last executing test programs: 1m36.614789772s ago: executing program 1 (id=1685): socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) pipe(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 1m24.949722032s ago: executing program 1 (id=1685): socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) pipe(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 1m1.82949964s ago: executing program 1 (id=1685): socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) pipe(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 49.409364942s ago: executing program 1 (id=1685): socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) pipe(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 24.484033492s ago: executing program 1 (id=1685): socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) pipe(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 7.345737009s ago: executing program 0 (id=2577): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, &(0x7f0000000240)=0x7fff, r2, &(0x7f0000000280)=0x7, 0x2, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000009040), r4) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) sendmmsg$inet(r0, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4000c2, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r8, 0x3b82, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, &(0x7f00000000c0)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) 6.967675709s ago: executing program 4 (id=2580): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x10000}, 0x1c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'macvlan0\x00', 0x2}, 0x44) 6.85962115s ago: executing program 4 (id=2582): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r4, @ANYBLOB="0a00060008021100000100000600bd"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002080), 0x0) pselect6(0x40, &(0x7f00000007c0), &(0x7f0000000800)={0x7f}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x2, 'aead\x00', 0x0, 0x0, 'pcrypt(essiv(gcm_base(ctr(aes-aesni),ghash-generic),hmac(sha256-'}, 0x58) socket$nl_crypto(0x10, 0x3, 0x15) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'L'}]}]}}}]}]}], {0x14}}, 0xf0}}, 0x0) 6.557709225s ago: executing program 3 (id=2585): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000680)=[@in={0x2, 0x0, @multicast2}, @in={0x2, 0x0, @broadcast}], 0x20) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000380)="d0", 0x1}], 0x1}}], 0x1, 0x200000000000000) 6.409467466s ago: executing program 3 (id=2586): r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='dirsync\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3200000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c0002800800074000000000080003400000001608000140000000120800024000000000080004400000000020000180080001006e61740014000280080003400000000008000540000000000900010073797a30"], 0x150}}, 0x0) 6.292002835s ago: executing program 3 (id=2587): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr, @rand_addr, [0x0, 0xffffff00]}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [], [], '\x00', '\x00', {}, {}, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@ipv6={@rand_addr, @rand_addr, [], [0x0, 0xffffffff]}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 6.262974232s ago: executing program 3 (id=2588): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f0000000000)={0x1}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$smackfs_ptrace(r2, &(0x7f0000000400), 0x14) futex(0xffffffffffffffff, 0xc, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000c03c0fa1076417b42e0c68784cfabcd81632d25baabcad7ba8a1c81667a275b31ffe0dffe143d2f9cd3e6b16ac601037ad7a3d45930f2bae580a7513ce4b9c8bc3", @ANYRES16=r5, @ANYBLOB="00022cbd7000ffdbdf2510000000080006000500000008000500040000000800060000100000"], 0x2c}}, 0x24004081) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f00000005c0), 0x10) recvmmsg(r6, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000680)=0x66c0, 0x4) sendmsg$can_raw(r6, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r7}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0200000005000010"}, 0x10}}, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x400caeaa, &(0x7f0000000140)={0x28dac20a}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.919683494s ago: executing program 0 (id=2589): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="01040000000000000000000008000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa10000004db500000007010000f8ffffffb702000008000000b703000002da000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r1, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x8, 0x0, 0x0) syz_usb_connect(0x0, 0x3e, &(0x7f0000000f80)=ANY=[@ANYBLOB="1201000090a805406708129885400000000109022c0001000000000904"], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0xfca804a0, 0xd, 0x15, &(0x7f0000000080)="0c2ff637090000000300000000", &(0x7f0000000040)=""/21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.797067797s ago: executing program 1 (id=1685): socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) pipe(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 4.100005801s ago: executing program 0 (id=2590): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) sync() setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000000)=0x8, 0x1d) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x7f8324f3, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @mss], 0x2) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12141, 0x0) 3.897764208s ago: executing program 3 (id=2592): r0 = semget$private(0x0, 0x0, 0x406) semctl$GETPID(r0, 0x4, 0xb, &(0x7f0000000240)=""/226) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000403605a8a440000102030109021b00010100000009040000020701010009040002"], 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x10000011}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xa888}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c000280080001"], 0x34}}, 0x0) 3.896981686s ago: executing program 4 (id=2593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000500)={@void, @void, @eth={@broadcast, @random="83d40100000e", @val, {@ipv6={0x86dd, @udp={0x0, 0x6, 'MF(', 0xfdb1, 0x11, 0x0, @dev, @rand_addr=' \x01\x00', {[], {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}}}, 0xfdef) 3.885439251s ago: executing program 2 (id=2594): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="d40500002000000071101800000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af5"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x40c, 0x1f0, 0xc8, 0x8, 0x1f0, 0x5803, 0x344, 0x2e8, 0x2e8, 0x344, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0xff], 'geneve0\x00', 'geneve1\x00', {0x80}}, 0x0, 0x188, 0x1f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xe8}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x81, 0x8, 0x6, 'syz0\x00', 'syz1\x00', {0x33}}}}, {{@ipv6={@private0, @local, [0x0, 0xff000000], [0x0, 0xff, 0xffffff00, 0xffffff00], 'nr0\x00', 'macvlan0\x00', {0xff}, {}, 0x6, 0x6, 0x4, 0x4}, 0x0, 0xec, 0x154, 0x0, {}, [@common=@ipv6header={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x468) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x4c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1}, {0x98f}, @device_a, @broadcast, @initial, {0x6, 0x4}}, 0x0, 0x2, 0x3e, @val={0x10, 0x1, 0x4}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0xe4a0]}]}, 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180040003000800"], 0x44}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000002c0)={0x4ec89a9d, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x4, "99bdb1b0c7251b0894d3f0230a74bd056e3c10db57c3f7484d9ed4190dbc00f3"}) ioctl$SW_SYNC_IOC_INC(r6, 0xc0285700, &(0x7f0000000180)=0x8) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet(0x2, 0x6, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x28080, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x13f}}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r7}) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e8445a40ca0735a8fa21000000010902120001000060000904"], 0x0) 3.698560549s ago: executing program 0 (id=2595): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)="89509806d59f40", 0x0, 0xa7c}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000180)=@get={0x1, &(0x7f00000008c0)=""/253, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0xa, [@func, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x2, 0x4}, {0x6, 0x2}, {0x0, 0x4}, {0x6, 0x5}, {0xf, 0x1}, {0xc}]}, @var]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000004c0)={0x2, &(0x7f0000000380)=[{0x3f, 0xff, 0x8, 0xffffff3a}, {0x507, 0x8, 0x3, 0x3f}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2b, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63c}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGETCMAP(r7, 0x4604, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000080), 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setpgid(0xffffffffffffffff, 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) write$binfmt_script(r8, &(0x7f00000006c0)={'#! ', '', [{0x20, '/{/]\xd4#'}, {}, {}, {0x20, '\x00'}, {0x20, '@-*\\'}]}, 0x14) socket$netlink(0x10, 0x3, 0x0) 3.627957615s ago: executing program 4 (id=2596): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000100)=""/242, 0xf2}], 0x2}, 0x100) (fail_nth: 3) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000002c0)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.282661493s ago: executing program 4 (id=2597): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="93378e66cf9b48cb59638401fcd1730172853a9fa89527996042ab60ae29f9c1", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvfrom$rxrpc(r2, 0x0, 0xfda8, 0x0, 0x0, 0x0) 2.492767214s ago: executing program 0 (id=2598): socket$inet6_udp(0xa, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x58080, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async, rerun: 32) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x268002, 0x0) (async, rerun: 32) r2 = dup(r1) (rerun: 32) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) (async) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r6, &(0x7f00000055c0), 0x400023c, 0x302, 0x0) 2.298281352s ago: executing program 2 (id=2599): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r1 = accept(r0, &(0x7f0000000080)=@xdp, &(0x7f0000000000)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_newvlan={0x8c, 0x70, 0x20, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x18, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1b, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x0) write$binfmt_aout(r0, &(0x7f00000034c0)=ANY=[], 0x28) socket$inet6(0xa, 0x3, 0xff) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) (async) accept(r0, &(0x7f0000000080)=@xdp, &(0x7f0000000000)=0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_newvlan={0x8c, 0x70, 0x20, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x18, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1b, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) write$binfmt_aout(r0, &(0x7f00000034c0)=ANY=[], 0x28) (async) 2.242024815s ago: executing program 0 (id=2600): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$packet(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16=r1], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) (fail_nth: 9) 2.192181692s ago: executing program 2 (id=2601): r0 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48, 0x5ac, 0x259, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xa183, 0x20, 0x1, {0x22, 0x2}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x6, 0x8, 0xf1}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020030430600000000020010902240001000000f91ac20000090400000103000000092100400001220224a9cef0dedb"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) (async) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) (async) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000009500f5ff9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) inotify_init1(0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r3) (async, rerun: 64) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) (async, rerun: 64) syz_open_dev$MSR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) setfsuid(0xee01) (async) setresuid(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x5a3881, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xa0000000, 0x0, "000e00000000000000000900"}) (async, rerun: 64) r5 = dup(r4) (rerun: 64) write$UHID_INPUT(r5, &(0x7f0000002080)={0x18, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="40151900dbdc92428e196fa5d5e11fa62ff8a90000cd0181189faae008d1a9223c5dc10400a222473b5d506bdd3b1fe0d23eb8f94cca3a2407bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0ee6bee017fd97ff90b049493abf1d9151ba876c1e40085163c9177317db97f499aad9f1287434a282f48e5ede3971c5724698f995fc442a318fefa9ba7ac7aca33f8d599d06d8d768b7cf124084b21bc58db8f463d62e06b76ec3a837efec6a254425fd5444493ad7e43afcd1b52f4c755b5734aa44de4843d8bc203248048c911ad67937528cfc27c494"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000d000000246c2f97ff767a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) timer_create(0x6, &(0x7f0000000180)={0x0, 0x26, 0x1}, &(0x7f0000000200)=0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r6, 0x0, &(0x7f0000000280)={{}, {r7, r8+10000000}}, 0x0) 1.500156667s ago: executing program 3 (id=2602): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xd80, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x1, 0x2800, 0x440, 0xd1, 0xc, 0x28, {0x8, 0xffffffff}, 0xd0, 0x9}}) 1.322460779s ago: executing program 4 (id=2603): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r4, @ANYBLOB="0a00060008021100000100000600bd"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002080), 0x0) pselect6(0x40, &(0x7f00000007c0), &(0x7f0000000800)={0x7f}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x2, 'aead\x00', 0x0, 0x0, 'pcrypt(essiv(gcm_base(ctr(aes-aesni),ghash-generic),hmac(sha256-'}, 0x58) socket$nl_crypto(0x10, 0x3, 0x15) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'L'}]}]}}}]}]}], {0x14}}, 0xf0}}, 0x0) 754.982231ms ago: executing program 2 (id=2604): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0xfec, r2, 0x6, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x19}}}}, [@NL80211_PMSR_ATTR_PEERS={0x818, 0x5, 0x0, 0x1, [{0x174, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x473}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}]}, {0xe4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x211}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x240}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26b}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x5bc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x178, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x11c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5b}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe0f4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9cf9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc45}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x382}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x7ac, 0x5, 0x0, 0x1, [{0x11c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}]}, {0x300, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffd}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfc01}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x5c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}, {0x38c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x94, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x274, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc79}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x188, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xbd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x74, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}]}]}]}]}]}]}, 0xfec}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) 588.924148ms ago: executing program 2 (id=2605): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setitimer(0x2, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x800, 0xffffffffffdfffff}, 0x0) syz_io_uring_setup(0x1aaf, &(0x7f00000002c0)={0x0, 0xd82a, 0x80, 0x10000000}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f00000000c0)=0x81, 0x0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a0108000000000000026b000000000000030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080003400000000b0800024000000002140000001100010000000000000000000000000a"], 0xd8}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000200)) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) accept(r4, &(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, &(0x7f0000000240)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="14010000", @ANYRES16=r7, @ANYBLOB="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"], 0x114}}, 0x4) r8 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 0s ago: executing program 2 (id=2606): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000180)=@framed={{}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='timer_start\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) (fail_nth: 9) kernel console output (not intermixed with test programs): T13904] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.2401'. [ 640.607695][T13743] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.625686][ T7188] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.632872][ T7188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.639048][ T970] m920x_read = error: -19 [ 640.644437][ T970] dvb-usb: error -19 while querying for an remote control event. [ 640.666371][ T7188] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.673550][ T7188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.028519][ T970] m920x_read = error: -19 [ 641.041948][ T970] dvb-usb: error -19 while querying for an remote control event. [ 641.228470][ T970] m920x_read = error: -19 [ 641.245353][ T970] dvb-usb: error -19 while querying for an remote control event. [ 641.430434][ T5910] m920x_read = error: -19 [ 641.446907][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 641.698897][ T5910] m920x_read = error: -19 [ 641.703287][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 642.009728][ T5910] m920x_read = error: -19 [ 642.014582][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 642.023016][T13927] netlink: 'syz.4.2406': attribute type 9 has an invalid length. [ 642.031049][T13927] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2406'. [ 642.114702][T13930] qnx6: unable to read the first superblock [ 642.226295][T13743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.307863][T13935] FAULT_INJECTION: forcing a failure. [ 642.307863][T13935] name failslab, interval 1, probability 0, space 0, times 0 [ 642.346957][T13935] CPU: 1 UID: 0 PID: 13935 Comm: syz.0.2408 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 642.357778][T13935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 642.367848][T13935] Call Trace: [ 642.371140][T13935] [ 642.374080][T13935] dump_stack_lvl+0x241/0x360 [ 642.378783][T13935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.383996][T13935] ? __pfx__printk+0x10/0x10 [ 642.388608][T13935] ? __kmalloc_noprof+0xb0/0x400 [ 642.393563][T13935] ? __pfx___might_resched+0x10/0x10 [ 642.398881][T13935] should_fail_ex+0x3b0/0x4e0 [ 642.403573][T13935] ? sock_kmalloc+0xd7/0x160 [ 642.408190][T13935] should_failslab+0xac/0x100 [ 642.412884][T13935] ? sock_kmalloc+0xd7/0x160 [ 642.417488][T13935] __kmalloc_noprof+0xd8/0x400 [ 642.422276][T13935] sock_kmalloc+0xd7/0x160 [ 642.426730][T13935] af_alg_alloc_areq+0x90/0x260 [ 642.429156][ T970] m920x_read = error: -19 [ 642.431580][T13935] skcipher_recvmsg+0x382/0x1230 [ 642.435900][ T970] dvb-usb: error -19 while querying for an remote control event. [ 642.440822][T13935] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 642.440850][T13935] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 642.440873][T13935] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 642.440895][T13935] sock_recvmsg+0x22f/0x280 [ 642.469150][T13935] ____sys_recvmsg+0x1c6/0x480 [ 642.473961][T13935] ? __pfx_____sys_recvmsg+0x10/0x10 [ 642.479294][T13935] __sys_recvmsg+0x2e6/0x3d0 [ 642.483855][T13743] veth0_vlan: entered promiscuous mode [ 642.483897][T13935] ? __pfx___sys_recvmsg+0x10/0x10 [ 642.494466][T13935] ? __mutex_unlock_slowpath+0x21d/0x750 [ 642.500158][T13935] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 642.504342][T13743] veth1_vlan: entered promiscuous mode [ 642.506497][T13935] ? do_syscall_64+0x100/0x230 [ 642.516729][T13935] ? do_syscall_64+0xb6/0x230 [ 642.521438][T13935] do_syscall_64+0xf3/0x230 [ 642.525975][T13935] ? clear_bhb_loop+0x35/0x90 [ 642.530681][T13935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.536607][T13935] RIP: 0033:0x7f031257e719 [ 642.541047][T13935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.550697][T13743] veth0_macvtap: entered promiscuous mode [ 642.560657][T13935] RSP: 002b:00007f03132ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 642.560686][T13935] RAX: ffffffffffffffda RBX: 00007f0312735f80 RCX: 00007f031257e719 [ 642.560700][T13935] RDX: 0000000000000100 RSI: 0000000020001500 RDI: 0000000000000004 [ 642.560712][T13935] RBP: 00007f03132ac090 R08: 0000000000000000 R09: 0000000000000000 [ 642.560726][T13935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.582357][T13743] veth1_macvtap: entered promiscuous mode [ 642.582793][T13935] R13: 0000000000000000 R14: 00007f0312735f80 R15: 00007ffd693351b8 [ 642.598791][ T5910] m920x_read = error: -19 [ 642.606734][T13935] [ 642.622070][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 642.624856][ C1] vkms_vblank_simulate: vblank timer overrun [ 642.635578][T13743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.778876][ T5910] m920x_read = error: -19 [ 642.783271][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 642.815738][T13743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.841083][T13743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.866631][T13743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.927484][T13743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.963186][T13743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.054468][T13945] fuse: Bad value for 'fd' [ 643.079801][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 643.079842][ T29] audit: type=1326 audit(1729988515.188:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13940 comm="syz.0.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031257e719 code=0x7ffc0000 [ 643.286189][T13743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.403522][ T29] audit: type=1326 audit(1729988515.188:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13940 comm="syz.0.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031257e719 code=0x7ffc0000 [ 643.514899][T13743] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.539673][ T5910] m920x_read = error: -19 [ 643.544071][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 643.588843][T13743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.608815][ T29] audit: type=1326 audit(1729988515.188:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13940 comm="syz.0.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f031257e719 code=0x7ffc0000 [ 643.635129][T13743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.691203][T13743] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.694538][ T29] audit: type=1326 audit(1729988515.188:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13940 comm="syz.0.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031257e719 code=0x7ffc0000 [ 643.721653][ T5910] m920x_read = error: -19 [ 643.721690][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 643.735005][T13743] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.752966][T13743] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.761768][T13951] FAULT_INJECTION: forcing a failure. [ 643.761768][T13951] name failslab, interval 1, probability 0, space 0, times 0 [ 643.775275][T13743] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.795848][T13951] CPU: 1 UID: 0 PID: 13951 Comm: syz.0.2414 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 643.806661][T13951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 643.816741][T13951] Call Trace: [ 643.820037][T13951] [ 643.822987][T13951] dump_stack_lvl+0x241/0x360 [ 643.827696][T13951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 643.832922][T13951] ? __pfx__printk+0x10/0x10 [ 643.837538][T13951] ? __kmalloc_noprof+0xb0/0x400 [ 643.842503][T13951] ? __pfx___might_resched+0x10/0x10 [ 643.847822][T13951] should_fail_ex+0x3b0/0x4e0 [ 643.852520][T13951] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 643.858773][T13951] should_failslab+0xac/0x100 [ 643.863456][T13951] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 643.869704][T13951] __kmalloc_noprof+0xd8/0x400 [ 643.874471][T13951] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 643.880543][T13951] genl_rcv_msg+0x802/0xec0 [ 643.885045][T13951] ? mark_lock+0x9a/0x360 [ 643.889376][T13951] ? __pfx_genl_rcv_msg+0x10/0x10 [ 643.894420][T13951] ? __pfx_lock_acquire+0x10/0x10 [ 643.899467][T13951] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 643.904839][T13951] ? __pfx_nl80211_connect+0x10/0x10 [ 643.910125][T13951] ? __pfx_nl80211_post_doit+0x10/0x10 [ 643.915586][T13951] ? __pfx___might_resched+0x10/0x10 [ 643.920877][T13951] netlink_rcv_skb+0x1e3/0x430 [ 643.925639][T13951] ? __pfx_genl_rcv_msg+0x10/0x10 [ 643.930666][T13951] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 643.935957][T13951] ? __netlink_deliver_tap+0x77e/0x7c0 [ 643.941424][T13951] genl_rcv+0x28/0x40 [ 643.945413][T13951] netlink_unicast+0x7f6/0x990 [ 643.950207][T13951] ? __pfx_netlink_unicast+0x10/0x10 [ 643.955505][T13951] ? __virt_addr_valid+0x183/0x530 [ 643.960632][T13951] ? __check_object_size+0x48e/0x900 [ 643.965924][T13951] netlink_sendmsg+0x8e4/0xcb0 [ 643.970725][T13951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.976029][T13951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.981314][T13951] __sock_sendmsg+0x221/0x270 [ 643.986019][T13951] ____sys_sendmsg+0x52a/0x7e0 [ 643.990806][T13951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.996105][T13951] __sys_sendmsg+0x292/0x380 [ 644.000698][T13951] ? __pfx___sys_sendmsg+0x10/0x10 [ 644.005816][T13951] ? __pfx_vfs_write+0x10/0x10 [ 644.010598][T13951] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 644.016928][T13951] ? do_syscall_64+0x100/0x230 [ 644.021692][T13951] ? do_syscall_64+0xb6/0x230 [ 644.026367][T13951] do_syscall_64+0xf3/0x230 [ 644.030875][T13951] ? clear_bhb_loop+0x35/0x90 [ 644.035550][T13951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.041440][T13951] RIP: 0033:0x7f031257e719 [ 644.045852][T13951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.065455][T13951] RSP: 002b:00007f03132ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.073872][T13951] RAX: ffffffffffffffda RBX: 00007f0312735f80 RCX: 00007f031257e719 [ 644.081841][T13951] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 644.089806][T13951] RBP: 00007f03132ac090 R08: 0000000000000000 R09: 0000000000000000 [ 644.097769][T13951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.105733][T13951] R13: 0000000000000000 R14: 00007f0312735f80 R15: 00007ffd693351b8 [ 644.113712][T13951] [ 644.117006][ T5910] m920x_read = error: -19 [ 644.121464][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 644.133493][ T29] audit: type=1326 audit(1729988515.188:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13940 comm="syz.0.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031257e719 code=0x7ffc0000 [ 644.162371][T13956] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2410'. [ 644.184720][ T29] audit: type=1326 audit(1729988515.188:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13940 comm="syz.0.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f031257d15c code=0x7ffc0000 [ 644.239023][ T29] audit: type=1326 audit(1729988515.188:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13940 comm="syz.0.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031257e719 code=0x7ffc0000 [ 644.295387][ T29] audit: type=1326 audit(1729988515.188:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13940 comm="syz.0.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031257e719 code=0x7ffc0000 [ 644.295991][ T5910] m920x_read = error: -19 [ 644.396695][T13963] FAULT_INJECTION: forcing a failure. [ 644.396695][T13963] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 644.398916][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 644.410260][ T29] audit: type=1326 audit(1729988515.188:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13940 comm="syz.0.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f031257e719 code=0x7ffc0000 [ 644.440085][T13963] CPU: 0 UID: 0 PID: 13963 Comm: syz.0.2416 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 644.450894][T13963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 644.460951][T13963] Call Trace: [ 644.460963][T13963] [ 644.460972][T13963] dump_stack_lvl+0x241/0x360 [ 644.461004][T13963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.477083][T13963] ? __pfx__printk+0x10/0x10 [ 644.481699][T13963] should_fail_ex+0x3b0/0x4e0 [ 644.486378][T13963] prepare_alloc_pages+0x1da/0x5b0 [ 644.491499][T13963] __alloc_pages_noprof+0x16f/0x710 [ 644.496708][T13963] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 644.502450][T13963] alloc_pages_mpol_noprof+0x3e8/0x680 [ 644.507919][T13963] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 644.513907][T13963] ? alloc_pages_noprof+0xef/0x170 [ 644.519014][T13963] af_alg_sendmsg+0x1420/0x2650 [ 644.523876][T13963] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 644.529071][T13963] ? __fget_files+0x29/0x470 [ 644.533670][T13963] ? __might_fault+0xaa/0x120 [ 644.538348][T13963] ? skcipher_sendmsg+0x28/0xf0 [ 644.543204][T13963] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 644.548575][T13963] __sock_sendmsg+0x221/0x270 [ 644.553261][T13963] __sys_sendto+0x39b/0x4f0 [ 644.557768][T13963] ? __pfx___sys_sendto+0x10/0x10 [ 644.562849][T13963] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 644.568835][T13963] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 644.575171][T13963] ? exc_page_fault+0x590/0x8c0 [ 644.580021][T13963] __x64_sys_sendto+0xde/0x100 [ 644.584785][T13963] do_syscall_64+0xf3/0x230 [ 644.589291][T13963] ? clear_bhb_loop+0x35/0x90 [ 644.593972][T13963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.599860][T13963] RIP: 0033:0x7f03125805ac [ 644.604272][T13963] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 644.623875][T13963] RSP: 002b:00007f03132aaec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 644.632288][T13963] RAX: ffffffffffffffda RBX: 00007f03132aafc0 RCX: 00007f03125805ac [ 644.640256][T13963] RDX: 0000000000000020 RSI: 00007f03132ab010 RDI: 0000000000000004 [ 644.648224][T13963] RBP: 0000000000000000 R08: 00007f03132aaf14 R09: 000000000000000c [ 644.656189][T13963] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 644.664154][T13963] R13: 00007f03132aaf68 R14: 00007f03132ab010 R15: 0000000000000000 [ 644.672133][T13963] [ 644.675187][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.702775][ T29] audit: type=1326 audit(1729988515.198:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13940 comm="syz.0.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031257e719 code=0x7ffc0000 [ 644.703174][ T184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.738314][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.738758][ T184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.768706][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.789324][ T5910] m920x_read = error: -19 [ 644.805862][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 645.081627][ T5882] m920x_read = error: -19 [ 645.086302][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 645.249225][ T5882] m920x_read = error: -19 [ 645.254007][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 645.429012][ T5882] m920x_read = error: -19 [ 645.433794][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 645.608972][T11644] m920x_read = error: -19 [ 645.613668][T11644] dvb-usb: error -19 while querying for an remote control event. [ 645.628895][ T5910] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 645.822810][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 645.828178][T11644] m920x_read = error: -19 [ 645.834336][T11644] dvb-usb: error -19 while querying for an remote control event. [ 645.847421][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.888941][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.915848][ T5910] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 645.953460][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.991318][ T5910] usb 5-1: config 0 descriptor?? [ 646.016503][ T5910] hub 5-1:0.0: USB hub found [ 646.048857][ T5882] m920x_read = error: -19 [ 646.053479][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 646.217303][ T5910] hub 5-1:0.0: 1 port detected [ 646.239036][ T5882] m920x_read = error: -19 [ 646.243547][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 646.419674][ T5882] m920x_read = error: -19 [ 646.426356][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 646.619634][ T5882] m920x_read = error: -19 [ 646.624679][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 646.809738][ T5910] m920x_read = error: -19 [ 646.814298][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 646.835784][ T5882] hub 5-1:0.0: activate --> -90 [ 647.135547][ T5910] m920x_read = error: -19 [ 647.142108][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 647.145782][T13998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2428'. [ 647.159416][ T5882] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 647.176539][T13998] usb usb9: usbfs: process 13998 (syz.3.2428) did not claim interface 0 before use [ 647.194683][T13998] pimreg: entered allmulticast mode [ 647.205516][T13998] pimreg: left allmulticast mode [ 647.212872][T13998] dvmrp1: left allmulticast mode [ 647.292110][T14002] tmpfs: Bad value for 'mpol' [ 647.309700][ T5882] m920x_read = error: -19 [ 647.314126][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 647.479008][T11644] m920x_read = error: -19 [ 647.483387][T11644] dvb-usb: error -19 while querying for an remote control event. [ 648.035439][ T6607] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.379802][ T6607] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.467757][ T5882] m920x_read = error: -19 [ 648.472274][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 648.479352][T11055] usb 5-1: USB disconnect, device number 48 [ 648.527074][ T6607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.609576][ T5910] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 648.617952][ T6607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.652302][ T5882] m920x_read = error: -19 [ 648.656691][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 648.701783][ T6607] bridge_slave_1: left allmulticast mode [ 648.707442][ T6607] bridge_slave_1: left promiscuous mode [ 648.714052][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.723721][ T6607] bridge_slave_0: left allmulticast mode [ 648.729801][ T6607] bridge_slave_0: left promiscuous mode [ 648.737604][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.780450][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.791039][ T5910] usb 1-1: New USB device found, idVendor=093a, idProduct=2620, bcdDevice=7e.68 [ 648.800285][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.810381][ T5910] usb 1-1: config 0 descriptor?? [ 648.817863][ T5910] gspca_main: gspca_pac7302-2.14.0 probing 093a:2620 [ 648.825059][ T5882] m920x_read = error: -19 [ 648.831562][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 648.998977][ T5882] m920x_read = error: -19 [ 649.003391][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 649.157741][ T6607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.170699][ T5882] m920x_read = error: -19 [ 649.175076][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 649.183766][ T6607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.198241][ T6607] bond0 (unregistering): Released all slaves [ 649.339088][T11644] m920x_read = error: -19 [ 649.344214][T11644] dvb-usb: error -19 while querying for an remote control event. [ 649.436677][ T6607] hsr_slave_0: left promiscuous mode [ 649.442928][ T6607] hsr_slave_1: left promiscuous mode [ 649.449322][ T6607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.456732][ T6607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.464685][ T6607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.472451][ T6607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.494700][ T6607] veth1_macvtap: left promiscuous mode [ 649.500304][ T6607] veth0_macvtap: left promiscuous mode [ 649.505907][ T6607] veth1_vlan: left promiscuous mode [ 649.508928][T11644] m920x_read = error: -19 [ 649.511239][ T6607] veth0_vlan: left promiscuous mode [ 649.520073][T11644] dvb-usb: error -19 while querying for an remote control event. [ 649.690212][T11644] m920x_read = error: -19 [ 649.694672][T11644] dvb-usb: error -19 while querying for an remote control event. [ 649.709818][T14022] FAULT_INJECTION: forcing a failure. [ 649.709818][T14022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.710485][T14024] dccp_invalid_packet: P.Data Offset(0) too small [ 649.762821][T14022] CPU: 0 UID: 0 PID: 14022 Comm: syz.4.2437 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 649.773652][T14022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 649.783740][T14022] Call Trace: [ 649.787045][T14022] [ 649.790001][T14022] dump_stack_lvl+0x241/0x360 [ 649.794716][T14022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.799947][T14022] ? __pfx__printk+0x10/0x10 [ 649.804568][T14022] ? snprintf+0xda/0x120 [ 649.808838][T14022] should_fail_ex+0x3b0/0x4e0 [ 649.813547][T14022] _copy_to_user+0x31/0xb0 [ 649.817995][T14022] simple_read_from_buffer+0xca/0x150 [ 649.823404][T14022] proc_fail_nth_read+0x1e9/0x250 [ 649.828469][T14022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 649.834049][T14022] ? rw_verify_area+0x568/0x6f0 [ 649.838983][T14022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 649.844558][T14022] vfs_read+0x1fc/0xb70 [ 649.848747][T14022] ? fdget_pos+0x24e/0x320 [ 649.853196][T14022] ? __pfx_vfs_read+0x10/0x10 [ 649.857904][T14022] ? __fget_files+0x3f3/0x470 [ 649.862618][T14022] ? fdget_pos+0x24e/0x320 [ 649.867069][T14022] ksys_read+0x183/0x2b0 [ 649.871343][T14022] ? __pfx_ksys_read+0x10/0x10 [ 649.876136][T14022] ? do_syscall_64+0x100/0x230 [ 649.880931][T14022] ? do_syscall_64+0xb6/0x230 [ 649.885640][T14022] do_syscall_64+0xf3/0x230 [ 649.890172][T14022] ? clear_bhb_loop+0x35/0x90 [ 649.894882][T14022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.900795][T14022] RIP: 0033:0x7f8e24f7d15c [ 649.905232][T14022] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 649.924883][T14022] RSP: 002b:00007f8e25df1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 649.933336][T14022] RAX: ffffffffffffffda RBX: 00007f8e25135f80 RCX: 00007f8e24f7d15c [ 649.941330][T14022] RDX: 000000000000000f RSI: 00007f8e25df10a0 RDI: 0000000000000005 [ 649.949325][T14022] RBP: 00007f8e25df1090 R08: 0000000000000000 R09: 0000000000000000 [ 649.957319][T14022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.965319][T14022] R13: 0000000000000000 R14: 00007f8e25135f80 R15: 00007ffc635d2638 [ 649.973330][T14022] [ 650.048950][T11644] m920x_read = error: -19 [ 650.053350][T11644] dvb-usb: error -19 while querying for an remote control event. [ 650.128765][ T5910] gspca_pac7302: reg_w() failed i: 78 v: 40 error -110 [ 650.135735][ T5910] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 650.196976][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 650.221356][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 650.229497][T11644] m920x_read = error: -19 [ 650.233893][T11644] dvb-usb: error -19 while querying for an remote control event. [ 650.242037][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 650.254888][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 650.262682][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 650.291086][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 650.403903][T11644] m920x_read = error: -19 [ 650.416065][T11644] dvb-usb: error -19 while querying for an remote control event. [ 650.599504][T11644] m920x_read = error: -19 [ 650.609293][T11644] dvb-usb: error -19 while querying for an remote control event. [ 650.856656][T11644] m920x_read = error: -19 [ 650.872069][T11644] dvb-usb: error -19 while querying for an remote control event. [ 650.915257][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 650.915274][ T29] audit: type=1326 audit(1729988523.038:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14020 comm="syz.3.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ea37e719 code=0x7ffc0000 [ 650.961692][ T29] audit: type=1326 audit(1729988523.058:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14020 comm="syz.3.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ea37e719 code=0x7ffc0000 [ 650.987984][ T29] audit: type=1326 audit(1729988523.078:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14020 comm="syz.3.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f23ea37e719 code=0x7ffc0000 [ 651.067713][ T29] audit: type=1326 audit(1729988523.078:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14020 comm="syz.3.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ea37e719 code=0x7ffc0000 [ 651.095109][T14040] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2438'. [ 651.098806][T11644] m920x_read = error: -19 [ 651.108939][T11644] dvb-usb: error -19 while querying for an remote control event. [ 651.126983][ T29] audit: type=1326 audit(1729988523.078:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14020 comm="syz.3.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ea37e719 code=0x7ffc0000 [ 651.168835][ T29] audit: type=1326 audit(1729988523.078:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14020 comm="syz.3.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23ea37e719 code=0x7ffc0000 [ 651.198892][ T29] audit: type=1326 audit(1729988523.078:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14020 comm="syz.3.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ea37e719 code=0x7ffc0000 [ 651.239044][ T29] audit: type=1326 audit(1729988523.078:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14020 comm="syz.3.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ea37e719 code=0x7ffc0000 [ 651.268799][T11644] m920x_read = error: -19 [ 651.273373][T11644] dvb-usb: error -19 while querying for an remote control event. [ 651.303841][ T29] audit: type=1326 audit(1729988523.078:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14020 comm="syz.3.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23ea380637 code=0x7ffc0000 [ 651.342960][ T29] audit: type=1326 audit(1729988523.078:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14020 comm="syz.3.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f23ea3805ac code=0x7ffc0000 [ 651.448945][T11644] m920x_read = error: -19 [ 651.453346][T11644] dvb-usb: error -19 while querying for an remote control event. [ 651.618900][T11644] m920x_read = error: -19 [ 651.623350][T11644] dvb-usb: error -19 while querying for an remote control event. [ 651.664625][ T6607] team0 (unregistering): Port device team_slave_1 removed [ 651.744318][ T6607] team0 (unregistering): Port device team_slave_0 removed [ 651.798862][T11644] m920x_read = error: -19 [ 651.803270][T11644] dvb-usb: error -19 while querying for an remote control event. [ 651.984315][T11644] m920x_read = error: -19 [ 651.988769][T11644] dvb-usb: error -19 while querying for an remote control event. [ 652.154178][T11644] m920x_read = error: -19 [ 652.158566][T11644] dvb-usb: error -19 while querying for an remote control event. [ 652.259090][ T3068] usb 1-1: USB disconnect, device number 47 [ 652.318893][T11644] m920x_read = error: -19 [ 652.323298][T11644] dvb-usb: error -19 while querying for an remote control event. [ 652.357602][ T5839] Bluetooth: hci2: command tx timeout [ 652.499252][T11644] m920x_read = error: -19 [ 652.508545][T11644] dvb-usb: error -19 while querying for an remote control event. [ 652.704383][T11644] m920x_read = error: -19 [ 652.714002][T11644] dvb-usb: error -19 while querying for an remote control event. [ 652.896077][ T5910] m920x_read = error: -19 [ 652.901090][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 653.119414][T11644] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 653.129054][ T5910] m920x_read = error: -19 [ 653.131802][T14027] chnl_net:caif_netlink_parms(): no params data found [ 653.133947][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 653.270658][T11644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 653.285209][T11644] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 653.296045][T11644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.304632][ T5910] m920x_read = error: -19 [ 653.313353][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 653.325810][T14027] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.326014][T11644] usb 1-1: Product: syz [ 653.334522][T14027] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.337542][T11644] usb 1-1: Manufacturer: syz [ 653.345065][T14027] bridge_slave_0: entered allmulticast mode [ 653.349557][T11644] usb 1-1: SerialNumber: syz [ 653.356111][T14027] bridge_slave_0: entered promiscuous mode [ 653.361788][T11644] usb 1-1: config 0 descriptor?? [ 653.367913][T14027] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.375155][T11644] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input32 [ 653.377918][T14027] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.395059][T14027] bridge_slave_1: entered allmulticast mode [ 653.402433][T14027] bridge_slave_1: entered promiscuous mode [ 653.566915][ T5910] m920x_read = error: -19 [ 653.571840][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 653.603966][ T3068] usb 1-1: USB disconnect, device number 48 [ 653.611598][T14027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.907618][T14027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.186955][T14027] team0: Port device team_slave_0 added [ 654.230682][T14027] team0: Port device team_slave_1 added [ 654.375897][T14027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.393280][T14080] FAULT_INJECTION: forcing a failure. [ 654.393280][T14080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.419628][T14027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.427007][ T5910] m920x_read = error: -19 [ 654.450167][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 654.464862][ T5839] Bluetooth: hci2: command tx timeout [ 654.542169][T14080] CPU: 0 UID: 0 PID: 14080 Comm: syz.4.2449 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 654.552252][T14027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.552958][T14080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 654.565469][T14027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.573476][T14080] Call Trace: [ 654.573487][T14080] [ 654.573496][T14080] dump_stack_lvl+0x241/0x360 [ 654.580523][T14027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.583689][T14080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.586601][T14027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.591254][T14080] ? __pfx__printk+0x10/0x10 [ 654.591279][T14080] ? __pfx_lock_release+0x10/0x10 [ 654.591313][T14080] should_fail_ex+0x3b0/0x4e0 [ 654.647272][T14080] _copy_from_iter+0x4ae/0x1e70 [ 654.652160][T14080] ? __pfx__copy_from_iter+0x10/0x10 [ 654.657442][T14080] ? __pfx__copy_from_iter+0x10/0x10 [ 654.662735][T14080] ? __virt_addr_valid+0x183/0x530 [ 654.667850][T14080] ? __virt_addr_valid+0x183/0x530 [ 654.672957][T14080] ? __virt_addr_valid+0x45f/0x530 [ 654.678063][T14080] ? page_copy_sane+0x46/0x260 [ 654.682828][T14080] copy_page_from_iter+0x7a/0x100 [ 654.687852][T14080] skb_copy_datagram_from_iter+0x2d9/0x6a0 [ 654.693666][T14080] packet_sendmsg+0x435c/0x6860 [ 654.698524][T14080] ? __pfx_lock_release+0x10/0x10 [ 654.703581][T14080] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 654.709301][T14080] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 654.715722][T14080] ? __pfx_packet_sendmsg+0x10/0x10 [ 654.720927][T14080] ? __import_iovec+0x3a8/0x870 [ 654.725782][T14080] ? __pfx_packet_sendmsg+0x10/0x10 [ 654.730978][T14080] __sock_sendmsg+0x221/0x270 [ 654.735660][T14080] ____sys_sendmsg+0x52a/0x7e0 [ 654.740426][T14080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 654.745722][T14080] __sys_sendmsg+0x292/0x380 [ 654.750319][T14080] ? __pfx___sys_sendmsg+0x10/0x10 [ 654.755437][T14080] ? __pfx_vfs_write+0x10/0x10 [ 654.760224][T14080] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 654.766552][T14080] ? do_syscall_64+0x100/0x230 [ 654.771320][T14080] ? do_syscall_64+0xb6/0x230 [ 654.775993][T14080] do_syscall_64+0xf3/0x230 [ 654.780494][T14080] ? clear_bhb_loop+0x35/0x90 [ 654.785195][T14080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.791103][T14080] RIP: 0033:0x7f8e24f7e719 [ 654.795528][T14080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.815138][T14080] RSP: 002b:00007f8e25df1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.823553][T14080] RAX: ffffffffffffffda RBX: 00007f8e25135f80 RCX: 00007f8e24f7e719 [ 654.831523][T14080] RDX: 9cdc2384056b48b8 RSI: 0000000020000080 RDI: 0000000000000003 [ 654.839491][T14080] RBP: 00007f8e25df1090 R08: 0000000000000000 R09: 0000000000000000 [ 654.847458][T14080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.855426][T14080] R13: 0000000000000000 R14: 00007f8e25135f80 R15: 00007ffc635d2638 [ 654.863408][T14080] [ 655.021084][ T5910] m920x_read = error: -19 [ 655.081916][T14027] hsr_slave_0: entered promiscuous mode [ 655.081937][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 655.121096][T14027] hsr_slave_1: entered promiscuous mode [ 655.219067][T14027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 655.227102][T14027] Cannot create hsr debugfs directory [ 655.348804][T11644] m920x_read = error: -19 [ 655.354212][T11644] dvb-usb: error -19 while querying for an remote control event. [ 655.460805][T14092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2454'. [ 655.490599][T14092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2454'. [ 655.518856][ T5882] m920x_read = error: -19 [ 655.523243][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 655.609197][ T3068] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 655.658920][ T3068] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 655.678908][T11644] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 655.688897][ T5882] m920x_read = error: -19 [ 655.689077][T11055] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 655.693252][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 655.709064][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 655.770414][ T5882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 655.830594][T11644] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 655.838946][T11644] usb 1-1: config 0 has no interface number 0 [ 655.879158][T11644] usb 1-1: New USB device found, idVendor=093a, idProduct=2627, bcdDevice=c9.c0 [ 655.888237][T11644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.896536][ T5882] m920x_read = error: -19 [ 655.903859][T14098] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2452'. [ 655.923050][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 655.959884][T11644] usb 1-1: Product: syz [ 655.978796][T11644] usb 1-1: Manufacturer: syz [ 655.984589][T11644] usb 1-1: SerialNumber: syz [ 656.095271][T11644] usb 1-1: config 0 descriptor?? [ 656.109072][ T8] m920x_read = error: -19 [ 656.113753][ T8] dvb-usb: error -19 while querying for an remote control event. [ 656.159321][ T970] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 656.172947][T11644] gspca_main: gspca_pac7302-2.14.0 probing 093a:2627 [ 656.212484][T11055] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 656.221968][T11055] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.232877][T11055] usb 4-1: config 0 descriptor?? [ 656.239914][ T970] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 656.252396][T11055] gspca_main: spca508-2.14.0 probing 8086:0110 [ 656.258973][ T5882] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 656.329834][ T970] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 656.348168][ T970] m920x_read = error: -19 [ 656.378945][ T970] dvb-usb: error -19 while querying for an remote control event. [ 656.397662][ T970] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 656.439026][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 656.452391][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.463290][ T970] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 656.479060][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.508349][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.517460][T14027] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 656.525358][ T5839] Bluetooth: hci2: command tx timeout [ 656.529512][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 656.536593][T14090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.543899][ T5882] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 656.561748][ T970] m920x_read = error: -19 [ 656.566247][ T970] dvb-usb: error -19 while querying for an remote control event. [ 656.574953][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.606451][ T5882] usb 3-1: config 0 descriptor?? [ 656.629149][T14090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.631498][T14027] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 656.649827][T14027] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 656.660194][T14027] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 656.689647][ T970] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 656.731714][ T970] m920x_read = error: -19 [ 656.736156][ T970] dvb-usb: error -19 while querying for an remote control event. [ 656.743422][T14027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.765732][T14027] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.807800][T14027] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 656.818501][T14027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 656.847775][T11055] gspca_spca508: reg_read err -110 [ 656.854169][T11055] gspca_spca508: reg_read err -32 [ 656.859723][ T7188] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.866838][ T7188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.887481][T11055] gspca_spca508: reg_read err -32 [ 656.897178][T11055] gspca_spca508: reg_read err -32 [ 656.907009][T11055] gspca_spca508: reg_read err -32 [ 656.937862][ T7188] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.941316][T11055] gspca_spca508: reg write: error -32 [ 656.945034][ T7188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.950447][T11055] spca508 4-1:0.0: probe with driver spca508 failed with error -32 [ 656.957954][ T970] m920x_read = error: -19 [ 657.018826][ T970] dvb-usb: error -19 while querying for an remote control event. [ 657.067909][ T5882] hid-generic 0003:1B96:9F0A.0012: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.2-1/input0 [ 657.081665][T11644] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 657.088619][T11644] gspca_pac7302 1-1:0.183: probe with driver gspca_pac7302 failed with error -110 [ 657.199209][ T5882] m920x_read = error: -19 [ 657.203608][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 657.231756][T14027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.317220][T14027] veth0_vlan: entered promiscuous mode [ 657.345485][T14027] veth1_vlan: entered promiscuous mode [ 657.378789][ T5882] m920x_read = error: -19 [ 657.383927][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 657.408674][T14027] veth0_macvtap: entered promiscuous mode [ 657.437156][T14027] veth1_macvtap: entered promiscuous mode [ 657.466664][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.491961][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.497715][T14114] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2457'. [ 657.512450][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.547484][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.561051][T14027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.585073][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.586540][T11644] m920x_read = error: -19 [ 657.607274][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.609453][T11644] dvb-usb: error -19 while querying for an remote control event. [ 657.638215][T14027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.665676][T14027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.677315][T14116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.690277][T14027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.699632][T14116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.713505][T14027] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.726763][T11644] usb 4-1: USB disconnect, device number 39 [ 657.736102][T14027] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.755446][T14027] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.778806][T14027] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.800786][ T5882] m920x_read = error: -19 [ 657.805195][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 657.957465][T13733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.975341][T13733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.983146][ T5882] m920x_read = error: -19 [ 657.987515][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 658.032398][ T7188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.048875][ T7188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.169200][ T5882] m920x_read = error: -19 [ 658.175917][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 658.358823][ T5882] m920x_read = error: -19 [ 658.363233][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 658.602730][T11644] m920x_read = error: -19 [ 658.613557][T11644] dvb-usb: error -19 while querying for an remote control event. [ 659.434555][ T6639] usb 1-1: USB disconnect, device number 49 [ 659.484920][T11055] usb 3-1: USB disconnect, device number 48 [ 659.583107][ T5882] m920x_read = error: -19 [ 659.587874][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 659.834235][T11644] m920x_read = error: -19 [ 659.840377][T11644] dvb-usb: error -19 while querying for an remote control event. [ 660.009585][ T5882] m920x_read = error: -19 [ 660.017866][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 660.411043][T11644] m920x_read = error: -19 [ 660.415455][T11644] dvb-usb: error -19 while querying for an remote control event. [ 660.576987][ T9703] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.629005][ T5882] m920x_read = error: -19 [ 660.639231][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 660.715597][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 660.715616][ T29] audit: type=1326 audit(1729988532.838:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ea37e719 code=0x7ffc0000 [ 660.747604][ T29] audit: type=1326 audit(1729988532.838:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ea37e719 code=0x7ffc0000 [ 660.776161][ T29] audit: type=1326 audit(1729988532.878:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f23ea37e719 code=0x7ffc0000 [ 660.803136][ T5882] m920x_read = error: -19 [ 660.807533][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 660.817104][ T29] audit: type=1326 audit(1729988532.928:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ea37e719 code=0x7ffc0000 [ 660.839276][ T29] audit: type=1326 audit(1729988532.928:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ea37e719 code=0x7ffc0000 [ 660.861303][ T29] audit: type=1326 audit(1729988532.928:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23ea37e719 code=0x7ffc0000 [ 660.883346][ T29] audit: type=1326 audit(1729988532.928:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ea37e719 code=0x7ffc0000 [ 660.905803][ T29] audit: type=1326 audit(1729988532.928:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ea37e719 code=0x7ffc0000 [ 660.930399][ T29] audit: type=1326 audit(1729988532.928:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23ea37e719 code=0x7ffc0000 [ 660.952406][ T29] audit: type=1326 audit(1729988532.928:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.3.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23ea37e719 code=0x7ffc0000 [ 660.974714][ T5882] m920x_read = error: -19 [ 660.979172][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 661.149834][ T5882] m920x_read = error: -19 [ 661.154248][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 661.322181][ T5882] m920x_read = error: -19 [ 661.326539][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 661.488879][ T5882] m920x_read = error: -19 [ 661.493242][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 661.658853][ T5882] m920x_read = error: -19 [ 661.663239][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 661.829207][ T5882] m920x_read = error: -19 [ 661.833615][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 661.876154][T14152] fuse: Unknown parameter '' [ 661.938270][T14159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2466'. [ 662.023849][T14159] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 662.081092][ T5882] m920x_read = error: -19 [ 662.085916][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 662.104940][T14158] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 662.366964][ T9703] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.457545][T14167] FAULT_INJECTION: forcing a failure. [ 662.457545][T14167] name failslab, interval 1, probability 0, space 0, times 0 [ 662.521047][T14167] CPU: 1 UID: 0 PID: 14167 Comm: syz.0.2471 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 662.531876][T14167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 662.541957][T14167] Call Trace: [ 662.545256][T14167] [ 662.548206][T14167] dump_stack_lvl+0x241/0x360 [ 662.552916][T14167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.558142][T14167] ? __pfx__printk+0x10/0x10 [ 662.562758][T14167] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 662.568245][T14167] ? __pfx___might_resched+0x10/0x10 [ 662.573559][T14167] ? finish_task_switch+0x1e5/0x870 [ 662.578784][T14167] should_fail_ex+0x3b0/0x4e0 [ 662.583489][T14167] should_failslab+0xac/0x100 [ 662.588184][T14167] ? rtnl_newlink+0xf2/0x20a0 [ 662.592886][T14167] __kmalloc_cache_noprof+0x6c/0x2c0 [ 662.598200][T14167] rtnl_newlink+0xf2/0x20a0 [ 662.602743][T14167] ? __pfx_lock_acquire+0x10/0x10 [ 662.607796][T14167] ? __mutex_lock+0x9a1/0xd70 [ 662.612500][T14167] ? __pfx_lock_release+0x10/0x10 [ 662.617552][T14167] ? do_raw_spin_lock+0x14f/0x370 [ 662.622601][T14167] ? __pfx_rtnl_newlink+0x10/0x10 [ 662.627649][T14167] ? do_raw_spin_unlock+0x13c/0x8b0 [ 662.632888][T14167] ? __mutex_lock+0x9ab/0xd70 [ 662.637593][T14167] ? __mutex_lock+0x52a/0xd70 [ 662.642295][T14167] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 662.647438][T14167] ? __pfx___mutex_lock+0x10/0x10 [ 662.652498][T14167] ? __pfx_rtnl_newlink+0x10/0x10 [ 662.657548][T14167] rtnetlink_rcv_msg+0x73f/0xcf0 [ 662.662514][T14167] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 662.667660][T14167] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 662.673152][T14167] ? ref_tracker_free+0x643/0x7e0 [ 662.678207][T14167] netlink_rcv_skb+0x1e3/0x430 [ 662.682999][T14167] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 662.688497][T14167] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 662.693830][T14167] ? netlink_deliver_tap+0x2e/0x1b0 [ 662.699058][T14167] netlink_unicast+0x7f6/0x990 [ 662.703853][T14167] ? __pfx_netlink_unicast+0x10/0x10 [ 662.709156][T14167] ? __virt_addr_valid+0x183/0x530 [ 662.714297][T14167] ? __check_object_size+0x48e/0x900 [ 662.719612][T14167] netlink_sendmsg+0x8e4/0xcb0 [ 662.724415][T14167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.729755][T14167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.735065][T14167] __sock_sendmsg+0x221/0x270 [ 662.739777][T14167] ____sys_sendmsg+0x52a/0x7e0 [ 662.744577][T14167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 662.749904][T14167] __sys_sendmsg+0x292/0x380 [ 662.754523][T14167] ? __pfx___sys_sendmsg+0x10/0x10 [ 662.759671][T14167] ? __pfx_vfs_write+0x10/0x10 [ 662.764486][T14167] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 662.770843][T14167] ? do_syscall_64+0x100/0x230 [ 662.775637][T14167] ? do_syscall_64+0xb6/0x230 [ 662.780341][T14167] do_syscall_64+0xf3/0x230 [ 662.784875][T14167] ? clear_bhb_loop+0x35/0x90 [ 662.789585][T14167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.795506][T14167] RIP: 0033:0x7f031257e719 [ 662.799944][T14167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.819579][T14167] RSP: 002b:00007f0311fff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 662.828042][T14167] RAX: ffffffffffffffda RBX: 00007f0312736058 RCX: 00007f031257e719 [ 662.836050][T14167] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 662.844052][T14167] RBP: 00007f0311fff090 R08: 0000000000000000 R09: 0000000000000000 [ 662.852053][T14167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.860052][T14167] R13: 0000000000000000 R14: 00007f0312736058 R15: 00007ffd693351b8 [ 662.864385][T11644] m920x_read = error: -19 [ 662.868045][T14167] [ 662.872385][T11644] dvb-usb: error -19 while querying for an remote control event. [ 663.061470][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 663.072064][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 663.080791][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 663.089226][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 663.098548][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 663.105936][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 663.650444][T14176] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2470'. [ 664.048454][ T9703] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.198809][ T8] m920x_read = error: -19 [ 664.203208][ T8] dvb-usb: error -19 while querying for an remote control event. [ 664.350213][ T9703] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.379010][ T8] m920x_read = error: -19 [ 664.387548][ T8] dvb-usb: error -19 while querying for an remote control event. [ 665.148940][ T5837] Bluetooth: hci2: command tx timeout [ 665.192796][ T8] m920x_read = error: -19 [ 665.197208][ T8] dvb-usb: error -19 while querying for an remote control event. [ 665.367806][ T8] m920x_read = error: -19 [ 665.373445][ T8] dvb-usb: error -19 while querying for an remote control event. [ 665.740049][ T8] m920x_read = error: -19 [ 665.744455][ T8] dvb-usb: error -19 while querying for an remote control event. [ 665.762302][T14168] chnl_net:caif_netlink_parms(): no params data found [ 665.821540][ T9703] bridge_slave_1: left allmulticast mode [ 665.827331][ T9703] bridge_slave_1: left promiscuous mode [ 665.833189][ T9703] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.860352][ T9703] bridge_slave_0: left allmulticast mode [ 665.876240][ T9703] bridge_slave_0: left promiscuous mode [ 665.896914][ T9703] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.908941][T11644] m920x_read = error: -19 [ 665.916711][T11644] dvb-usb: error -19 while querying for an remote control event. [ 666.008921][ T8] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 666.103744][T11644] m920x_read = error: -19 [ 666.108145][T11644] dvb-usb: error -19 while querying for an remote control event. [ 666.182370][ T8] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 666.202530][ T8] usb 3-1: config 0 has no interface number 0 [ 666.214745][ T8] usb 3-1: New USB device found, idVendor=093a, idProduct=2627, bcdDevice=c9.c0 [ 666.235370][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.243905][ T8] usb 3-1: Product: syz [ 666.248093][ T8] usb 3-1: Manufacturer: syz [ 666.263476][ T8] usb 3-1: SerialNumber: syz [ 666.285289][ T5882] m920x_read = error: -19 [ 666.289726][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 666.302653][ T8] usb 3-1: config 0 descriptor?? [ 666.320444][ T8] gspca_main: gspca_pac7302-2.14.0 probing 093a:2627 [ 666.449159][ T5882] m920x_read = error: -19 [ 666.458707][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 666.523647][ T9703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.535909][ T9703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.546717][ T9703] bond0 (unregistering): Released all slaves [ 666.629012][ T5882] m920x_read = error: -19 [ 666.635661][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 666.746099][T14168] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.758728][T14168] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.772990][T14168] bridge_slave_0: entered allmulticast mode [ 666.780857][T14168] bridge_slave_0: entered promiscuous mode [ 666.798272][T14168] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.807957][T14168] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.817945][T14168] bridge_slave_1: entered allmulticast mode [ 666.818938][ T5882] m920x_read = error: -19 [ 666.827304][T14168] bridge_slave_1: entered promiscuous mode [ 666.832759][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 666.999591][ T5882] m920x_read = error: -19 [ 667.004169][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 667.048944][ T3068] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 667.084056][T14168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.763028][T14227] syz.3.2483[14227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 667.763156][T14227] syz.3.2483[14227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 667.774862][T14227] syz.3.2483[14227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 668.014709][ T5882] m920x_read = error: -19 [ 668.030733][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 668.047157][ T5837] Bluetooth: hci2: command tx timeout [ 668.067903][ T8] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 668.074972][ T8] gspca_pac7302 3-1:0.183: probe with driver gspca_pac7302 failed with error -110 [ 668.190155][T11644] m920x_read = error: -19 [ 668.194542][T11644] dvb-usb: error -19 while querying for an remote control event. [ 668.256842][T14168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.287263][ T3068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.298802][ T3068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.308602][ T3068] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 668.317727][ T3068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.327717][ T3068] usb 5-1: config 0 descriptor?? [ 668.334077][ T9703] hsr_slave_0: left promiscuous mode [ 668.344869][ T9703] hsr_slave_1: left promiscuous mode [ 668.368821][T11644] m920x_read = error: -19 [ 668.373320][T11644] dvb-usb: error -19 while querying for an remote control event. [ 668.436421][ T9703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.448378][ T9703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.531820][ T9703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.539829][T11644] m920x_read = error: -19 [ 668.545438][T11644] dvb-usb: error -19 while querying for an remote control event. [ 668.553140][T14217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.582869][ T9703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.592470][T14217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.731241][T11644] m920x_read = error: -19 [ 668.746153][T11644] dvb-usb: error -19 while querying for an remote control event. [ 668.815375][ T9703] veth1_macvtap: left promiscuous mode [ 668.822595][ T9703] veth0_macvtap: left promiscuous mode [ 668.828675][ T9703] veth1_vlan: left promiscuous mode [ 668.835218][ T9703] veth0_vlan: left promiscuous mode [ 668.941313][T11644] m920x_read = error: -19 [ 668.943706][ T3068] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 669.087779][ T3068] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0013/input/input33 [ 669.097038][T11644] dvb-usb: error -19 while querying for an remote control event. [ 669.293753][ T3068] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 669.297288][T14238] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2480'. [ 669.321025][T14238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2480'. [ 669.692697][ T8] m920x_read = error: -19 [ 669.697146][ T8] dvb-usb: error -19 while querying for an remote control event. [ 669.826228][ T3068] usb 5-1: USB disconnect, device number 49 [ 669.871855][ T8] m920x_read = error: -19 [ 669.876782][ T8] dvb-usb: error -19 while querying for an remote control event. [ 670.080952][ T8] m920x_read = error: -19 [ 670.086950][ T8] dvb-usb: error -19 while querying for an remote control event. [ 670.109111][ T5837] Bluetooth: hci2: command tx timeout [ 670.257339][ T8] usb 3-1: USB disconnect, device number 49 [ 670.264570][ T5882] m920x_read = error: -19 [ 670.268973][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 670.428988][ T5882] m920x_read = error: -19 [ 670.434133][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 670.679765][ T5882] m920x_read = error: -19 [ 670.748973][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 670.986533][ T8] m920x_read = error: -19 [ 670.999286][ T8] dvb-usb: error -19 while querying for an remote control event. [ 671.168893][ T5882] m920x_read = error: -19 [ 671.173281][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 671.234246][ T9703] team0 (unregistering): Port device team_slave_1 removed [ 671.339693][ T8] m920x_read = error: -19 [ 671.344081][ T8] dvb-usb: error -19 while querying for an remote control event. [ 671.609561][ T9703] team0 (unregistering): Port device team_slave_0 removed [ 671.622388][ T8] m920x_read = error: -19 [ 671.627126][ T8] dvb-usb: error -19 while querying for an remote control event. [ 672.132827][ T8] m920x_read = error: -19 [ 672.137235][ T8] dvb-usb: error -19 while querying for an remote control event. [ 672.188849][ T5837] Bluetooth: hci2: command tx timeout [ 672.208172][T14259] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2492'. [ 672.285305][T14262] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2489'. [ 672.299155][ T5882] m920x_read = error: -19 [ 672.303598][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 672.474948][ T5882] m920x_read = error: -19 [ 672.482810][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 672.662341][ T5882] m920x_read = error: -19 [ 672.666946][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 672.757645][T14273] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2490'. [ 672.841991][ T5882] m920x_read = error: -19 [ 672.846384][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 673.019075][ T5882] m920x_read = error: -19 [ 673.023462][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 673.199609][ T5882] m920x_read = error: -19 [ 673.204013][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 674.107010][T14168] team0: Port device team_slave_0 added [ 674.128286][ T5882] m920x_read = error: -19 [ 674.132764][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 674.144663][T14168] team0: Port device team_slave_1 added [ 674.220804][T14288] FAULT_INJECTION: forcing a failure. [ 674.220804][T14288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.268011][T14288] CPU: 1 UID: 0 PID: 14288 Comm: syz.3.2496 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 674.278821][T14288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 674.288878][T14288] Call Trace: [ 674.292154][T14288] [ 674.295080][T14288] dump_stack_lvl+0x241/0x360 [ 674.299761][T14288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.304957][T14288] ? __pfx__printk+0x10/0x10 [ 674.309555][T14288] should_fail_ex+0x3b0/0x4e0 [ 674.314235][T14288] _copy_to_user+0x31/0xb0 [ 674.318654][T14288] bpf_test_finish+0x212/0x890 [ 674.323430][T14288] ? __pfx_bpf_test_finish+0x10/0x10 [ 674.328726][T14288] ? convert___skb_to_skb+0x41/0x620 [ 674.334004][T14288] ? convert_skb_to___skb+0x2d3/0x510 [ 674.339374][T14288] bpf_prog_test_run_skb+0xfe5/0x1820 [ 674.344755][T14288] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 674.350563][T14288] ? fput+0x1a8/0x230 [ 674.354539][T14288] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 674.360342][T14288] bpf_prog_test_run+0x2e4/0x360 [ 674.365292][T14288] __sys_bpf+0x48d/0x810 [ 674.369539][T14288] ? __pfx___sys_bpf+0x10/0x10 [ 674.374310][T14288] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 674.380293][T14288] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 674.386621][T14288] ? do_syscall_64+0x100/0x230 [ 674.391384][T14288] __x64_sys_bpf+0x7c/0x90 [ 674.395795][T14288] do_syscall_64+0xf3/0x230 [ 674.400296][T14288] ? clear_bhb_loop+0x35/0x90 [ 674.404977][T14288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.410882][T14288] RIP: 0033:0x7f23ea37e719 [ 674.415316][T14288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.434942][T14288] RSP: 002b:00007f23eb102038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 674.443363][T14288] RAX: ffffffffffffffda RBX: 00007f23ea535f80 RCX: 00007f23ea37e719 [ 674.451331][T14288] RDX: 000000000000004c RSI: 0000000020000240 RDI: 000000000000000a [ 674.459302][T14288] RBP: 00007f23eb102090 R08: 0000000000000000 R09: 0000000000000000 [ 674.467279][T14288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.475251][T14288] R13: 0000000000000000 R14: 00007f23ea535f80 R15: 00007fff75e11ca8 [ 674.483235][T14288] [ 674.486522][ T8] m920x_read = error: -19 [ 674.491105][ T8] dvb-usb: error -19 while querying for an remote control event. [ 674.525397][T14168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.533664][T14168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.589003][T14168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.675730][ T8] m920x_read = error: -19 [ 674.841714][ T8] dvb-usb: error -19 while querying for an remote control event. [ 674.993030][T14296] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2497'. [ 675.024330][T14168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.033852][T14168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.068696][T14168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.139064][ T8] m920x_read = error: -19 [ 675.143454][ T8] dvb-usb: error -19 while querying for an remote control event. [ 675.214390][T14168] hsr_slave_0: entered promiscuous mode [ 675.229067][T14168] hsr_slave_1: entered promiscuous mode [ 675.235290][T14168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 675.252264][T14303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.257098][T14168] Cannot create hsr debugfs directory [ 675.278988][ T3068] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 675.301360][T14303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.316004][T14303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.325663][ T5882] m920x_read = error: -19 [ 675.333159][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 675.360707][T14305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.377268][T14303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.477556][ T3068] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 675.488918][T11055] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 675.508783][ T3068] usb 4-1: config 0 has no interface number 0 [ 675.508930][ T5882] m920x_read = error: -19 [ 675.533683][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 675.536209][ T3068] usb 4-1: New USB device found, idVendor=093a, idProduct=2627, bcdDevice=c9.c0 [ 675.566296][T14305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.629015][ T3068] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.648565][T11055] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.727630][ T3068] usb 4-1: Product: syz [ 675.737926][T11055] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.739433][ T5882] m920x_read = error: -19 [ 675.751409][ T3068] usb 4-1: Manufacturer: syz [ 675.768228][ T3068] usb 4-1: SerialNumber: syz [ 675.827860][T11055] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 675.866944][ T3068] usb 4-1: config 0 descriptor?? [ 675.926252][T11055] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.935638][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 675.943561][ T3068] gspca_main: gspca_pac7302-2.14.0 probing 093a:2627 [ 676.039236][T11055] usb 5-1: config 0 descriptor?? [ 676.218843][ T5882] m920x_read = error: -19 [ 676.223385][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 676.400751][ T8] m920x_read = error: -19 [ 676.405145][ T8] dvb-usb: error -19 while querying for an remote control event. [ 676.477708][T11055] usbhid 5-1:0.0: can't add hid device: -71 [ 676.492593][T11055] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 676.533311][T11055] usb 5-1: USB disconnect, device number 50 [ 676.549075][T14168] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 676.573547][T14168] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 676.588868][T11644] m920x_read = error: -19 [ 676.595505][T11644] dvb-usb: error -19 while querying for an remote control event. [ 676.616753][T14168] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 676.641202][T14168] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 676.782537][ T8] m920x_read = error: -19 [ 676.803838][ T8] dvb-usb: error -19 while querying for an remote control event. [ 676.820153][ T3068] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 676.846330][ T3068] gspca_pac7302 4-1:0.183: probe with driver gspca_pac7302 failed with error -110 [ 676.878113][T14168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.967807][T14168] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.009531][ T8] m920x_read = error: -19 [ 677.023130][ T8] dvb-usb: error -19 while querying for an remote control event. [ 677.036110][ T184] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.043319][ T184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.111654][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.118903][ T6607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.229646][ T5882] m920x_read = error: -19 [ 677.245095][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 677.429646][ T5882] m920x_read = error: -19 [ 677.434767][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 677.506125][T14168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.587475][T14168] veth0_vlan: entered promiscuous mode [ 677.598826][ T5882] m920x_read = error: -19 [ 677.603184][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 677.630635][T14168] veth1_vlan: entered promiscuous mode [ 677.682185][T14168] veth0_macvtap: entered promiscuous mode [ 677.701743][T14168] veth1_macvtap: entered promiscuous mode [ 677.734476][T14168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.757700][T14168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.778677][T14168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.789417][ T5882] m920x_read = error: -19 [ 677.795873][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 677.818930][T14168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.839463][T14168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.871005][T14168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.893007][T14168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.914396][T14168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.939071][T14168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.960640][T14168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.979010][ T5882] m920x_read = error: -19 [ 678.066397][T14334] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2505'. [ 678.089257][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 678.106229][T14168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.188234][T14168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.783905][ T5882] m920x_read = error: -19 [ 678.788403][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 678.836686][T14168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.845792][T14168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.959193][ T5910] m920x_read = error: -19 [ 678.975409][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 679.044188][ T184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.052206][ T184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.053053][T13733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.068221][T13733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.168763][ T5910] m920x_read = error: -19 [ 679.279304][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 679.302060][ T5910] usb 4-1: USB disconnect, device number 40 [ 679.589968][ T8] m920x_read = error: -19 [ 679.594355][ T8] dvb-usb: error -19 while querying for an remote control event. [ 679.648818][T11055] IPVS: starting estimator thread 0... [ 679.748873][T14354] IPVS: using max 19 ests per chain, 45600 per kthread [ 679.759001][ T970] m920x_read = error: -19 [ 679.763373][ T970] dvb-usb: error -19 while querying for an remote control event. [ 679.939587][ T970] m920x_read = error: -19 [ 679.954691][ T970] dvb-usb: error -19 while querying for an remote control event. [ 680.909743][ T970] m920x_read = error: -19 [ 680.914144][ T970] dvb-usb: error -19 while querying for an remote control event. [ 681.119065][ T970] m920x_read = error: -19 [ 681.229153][ T970] dvb-usb: error -19 while querying for an remote control event. [ 681.618974][ T970] m920x_read = error: -19 [ 681.623399][ T970] dvb-usb: error -19 while querying for an remote control event. [ 681.791044][ T5910] m920x_read = error: -19 [ 681.812460][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 681.829984][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 681.830024][ T29] audit: type=1326 audit(1729988553.908:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14371 comm="syz.4.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e24f7e719 code=0x7ffc0000 [ 682.939082][ T29] audit: type=1326 audit(1729988553.908:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14371 comm="syz.4.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e24f7e719 code=0x7ffc0000 [ 682.956885][T14380] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2511'. [ 682.986438][ T29] audit: type=1326 audit(1729988553.908:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14371 comm="syz.4.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e24f7e719 code=0x7ffc0000 [ 683.048858][ T970] m920x_read = error: -19 [ 683.053242][ T970] dvb-usb: error -19 while querying for an remote control event. [ 683.081491][ T29] audit: type=1326 audit(1729988553.908:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14371 comm="syz.4.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e24f7e719 code=0x7ffc0000 [ 683.177053][ T29] audit: type=1326 audit(1729988553.908:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14371 comm="syz.4.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e24f7e719 code=0x7ffc0000 [ 683.229788][ T970] m920x_read = error: -19 [ 683.234166][ T970] dvb-usb: error -19 while querying for an remote control event. [ 683.258971][ T29] audit: type=1326 audit(1729988553.908:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14371 comm="syz.4.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e24f7e719 code=0x7ffc0000 [ 683.709330][ T29] audit: type=1326 audit(1729988553.908:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14371 comm="syz.4.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e24f7e719 code=0x7ffc0000 [ 683.923886][ T29] audit: type=1326 audit(1729988553.908:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14371 comm="syz.4.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e24f7e719 code=0x7ffc0000 [ 683.953909][ T970] m920x_read = error: -19 [ 683.958592][ T970] dvb-usb: error -19 while querying for an remote control event. [ 683.968884][ T3068] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 684.018899][ T29] audit: type=1326 audit(1729988553.908:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14371 comm="syz.4.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e24f7e719 code=0x7ffc0000 [ 684.061605][ T29] audit: type=1326 audit(1729988553.908:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14371 comm="syz.4.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e24f7e719 code=0x7ffc0000 [ 684.133463][ T5910] m920x_read = error: -19 [ 684.137892][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 684.882435][ T5910] m920x_read = error: -19 [ 684.886810][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 685.059638][ T3068] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 685.068040][ T3068] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 685.077270][ T3068] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 685.086322][ T3068] usb 5-1: config 1 has no interface number 0 [ 685.092488][ T3068] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 685.102299][ T3068] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 685.115237][ T3068] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d6.01 [ 685.156590][ T3068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.193718][ T5910] m920x_read = error: -19 [ 685.198122][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 685.219537][ T3068] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 685.294693][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.359591][ T970] m920x_read = error: -19 [ 685.364022][ T970] dvb-usb: error -19 while querying for an remote control event. [ 685.409730][ T3068] snd_usb_pod 5-1:1.1: invalid control EP [ 685.420022][ T3068] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 685.433673][ T3068] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 685.448958][ T3068] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 685.531571][ T970] m920x_read = error: -19 [ 685.536102][ T970] dvb-usb: error -19 while querying for an remote control event. [ 685.712944][ T970] m920x_read = error: -19 [ 685.717591][ T970] dvb-usb: error -19 while querying for an remote control event. [ 685.884510][T14404] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2519'. [ 685.913940][ T970] m920x_read = error: -19 [ 685.918846][ T970] dvb-usb: error -19 while querying for an remote control event. [ 686.045487][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.052268][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.079169][ T970] m920x_read = error: -19 [ 686.083895][ T970] dvb-usb: error -19 while querying for an remote control event. [ 686.768422][ T970] m920x_read = error: -19 [ 686.821216][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.831995][ T970] dvb-usb: error -19 while querying for an remote control event. [ 687.379457][ T3068] usb 5-1: USB disconnect, device number 51 [ 687.426593][T11644] m920x_read = error: -19 [ 687.468023][T11644] dvb-usb: error -19 while querying for an remote control event. [ 687.534052][T14411] binder: BINDER_SET_CONTEXT_MGR already set [ 687.544340][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.549743][T14411] binder: 14410:14411 ioctl 4018620d 20000040 returned -16 [ 687.674680][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 687.684276][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.703227][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 687.711896][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 687.722454][T11644] m920x_read = error: -19 [ 687.727189][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 687.738399][T11644] dvb-usb: error -19 while querying for an remote control event. [ 687.757725][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 687.765104][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 687.909916][T11644] m920x_read = error: -19 [ 687.918195][T11644] dvb-usb: error -19 while querying for an remote control event. [ 687.951878][ T61] bridge_slave_1: left allmulticast mode [ 687.968512][ T61] bridge_slave_1: left promiscuous mode [ 687.975089][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.003831][ T61] bridge_slave_0: left allmulticast mode [ 688.013457][ T61] bridge_slave_0: left promiscuous mode [ 688.028843][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.089037][T11644] m920x_read = error: -19 [ 688.098821][T11644] dvb-usb: error -19 while querying for an remote control event. [ 688.119154][T14431] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2524'. [ 688.299091][T11644] m920x_read = error: -19 [ 688.311116][T11644] dvb-usb: error -19 while querying for an remote control event. [ 688.509311][T11644] m920x_read = error: -19 [ 688.513708][T11644] dvb-usb: error -19 while querying for an remote control event. [ 688.689246][ T970] m920x_read = error: -19 [ 688.693636][ T970] dvb-usb: error -19 while querying for an remote control event. [ 688.944474][ T970] m920x_read = error: -19 [ 688.949045][ T970] dvb-usb: error -19 while querying for an remote control event. [ 689.975969][T11644] m920x_read = error: -19 [ 689.980922][T11644] dvb-usb: error -19 while querying for an remote control event. [ 690.012012][ T5837] Bluetooth: hci2: command tx timeout [ 690.322176][ T970] m920x_read = error: -19 [ 690.326985][ T970] dvb-usb: error -19 while querying for an remote control event. [ 690.488802][ T970] m920x_read = error: -19 [ 690.493187][ T970] dvb-usb: error -19 while querying for an remote control event. [ 690.746626][ T970] m920x_read = error: -19 [ 691.172915][ T970] dvb-usb: error -19 while querying for an remote control event. [ 691.468831][ T970] m920x_read = error: -19 [ 691.473223][ T970] dvb-usb: error -19 while querying for an remote control event. [ 691.648927][ T970] m920x_read = error: -19 [ 691.653315][ T970] dvb-usb: error -19 while querying for an remote control event. [ 691.920610][T11644] m920x_read = error: -19 [ 691.925019][T11644] dvb-usb: error -19 while querying for an remote control event. [ 692.116977][ T5839] Bluetooth: hci2: command tx timeout [ 692.149495][T11644] m920x_read = error: -19 [ 692.165476][T11644] dvb-usb: error -19 while querying for an remote control event. [ 692.411505][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.464014][T11644] m920x_read = error: -19 [ 692.526470][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.648531][T11644] dvb-usb: error -19 while querying for an remote control event. [ 692.757708][ T61] bond0 (unregistering): Released all slaves [ 692.818804][ T970] m920x_read = error: -19 [ 692.823288][ T970] dvb-usb: error -19 while querying for an remote control event. [ 693.030579][ T970] m920x_read = error: -19 [ 693.034977][ T970] dvb-usb: error -19 while querying for an remote control event. [ 693.087288][T14419] chnl_net:caif_netlink_parms(): no params data found [ 693.199147][T11644] m920x_read = error: -19 [ 693.203591][T11644] dvb-usb: error -19 while querying for an remote control event. [ 693.373691][T14476] fuse: Unknown parameter '' [ 693.400526][T11644] m920x_read = error: -19 [ 693.405955][T11644] dvb-usb: error -19 while querying for an remote control event. [ 693.599215][T11644] m920x_read = error: -19 [ 693.603796][T11644] dvb-usb: error -19 while querying for an remote control event. [ 693.612780][T14419] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.630669][T14419] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.637980][T14419] bridge_slave_0: entered allmulticast mode [ 693.653766][T14419] bridge_slave_0: entered promiscuous mode [ 693.746554][T14419] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.755614][T14419] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.778949][T11644] m920x_read = error: -19 [ 693.785639][T11644] dvb-usb: error -19 while querying for an remote control event. [ 693.806067][T14419] bridge_slave_1: entered allmulticast mode [ 693.847317][T14419] bridge_slave_1: entered promiscuous mode [ 693.918795][T11068] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 693.998998][ T970] m920x_read = error: -19 [ 694.003384][ T970] dvb-usb: error -19 while querying for an remote control event. [ 694.047947][ T61] hsr_slave_0: left promiscuous mode [ 694.078827][ T61] hsr_slave_1: left promiscuous mode [ 694.081343][T14493] binfmt_misc: register: failed to install interpreter file ./file0 [ 694.102763][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.111749][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.132557][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.158603][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.178771][T11068] usb 1-1: Using ep0 maxpacket: 16 [ 694.189360][ T5839] Bluetooth: hci2: command tx timeout [ 694.195712][T11068] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 694.207393][ T61] veth1_macvtap: left promiscuous mode [ 694.208730][T11068] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 694.213143][ T970] m920x_read = error: -19 [ 694.227046][ T970] dvb-usb: error -19 while querying for an remote control event. [ 694.235076][ T61] veth0_macvtap: left promiscuous mode [ 694.240930][ T61] veth1_vlan: left promiscuous mode [ 694.246257][ T61] veth0_vlan: left promiscuous mode [ 694.418497][ T970] m920x_read = error: -19 [ 694.427584][ T970] dvb-usb: error -19 while querying for an remote control event. [ 694.432902][T11068] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 694.444963][T11068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.453118][T11068] usb 1-1: Product: 띌쳂ꭲ릢鰃롱ʈ∳휑ߐ섙尝륮怘☷걐譱ꛅ룷䔔꺼墶ኊ莊≏䤪쫃䥑冗颴蝊쬟귣젟꧳ࣱ▖缷퇯긲䱊왻䰸鶰෬纮朐阊䮌ᔌࣘẪ밞犺힉Ṑ᱙ᙿ뤋 [ 694.474429][T11068] usb 1-1: Manufacturer: Ѕ [ 694.478993][T11068] usb 1-1: SerialNumber: 睃⪟댅ম焩삯믃䰜졗華荖㚠ܱ㒁㭐瀒㻻귦ⱸ휆櫫놓배蘖擣髭힧㤇᜽䳪⏐쿙늅❉㪰범₲壝ꘜ䙁ꇓℳ㊠ꛛ㾀嚿꠼휀蔰䢹뙵䜹쇌吏쟂俠꩟鮎礋䋵瀻 [ 695.167443][ T5910] m920x_read = error: -19 [ 695.171952][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 695.206299][T14490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.258857][T14490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.338781][ T970] m920x_read = error: -19 [ 695.343873][ T970] dvb-usb: error -19 while querying for an remote control event. [ 695.522820][ T970] m920x_read = error: -19 [ 695.527190][ T970] dvb-usb: error -19 while querying for an remote control event. [ 696.010438][ T970] m920x_read = error: -19 [ 696.014816][ T970] dvb-usb: error -19 while querying for an remote control event. [ 696.208966][ T5910] m920x_read = error: -19 [ 696.217398][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 696.269049][ T5839] Bluetooth: hci2: command tx timeout [ 696.388983][ T5910] m920x_read = error: -19 [ 696.394540][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 696.559276][ T5910] m920x_read = error: -19 [ 696.564205][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 696.731952][ T970] m920x_read = error: -19 [ 696.736348][ T970] dvb-usb: error -19 while querying for an remote control event. [ 696.761141][ T61] team0 (unregistering): Port device team_slave_1 removed [ 696.806673][ T61] team0 (unregistering): Port device team_slave_0 removed [ 696.825390][ T5910] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 696.901138][ T970] m920x_read = error: -19 [ 696.905541][ T970] dvb-usb: error -19 while querying for an remote control event. [ 696.991352][ T5910] usb 3-1: config 0 has no interfaces? [ 697.018400][ T5910] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 697.039248][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 697.047281][ T5910] usb 3-1: Product: syz [ 697.051672][ T5910] usb 3-1: Manufacturer: syz [ 697.070002][ T5910] usb 3-1: config 0 descriptor?? [ 697.085276][ T5910] m920x_read = error: -19 [ 697.090386][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 697.253382][ T5910] m920x_read = error: -19 [ 697.257772][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 697.300928][T14517] xt_ipcomp: unknown flags 12 [ 697.380573][T14517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.389855][T14517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.410258][ T6639] usb 3-1: USB disconnect, device number 50 [ 697.434226][ T5910] m920x_read = error: -19 [ 697.438592][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 697.481202][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2542'. [ 697.505035][T14419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.518982][T11068] cdc_ncm 1-1:1.0: bind() failure [ 697.525818][T11068] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 697.560694][T11068] cdc_ncm 1-1:1.1: bind() failure [ 697.570081][T14419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.589533][T11068] usb 1-1: USB disconnect, device number 50 [ 697.648792][ T5910] m920x_read = error: -19 [ 697.653413][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 697.739904][T14419] team0: Port device team_slave_0 added [ 697.748240][T14419] team0: Port device team_slave_1 added [ 697.776375][T14419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.790115][T14419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.819048][ T5910] m920x_read = error: -19 [ 697.823421][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 697.832632][T14419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.859533][T14419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.873530][T14419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.913522][T14419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.988830][ T5910] m920x_read = error: -19 [ 697.993447][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 698.043566][T14419] hsr_slave_0: entered promiscuous mode [ 698.347720][T14419] hsr_slave_1: entered promiscuous mode [ 698.489598][T14419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 698.602251][T14419] Cannot create hsr debugfs directory [ 698.702279][T14530] TCP: out of memory -- consider tuning tcp_mem [ 698.764051][ T5910] m920x_read = error: -19 [ 698.768463][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 698.949477][ T970] m920x_read = error: -19 [ 698.953869][ T970] dvb-usb: error -19 while querying for an remote control event. [ 699.248207][ T970] m920x_read = error: -19 [ 699.252681][ T970] dvb-usb: error -19 while querying for an remote control event. [ 699.419727][ T970] m920x_read = error: -19 [ 700.021426][ T970] dvb-usb: error -19 while querying for an remote control event. [ 700.188839][ T5910] m920x_read = error: -19 [ 700.193467][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 700.224402][T14563] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2565'. [ 700.369047][ T970] m920x_read = error: -19 [ 700.373429][ T970] dvb-usb: error -19 while querying for an remote control event. [ 700.538916][ T970] m920x_read = error: -19 [ 700.547685][ T970] dvb-usb: error -19 while querying for an remote control event. [ 700.557510][T14571] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2557'. [ 700.570367][ T5910] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 700.748908][ T970] m920x_read = error: -19 [ 700.753431][ T970] dvb-usb: error -19 while querying for an remote control event. [ 700.784455][ T5910] usb 1-1: unable to get BOS descriptor or descriptor too short [ 700.837330][T14419] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 700.844840][ T5910] usb 1-1: not running at top speed; connect to a high speed hub [ 700.856541][T14419] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 700.865271][ T5910] usb 1-1: config 163 has an invalid descriptor of length 0, skipping remainder of the config [ 700.868730][T11068] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 700.875656][ T5910] usb 1-1: config 163 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 700.894499][ T5910] usb 1-1: config 163 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 700.907601][ T5910] usb 1-1: config 163 interface 0 has no altsetting 0 [ 700.919688][T14419] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 700.924739][T14565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.936412][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 700.936429][ T29] audit: type=1326 audit(1729988573.058:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14578 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23ea3756e7 code=0x7ffc0000 [ 700.964095][ C0] vkms_vblank_simulate: vblank timer overrun [ 700.970518][ T29] audit: type=1326 audit(1729988573.058:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14578 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23ea31a099 code=0x7ffc0000 [ 700.992466][ T29] audit: type=1326 audit(1729988573.058:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14578 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23ea3756e7 code=0x7ffc0000 [ 701.014005][ C0] vkms_vblank_simulate: vblank timer overrun [ 701.028381][ T29] audit: type=1326 audit(1729988573.058:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14578 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23ea31a099 code=0x7ffc0000 [ 701.050127][ T29] audit: type=1326 audit(1729988573.058:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14578 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23ea3756e7 code=0x7ffc0000 [ 701.071946][ T29] audit: type=1326 audit(1729988573.058:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14578 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23ea31a099 code=0x7ffc0000 [ 701.093649][ T29] audit: type=1326 audit(1729988573.058:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14578 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23ea3756e7 code=0x7ffc0000 [ 701.109277][T14419] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 701.115187][ C0] vkms_vblank_simulate: vblank timer overrun [ 701.115413][ T29] audit: type=1326 audit(1729988573.058:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14578 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23ea31a099 code=0x7ffc0000 [ 701.149755][ T29] audit: type=1326 audit(1729988573.058:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14578 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23ea3756e7 code=0x7ffc0000 [ 701.171416][ T29] audit: type=1326 audit(1729988573.058:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14578 comm="syz.3.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23ea31a099 code=0x7ffc0000 [ 701.197353][ T8] m920x_read = error: -19 [ 701.201900][ T8] dvb-usb: error -19 while querying for an remote control event. [ 701.223716][T14565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.243963][T14565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.325243][T14565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.438060][T14419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.464279][T14585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2571'. [ 701.494323][T14419] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.516234][ T184] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.523445][ T184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.572941][T11644] m920x_read = error: -19 [ 701.577359][T11644] dvb-usb: error -19 while querying for an remote control event. [ 701.585674][ T5910] usb 1-1: string descriptor 0 read error: -71 [ 701.592108][ T5910] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 701.601283][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.605635][ T184] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.616451][ T184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.648397][ T5910] usb 1-1: can't set config #163, error -71 [ 701.698512][ T5910] usb 1-1: USB disconnect, device number 51 [ 701.738779][ T8] m920x_read = error: -19 [ 701.743169][ T8] dvb-usb: error -19 while querying for an remote control event. [ 701.887721][T14419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.920574][T14419] veth0_vlan: entered promiscuous mode [ 701.923000][ T8] m920x_read = error: -19 [ 701.931236][T14419] veth1_vlan: entered promiscuous mode [ 701.938028][ T8] dvb-usb: error -19 while querying for an remote control event. [ 701.939898][ T3068] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 701.969233][T14419] veth0_macvtap: entered promiscuous mode [ 701.977345][T14419] veth1_macvtap: entered promiscuous mode [ 701.990828][T14419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.001524][T14419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.012136][T14419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.022655][T14419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.035680][T14419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.048459][T14419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.060612][T14419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.072861][T14419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.084163][T14419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.095578][T14419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.108821][ T8] m920x_read = error: -19 [ 702.109431][ T3068] usb 4-1: Using ep0 maxpacket: 16 [ 702.113196][ T8] dvb-usb: error -19 while querying for an remote control event. [ 702.113963][T14419] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.122334][ T3068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.126726][T14419] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.146072][ T3068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.165713][T14419] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.167974][ T3068] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 702.174478][T14419] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.210016][T14600] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 702.221268][ T3068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.250326][ T3068] usb 4-1: config 0 descriptor?? [ 702.262591][T13733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.272749][ T8] m920x_read = error: -19 [ 702.277388][ T8] dvb-usb: error -19 while querying for an remote control event. [ 702.297668][T13733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.324473][ T9703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.332689][ T9703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.459130][ T8] m920x_read = error: -19 [ 702.463629][ T8] dvb-usb: error -19 while querying for an remote control event. [ 702.475164][ T3068] usbhid 4-1:0.0: can't add hid device: -71 [ 702.491213][ T3068] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 702.503416][ T3068] usb 4-1: USB disconnect, device number 41 [ 702.532296][T14607] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2578'. [ 702.638799][ T8] m920x_read = error: -19 [ 702.643191][ T8] dvb-usb: error -19 while querying for an remote control event. [ 702.808848][ T8] m920x_read = error: -19 [ 702.813337][ T8] dvb-usb: error -19 while querying for an remote control event. [ 702.988889][ T8] m920x_read = error: -19 [ 702.993678][ T8] dvb-usb: error -19 while querying for an remote control event. [ 703.166985][ T8] m920x_read = error: -19 [ 703.188846][ T8] dvb-usb: error -19 while querying for an remote control event. [ 703.368921][ T5882] m920x_read = error: -19 [ 703.373309][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 703.524583][T14637] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 703.538557][T14641] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2582'. [ 703.558913][ T5882] m920x_read = error: -19 [ 703.563320][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 703.740107][ T5882] m920x_read = error: -19 [ 703.744564][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 703.874884][ T9703] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.909156][ T8] m920x_read = error: -19 [ 703.913958][ T8] dvb-usb: error -19 while querying for an remote control event. [ 704.028936][ T5882] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 704.109542][ T8] m920x_read = error: -19 [ 704.114085][ T8] dvb-usb: error -19 while querying for an remote control event. [ 704.183409][ T5882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.194031][ T5882] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85 [ 704.207762][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.218245][ T5882] usb 1-1: config 0 descriptor?? [ 704.235222][ T5882] comedi comedi0: Wrong number of endpoints [ 704.259437][ T5882] dt9812 1-1:0.0: driver 'dt9812' failed to auto-configure device. [ 704.282150][ T5882] m920x_read = error: -19 [ 704.286518][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 704.430034][T11068] usb 1-1: USB disconnect, device number 52 [ 704.448901][ T5882] m920x_read = error: -19 [ 704.453288][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 704.619282][ T5882] m920x_read = error: -19 [ 704.623698][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 704.788833][ T5882] m920x_read = error: -19 [ 704.793254][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 704.959100][ T5882] m920x_read = error: -19 [ 704.963479][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 705.128999][ T5882] m920x_read = error: -19 [ 705.133391][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 705.298821][ T5882] m920x_read = error: -19 [ 705.303211][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 705.419247][ T9703] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.473019][ T5882] m920x_read = error: -19 [ 705.477442][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 705.503148][ T9703] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.617964][ T9703] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.639041][ T5882] m920x_read = error: -19 [ 705.644738][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 705.748016][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 705.760692][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 705.768956][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 705.784223][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 705.792999][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 705.801559][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 705.839510][ T5910] m920x_read = error: -19 [ 705.843896][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 705.909514][ T970] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 705.953317][ T9703] bridge_slave_1: left allmulticast mode [ 705.959382][ T9703] bridge_slave_1: left promiscuous mode [ 705.965569][ T9703] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.980611][ T9703] bridge_slave_0: left allmulticast mode [ 705.986470][ T9703] bridge_slave_0: left promiscuous mode [ 705.992837][ T9703] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.009230][ T8] m920x_read = error: -19 [ 706.013656][ T8] dvb-usb: error -19 while querying for an remote control event. [ 706.034499][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2595'. [ 706.045017][T14678] FAULT_INJECTION: forcing a failure. [ 706.045017][T14678] name failslab, interval 1, probability 0, space 0, times 0 [ 706.070035][T14678] CPU: 1 UID: 0 PID: 14678 Comm: syz.4.2596 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 706.080891][T14678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 706.090389][ T970] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 706.090957][T14678] Call Trace: [ 706.090969][T14678] [ 706.090978][T14678] dump_stack_lvl+0x241/0x360 [ 706.091011][T14678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 706.104346][ T970] usb 4-1: config 1 interface 0 has no altsetting 1 [ 706.107106][T14678] ? __pfx__printk+0x10/0x10 [ 706.112444][ T970] usb 4-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40 [ 706.114694][T14678] ? __kmalloc_noprof+0xb0/0x400 [ 706.114724][T14678] ? __pfx___might_resched+0x10/0x10 [ 706.114753][T14678] should_fail_ex+0x3b0/0x4e0 [ 706.114777][T14678] ? sock_kmalloc+0xd7/0x160 [ 706.120528][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.126518][T14678] should_failslab+0xac/0x100 [ 706.131326][ T5910] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 706.140103][T14678] ? sock_kmalloc+0xd7/0x160 [ 706.140134][T14678] __kmalloc_noprof+0xd8/0x400 [ 706.140158][T14678] sock_kmalloc+0xd7/0x160 [ 706.140181][T14678] skcipher_recvmsg+0x5ff/0x1230 [ 706.140225][T14678] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 706.140250][T14678] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 706.145553][ T970] usb 4-1: Product: syz [ 706.150435][T14678] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 706.150467][T14678] sock_recvmsg+0x22f/0x280 [ 706.150490][T14678] ____sys_recvmsg+0x1c6/0x480 [ 706.150518][T14678] ? __pfx_____sys_recvmsg+0x10/0x10 [ 706.150555][T14678] __sys_recvmsg+0x2e6/0x3d0 [ 706.150580][T14678] ? __pfx___sys_recvmsg+0x10/0x10 [ 706.150601][T14678] ? __mutex_unlock_slowpath+0x21d/0x750 [ 706.156289][ T970] usb 4-1: Manufacturer: syz [ 706.159865][T14678] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 706.159899][T14678] ? do_syscall_64+0x100/0x230 [ 706.159923][T14678] ? do_syscall_64+0xb6/0x230 [ 706.159946][T14678] do_syscall_64+0xf3/0x230 [ 706.159966][T14678] ? clear_bhb_loop+0x35/0x90 [ 706.159988][T14678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.160008][T14678] RIP: 0033:0x7f8e24f7e719 [ 706.168728][ T970] usb 4-1: SerialNumber: syz [ 706.172625][T14678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.180529][ T8] m920x_read = error: -19 [ 706.184716][T14678] RSP: 002b:00007f8e25df1038 EFLAGS: 00000246 [ 706.189721][ T8] dvb-usb: error -19 while querying for an remote control event. [ 706.193849][T14678] ORIG_RAX: 000000000000002f [ 706.193862][T14678] RAX: ffffffffffffffda RBX: 00007f8e25135f80 RCX: 00007f8e24f7e719 [ 706.193878][T14678] RDX: 0000000000000100 RSI: 0000000020001500 RDI: 0000000000000004 [ 706.300630][ T5910] usb 3-1: New USB device found, idVendor=07ca, idProduct=a835, bcdDevice=21.fa [ 706.312412][T14678] RBP: 00007f8e25df1090 R08: 0000000000000000 R09: 0000000000000000 [ 706.312433][T14678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.312446][T14678] R13: 0000000000000000 R14: 00007f8e25135f80 R15: 00007ffc635d2638 [ 706.312478][T14678] [ 706.389877][ T970] m920x_read = error: -19 [ 706.394242][ T970] dvb-usb: error -19 while querying for an remote control event. [ 706.402781][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.438066][ T5910] usb 3-1: config 0 descriptor?? [ 706.558913][ T8] m920x_read = error: -19 [ 706.563349][ T8] dvb-usb: error -19 while querying for an remote control event. [ 706.578910][ T3068] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 706.649115][ T5910] usb 3-1: string descriptor 0 read error: -71 [ 706.657253][ T5910] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 706.667407][ T5910] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 706.697562][ T5910] usb 3-1: USB disconnect, device number 51 [ 706.738849][ T8] m920x_read = error: -19 [ 706.743328][ T8] dvb-usb: error -19 while querying for an remote control event. [ 706.781136][ T3068] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 706.789527][ T3068] usb 5-1: config 0 has no interface number 0 [ 706.798020][ T3068] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 706.807346][ T3068] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.815428][ T3068] usb 5-1: Product: syz [ 706.820817][ T3068] usb 5-1: Manufacturer: syz [ 706.825450][ T3068] usb 5-1: SerialNumber: syz [ 706.832911][ T3068] usb 5-1: config 0 descriptor?? [ 706.914655][ T5910] m920x_read = error: -19 [ 706.919166][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 706.954891][ T9703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.966793][ T9703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.977579][ T9703] bond0 (unregistering): Released all slaves [ 707.003568][T14660] netlink: 'syz.3.2592': attribute type 8 has an invalid length. [ 707.060025][T11068] usb 4-1: USB disconnect, device number 42 [ 707.066772][ T3068] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 707.079499][ T5910] m920x_read = error: -19 [ 707.085481][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 707.105538][ T3068] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 707.119487][ T3068] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 707.127534][ T3068] usb 5-1: media controller created [ 707.150864][ T3068] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 707.248874][ T5910] m920x_read = error: -19 [ 707.253387][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 707.285463][ T3068] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 707.382330][T14667] chnl_net:caif_netlink_parms(): no params data found [ 707.402441][ T3068] usb 5-1: USB disconnect, device number 53 [ 707.429250][ T5910] m920x_read = error: -19 [ 707.437424][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 707.456162][T14699] FAULT_INJECTION: forcing a failure. [ 707.456162][T14699] name failslab, interval 1, probability 0, space 0, times 0 [ 707.468862][T14699] CPU: 0 UID: 0 PID: 14699 Comm: syz.0.2600 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 707.479641][T14699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 707.489716][T14699] Call Trace: [ 707.492997][T14699] [ 707.495917][T14699] dump_stack_lvl+0x241/0x360 [ 707.500588][T14699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 707.505774][T14699] ? __pfx__printk+0x10/0x10 [ 707.510370][T14699] ? __pfx_lock_acquire+0x10/0x10 [ 707.515402][T14699] should_fail_ex+0x3b0/0x4e0 [ 707.520092][T14699] ? skb_clone+0x20c/0x390 [ 707.524515][T14699] should_failslab+0xac/0x100 [ 707.529005][ T9703] hsr_slave_0: left promiscuous mode [ 707.529172][T14699] ? skb_clone+0x20c/0x390 [ 707.538891][T14699] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 707.544278][T14699] skb_clone+0x20c/0x390 [ 707.548517][T14699] packet_rcv+0x633/0x14b0 [ 707.552933][T14699] ? __pfx_packet_rcv+0x10/0x10 [ 707.557778][T14699] dev_queue_xmit_nit+0x3e1/0xc10 [ 707.562794][T14699] ? dev_queue_xmit_nit+0x2b/0xc10 [ 707.567900][T14699] dev_hard_start_xmit+0x15f/0x7e0 [ 707.573008][T14699] ? __pfx_validate_xmit_skb+0x10/0x10 [ 707.578480][T14699] __dev_queue_xmit+0x1b11/0x3ed0 [ 707.583507][T14699] ? kasan_save_track+0x51/0x80 [ 707.588367][T14699] ? direct_splice_actor+0x11b/0x220 [ 707.593655][T14699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.599716][T14699] ? __dev_queue_xmit+0x2da/0x3ed0 [ 707.604826][T14699] ? __pfx___dev_queue_xmit+0x10/0x10 [ 707.610216][T14699] ? __copy_skb_header+0x437/0x5b0 [ 707.615328][T14699] ? __asan_memcpy+0x40/0x70 [ 707.619919][T14699] ? __copy_skb_header+0x437/0x5b0 [ 707.625034][T14699] ? __skb_clone+0x454/0x6c0 [ 707.629640][T14699] ? skb_clone+0x240/0x390 [ 707.634066][T14699] __netlink_deliver_tap+0x54d/0x7c0 [ 707.639363][T14699] ? netlink_deliver_tap+0x2e/0x1b0 [ 707.644557][T14699] netlink_deliver_tap+0x19d/0x1b0 [ 707.649670][T14699] netlink_unicast+0x7c4/0x990 [ 707.654438][T14699] ? __pfx_netlink_unicast+0x10/0x10 [ 707.659728][T14699] ? __virt_addr_valid+0x183/0x530 [ 707.664845][T14699] ? __check_object_size+0x48e/0x900 [ 707.670129][T14699] netlink_sendmsg+0x8e4/0xcb0 [ 707.674904][T14699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.680189][T14699] ? unwind_get_return_address+0x4d/0x90 [ 707.685838][T14699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.691120][T14699] __sock_sendmsg+0x221/0x270 [ 707.695803][T14699] sock_sendmsg+0x134/0x200 [ 707.700317][T14699] ? __pfx_sock_sendmsg+0x10/0x10 [ 707.705343][T14699] ? stack_depot_save_flags+0x29/0x830 [ 707.710806][T14699] ? copy_splice_read+0xa07/0xb60 [ 707.715835][T14699] ? splice_direct_to_actor+0x4fa/0xc80 [ 707.721377][T14699] ? do_splice_direct+0x289/0x3e0 [ 707.726397][T14699] ? do_sendfile+0x561/0xe10 [ 707.730996][T14699] ? do_syscall_64+0xf3/0x230 [ 707.735674][T14699] ? iov_iter_bvec+0x4e/0x180 [ 707.740357][T14699] splice_to_socket+0xa10/0x10b0 [ 707.745312][T14699] ? __pfx_splice_to_socket+0x10/0x10 [ 707.750716][T14699] ? __pfx_splice_to_socket+0x10/0x10 [ 707.756087][T14699] direct_splice_actor+0x11b/0x220 [ 707.761200][T14699] splice_direct_to_actor+0x586/0xc80 [ 707.766583][T14699] ? __pfx_direct_splice_actor+0x10/0x10 [ 707.772236][T14699] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 707.778152][T14699] ? __fget_files+0x29/0x470 [ 707.782757][T14699] ? __pfx_lock_release+0x10/0x10 [ 707.787815][T14699] do_splice_direct+0x289/0x3e0 [ 707.792682][T14699] ? __pfx_do_splice_direct+0x10/0x10 [ 707.798060][T14699] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 707.803968][T14699] ? bpf_lsm_file_permission+0x9/0x10 [ 707.809348][T14699] ? security_file_permission+0x74/0x280 [ 707.814992][T14699] ? rw_verify_area+0x1c3/0x6f0 [ 707.819848][T14699] do_sendfile+0x561/0xe10 [ 707.824265][T14699] ? __pfx_vfs_write+0x10/0x10 [ 707.829052][T14699] ? __pfx_do_sendfile+0x10/0x10 [ 707.834005][T14699] __se_sys_sendfile64+0x17c/0x1e0 [ 707.839119][T14699] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 707.844760][T14699] ? do_syscall_64+0x100/0x230 [ 707.849523][T14699] ? do_syscall_64+0xb6/0x230 [ 707.854197][T14699] do_syscall_64+0xf3/0x230 [ 707.858696][T14699] ? clear_bhb_loop+0x35/0x90 [ 707.863371][T14699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.869259][T14699] RIP: 0033:0x7f031257e719 [ 707.873671][T14699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.893275][T14699] RSP: 002b:00007f03132ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 707.901718][T14699] RAX: ffffffffffffffda RBX: 00007f0312735f80 RCX: 00007f031257e719 [ 707.909690][T14699] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000000000000e [ 707.917654][T14699] RBP: 00007f03132ac090 R08: 0000000000000000 R09: 0000000000000000 [ 707.925617][T14699] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 707.933603][T14699] R13: 0000000000000000 R14: 00007f0312735f80 R15: 00007ffd693351b8 [ 707.941593][T14699] [ 707.949861][ T5910] m920x_read = error: -19 [ 707.954202][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 707.964805][ T9703] hsr_slave_1: left promiscuous mode [ 707.972177][ T5837] Bluetooth: hci2: command tx timeout [ 707.981147][ T9703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.988548][ T9703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.996769][ T9703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.004266][T11068] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 708.008908][ T9703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.032093][ T9703] veth1_macvtap: left promiscuous mode [ 708.037597][ T9703] veth0_macvtap: left promiscuous mode [ 708.043394][ T9703] veth1_vlan: left promiscuous mode [ 708.048806][ T9703] veth0_vlan: left promiscuous mode [ 708.118825][ T5882] m920x_read = error: -19 [ 708.128312][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 708.158856][T11068] usb 3-1: Using ep0 maxpacket: 32 [ 708.172696][T11068] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 708.184859][T11068] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 708.212522][T11068] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 708.223494][T11068] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=32 [ 708.231743][T11068] usb 3-1: SerialNumber: syz [ 708.240017][T11068] usb 3-1: config 0 descriptor?? [ 708.291300][ T5882] m920x_read = error: -19 [ 708.295923][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 708.460241][ T5882] m920x_read = error: -19 [ 708.464647][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 708.638956][ T5882] m920x_read = error: -19 [ 708.646512][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 708.818890][ T5882] m920x_read = error: -19 [ 708.823286][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 708.843967][ T5910] usb 3-1: USB disconnect, device number 52 [ 708.847686][T14710] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2603'. [ 709.015393][ T5882] m920x_read = error: -19 [ 709.028151][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 709.193702][T14719] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2605'. [ 709.200112][ T5882] m920x_read = error: -19 [ 709.207032][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 709.216208][T14719] netlink: 'syz.2.2605': attribute type 4 has an invalid length. [ 709.235199][T14719] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2605'. [ 709.262856][ T9703] team0 (unregistering): Port device team_slave_1 removed [ 709.488879][ T5910] m920x_read = error: -19 [ 709.493279][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 709.605162][ T9703] team0 (unregistering): Port device team_slave_0 removed [ 709.658782][ T5882] m920x_read = error: -19 [ 709.663215][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 709.682992][T14722] FAULT_INJECTION: forcing a failure. [ 709.682992][T14722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.683063][T14722] [ 709.683070][T14722] ====================================================== [ 709.683077][T14722] WARNING: possible circular locking dependency detected [ 709.683085][T14722] 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 Not tainted [ 709.683096][T14722] ------------------------------------------------------ [ 709.683103][T14722] syz.2.2606/14722 is trying to acquire lock: [ 709.683114][T14722] ffffffff8e813498 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x20/0xa0 [ 709.683162][T14722] [ 709.683162][T14722] but task is already holding lock: [ 709.683168][T14722] ffff8880b862a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 709.683209][T14722] [ 709.683209][T14722] which lock already depends on the new lock. [ 709.683209][T14722] [ 709.683216][T14722] [ 709.683216][T14722] the existing dependency chain (in reverse order) is: [ 709.683223][T14722] [ 709.683223][T14722] -> #3 (&base->lock){-.-.}-{2:2}: [ 709.683246][T14722] lock_acquire+0x1ed/0x550 [ 709.683269][T14722] _raw_spin_lock_irqsave+0xd5/0x120 [ 709.683290][T14722] lock_timer_base+0x112/0x240 [ 709.683307][T14722] __mod_timer+0x1ca/0xeb0 [ 709.683324][T14722] queue_delayed_work_on+0x1ca/0x390 [ 709.683346][T14722] psi_task_change+0xed/0x270 [ 709.683364][T14722] enqueue_task+0x2de/0x340 [ 709.683384][T14722] wake_up_new_task+0x576/0xc70 [ 709.683400][T14722] kernel_clone+0x475/0x880 [ 709.683421][T14722] user_mode_thread+0x132/0x1a0 [ 709.683442][T14722] rest_init+0x23/0x300 [ 709.683461][T14722] start_kernel+0x47f/0x500 [ 709.683479][T14722] x86_64_start_reservations+0x2a/0x30 [ 709.683500][T14722] x86_64_start_kernel+0x9f/0xa0 [ 709.683520][T14722] common_startup_64+0x13e/0x147 [ 709.683539][T14722] [ 709.683539][T14722] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 709.683562][T14722] lock_acquire+0x1ed/0x550 [ 709.683583][T14722] _raw_spin_lock_nested+0x31/0x40 [ 709.683599][T14722] raw_spin_rq_lock_nested+0x2a/0x140 [ 709.683624][T14722] task_rq_lock+0xc6/0x360 [ 709.683642][T14722] cgroup_move_task+0x9b/0x5a0 [ 709.683661][T14722] css_set_move_task+0x72e/0x950 [ 709.683680][T14722] cgroup_post_fork+0x256/0x880 [ 709.683697][T14722] copy_process+0x39e9/0x3d50 [ 709.683717][T14722] kernel_clone+0x223/0x880 [ 709.683737][T14722] user_mode_thread+0x132/0x1a0 [ 709.683758][T14722] rest_init+0x23/0x300 [ 709.683777][T14722] start_kernel+0x47f/0x500 [ 709.683793][T14722] x86_64_start_reservations+0x2a/0x30 [ 709.683814][T14722] x86_64_start_kernel+0x9f/0xa0 [ 709.683834][T14722] common_startup_64+0x13e/0x147 [ 709.683852][T14722] [ 709.683852][T14722] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 709.683875][T14722] lock_acquire+0x1ed/0x550 [ 709.683896][T14722] _raw_spin_lock_irqsave+0xd5/0x120 [ 709.683917][T14722] try_to_wake_up+0xbe/0x14b0 [ 709.683932][T14722] up+0x72/0x90 [ 709.683948][T14722] __console_unlock+0x101/0x1f0 [ 709.683967][T14722] console_unlock+0x18f/0x3b0 [ 709.683984][T14722] vprintk_emit+0x730/0xa10 [ 709.684001][T14722] _printk+0xd5/0x120 [ 709.684017][T14722] show_trace_log_lvl+0x38a/0x410 [ 709.684032][T14722] dump_stack_lvl+0x241/0x360 [ 709.684050][T14722] should_fail_ex+0x3b0/0x4e0 [ 709.684065][T14722] _copy_from_user+0x31/0xe0 [ 709.684087][T14722] copy_from_sockptr+0x62/0xa0 [ 709.684106][T14722] ip_mroute_setsockopt+0x6b0/0x1190 [ 709.684125][T14722] do_ip_setsockopt+0x129f/0x3cd0 [ 709.684143][T14722] ip_setsockopt+0x63/0x100 [ 709.684160][T14722] do_sock_setsockopt+0x3af/0x720 [ 709.684179][T14722] __sys_setsockopt+0x1a2/0x250 [ 709.684197][T14722] __x64_sys_setsockopt+0xb5/0xd0 [ 709.684215][T14722] do_syscall_64+0xf3/0x230 [ 709.684232][T14722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.684250][T14722] [ 709.684250][T14722] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 709.684273][T14722] validate_chain+0x18ef/0x5920 [ 709.684289][T14722] __lock_acquire+0x1384/0x2050 [ 709.684311][T14722] lock_acquire+0x1ed/0x550 [ 709.684331][T14722] _raw_spin_lock_irqsave+0xd5/0x120 [ 709.684353][T14722] down_trylock+0x20/0xa0 [ 709.684370][T14722] __down_trylock_console_sem+0x109/0x250 [ 709.684389][T14722] vprintk_emit+0x3d7/0xa10 [ 709.684406][T14722] _printk+0xd5/0x120 [ 709.684421][T14722] should_fail_ex+0x391/0x4e0 [ 709.684436][T14722] strncpy_from_user+0x36/0x260 [ 709.684451][T14722] strncpy_from_user_nofault+0x71/0x140 [ 709.684469][T14722] bpf_probe_read_compat_str+0xe9/0x180 [ 709.684490][T14722] bpf_prog_5a96084758a59459+0x41/0x48 [ 709.684504][T14722] bpf_trace_run2+0x2ec/0x540 [ 709.684521][T14722] enqueue_timer+0x3ce/0x570 [ 709.684542][T14722] __mod_timer+0xa0e/0xeb0 [ 709.684559][T14722] sk_reset_timer+0x23/0xc0 [ 709.684581][T14722] tipc_sk_finish_conn+0x16b/0x820 [ 709.684599][T14722] tipc_socketpair+0x25c/0x4b0 [ 709.684621][T14722] __sys_socketpair+0x40f/0x720 [ 709.684637][T14722] __x64_sys_socketpair+0x9b/0xb0 [ 709.684652][T14722] do_syscall_64+0xf3/0x230 [ 709.684670][T14722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.684686][T14722] [ 709.684686][T14722] other info that might help us debug this: [ 709.684686][T14722] [ 709.684692][T14722] Chain exists of: [ 709.684692][T14722] (console_sem).lock --> &rq->__lock --> &base->lock [ 709.684692][T14722] [ 709.684719][T14722] Possible unsafe locking scenario: [ 709.684719][T14722] [ 709.684725][T14722] CPU0 CPU1 [ 709.684731][T14722] ---- ---- [ 709.684736][T14722] lock(&base->lock); [ 709.684748][T14722] lock(&rq->__lock); [ 709.684760][T14722] lock(&base->lock); [ 709.684773][T14722] lock((console_sem).lock); [ 709.684785][T14722] [ 709.684785][T14722] *** DEADLOCK *** [ 709.684785][T14722] [ 709.684790][T14722] 2 locks held by syz.2.2606/14722: [ 709.684802][T14722] #0: ffff8880b862a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 709.684845][T14722] #1: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 709.684887][T14722] [ 709.684887][T14722] stack backtrace: [ 709.684894][T14722] CPU: 0 UID: 0 PID: 14722 Comm: syz.2.2606 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 709.684915][T14722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 709.684926][T14722] Call Trace: [ 709.684933][T14722] [ 709.684941][T14722] dump_stack_lvl+0x241/0x360 [ 709.684962][T14722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 709.684982][T14722] ? __pfx__printk+0x10/0x10 [ 709.685004][T14722] print_circular_bug+0x13a/0x1b0 [ 709.685025][T14722] check_noncircular+0x36a/0x4a0 [ 709.685045][T14722] ? __pfx_check_noncircular+0x10/0x10 [ 709.685064][T14722] ? lockdep_lock+0x123/0x2b0 [ 709.685091][T14722] validate_chain+0x18ef/0x5920 [ 709.685119][T14722] ? __pfx_validate_chain+0x10/0x10 [ 709.685137][T14722] ? __pfx_prb_first_seq+0x10/0x10 [ 709.685161][T14722] ? this_cpu_in_panic+0x4f/0x80 [ 709.685178][T14722] ? _prb_read_valid+0xa39/0xac0 [ 709.685202][T14722] ? mark_lock+0x9a/0x360 [ 709.685220][T14722] __lock_acquire+0x1384/0x2050 [ 709.685249][T14722] lock_acquire+0x1ed/0x550 [ 709.685271][T14722] ? down_trylock+0x20/0xa0 [ 709.685290][T14722] ? __pfx_desc_update_last_finalized+0x10/0x10 [ 709.685310][T14722] ? __pfx_lock_acquire+0x10/0x10 [ 709.685332][T14722] ? rcu_is_watching+0x15/0xb0 [ 709.685353][T14722] ? vprintk_store+0xd3e/0x1160 [ 709.685376][T14722] _raw_spin_lock_irqsave+0xd5/0x120 [ 709.685399][T14722] ? down_trylock+0x20/0xa0 [ 709.685417][T14722] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 709.685440][T14722] ? validate_chain+0x11e/0x5920 [ 709.685458][T14722] ? validate_chain+0x11e/0x5920 [ 709.685478][T14722] down_trylock+0x20/0xa0 [ 709.685498][T14722] __down_trylock_console_sem+0x109/0x250 [ 709.685518][T14722] ? mark_lock+0x9a/0x360 [ 709.685534][T14722] ? _printk+0xd5/0x120 [ 709.685551][T14722] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 709.685572][T14722] ? __lock_acquire+0x1384/0x2050 [ 709.685611][T14722] ? this_cpu_in_panic+0x4f/0x80 [ 709.685633][T14722] ? is_printk_legacy_deferred+0x43/0x50 [ 709.685656][T14722] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 709.685677][T14722] vprintk_emit+0x3d7/0xa10 [ 709.685696][T14722] ? __pfx_vprintk_emit+0x10/0x10 [ 709.685715][T14722] ? mark_lock+0x9a/0x360 [ 709.685737][T14722] _printk+0xd5/0x120 [ 709.685757][T14722] ? __pfx__printk+0x10/0x10 [ 709.685779][T14722] should_fail_ex+0x391/0x4e0 [ 709.685799][T14722] strncpy_from_user+0x36/0x260 [ 709.685817][T14722] strncpy_from_user_nofault+0x71/0x140 [ 709.685837][T14722] bpf_probe_read_compat_str+0xe9/0x180 [ 709.685861][T14722] ? bpf_trace_run2+0x1fc/0x540 [ 709.685879][T14722] bpf_prog_5a96084758a59459+0x41/0x48 [ 709.685894][T14722] bpf_trace_run2+0x2ec/0x540 [ 709.685915][T14722] ? __pfx_bpf_trace_run2+0x10/0x10 [ 709.685934][T14722] ? __pfx_debug_object_activate+0x10/0x10 [ 709.685952][T14722] ? __lock_acquire+0x1384/0x2050 [ 709.685976][T14722] enqueue_timer+0x3ce/0x570 [ 709.686001][T14722] __mod_timer+0xa0e/0xeb0 [ 709.686025][T14722] ? __pfx___mod_timer+0x10/0x10 [ 709.686044][T14722] ? __pfx_lock_acquire+0x10/0x10 [ 709.686066][T14722] ? net_generic+0x1f/0x240 [ 709.686083][T14722] ? __pfx_lock_release+0x10/0x10 [ 709.686108][T14722] sk_reset_timer+0x23/0xc0 [ 709.686131][T14722] tipc_sk_finish_conn+0x16b/0x820 [ 709.686153][T14722] tipc_socketpair+0x25c/0x4b0 [ 709.686173][T14722] __sys_socketpair+0x40f/0x720 [ 709.686192][T14722] ? __pfx___sys_socketpair+0x10/0x10 [ 709.686208][T14722] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 709.686233][T14722] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 709.686257][T14722] ? do_syscall_64+0x100/0x230 [ 709.686277][T14722] __x64_sys_socketpair+0x9b/0xb0 [ 709.686296][T14722] do_syscall_64+0xf3/0x230 [ 709.686315][T14722] ? clear_bhb_loop+0x35/0x90 [ 709.686334][T14722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.686352][T14722] RIP: 0033:0x7f7de357e719 [ 709.686367][T14722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.686382][T14722] RSP: 002b:00007f7de42af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 709.686400][T14722] RAX: ffffffffffffffda RBX: 00007f7de3735f80 RCX: 00007f7de357e719 [ 709.686414][T14722] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 709.686426][T14722] RBP: 00007f7de42af090 R08: 0000000000000000 R09: 0000000000000000 [ 709.686438][T14722] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000001 [ 709.686451][T14722] R13: 0000000000000000 R14: 00007f7de3735f80 R15: 00007ffff604c308 [ 709.686470][T14722] [ 710.738351][T14722] CPU: 0 UID: 0 PID: 14722 Comm: syz.2.2606 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 710.749119][T14722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 710.759165][T14722] Call Trace: [ 710.762434][T14722] [ 710.765355][T14722] dump_stack_lvl+0x241/0x360 [ 710.770029][T14722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 710.775218][T14722] ? __pfx__printk+0x10/0x10 [ 710.779817][T14722] should_fail_ex+0x3b0/0x4e0 [ 710.784515][T14722] strncpy_from_user+0x36/0x260 [ 710.789368][T14722] strncpy_from_user_nofault+0x71/0x140 [ 710.794917][T14722] bpf_probe_read_compat_str+0xe9/0x180 [ 710.800463][T14722] ? bpf_trace_run2+0x1fc/0x540 [ 710.805315][T14722] bpf_prog_5a96084758a59459+0x41/0x48 [ 710.810763][T14722] bpf_trace_run2+0x2ec/0x540 [ 710.815439][T14722] ? __pfx_bpf_trace_run2+0x10/0x10 [ 710.820631][T14722] ? __pfx_debug_object_activate+0x10/0x10 [ 710.826429][T14722] ? __lock_acquire+0x1384/0x2050 [ 710.831455][T14722] enqueue_timer+0x3ce/0x570 [ 710.836046][T14722] __mod_timer+0xa0e/0xeb0 [ 710.840458][T14722] ? __pfx___mod_timer+0x10/0x10 [ 710.845398][T14722] ? __pfx_lock_acquire+0x10/0x10 [ 710.850415][T14722] ? net_generic+0x1f/0x240 [ 710.854907][T14722] ? __pfx_lock_release+0x10/0x10 [ 710.859926][T14722] sk_reset_timer+0x23/0xc0 [ 710.864424][T14722] tipc_sk_finish_conn+0x16b/0x820 [ 710.869528][T14722] tipc_socketpair+0x25c/0x4b0 [ 710.874284][T14722] __sys_socketpair+0x40f/0x720 [ 710.879127][T14722] ? __pfx___sys_socketpair+0x10/0x10 [ 710.884492][T14722] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 710.890469][T14722] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 710.896796][T14722] ? do_syscall_64+0x100/0x230 [ 710.901553][T14722] __x64_sys_socketpair+0x9b/0xb0 [ 710.906576][T14722] do_syscall_64+0xf3/0x230 [ 710.911074][T14722] ? clear_bhb_loop+0x35/0x90 [ 710.915742][T14722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.921631][T14722] RIP: 0033:0x7f7de357e719 [ 710.926039][T14722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.945652][T14722] RSP: 002b:00007f7de42af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 710.954057][T14722] RAX: ffffffffffffffda RBX: 00007f7de3735f80 RCX: 00007f7de357e719 [ 710.962017][T14722] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 710.969995][T14722] RBP: 00007f7de42af090 R08: 0000000000000000 R09: 0000000000000000 [ 710.977979][T14722] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000001 [ 710.985949][T14722] R13: 0000000000000000 R14: 00007f7de3735f80 R15: 00007ffff604c308 [ 710.993926][T14722] [ 711.004276][ T5882] m920x_read = error: -19 [ 711.008766][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 711.018869][ T5839] Bluetooth: hci2: command tx timeout [ 711.168724][ T5882] m920x_read = error: -19 [ 711.173171][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 711.348772][ T5882] m920x_read = error: -19 [ 711.353162][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 711.518756][ T5882] m920x_read = error: -19 [ 711.523135][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 711.631550][T14667] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.645405][T14667] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.652965][T14667] bridge_slave_0: entered allmulticast mode [ 711.663206][T14667] bridge_slave_0: entered promiscuous mode [ 711.671915][T14667] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.679970][T14667] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.687122][T14667] bridge_slave_1: entered allmulticast mode [ 711.693478][ T8] m920x_read = error: -19 [ 711.697849][ T8] dvb-usb: error -19 while querying for an remote control event. [ 711.707375][T14667] bridge_slave_1: entered promiscuous mode [ 711.744140][T14667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.755055][T14667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.794067][T14667] team0: Port device team_slave_0 added [ 711.801499][T14667] team0: Port device team_slave_1 added [ 711.820189][T14667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.827207][T14667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.853295][T14667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.864192][ T5882] m920x_read = error: -19 [ 711.868531][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 711.877530][T14667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.884982][T14667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.911054][T14667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.942585][T14667] hsr_slave_0: entered promiscuous mode [ 711.950135][T14667] hsr_slave_1: entered promiscuous mode [ 711.956190][T14667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 711.963983][T14667] Cannot create hsr debugfs directory [ 712.029036][ T5882] m920x_read = error: -19 [ 712.033412][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 712.136060][T14704] syz.3.2602: vmalloc error: size 601137152, failed to allocated page array size 1174096, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 712.154029][T14704] CPU: 0 UID: 0 PID: 14704 Comm: syz.3.2602 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 [ 712.164802][T14704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 712.174855][T14704] Call Trace: [ 712.178126][T14704] [ 712.181055][T14704] dump_stack_lvl+0x241/0x360 [ 712.185738][T14704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 712.190927][T14704] ? __pfx__printk+0x10/0x10 [ 712.195509][T14704] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 712.201916][T14704] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 712.208410][T14704] warn_alloc+0x278/0x410 [ 712.212741][T14704] ? __pfx_warn_alloc+0x10/0x10 [ 712.217589][T14704] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 712.223736][T14704] ? __get_vm_area_node+0x23d/0x270 [ 712.228936][T14704] __vmalloc_node_range_noprof+0x691/0x13f0 [ 712.234824][T14704] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 712.240552][T14704] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 712.246876][T14704] ? rcu_is_watching+0x15/0xb0 [ 712.251637][T14704] ? trace_kmalloc+0x1f/0xd0 [ 712.256221][T14704] ? __kmalloc_node_noprof+0x247/0x440 [ 712.261673][T14704] ? __kvmalloc_node_noprof+0x72/0x190 [ 712.267128][T14704] __kvmalloc_node_noprof+0x142/0x190 [ 712.272493][T14704] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 712.278642][T14704] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 712.284621][T14704] ? tpg_update_mv_step+0x361/0x4f0 [ 712.289817][T14704] vivid_update_format_cap+0x133c/0x2090 [ 712.295448][T14704] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 712.301425][T14704] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 712.307232][T14704] __video_do_ioctl+0xc23/0xdd0 [ 712.312078][T14704] ? __pfx___video_do_ioctl+0x10/0x10 [ 712.317442][T14704] ? __might_fault+0xc6/0x120 [ 712.322115][T14704] video_usercopy+0x89b/0x1180 [ 712.326872][T14704] ? __pfx___video_do_ioctl+0x10/0x10 [ 712.332236][T14704] ? __pfx_video_usercopy+0x10/0x10 [ 712.337427][T14704] ? smack_file_ioctl+0x2f7/0x3a0 [ 712.342449][T14704] ? __fget_files+0x3f3/0x470 [ 712.347123][T14704] v4l2_ioctl+0x189/0x1e0 [ 712.351442][T14704] ? __pfx_v4l2_ioctl+0x10/0x10 [ 712.356280][T14704] __se_sys_ioctl+0xf9/0x170 [ 712.360869][T14704] do_syscall_64+0xf3/0x230 [ 712.365380][T14704] ? clear_bhb_loop+0x35/0x90 [ 712.370052][T14704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.375935][T14704] RIP: 0033:0x7f23ea37e719 [ 712.380342][T14704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.399938][T14704] RSP: 002b:00007f23eb102038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 712.408345][T14704] RAX: ffffffffffffffda RBX: 00007f23ea535f80 RCX: 00007f23ea37e719 [ 712.416309][T14704] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 712.424272][T14704] RBP: 00007f23ea3f132e R08: 0000000000000000 R09: 0000000000000000 [ 712.432238][T14704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.440200][T14704] R13: 0000000000000000 R14: 00007f23ea535f80 R15: 00007fff75e11ca8 [ 712.448169][T14704] [ 712.452466][ T5882] m920x_read = error: -19 [ 712.456847][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 712.464991][T14704] Mem-Info: [ 712.468109][T14704] active_anon:995 inactive_anon:3331 isolated_anon:0 [ 712.468109][T14704] active_file:17231 inactive_file:41069 isolated_file:0 [ 712.468109][T14704] unevictable:768 dirty:95 writeback:0 [ 712.468109][T14704] slab_reclaimable:10807 slab_unreclaimable:98385 [ 712.468109][T14704] mapped:21859 shmem:2282 pagetables:634 [ 712.468109][T14704] sec_pagetables:0 bounce:0 [ 712.468109][T14704] kernel_misc_reclaimable:0 [ 712.468109][T14704] free:1145745 free_pcp:3730 free_cma:0 [ 712.513434][T14704] Node 0 active_anon:3980kB inactive_anon:13324kB active_file:68808kB inactive_file:164276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87396kB dirty:380kB writeback:0kB shmem:7592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10672kB pagetables:2536kB sec_pagetables:0kB all_unreclaimable? no [ 712.545929][T14704] Node 1 active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 712.576431][T14704] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 712.603614][T14704] lowmem_reserve[]: 0 2465 2466 0 0 [ 712.609066][T14704] Node 0 DMA32 free:655480kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:3976kB inactive_anon:13288kB active_file:68024kB inactive_file:164224kB unevictable:1536kB writepending:380kB present:3129332kB managed:2552508kB mlocked:0kB bounce:0kB free_pcp:14916kB local_pcp:6156kB free_cma:0kB [ 712.639818][ T8] m920x_read = error: -19 [ 712.644169][ T8] dvb-usb: error -19 while querying for an remote control event. [ 712.651940][T14704] lowmem_reserve[]: 0 0 0 0 0 [ 712.656672][T14704] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:784kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 712.683630][T14704] lowmem_reserve[]: 0 0 0 0 0 [ 712.688369][T14704] Node 1 Normal free:3911756kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 712.717263][T14704] lowmem_reserve[]: 0 0 0 0 0 [ 712.722045][T14704] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 712.734813][T14704] Node 0 DMA32: 809*4kB (UME) 715*8kB (UME) 508*16kB (UME) 218*32kB (UME) 126*64kB (UME) 33*128kB (UME) 10*256kB (UME) 56*512kB (UME) 50*1024kB (UME) 24*2048kB (UME) 119*4096kB (UM) = 655356kB [ 712.754010][T14704] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 712.763043][T14667] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 712.765560][T14704] Node 1 Normal: 215*4kB (UME) 56*8kB (UME) 39*16kB (UME) 198*32kB (UME) 88*64kB (UME) 24*128kB (UME) 16*256kB (UME) 9*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (UM) = 3911756kB [ 712.791190][T14704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 712.793109][T14667] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 712.800827][T14704] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 712.800849][T14704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 712.800868][T14704] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 712.800885][T14704] 60584 total pagecache pages [ 712.800893][T14704] 0 pages in swap cache [ 712.800902][T14704] Free swap = 124492kB [ 712.800910][T14704] Total swap = 124996kB [ 712.800920][T14704] 2097051 pages RAM [ 712.800927][T14704] 0 pages HighMem/MovableOnly [ 712.800935][T14704] 427072 pages reserved [ 712.800943][T14704] 0 pages cma reserved [ 712.808735][ T8] m920x_read = error: -19 [ 712.876227][T14667] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 712.886423][T14667] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 712.928712][ T8] dvb-usb: error -19 while querying for an remote control event. [ 712.950089][T14667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.967418][T14667] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.978930][ T184] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.986061][ T184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.010706][ T184] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.017763][ T184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.072620][ T5839] Bluetooth: hci2: command tx timeout [ 713.088844][ T970] m920x_read = error: -19 [ 713.093224][ T970] dvb-usb: error -19 while querying for an remote control event. [ 713.142846][T14667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.166845][T14667] veth0_vlan: entered promiscuous mode [ 713.175131][T14667] veth1_vlan: entered promiscuous mode [ 713.193280][T14667] veth0_macvtap: entered promiscuous mode [ 713.201171][T14667] veth1_macvtap: entered promiscuous mode [ 713.211970][T14667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.223359][T14667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.233324][T14667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.243789][T14667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.254488][T14667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.262070][ T5882] m920x_read = error: -19 [ 713.266394][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 713.277587][T14667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.288117][T14667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.298038][T14667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.308763][T14667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.319449][T14667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.329426][T14667] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.338110][T14667] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.346931][T14667] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.355956][T14667] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.377681][T14667] ieee80211 phy47: Selected rate control algorithm 'minstrel_ht' [ 713.395051][ T9703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.396469][T14667] ieee80211 phy48: Selected rate control algorithm 'minstrel_ht' [ 713.403261][ T9703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.424873][ T9703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.433178][ T9703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.440556][ T5882] m920x_read = error: -19 [ 713.444879][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 713.609586][ T5882] m920x_read = error: -19 [ 713.613943][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 713.778831][ T5882] m920x_read = error: -19 [ 713.783181][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 713.949646][ T5882] m920x_read = error: -19 [ 713.954059][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 714.118702][ T5882] m920x_read = error: -19 [ 714.123050][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 714.288756][ T5882] m920x_read = error: -19 [ 714.293142][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 714.458744][ T5882] m920x_read = error: -19 [ 714.463255][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 714.628777][ T5882] m920x_read = error: -19 [ 714.633150][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 714.798696][ T5882] m920x_read = error: -19 [ 714.803069][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 714.968744][ T5882] m920x_read = error: -19 [ 714.973209][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 715.138765][ T5882] m920x_read = error: -19 [ 715.143112][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 715.309558][ T5882] m920x_read = error: -19 [ 715.313922][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 715.336477][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.478697][ T5882] m920x_read = error: -19 [ 715.483087][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 715.648811][ T5882] m920x_read = error: -19 [ 715.653188][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 715.818737][ T5882] m920x_read = error: -19 [ 715.823117][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 715.988715][ T5882] m920x_read = error: -19 [ 715.993094][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 716.158689][ T5882] m920x_read = error: -19 [ 716.163082][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 716.328728][ T5882] m920x_read = error: -19 [ 716.333101][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 716.498745][ T5882] m920x_read = error: -19 [ 716.503124][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 716.669338][ T5882] m920x_read = error: -19 [ 716.673700][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 716.848707][ T5882] m920x_read = error: -19 [ 716.853080][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 717.018905][ T5882] m920x_read = error: -19 [ 717.023789][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 717.188800][ T5882] m920x_read = error: -19 [ 717.193180][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 717.344205][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.359681][ T5882] m920x_read = error: -19 [ 717.364038][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 717.413521][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.472822][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.539849][ T5882] m920x_read = error: -19 [ 717.544230][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 717.562765][ T61] bridge_slave_1: left allmulticast mode [ 717.568437][ T61] bridge_slave_1: left promiscuous mode [ 717.575180][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.584435][ T61] bridge_slave_0: left allmulticast mode [ 717.590364][ T61] bridge_slave_0: left promiscuous mode [ 717.596012][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.703341][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.716518][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.726476][ T61] bond0 (unregistering): Released all slaves [ 717.732634][ T5910] m920x_read = error: -19 [ 717.737123][ T5910] dvb-usb: error -19 while querying for an remote control event. [ 717.898776][ T5882] m920x_read = error: -19 [ 717.903149][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 717.964725][ T61] hsr_slave_0: left promiscuous mode [ 717.971863][ T61] hsr_slave_1: left promiscuous mode [ 717.977579][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.985173][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.993790][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.002699][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.012798][ T61] veth1_macvtap: left promiscuous mode [ 718.018312][ T61] veth0_macvtap: left promiscuous mode [ 718.024027][ T61] veth1_vlan: left promiscuous mode [ 718.030926][ T61] veth0_vlan: left promiscuous mode [ 718.068828][ T5882] m920x_read = error: -19 [ 718.073200][ T5882] dvb-usb: error -19 while querying for an remote control event. [ 718.176277][ T61] team0 (unregistering): Port device team_slave_1 removed [ 718.191558][ T61] team0 (unregistering): Port device team_slave_0 removed [ 718.248723][ T8] m920x_read = error: -19 [ 718.253092][ T8] dvb-usb: error -19 while querying for an remote control event. [ 718.419672][ T8] m920x_read = error: -19 [ 718.424064][ T8] dvb-usb: error -19 while querying for an remote control event. [ 718.588918][ T8] m920x_read = error: -19 [ 718.593292][ T8] dvb-usb: error -19 while querying for an remote control event. [ 718.759606][ T8] m920x_read = error: -19 [ 718.763985][ T8] dvb-usb: error -19 while querying for an remote control event. [ 718.928796][ T8] m920x_read = error: -19 [ 718.933173][ T8] dvb-usb: error -19 while querying for an remote control event. [ 719.099341][ T8] m920x_read = error: -19 [ 719.103802][ T8] dvb-usb: error -19 while querying for an remote control event. [ 719.268845][ T8] m920x_read = error: -19 [ 719.273220][ T8] dvb-usb: error -19 while querying for an remote control event. [ 719.439603][ T8] m920x_read = error: -19 [ 719.443978][ T8] dvb-usb: error -19 while querying for an remote control event. [ 719.608809][ T8] m920x_read = error: -19 [ 719.613189][ T8] dvb-usb: error -19 while querying for an remote control event.