at tomoyo_realpath_from_path. [ 191.692869][ T5345] Bluetooth: hci4: command tx timeout [ 192.239350][ T7816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.644'. [ 193.089181][ T7829] netlink: 76 bytes leftover after parsing attributes in process `syz.0.649'. [ 193.754628][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'. [ 193.762656][ T5345] Bluetooth: hci4: command tx timeout [ 193.770192][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'. [ 194.016207][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 194.234471][ T7864] block device autoloading is deprecated and will be removed. [ 194.883107][ T7882] FAULT_INJECTION: forcing a failure. [ 194.883107][ T7882] name failslab, interval 1, probability 0, space 0, times 0 [ 194.889046][ T7882] CPU: 3 UID: 0 PID: 7882 Comm: syz.3.662 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 194.893473][ T7882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.897908][ T7882] Call Trace: [ 194.899425][ T7882] [ 194.900762][ T7882] dump_stack_lvl+0x16c/0x1f0 [ 194.903082][ T7882] should_fail_ex+0x497/0x5b0 [ 194.905635][ T7882] ? fs_reclaim_acquire+0xae/0x160 [ 194.907944][ T7882] should_failslab+0xc2/0x120 [ 194.910091][ T7882] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 194.912677][ T7882] ? getname_kernel+0x52/0x370 [ 194.914830][ T7882] getname_kernel+0x52/0x370 [ 194.916882][ T7882] kern_path+0x1d/0x50 [ 194.918712][ T7882] lookup_bdev+0xd9/0x280 [ 194.920671][ T7882] ? __pfx_lookup_bdev+0x10/0x10 [ 194.922883][ T7882] get_tree_bdev+0xbd/0x610 [ 194.924887][ T7882] ? __pfx_efs_fill_super+0x10/0x10 [ 194.927167][ T7882] ? __pfx_get_tree_bdev+0x10/0x10 [ 194.929513][ T7882] ? bpf_lsm_capable+0x9/0x10 [ 194.931543][ T7882] ? security_capable+0x98/0xd0 [ 194.933593][ T7882] vfs_get_tree+0x8f/0x380 [ 194.935526][ T7882] path_mount+0x6e1/0x1f10 [ 194.937519][ T7882] ? __pfx_path_mount+0x10/0x10 [ 194.939652][ T7882] ? putname+0x12e/0x170 [ 194.941480][ T7882] ? putname+0x12e/0x170 [ 194.943359][ T7882] __ia32_sys_mount+0x292/0x310 [ 194.945438][ T7882] ? __pfx___ia32_sys_mount+0x10/0x10 [ 194.947656][ T7882] __do_fast_syscall_32+0x73/0x120 [ 194.949875][ T7882] do_fast_syscall_32+0x32/0x80 [ 194.951999][ T7882] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.954617][ T7882] RIP: 0023:0xf73ae579 [ 194.956468][ T7882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 194.964188][ T7882] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 194.967922][ T7882] RAX: ffffffffffffffda RBX: 00000000200000c0 RCX: 0000000020000040 [ 194.971368][ T7882] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.974921][ T7882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.978690][ T7882] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 194.981903][ T7882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.985158][ T7882] [ 194.993737][ T7882] /dev/nullb0: Can't lookup blockdev [ 195.302176][ T5397] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 195.424379][ T7887] overlayfs: failed to resolve './file0': -2 [ 195.512260][ T5397] usb 6-1: Using ep0 maxpacket: 8 [ 195.519062][ T5397] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 195.526289][ T5397] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.531480][ T5397] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 195.535872][ T5397] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 195.540301][ T5397] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.546094][ T5397] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 195.550128][ T5397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.768315][ T5397] usb 6-1: usb_control_msg returned -32 [ 195.770913][ T5397] usbtmc 6-1:16.0: can't read capabilities [ 198.044292][ T10] usb 6-1: USB disconnect, device number 11 [ 198.185019][ T7902] netlink: 'syz.3.668': attribute type 1 has an invalid length. [ 198.477698][ T7905] netfs: Couldn't get user pages (rc=-14) [ 199.447512][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.450282][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.488968][ T39] audit: type=1326 audit(1723434584.719:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7931 comm="syz.0.674" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f40579 code=0x0 [ 199.601044][ T7936] netlink: 'syz.0.674': attribute type 10 has an invalid length. [ 199.627368][ T7936] team0: Port device netdevsim0 added [ 199.668292][ T5397] kernel write not supported for file /snd/pcmC1D0p (pid: 5397 comm: kworker/1:5) [ 199.689700][ T7936] netlink: 'syz.0.674': attribute type 1 has an invalid length. [ 199.696171][ T7936] netlink: 244 bytes leftover after parsing attributes in process `syz.0.674'. [ 199.700003][ T7936] NCSI netlink: No device for ifindex 0 [ 199.704310][ T7939] input: syz0 as /devices/virtual/input/input10 [ 199.902651][ T5524] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 200.062395][ T5524] usb 8-1: device descriptor read/64, error -71 [ 200.192134][ T5257] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 200.352228][ T5524] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 200.372283][ T5257] usb 6-1: Using ep0 maxpacket: 8 [ 200.381174][ T5257] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 200.384731][ T5257] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.388647][ T5257] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.392848][ T5257] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.396951][ T5257] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.402814][ T5257] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 200.406590][ T5257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.513126][ T5524] usb 8-1: device descriptor read/64, error -71 [ 200.629818][ T5257] usb 6-1: usb_control_msg returned -32 [ 200.632671][ T5257] usbtmc 6-1:16.0: can't read capabilities [ 200.639364][ T5524] usb usb8-port1: attempt power cycle [ 200.908224][ T7948] sg_write: data in/out 2011/17 bytes for SCSI command 0x0-- guessing data in; [ 200.908224][ T7948] program syz.2.679 not setting count and/or reply_len properly [ 201.062156][ T5524] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 201.103149][ T5524] usb 8-1: device descriptor read/8, error -71 [ 201.392310][ T5524] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 201.443040][ T5524] usb 8-1: device descriptor read/8, error -71 [ 201.562597][ T5524] usb usb8-port1: unable to enumerate USB device [ 201.880720][ T7960] netlink: 256 bytes leftover after parsing attributes in process `syz.0.683'. [ 201.890564][ T7960] unsupported nlmsg_type 40 [ 202.876539][ T5524] usb 6-1: USB disconnect, device number 12 [ 203.104355][ T7972] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 203.107150][ T7972] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 203.118177][ T7972] vhci_hcd vhci_hcd.0: Device attached [ 203.415264][ T7975] vhci_hcd: connection closed [ 203.416291][ T45] vhci_hcd: stop threads [ 203.420385][ T45] vhci_hcd: release socket [ 203.423982][ T45] vhci_hcd: disconnect device [ 203.462406][ T5397] usb 18-1: enqueue for inactive port 0 [ 204.035925][ T5397] usb usb18-port1: attempt power cycle [ 204.237166][ T7995] FAULT_INJECTION: forcing a failure. [ 204.237166][ T7995] name failslab, interval 1, probability 0, space 0, times 0 [ 204.242958][ T7995] CPU: 3 UID: 0 PID: 7995 Comm: syz.2.693 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 204.247161][ T7995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 204.251124][ T7995] Call Trace: [ 204.252579][ T7995] [ 204.253873][ T7995] dump_stack_lvl+0x16c/0x1f0 [ 204.255919][ T7995] should_fail_ex+0x497/0x5b0 [ 204.258032][ T7995] ? fs_reclaim_acquire+0xae/0x160 [ 204.260325][ T7995] should_failslab+0xc2/0x120 [ 204.262493][ T7995] __kmalloc_noprof+0xcb/0x410 [ 204.264669][ T7995] tomoyo_encode2+0x100/0x3e0 [ 204.266737][ T7995] tomoyo_encode+0x2c/0x40 [ 204.268679][ T7995] tomoyo_mount_acl+0x314/0x880 [ 204.270877][ T7995] ? hlock_class+0x4e/0x130 [ 204.272923][ T7995] ? __lock_acquire+0x1620/0x3cb0 [ 204.275154][ T7995] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 204.277456][ T7995] ? __pfx___lock_acquire+0x10/0x10 [ 204.279576][ T7995] ? do_fast_syscall_32+0x32/0x80 [ 204.281719][ T7995] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.284625][ T7995] ? tomoyo_domain+0xbb/0x150 [ 204.286691][ T7995] ? tomoyo_profile+0x47/0x60 [ 204.288762][ T7995] tomoyo_mount_permission+0x16b/0x410 [ 204.291108][ T7995] ? tomoyo_mount_permission+0x146/0x410 [ 204.293674][ T7995] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 204.296180][ T7995] ? get_current_fs_domain+0x188/0x1f0 [ 204.298504][ T7995] security_sb_mount+0x8d/0xe0 [ 204.300405][ T7995] path_mount+0x129/0x1f10 [ 204.302222][ T7995] ? __pfx_path_mount+0x10/0x10 [ 204.304136][ T7995] ? putname+0x12e/0x170 [ 204.305830][ T7995] ? putname+0x12e/0x170 [ 204.307486][ T7995] __ia32_sys_mount+0x292/0x310 [ 204.309655][ T7995] ? __pfx___ia32_sys_mount+0x10/0x10 [ 204.312058][ T7995] __do_fast_syscall_32+0x73/0x120 [ 204.314373][ T7995] do_fast_syscall_32+0x32/0x80 [ 204.316676][ T7995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.319515][ T7995] RIP: 0023:0xf7fa4579 [ 204.321304][ T7995] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 204.329635][ T7995] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 204.333236][ T7995] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000000 [ 204.336661][ T7995] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 0000000020001940 [ 204.340069][ T7995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.343491][ T7995] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 204.346834][ T7995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.350304][ T7995] [ 204.407650][ T7995] trusted_key: syz.2.693 sent an empty control message without MSG_MORE. [ 204.696239][ T5397] usb usb18-port1: unable to enumerate USB device [ 205.473365][ T5524] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 205.652190][ T5524] usb 8-1: Using ep0 maxpacket: 8 [ 205.663564][ T5524] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 205.678862][ T5524] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.700359][ T5524] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.750001][ T5524] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.775158][ T5524] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.835325][ T5524] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 205.839238][ T5524] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.059627][ T5524] usb 8-1: usb_control_msg returned -32 [ 206.062416][ T5524] usbtmc 8-1:16.0: can't read capabilities [ 206.642566][ T4773] Bluetooth: hci3: command 0x0405 tx timeout [ 207.529297][ T8035] sg_write: data in/out 2011/17 bytes for SCSI command 0x0-- guessing data in; [ 207.529297][ T8035] program syz.2.704 not setting count and/or reply_len properly [ 207.536296][ T8035] FAULT_INJECTION: forcing a failure. [ 207.536296][ T8035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.541943][ T8035] CPU: 1 UID: 0 PID: 8035 Comm: syz.2.704 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 207.546364][ T8035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 207.551090][ T8035] Call Trace: [ 207.552590][ T8035] [ 207.553930][ T8035] dump_stack_lvl+0x16c/0x1f0 [ 207.556050][ T8035] should_fail_ex+0x497/0x5b0 [ 207.558186][ T8035] _copy_from_iter+0x27a/0xfc0 [ 207.560341][ T8035] ? __pfx__copy_from_iter+0x10/0x10 [ 207.562728][ T8035] ? bio_add_hw_page+0x1ff/0x480 [ 207.564944][ T8035] copy_page_from_iter+0xa5/0x120 [ 207.567203][ T8035] bio_copy_from_iter+0x121/0x280 [ 207.569394][ T8035] blk_rq_map_user_iov+0xca6/0x1700 [ 207.571428][ T8035] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 207.573604][ T8035] ? find_held_lock+0x2d/0x110 [ 207.575708][ T8035] ? sg_common_write.constprop.0+0xe6a/0x1c60 [ 207.578356][ T8035] ? trace_contention_end+0xea/0x140 [ 207.580651][ T8035] blk_rq_map_user_io+0x206/0x230 [ 207.582273][ T5399] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 207.582646][ T8035] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 207.588306][ T8035] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 207.590954][ T8035] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 207.593304][ T8035] sg_common_write.constprop.0+0xfbf/0x1c60 [ 207.595630][ T8035] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 207.598131][ T8035] ? __pfx____ratelimit+0x10/0x10 [ 207.600373][ T8035] sg_write+0x82e/0xe10 [ 207.602268][ T8035] ? __pfx_sg_write+0x10/0x10 [ 207.604385][ T8035] ? apparmor_file_permission+0x251/0x410 [ 207.606942][ T8035] ? bpf_lsm_file_permission+0x9/0x10 [ 207.609306][ T8035] ? security_file_permission+0x98/0xc0 [ 207.611701][ T8035] ? __pfx_sg_write+0x10/0x10 [ 207.613569][ T8035] vfs_write+0x29a/0x1140 [ 207.615300][ T8035] ? __pfx_vfs_write+0x10/0x10 [ 207.617402][ T8035] ? __fget_files+0x256/0x400 [ 207.619459][ T8035] ? __fget_light+0x173/0x210 [ 207.621464][ T8035] ksys_write+0x12f/0x260 [ 207.623180][ T8035] ? __pfx_ksys_write+0x10/0x10 [ 207.625299][ T8035] __do_fast_syscall_32+0x73/0x120 [ 207.627543][ T8035] do_fast_syscall_32+0x32/0x80 [ 207.629593][ T8035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.632057][ T8035] RIP: 0023:0xf7fa4579 [ 207.633766][ T8035] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 207.642009][ T8035] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 207.645591][ T8035] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000100 [ 207.649050][ T8035] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.652553][ T8035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.656034][ T8035] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 207.662819][ T8035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.666340][ T8035] [ 207.762334][ T5399] usb 6-1: Using ep0 maxpacket: 8 [ 207.770832][ T5399] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 207.775363][ T5399] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.779703][ T5399] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.784066][ T5399] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 207.788394][ T5399] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.796276][ T5399] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 207.800330][ T5399] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.823334][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 208.004147][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 208.010731][ T5399] usb 6-1: GET_CAPABILITIES returned 0 [ 208.011441][ T8] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 208.013700][ T5399] usbtmc 6-1:16.0: can't read capabilities [ 208.017708][ T8] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 208.017734][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 208.028522][ T8] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 208.038329][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.041904][ T8] usb 5-1: Product: syz [ 208.048507][ T8] usb 5-1: Manufacturer: syz [ 208.051740][ T8] usb 5-1: SerialNumber: syz [ 208.062416][ T8] usb 5-1: config 0 descriptor?? [ 208.085102][ T8] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input11 [ 208.199912][ T5399] usb 8-1: USB disconnect, device number 14 [ 208.213340][ T8] usb 6-1: USB disconnect, device number 13 [ 208.429691][ T8031] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 208.437717][ T8030] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 208.576126][ T8050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.617036][ T8050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.186574][ T8053] netlink: 36 bytes leftover after parsing attributes in process `syz.2.708'. [ 210.525184][ T35] usb 5-1: USB disconnect, device number 16 [ 210.597871][ T8043] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 211.600584][ T8089] netlink: 176 bytes leftover after parsing attributes in process `syz.0.719'. [ 211.605189][ T39] audit: type=1326 audit(1723434596.839:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.720" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc0579 code=0x0 [ 211.829093][ T8100] ax25_connect(): syz.1.721 uses autobind, please contact jreuter@yaina.de [ 211.919820][ T8105] sg_write: data in/out 2011/17 bytes for SCSI command 0x0-- guessing data in; [ 211.919820][ T8105] program syz.1.723 not setting count and/or reply_len properly [ 212.019819][ T8107] netlink: set zone limit has 4 unknown bytes [ 212.292702][ T8109] syz.1.725 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 213.283292][ T8126] FAULT_INJECTION: forcing a failure. [ 213.283292][ T8126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.288673][ T8126] CPU: 2 UID: 0 PID: 8126 Comm: syz.2.730 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 213.292924][ T8126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 213.297351][ T8126] Call Trace: [ 213.298738][ T8126] [ 213.299968][ T8126] dump_stack_lvl+0x16c/0x1f0 [ 213.302093][ T8126] should_fail_ex+0x497/0x5b0 [ 213.304755][ T8126] _copy_to_user+0x30/0xc0 [ 213.307267][ T8126] simple_read_from_buffer+0xd0/0x160 [ 213.309731][ T8126] proc_fail_nth_read+0x1b0/0x290 [ 213.311855][ T8126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.314010][ T8126] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.315968][ T8126] vfs_read+0x1d4/0xbd0 [ 213.317589][ T8126] ? __pfx___up_read+0x10/0x10 [ 213.319420][ T8126] ? __fdget_pos+0xeb/0x180 [ 213.321249][ T8126] ? __pfx_vfs_read+0x10/0x10 [ 213.323374][ T8126] ? __pfx___mutex_lock+0x10/0x10 [ 213.325404][ T8126] ? __fget_files+0x256/0x400 [ 213.327350][ T8126] ksys_read+0x12f/0x260 [ 213.329010][ T8126] ? __pfx_ksys_read+0x10/0x10 [ 213.330576][ T8126] __do_fast_syscall_32+0x73/0x120 [ 213.332572][ T8126] do_fast_syscall_32+0x32/0x80 [ 213.334580][ T8126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.337137][ T8126] RIP: 0023:0xf7fa4579 [ 213.338853][ T8126] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 213.346609][ T8126] RSP: 002b:00000000f57565a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 213.350035][ T8126] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5756620 [ 213.353316][ T8126] RDX: 000000000000000f RSI: 00000000f742cff4 RDI: 0000000000000000 [ 213.356541][ T8126] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 213.359796][ T8126] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 213.363092][ T8126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.365990][ T8126] [ 213.469453][ T8129] fuse: Unknown parameter '·' [ 213.650909][ T8136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.733'. [ 213.654710][ T8136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.733'. [ 213.659237][ T8136] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 213.724444][ T8136] bond1: entered allmulticast mode [ 213.727914][ T8136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.560110][ T8145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.735'. [ 216.351558][ T8177] No such timeout policy "syz0" [ 216.384634][ T8177] netlink: 40 bytes leftover after parsing attributes in process `syz.1.743'. [ 216.526939][ T8182] ======================================================= [ 216.526939][ T8182] WARNING: The mand mount option has been deprecated and [ 216.526939][ T8182] and is ignored by this kernel. Remove the mand [ 216.526939][ T8182] option from the mount to silence this warning. [ 216.526939][ T8182] ======================================================= [ 216.527825][ T8166] orangefs_mount: mount request failed with -4 [ 216.549152][ T8174] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 216.853943][ T8170] orangefs_mount: mount request failed with -4 [ 217.018065][ T8187] can0: slcan on ttyprintk. [ 217.025828][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'. [ 218.082505][ T8186] can0 (unregistered): slcan off ttyprintk. [ 219.569792][ T8254] ================================================================== [ 219.573406][ T8254] BUG: KASAN: vmalloc-out-of-bounds in acpi_nfit_ctl+0x199a/0x1ca0 [ 219.576925][ T8254] Read of size 4 at addr ffffc90003099038 by task syz.0.759/8254 [ 219.597711][ T8254] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 219.598791][ T8254] CPU: 0 UID: 0 PID: 8254 Comm: syz.0.759 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 219.603549][ T8254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.610029][ T8254] Call Trace: [ 219.612111][ T8254] [ 219.613966][ T8254] dump_stack_lvl+0x116/0x1f0 [ 219.616177][ T8254] print_report+0xc3/0x620 [ 219.618917][ T8254] ? __virt_addr_valid+0x5e/0x590 [ 219.621268][ T8254] kasan_report+0xd9/0x110 [ 219.626670][ T8254] ? acpi_nfit_ctl+0x199a/0x1ca0 [ 219.629323][ T8254] ? acpi_nfit_ctl+0x199a/0x1ca0 [ 219.631582][ T8254] acpi_nfit_ctl+0x199a/0x1ca0 [ 219.633949][ T8254] ? trace_contention_end+0xea/0x140 [ 219.636255][ T8254] ? __pfx_acpi_nfit_ctl+0x10/0x10 [ 219.638721][ T8254] ? __mutex_lock+0x1a6/0x9c0 [ 219.640904][ T8254] ? nd_ioctl+0xf89/0x18d0 [ 219.643203][ T8254] ? __pfx___mutex_lock+0x10/0x10 [ 219.645393][ T8254] nd_ioctl+0x13cb/0x18d0 [ 219.647241][ T8254] ? __pfx_acpi_nfit_clear_to_send+0x10/0x10 [ 219.649529][ T8254] ? __pfx_nd_ioctl+0x10/0x10 [ 219.651311][ T8254] ? __fget_files+0x256/0x400 [ 219.653083][ T8254] ? __pfx_bus_ioctl+0x10/0x10 [ 219.654892][ T8254] compat_ptr_ioctl+0x71/0xb0 [ 219.656666][ T8254] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 219.660520][ T8254] __do_compat_sys_ioctl+0x2c3/0x330 [ 219.662802][ T8254] __do_fast_syscall_32+0x73/0x120 [ 219.665028][ T8254] do_fast_syscall_32+0x32/0x80 [ 219.667372][ T8254] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.670071][ T8254] RIP: 0023:0xf7f40579 [ 219.671821][ T8254] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 219.680077][ T8254] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 219.683614][ T8254] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c008640a [ 219.687807][ T8254] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.692272][ T8254] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.695717][ T8254] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 219.700830][ T8254] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.704351][ T8254] [ 219.705763][ T8254] [ 219.706829][ T8254] The buggy address belongs to the virtual mapping at [ 219.706829][ T8254] [ffffc90003099000, ffffc9000309b000) created by: [ 219.706829][ T8254] nd_ioctl+0xf23/0x18d0 [ 219.714256][ T8254] [ 219.715328][ T8254] The buggy address belongs to the physical page: [ 219.718136][ T8254] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fa66 [ 219.721805][ T8254] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 219.724908][ T8254] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 219.728689][ T8254] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 219.732443][ T8254] page dumped because: kasan: bad access detected [ 219.735165][ T8254] page_owner tracks the page as allocated [ 219.737504][ T8254] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 8254, tgid 8253 (syz.0.759), ts 219569626232, free_ts 219557697869 [ 219.744998][ T8254] post_alloc_hook+0x2d1/0x350 [ 219.747095][ T8254] get_page_from_freelist+0x1351/0x2e50 [ 219.749483][ T8254] __alloc_pages_noprof+0x22b/0x2460 [ 219.751749][ T8254] alloc_pages_bulk_noprof+0x742/0x14f0 [ 219.753993][ T8254] alloc_pages_bulk_array_mempolicy_noprof+0x25b/0x1220 [ 219.756551][ T8254] __vmalloc_node_range_noprof+0x550/0x1520 [ 219.758778][ T8254] vmalloc_noprof+0x6b/0x90 [ 219.760500][ T8254] nd_ioctl+0xf23/0x18d0 [ 219.762172][ T8254] compat_ptr_ioctl+0x71/0xb0 [ 219.764008][ T8254] __do_compat_sys_ioctl+0x2c3/0x330 [ 219.766045][ T8254] __do_fast_syscall_32+0x73/0x120 [ 219.767967][ T8254] do_fast_syscall_32+0x32/0x80 [ 219.769818][ T8254] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.772198][ T8254] page last free pid 10 tgid 10 stack trace: [ 219.774700][ T8254] free_unref_page+0x64a/0xe40 [ 219.777664][ T8254] vfree+0x181/0x7a0 [ 219.779392][ T8254] bpf_prog_free_deferred+0x539/0x6f0 [ 219.781681][ T8254] process_one_work+0x958/0x1ad0 [ 219.783368][ T8252] orangefs_mount: mount request failed with -4 [ 219.783800][ T8254] worker_thread+0x6c8/0xf20 [ 219.788875][ T8254] kthread+0x2c1/0x3a0 [ 219.790608][ T8254] ret_from_fork+0x45/0x80 [ 219.792978][ T8254] ret_from_fork_asm+0x1a/0x30 [ 219.795023][ T8254] [ 219.796060][ T8254] Memory state around the buggy address: [ 219.798442][ T8254] ffffc90003098f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 219.801805][ T8254] ffffc90003098f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 219.805206][ T8254] >ffffc90003099000: 00 00 00 00 00 00 00 03 f8 f8 f8 f8 f8 f8 f8 f8 [ 219.808576][ T8254] ^ [ 219.811039][ T8254] ffffc90003099080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 219.814200][ T8254] ffffc90003099100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 219.817642][ T8254] ================================================================== [ 219.826152][ T8254] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 219.829308][ T8254] CPU: 0 UID: 0 PID: 8254 Comm: syz.0.759 Not tainted 6.11.0-rc2-syzkaller-00302-gcb2e5ee8e7a0 #0 [ 219.833773][ T8254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.838313][ T8254] Call Trace: [ 219.839736][ T8254] [ 219.841017][ T8254] dump_stack_lvl+0x3d/0x1f0 [ 219.843019][ T8254] panic+0x6f5/0x7a0 [ 219.844678][ T8254] ? __pfx_panic+0x10/0x10 [ 219.846637][ T8254] ? preempt_schedule_thunk+0x1a/0x30 [ 219.848901][ T8254] ? preempt_schedule_common+0x44/0xc0 [ 219.851217][ T8254] check_panic_on_warn+0xab/0xb0 [ 219.853398][ T8254] end_report+0x117/0x180 [ 219.855262][ T8254] kasan_report+0xe9/0x110 [ 219.857176][ T8254] ? acpi_nfit_ctl+0x199a/0x1ca0 [ 219.859299][ T8254] ? acpi_nfit_ctl+0x199a/0x1ca0 [ 219.861419][ T8254] acpi_nfit_ctl+0x199a/0x1ca0 [ 219.863499][ T8254] ? trace_contention_end+0xea/0x140 [ 219.865570][ T8254] ? __pfx_acpi_nfit_ctl+0x10/0x10 [ 219.867778][ T8254] ? __mutex_lock+0x1a6/0x9c0 [ 219.869788][ T8254] ? nd_ioctl+0xf89/0x18d0 [ 219.871687][ T8254] ? __pfx___mutex_lock+0x10/0x10 [ 219.873802][ T8254] nd_ioctl+0x13cb/0x18d0 [ 219.875648][ T8254] ? __pfx_acpi_nfit_clear_to_send+0x10/0x10 [ 219.878225][ T8254] ? __pfx_nd_ioctl+0x10/0x10 [ 219.880157][ T8254] ? __fget_files+0x256/0x400 [ 219.882194][ T8254] ? __pfx_bus_ioctl+0x10/0x10 [ 219.884243][ T8254] compat_ptr_ioctl+0x71/0xb0 [ 219.886263][ T8254] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 219.888530][ T8254] __do_compat_sys_ioctl+0x2c3/0x330 [ 219.890788][ T8254] __do_fast_syscall_32+0x73/0x120 [ 219.893000][ T8254] do_fast_syscall_32+0x32/0x80 [ 219.895128][ T8254] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.897894][ T8254] RIP: 0023:0xf7f40579 [ 219.899672][ T8254] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 219.907804][ T8254] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 219.911319][ T8254] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c008640a [ 219.914615][ T8254] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.917888][ T8254] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.921263][ T8254] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 219.924711][ T8254] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.928108][ T8254] [ 219.930073][ T8254] Kernel Offset: disabled [ 219.931912][ T8254] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:45:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fa7685 RDI=ffffffff9511e340 RBP=ffffffff9511e300 RSP=ffffc90002aa75d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000064 R14=ffffffff84fa7620 R15=0000000000000000 RIP=ffffffff84fa76af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c000000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3d48c4 CR3=0000000060ada000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000008cffdb RBX=0000000000000001 RCX=ffffffff8b067bd9 RDX=0000000000000000 RSI=ffffffff8b4cd060 RDI=ffffffff8bb04ca0 RBP=ffffed1002cf8910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed1005826fd9 R10=ffff88802c137ecb R11=0000000000000000 R12=0000000000000001 R13=ffff8880167c4880 R14=ffffffff90112a58 R15=0000000000000000 RIP=ffffffff8b068fcf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000030208ff8 CR3=000000005e4cc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88805cb91080 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000001 RDI=ffff88805cb91083 RBP=dffffc0000000000 RSP=ffffc900030174a8 R8 =0000000000000006 R9 =0000000000000f85 R10=0000000000000014 R11=ffff88801b756064 R12=23c743ffffffff81 R13=ffff88801b756069 R14=ffff88805cb91063 R15=ffff88805cb9107b RIP=ffffffff848951af RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe80e3d4d00 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555fbe203000 CR3=000000001c720000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=be5e4547be5e4547 be5e4547be5e4547 be5e4547be5e4547 be5e4547be5e4547 be5e4547be5e4547 be5e4547be5e4547 be5e4547be5e4547 be5e4547be5e4547 ZMM22=61fb4e1661fb4e16 61fb4e1661fb4e16 61fb4e1661fb4e16 61fb4e1661fb4e16 61fb4e1661fb4e16 61fb4e1661fb4e16 61fb4e1661fb4e16 61fb4e1661fb4e16 ZMM23=10895f6a10895f6a 10895f6a10895f6a 10895f6a10895f6a 10895f6a10895f6a 10895f6a10895f6a 10895f6a10895f6a 10895f6a10895f6a 10895f6a10895f6a ZMM24=fed39b31fed39b31 fed39b31fed39b31 fed39b31fed39b31 fed39b31fed39b31 fed39b31fed39b31 fed39b31fed39b31 fed39b31fed39b31 fed39b31fed39b31 ZMM25=0ae4057a0ae4057a 0ae4057a0ae4057a 0ae4057a0ae4057a 0ae4057a0ae4057a 0ae4057a0ae4057a 0ae4057a0ae4057a 0ae4057a0ae4057a 0ae4057a0ae4057a ZMM26=5ca0850a5ca0850a 5ca0850a5ca0850a 5ca0850a5ca0850a 5ca0850a5ca0850a 5ca0850a5ca0850a 5ca0850a5ca0850a 5ca0850a5ca0850a 5ca0850a5ca0850a ZMM27=fdf6d6aafdf6d6aa fdf6d6aafdf6d6aa fdf6d6aafdf6d6aa fdf6d6aafdf6d6aa fdf6d6aafdf6d6aa fdf6d6aafdf6d6aa fdf6d6aafdf6d6aa fdf6d6aafdf6d6aa ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ce060000ce060000 ce060000ce060000 ce060000ce060000 ce060000ce060000 ce060000ce060000 ce060000ce060000 ce060000ce060000 ce060000ce060000 info registers vcpu 3 CPU#3 RAX=0000000080000000 RBX=0000000000000000 RCX=ffffffff81cf27d0 RDX=ffff88801b758000 RSI=0000000000000000 RDI=0000000000000001 RBP=ffff888011870798 RSP=ffffc90000e3f718 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=ffff888012efa000 R14=0000000000000000 R15=ffffc90000e3f8f0 RIP=ffffffff818b22ec RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7485008 CR3=0000000019a2e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000