[  OK  ] Reached target Login Prompts.
[  OK  ] Reached target Multi-User System.
[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
[  OK  ] Started Update UTMP about System Runlevel Changes.

Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.0.160' (ECDSA) to the list of known hosts.
2020/11/16 22:38:44 fuzzer started
2020/11/16 22:38:44 dialing manager at 10.128.0.26:40323
2020/11/16 22:38:45 syscalls: 3449
2020/11/16 22:38:45 code coverage: enabled
2020/11/16 22:38:45 comparison tracing: enabled
2020/11/16 22:38:45 extra coverage: enabled
2020/11/16 22:38:45 setuid sandbox: enabled
2020/11/16 22:38:45 namespace sandbox: enabled
2020/11/16 22:38:45 Android sandbox: /sys/fs/selinux/policy does not exist
2020/11/16 22:38:45 fault injection: enabled
2020/11/16 22:38:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/11/16 22:38:45 net packet injection: enabled
2020/11/16 22:38:45 net device setup: enabled
2020/11/16 22:38:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/11/16 22:38:45 devlink PCI setup: PCI device 0000:00:10.0 is not available
2020/11/16 22:38:45 USB emulation: enabled
2020/11/16 22:38:45 hci packet injection: enabled
2020/11/16 22:38:45 wifi device emulation: enabled
22:42:10 executing program 0:
clock_gettime(0x0, &(0x7f0000001340))

22:42:10 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETSW(r0, 0x402c542b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cf15b12089d778675a6b40295af71da321139e"})

22:42:10 executing program 2:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

22:42:11 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETSW(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "cf15b12089d778675a6b40295af71da321139e"})

22:42:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)

22:42:11 executing program 5:
r0 = getpgrp(0xffffffffffffffff)
pidfd_open(r0, 0x0)

syzkaller login: [  273.569260][ T8504] IPVS: ftp: loaded support on port[0] = 21
[  273.810958][ T8506] IPVS: ftp: loaded support on port[0] = 21
[  273.873390][ T8504] chnl_net:caif_netlink_parms(): no params data found
[  274.016302][ T8508] IPVS: ftp: loaded support on port[0] = 21
[  274.087039][ T8504] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.094749][ T8504] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.103407][ T8504] device bridge_slave_0 entered promiscuous mode
[  274.143926][ T8506] chnl_net:caif_netlink_parms(): no params data found
[  274.162774][ T8504] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.176322][ T8504] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.189625][ T8504] device bridge_slave_1 entered promiscuous mode
[  274.270084][ T8504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.304384][ T8504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.340710][ T8510] IPVS: ftp: loaded support on port[0] = 21
[  274.451644][ T8504] team0: Port device team_slave_0 added
[  274.493351][ T8504] team0: Port device team_slave_1 added
[  274.521844][ T8512] IPVS: ftp: loaded support on port[0] = 21
[  274.531253][ T8506] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.545252][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.553029][ T8506] device bridge_slave_0 entered promiscuous mode
[  274.584976][ T8506] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.592088][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.602078][ T8506] device bridge_slave_1 entered promiscuous mode
[  274.629741][ T8504] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.636955][ T8504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.663832][ T8504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.679697][ T8504] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.687835][ T8504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.715428][ T8504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.771658][ T8506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.896902][ T8506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.991455][ T8504] device hsr_slave_0 entered promiscuous mode
[  275.000458][ T8504] device hsr_slave_1 entered promiscuous mode
[  275.028340][ T8508] chnl_net:caif_netlink_parms(): no params data found
[  275.056866][ T8572] IPVS: ftp: loaded support on port[0] = 21
[  275.081931][ T8510] chnl_net:caif_netlink_parms(): no params data found
[  275.095239][ T8506] team0: Port device team_slave_0 added
[  275.125712][ T8506] team0: Port device team_slave_1 added
[  275.181120][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.188826][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.216566][ T8506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.252966][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.260557][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.286763][ T8506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.434827][ T8512] chnl_net:caif_netlink_parms(): no params data found
[  275.505529][    T5] Bluetooth: hci0: command 0x0409 tx timeout
[  275.514469][ T8510] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.521652][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.534242][ T8510] device bridge_slave_0 entered promiscuous mode
[  275.556685][ T8506] device hsr_slave_0 entered promiscuous mode
[  275.568599][ T8506] device hsr_slave_1 entered promiscuous mode
[  275.576240][ T8506] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  275.584143][ T8506] Cannot create hsr debugfs directory
[  275.590082][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.598172][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.606312][ T8508] device bridge_slave_0 entered promiscuous mode
[  275.618109][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.625766][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.634270][ T8508] device bridge_slave_1 entered promiscuous mode
[  275.662724][ T8510] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.670347][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.678859][ T8510] device bridge_slave_1 entered promiscuous mode
[  275.725999][ T8508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.738430][ T8510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.749048][ T3003] Bluetooth: hci1: command 0x0409 tx timeout
[  275.782442][ T8508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.809945][ T8510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.867579][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.875330][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.883347][ T8512] device bridge_slave_0 entered promiscuous mode
[  275.918066][ T8508] team0: Port device team_slave_0 added
[  275.960287][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.970458][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.979911][ T8512] device bridge_slave_1 entered promiscuous mode
[  275.985827][ T3194] Bluetooth: hci2: command 0x0409 tx timeout
[  275.991614][ T8508] team0: Port device team_slave_1 added
[  276.014993][ T8510] team0: Port device team_slave_0 added
[  276.026114][ T8510] team0: Port device team_slave_1 added
[  276.032262][ T8504] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  276.086208][ T8512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  276.110268][ T8504] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  276.125332][ T8512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  276.135152][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.142106][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.169341][ T8508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.181879][ T8572] chnl_net:caif_netlink_parms(): no params data found
[  276.199555][ T8504] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  276.212123][ T8504] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  276.231973][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.239314][ T3003] Bluetooth: hci3: command 0x0409 tx timeout
[  276.243468][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.272408][ T8508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.290777][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.298412][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.325165][ T8510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.372588][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.379902][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.408297][ T8510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.423563][ T8512] team0: Port device team_slave_0 added
[  276.433228][ T8512] team0: Port device team_slave_1 added
[  276.464426][ T3194] Bluetooth: hci4: command 0x0409 tx timeout
[  276.526144][ T8508] device hsr_slave_0 entered promiscuous mode
[  276.533346][ T8508] device hsr_slave_1 entered promiscuous mode
[  276.541079][ T8508] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  276.549431][ T8508] Cannot create hsr debugfs directory
[  276.569806][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.576957][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.604136][ T8512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.621324][ T8510] device hsr_slave_0 entered promiscuous mode
[  276.629882][ T8510] device hsr_slave_1 entered promiscuous mode
[  276.636795][ T8510] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  276.644618][ T8510] Cannot create hsr debugfs directory
[  276.680045][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.688165][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.715911][ T8512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.814912][ T8512] device hsr_slave_0 entered promiscuous mode
[  276.822281][ T8512] device hsr_slave_1 entered promiscuous mode
[  276.830113][ T8512] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  276.838524][ T8512] Cannot create hsr debugfs directory
[  276.844310][ T8572] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.851384][ T8572] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.861846][ T8572] device bridge_slave_0 entered promiscuous mode
[  276.868346][ T3003] Bluetooth: hci5: command 0x0409 tx timeout
[  276.877225][ T8572] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.885685][ T8572] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.893491][ T8572] device bridge_slave_1 entered promiscuous mode
[  276.959932][ T8506] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  277.010126][ T8572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  277.029603][ T8506] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  277.052033][ T8572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  277.068927][ T8506] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  277.149161][ T8506] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  277.231148][ T8572] team0: Port device team_slave_0 added
[  277.241647][ T8572] team0: Port device team_slave_1 added
[  277.265755][ T8510] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  277.313984][ T8510] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  277.361140][ T8510] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  277.386182][ T8510] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  277.405767][ T8572] batman_adv: batadv0: Adding interface: batadv_slave_0
[  277.412787][ T8572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.440535][ T8572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  277.461891][ T8504] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.497031][ T8572] batman_adv: batadv0: Adding interface: batadv_slave_1
[  277.504014][ T8572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.532897][ T8572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  277.576174][ T8508] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  277.585082][    T5] Bluetooth: hci0: command 0x041b tx timeout
[  277.596282][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  277.610375][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  277.650488][ T8508] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  277.660542][ T8508] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  277.683966][ T8508] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  277.699350][ T8504] 8021q: adding VLAN 0 to HW filter on device team0
[  277.710533][ T8572] device hsr_slave_0 entered promiscuous mode
[  277.718904][ T8572] device hsr_slave_1 entered promiscuous mode
[  277.726135][ T8572] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  277.733793][ T8572] Cannot create hsr debugfs directory
[  277.803302][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  277.813189][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  277.824622][ T3003] Bluetooth: hci1: command 0x041b tx timeout
[  277.831122][ T3194] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.838470][ T3194] bridge0: port 1(bridge_slave_0) entered forwarding state
[  277.856731][ T8512] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  277.866574][ T8512] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  277.908283][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  277.916637][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  277.926218][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  277.940864][ T8882] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.948031][ T8882] bridge0: port 2(bridge_slave_1) entered forwarding state
[  277.958755][ T8512] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  277.974568][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  278.007592][ T8512] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  278.026432][ T8506] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.037773][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  278.046496][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  278.056901][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  278.068050][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  278.075643][ T3003] Bluetooth: hci2: command 0x041b tx timeout
[  278.109746][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  278.121468][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  278.163703][ T8504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  278.174401][ T8504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  278.205597][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  278.214009][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  278.224421][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  278.235638][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  278.243910][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  278.252726][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  278.272815][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  278.297765][ T8506] 8021q: adding VLAN 0 to HW filter on device team0
[  278.304804][    T5] Bluetooth: hci3: command 0x041b tx timeout
[  278.327159][ T8510] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.390448][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  278.401046][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  278.411020][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  278.419609][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  278.437499][ T8504] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.445743][ T8572] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  278.468314][ T8510] 8021q: adding VLAN 0 to HW filter on device team0
[  278.476288][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  278.487520][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  278.496482][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.503530][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.513427][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  278.546344][    T5] Bluetooth: hci4: command 0x041b tx timeout
[  278.557450][ T8572] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  278.572439][ T8572] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  278.582169][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  278.592369][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  278.601913][ T3194] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.609088][ T3194] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.617087][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  278.626405][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  278.635387][ T3194] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.642482][ T3194] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.650525][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  278.659699][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  278.668643][ T3194] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.675821][ T3194] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.683847][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  278.716194][ T8572] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  278.730989][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  278.740668][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  278.749661][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  278.759433][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  278.774376][ T8508] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.801824][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  278.811702][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  278.822047][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  278.863676][ T8504] device veth0_vlan entered promiscuous mode
[  278.878776][ T8508] 8021q: adding VLAN 0 to HW filter on device team0
[  278.887693][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  278.901430][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  278.910458][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  278.923071][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  278.932213][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  278.941674][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  278.950836][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  278.959637][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  278.968821][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  278.977611][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  278.987687][    T5] Bluetooth: hci5: command 0x041b tx timeout
[  279.015317][ T8510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  279.027538][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  279.039432][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  279.048523][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  279.057016][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  279.066050][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  279.074832][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  279.083471][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  279.092648][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  279.119500][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  279.133517][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  279.142942][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  279.158990][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  279.168218][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.175355][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.185662][ T8504] device veth1_vlan entered promiscuous mode
[  279.193158][ T3003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  279.235517][ T8506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  279.246317][ T8506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  279.268859][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  279.279192][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  279.289842][ T3194] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.297284][ T3194] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.305426][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  279.313767][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  279.323203][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  279.331833][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  279.352313][ T8510] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.362529][ T8512] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.381612][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  279.390316][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  279.399612][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  279.407344][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  279.416656][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  279.481725][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  279.494781][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  279.503477][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  279.512574][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  279.520685][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  279.529752][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  279.538680][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  279.547765][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  279.563219][ T8572] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.577364][ T8512] 8021q: adding VLAN 0 to HW filter on device team0
[  279.601868][ T8506] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.613920][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  279.622425][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  279.630601][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  279.638728][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  279.648256][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  279.664794][ T9457] Bluetooth: hci0: command 0x040f tx timeout
[  279.669310][ T8572] 8021q: adding VLAN 0 to HW filter on device team0
[  279.694322][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  279.702192][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  279.711358][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  279.721649][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  279.730549][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.737733][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.746572][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  279.755697][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  279.781211][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  279.819328][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  279.828799][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  279.839462][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  279.848446][ T3194] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.855640][ T3194] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.864851][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  279.873427][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  279.882586][ T3194] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.889733][ T3194] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.897833][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  279.907239][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  279.914132][ T9457] Bluetooth: hci1: command 0x040f tx timeout
[  279.921035][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  279.930009][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  279.939370][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  279.977865][ T8504] device veth0_macvtap entered promiscuous mode
[  279.989115][ T8510] device veth0_vlan entered promiscuous mode
[  280.033517][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  280.041898][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  280.057601][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  280.067502][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  280.076129][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  280.086781][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  280.096153][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  280.106111][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  280.115400][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  280.123770][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  280.133295][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  280.142197][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  280.152033][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  280.154827][ T9457] Bluetooth: hci2: command 0x040f tx timeout
[  280.160748][ T9777] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.173139][ T9777] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.195278][ T8512] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  280.208512][ T8512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  280.239049][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  280.247694][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  280.258762][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  280.268989][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  280.278032][ T9777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  280.289409][ T8504] device veth1_macvtap entered promiscuous mode
[  280.308790][ T8506] device veth0_vlan entered promiscuous mode
[  280.336911][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  280.345702][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  280.353853][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  280.367748][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  280.385113][    T5] Bluetooth: hci3: command 0x040f tx timeout
[  280.392681][ T8504] batman_adv: batadv0: Interface activated: batadv_slave_0
[  280.405863][ T8510] device veth1_vlan entered promiscuous mode
[  280.421523][ T8504] batman_adv: batadv0: Interface activated: batadv_slave_1
[  280.442077][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  280.451269][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  280.459262][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  280.468878][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  280.477004][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  280.486284][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  280.495531][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  280.505669][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  280.515168][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  280.523892][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  280.532397][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  280.548835][ T8506] device veth1_vlan entered promiscuous mode
[  280.561947][ T8504] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  280.572672][ T8504] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  280.581980][ T8504] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.591829][ T8504] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.625208][    T5] Bluetooth: hci4: command 0x040f tx timeout
[  280.627796][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  280.640113][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  280.649995][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  280.659069][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  280.668330][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  280.677608][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  280.686470][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  280.695362][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  280.703713][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  280.713401][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  280.727910][ T8508] 8021q: adding VLAN 0 to HW filter on device batadv0
[  280.768547][ T8512] 8021q: adding VLAN 0 to HW filter on device batadv0
[  280.777067][ T8572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  280.874715][ T8510] device veth0_macvtap entered promiscuous mode
[  280.899895][ T8510] device veth1_macvtap entered promiscuous mode
[  280.916176][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  280.925331][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  280.934723][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  280.943192][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  281.028720][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  281.038195][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  281.059630][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  281.084928][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  281.096815][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  281.106802][    T5] Bluetooth: hci5: command 0x040f tx timeout
[  281.134905][ T8506] device veth0_macvtap entered promiscuous mode
[  281.163141][ T8508] device veth0_vlan entered promiscuous mode
[  281.180968][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  281.200463][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  281.210798][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  281.219772][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  281.229694][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  281.251327][ T8506] device veth1_macvtap entered promiscuous mode
[  281.263522][ T8572] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.296575][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  281.305360][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  281.313199][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  281.322947][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  281.334243][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.349047][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.369867][  T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.386053][  T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.409583][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  281.418283][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  281.428006][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  281.446540][ T8508] device veth1_vlan entered promiscuous mode
[  281.457647][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  281.474542][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.486991][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.507245][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  281.529263][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  281.540140][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  281.550209][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  281.569805][ T8510] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.582175][ T8510] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.591783][ T8510] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.600978][ T8510] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.635543][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  281.656083][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.667004][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  281.678368][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.690544][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_0
[  281.726837][ T8512] device veth0_vlan entered promiscuous mode
[  281.741768][  T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.744095][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  281.751381][  T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.760092][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  281.774843][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  281.783183][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  281.791915][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  281.799927][    T7] Bluetooth: hci0: command 0x0419 tx timeout
[  281.812418][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  281.824582][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.837563][ T8506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  281.848289][ T8506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.861394][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.875420][ T8506] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.884703][ T8506] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.893990][ T8506] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.902702][ T8506] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.924488][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  281.932416][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  281.941128][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  281.950312][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  281.959906][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  281.969370][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  281.993938][    T5] Bluetooth: hci1: command 0x0419 tx timeout
[  282.043445][ T8508] device veth0_macvtap entered promiscuous mode
22:42:20 executing program 0:
socket(0x2, 0x0, 0xffffff7f)

[  282.085607][ T8512] device veth1_vlan entered promiscuous mode
[  282.128097][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  282.138431][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  282.164917][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
22:42:20 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = gettid()
r2 = perf_event_open(&(0x7f0000000540)={0x4, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0, 0x5c1}, r1, 0xd, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000200)='ns/time\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x12)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000340)="3291f963e4b6b68aa565a24b3a0025ba10b832f0447e8c69d74930ee9a9853de6747d4714982ad369bbe631a4149562ef2aed6f36f2101edffb2c5cc54775720738fe442f26446aa40e04817905a97f420d5b7bdba067fd45e8e56aa10abd6c9f895a072eed89c44b42132771f1684", &(0x7f0000000640)=""/214}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ab}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @ldst={0x0, 0x0, 0x6, 0x0, 0xf}, @generic={0x0, 0x6, 0x9, 0x14, 0x9}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x63, &(0x7f00000002c0)=""/99, 0x0, 0x1, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x3, 0x4, 0x4}, 0x10}, 0x78)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff)
close(0xffffffffffffffff)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$kcm(r4, 0x0, 0x400c000)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000500))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r4, 0x0, 0x0, &(0x7f0000000300)}, 0x30)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x70, 0x81, 0x1, 0x0, 0x1f, 0x0, 0x9, 0x20, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x1800, 0x1, 0x8, 0x2, 0x2, 0x0, 0x81}, r3, 0xb, 0xffffffffffffffff, 0x7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000))

[  282.184882][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  282.235150][    T7] Bluetooth: hci2: command 0x0419 tx timeout
[  282.287872][ T8508] device veth1_macvtap entered promiscuous mode
[  282.336415][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  282.349572][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  282.369729][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  282.385274][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  282.393819][    C1] hrtimer: interrupt took 88895 ns
[  282.441985][  T245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  282.454638][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  282.462630][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  282.494004][  T245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.514591][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  282.545417][ T8572] device veth0_vlan entered promiscuous mode
[  282.551735][    T7] Bluetooth: hci3: command 0x0419 tx timeout
[  282.590237][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  282.613758][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.623609][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
22:42:20 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = gettid()
r2 = perf_event_open(&(0x7f0000000540)={0x4, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0, 0x5c1}, r1, 0xd, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000200)='ns/time\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x12)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000340)="3291f963e4b6b68aa565a24b3a0025ba10b832f0447e8c69d74930ee9a9853de6747d4714982ad369bbe631a4149562ef2aed6f36f2101edffb2c5cc54775720738fe442f26446aa40e04817905a97f420d5b7bdba067fd45e8e56aa10abd6c9f895a072eed89c44b42132771f1684", &(0x7f0000000640)=""/214}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ab}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @ldst={0x0, 0x0, 0x6, 0x0, 0xf}, @generic={0x0, 0x6, 0x9, 0x14, 0x9}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x63, &(0x7f00000002c0)=""/99, 0x0, 0x1, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x3, 0x4, 0x4}, 0x10}, 0x78)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff)
close(0xffffffffffffffff)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$kcm(r4, 0x0, 0x400c000)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000500))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r4, 0x0, 0x0, &(0x7f0000000300)}, 0x30)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x70, 0x81, 0x1, 0x0, 0x1f, 0x0, 0x9, 0x20, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x1800, 0x1, 0x8, 0x2, 0x2, 0x0, 0x81}, r3, 0xb, 0xffffffffffffffff, 0x7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000))

[  282.704397][ T3003] Bluetooth: hci4: command 0x0419 tx timeout
[  282.722281][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.746596][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  282.763541][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.790725][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.868946][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  282.886817][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
22:42:21 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = gettid()
r2 = perf_event_open(&(0x7f0000000540)={0x4, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, @perf_config_ext={0x1385}, 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0, 0x5c1}, r1, 0xd, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000200)='ns/time\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x12)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000340)="3291f963e4b6b68aa565a24b3a0025ba10b832f0447e8c69d74930ee9a9853de6747d4714982ad369bbe631a4149562ef2aed6f36f2101edffb2c5cc54775720738fe442f26446aa40e04817905a97f420d5b7bdba067fd45e8e56aa10abd6c9f895a072eed89c44b42132771f1684", &(0x7f0000000640)=""/214}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ab}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @ldst={0x0, 0x0, 0x6, 0x0, 0xf}, @generic={0x0, 0x6, 0x9, 0x14, 0x9}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x63, &(0x7f00000002c0)=""/99, 0x0, 0x1, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x3, 0x4, 0x4}, 0x10}, 0x78)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff)
close(0xffffffffffffffff)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$kcm(r4, 0x0, 0x400c000)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000500))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r4, 0x0, 0x0, &(0x7f0000000300)}, 0x30)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x70, 0x81, 0x1, 0x0, 0x1f, 0x0, 0x9, 0x20, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x1800, 0x1, 0x8, 0x2, 0x2, 0x0, 0x81}, r3, 0xb, 0xffffffffffffffff, 0x7)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000000))

[  282.922938][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  282.935937][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  282.960542][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  282.973011][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.992058][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  283.002690][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.028816][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  283.053815][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.080481][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_1
[  283.126326][ T8572] device veth1_vlan entered promiscuous mode
[  283.126561][  T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.164583][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  283.173571][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  283.216061][  T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.246418][ T8512] device veth0_macvtap entered promiscuous mode
[  283.253062][    T7] Bluetooth: hci5: command 0x0419 tx timeout
[  283.274462][ T8508] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.285938][ T8508] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.299485][ T8508] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.311725][ T8508] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
22:42:21 executing program 0:
perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x20000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  283.347772][  T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.363094][  T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.364813][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  283.392327][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  283.409791][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  283.433348][    T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.456803][ T8512] device veth1_macvtap entered promiscuous mode
[  283.478871][    T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
22:42:21 executing program 0:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00'})
socketpair(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

[  283.534268][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  283.543077][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  283.564578][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  283.588694][ T8572] device veth0_macvtap entered promiscuous mode
[  283.640765][ T8572] device veth1_macvtap entered promiscuous mode
22:42:21 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bond_slave_1\x00'})

[  283.684780][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  283.743313][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
22:42:21 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc004743e, &(0x7f0000000680)='&@[\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x4004743d, &(0x7f0000000680)='&@[\x00')

[  283.783670][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  283.811572][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.840310][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  283.860380][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.881494][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  283.904525][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  283.930008][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_0
[  283.995153][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  284.003402][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  284.024956][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  284.044895][ T9897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  284.067499][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  284.087088][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.098284][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  284.110115][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.120925][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  284.133006][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.144122][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  284.156205][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.169160][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.185531][    T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.250003][    T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.296904][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  284.308091][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  284.318003][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  284.335784][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  284.351312][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.361758][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  284.373155][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.431351][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  284.453309][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.475854][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  284.502606][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.513012][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  284.530975][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.543395][ T8572] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.576988][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  284.589075][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  284.605713][ T8512] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.622556][ T8512] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.636717][ T8512] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.645894][ T8512] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  284.661704][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  284.674567][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.688075][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  284.700007][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.710636][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  284.729343][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.740131][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  284.750881][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.761227][ T8572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  284.772083][ T8572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.799513][ T8572] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.810320][  T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.820872][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  284.830991][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  284.833778][  T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.852593][ T8572] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.873728][ T8572] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.882460][ T8572] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.904634][ T8572] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  284.944097][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
22:42:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
connect(r0, 0x0, 0x700)

22:42:23 executing program 3:
r0 = socket$kcm(0x10, 0x3, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="2e00000031000d08d22780648c6394fb0124fc0010000b400c000200053582c137153e370900018025643000d1bd", 0x2e}], 0x1}, 0x0)

[  285.099825][    T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.129859][    T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.179493][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  285.214045][  T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.222804][ T9974] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'.
[  285.236663][  T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.259896][  T245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.280293][  T245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.298517][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  285.350514][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  285.389555][  T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.408554][  T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.435257][ T3194] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
22:42:23 executing program 4:
pipe(&(0x7f0000004100)={<r0=>0xffffffffffffffff})
sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0)

22:42:23 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time_for_children\x00')

22:42:23 executing program 0:
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.type\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000500)={{0x0, 0x81, 0x0, 0x0, 0x0, 0x9e4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}})
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000001a00)='batadv\x00')
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)

22:42:23 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
pwrite64(r0, 0x0, 0x0, 0x0)

22:42:23 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x19, 0x0, 0x0, 0xa49e}, 0x40)

22:42:23 executing program 2:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_genetlink_get_family_id$nbd(0x0)
connect$x25(r0, &(0x7f0000001f80)={0x9, @null='               \x00'}, 0x12)

22:42:23 executing program 4:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x9, 0x0, &(0x7f0000001980))

22:42:23 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', 0x0})

22:42:23 executing program 3:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4)

22:42:23 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000002500)=[{&(0x7f00000005c0)=@in6={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000600)="a9", 0x1}], 0x1, &(0x7f00000008c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x3}}], 0x30}], 0x1, 0x0)

22:42:23 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f00000000c0)=0x54)

22:42:23 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

22:42:23 executing program 1:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, 0x0}, 0x78)

22:42:24 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x12, 0x0, &(0x7f0000001980))

22:42:24 executing program 0:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r0, 0x0, 0x0)

22:42:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x1)

22:42:24 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

22:42:24 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$sock(r0, &(0x7f0000001400)={&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "251066e0cec82198ee774b13998fa5376fcc05ba431d621f6a722379ec852bd97e3c91fed835e3aafe6b4595a0bfca9a7d9561b449990aa965ee1a800813a2"}, 0x80, 0x0, 0x0, &(0x7f00000013c0)=[@timestamping={{0x14}}], 0x18}, 0x0)

22:42:24 executing program 0:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, 0xc)

22:42:24 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180), &(0x7f00000001c0)=0xc)

22:42:24 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000000)=@raw=[@map_val], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

22:42:24 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x17, 0x0, &(0x7f0000001980))

22:42:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r1, 0x309}, 0x14}}, 0x0)
recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

22:42:24 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108)

22:42:24 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'})

22:42:24 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000), 0x8)

22:42:24 executing program 2:
read$usbmon(0xffffffffffffffff, 0x0, 0x0)

22:42:24 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

22:42:24 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$sock(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[@timestamping={{0x14}}], 0x18}, 0x0)

22:42:24 executing program 1:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1a9b0}, 0x78)

22:42:24 executing program 4:
syz_mount_image$vxfs(&(0x7f0000000200)='vxfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x1, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0x7c0, 0x40}], 0x0, &(0x7f0000001380))

22:42:24 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0xc0a, &(0x7f0000000180)={0x0, 0x8000, 0x0, 0x0, 0x3b7}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffff}, {}, {0x4}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r7, &(0x7f0000000200), 0x492492492492570, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000018c0)={&(0x7f00000002c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001800)=[{0x0}, {&(0x7f00000013c0)=""/139, 0x8b}, {&(0x7f0000001580)=""/143, 0x8f}, {&(0x7f0000001640)=""/82, 0x52}, {&(0x7f0000001900)=""/102400, 0x19000}, {&(0x7f0000001700)=""/238, 0xee}], 0x44}}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x1000000)

22:42:24 executing program 2:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f00000001c0), 0x4)

22:42:24 executing program 0:
r0 = openat$uinput(0xffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_RELBIT(r0, 0xc00c55ca, 0x0)

22:42:24 executing program 2:
syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x4b, 0x2b, 0x0, @dev, @local, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@dev]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

[  286.601309][T10069] vxfs: WRONG superblock magic 53532fdd at 1
22:42:24 executing program 5:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04db07000000000001090224000100000000090400000903000001"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

[  286.662767][T10069] vxfs: unable to read disk superblock at 8
[  286.670120][T10069] vxfs: can't find superblock.
22:42:24 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080))

[  286.703157][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
22:42:24 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0)

[  286.753571][T10069] vxfs: WRONG superblock magic 53532fdd at 1
[  286.761643][T10069] vxfs: unable to read disk superblock at 8
[  286.820281][T10069] vxfs: can't find superblock.
[  286.861199][T10090] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  286.916515][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
22:42:25 executing program 2:
read$usbmon(0xffffffffffffffff, 0x0, 0x0)
socket$unix(0x1, 0x0, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f00000008c0)=[{0x0, 0x0, 0xa6a47a5}])

22:42:25 executing program 4:
symlinkat(&(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00')
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x0)
open$dir(&(0x7f0000000240)='./file1\x00', 0x0, 0x0)

22:42:25 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="200000000001000050000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef1a620e34103e2fa9339f2609c9a7ffd662b4a53f5e0d45af9202629037faa7607a5dc3add7c0ac04f15dbaa7", 0x66, 0x400}], 0x0, &(0x7f0000000140))

22:42:25 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0xc0a, &(0x7f0000000180)={0x0, 0x8000, 0x0, 0x0, 0x3b7}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffff}, {}, {0x4}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x4}}]}, 0x34}}, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r7, &(0x7f0000000200), 0x492492492492570, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000018c0)={&(0x7f00000002c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001800)=[{0x0}, {&(0x7f00000013c0)=""/139, 0x8b}, {&(0x7f0000001580)=""/143, 0x8f}, {&(0x7f0000001640)=""/82, 0x52}, {&(0x7f0000001900)=""/102400, 0x19000}, {&(0x7f0000001700)=""/238, 0xee}], 0x44}}, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x1000000)

22:42:25 executing program 1:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300))

[  287.084189][ T9457] usb 6-1: new high-speed USB device number 2 using dummy_hcd
22:42:25 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x17, 0x0, 0x0)

[  287.222566][T10114] BFS-fs: bfs_fill_super(): WARNING: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  287.242468][T10113] EXT4-fs warning (device loop0): ext4_fill_super:4098: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  287.270391][T10114] BFS-fs: bfs_fill_super(): Last block not available on loop1: 1507328
[  287.286730][T10115] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  287.309504][T10113] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  287.374973][ T9457] usb 6-1: Using ep0 maxpacket: 16
[  287.456971][T10114] BFS-fs: bfs_fill_super(): WARNING: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  287.487095][T10113] EXT4-fs warning (device loop0): ext4_fill_super:4098: metadata_csum and uninit_bg are redundant flags; please run fsck.
22:42:25 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x491282, 0x0)
socket$inet6(0xa, 0x3, 0x6)
pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000780)="c3", 0x1}], 0x1, 0x4000002, 0x0)
write$binfmt_elf32(r0, &(0x7f0000001f40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58)

[  287.507036][ T9457] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.535812][T10114] BFS-fs: bfs_fill_super(): Last block not available on loop1: 1507328
[  287.539210][ T9457] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
22:42:25 executing program 4:
sysfs$2(0x2, 0x87, 0x0)

[  287.558139][ T9457] usb 6-1: New USB device found, idVendor=045e, idProduct=07db, bcdDevice= 0.00
[  287.567504][ T9457] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.575778][T10113] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  287.671510][ T9457] usb 6-1: config 0 descriptor??
22:42:25 executing program 1:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300))

[  287.853232][T10142] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  288.008106][T10152] BFS-fs: bfs_fill_super(): WARNING: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  288.024091][ T9457] usb 6-1: string descriptor 0 read error: -71
[  288.077882][ T9457] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  288.079202][T10152] BFS-fs: bfs_fill_super(): Last block not available on loop1: 1507328
[  288.089453][ T9457] usb 6-1: USB disconnect, device number 2
[  288.763323][ T9777] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  289.013400][ T9777] usb 6-1: Using ep0 maxpacket: 16
[  289.143512][ T9777] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  289.189200][ T9777] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  289.218190][ T9777] usb 6-1: New USB device found, idVendor=045e, idProduct=07db, bcdDevice= 0.00
[  289.243856][ T9777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.259671][ T9777] usb 6-1: config 0 descriptor??
22:42:27 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x60}}, 0x0)

22:42:27 executing program 0:
r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x10)

22:42:27 executing program 4:
r0 = openat$uinput(0xffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x402c582b, 0x0)

22:42:27 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000240)=ANY=[])
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x491282, 0x0)
socket$inet6(0xa, 0x3, 0x6)
pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000780)="c3", 0x1}], 0x1, 0x4000002, 0x0)
write$binfmt_elf32(r0, &(0x7f0000001f40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58)

22:42:27 executing program 1:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300))

22:42:27 executing program 3:
r0 = socket$inet(0xa, 0x80805, 0x0)
socket$inet(0x2, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @rand_addr=0xac14ffbb}}}, &(0x7f0000000180)=0x9c)

[  289.593304][ T9777] usb 6-1: string descriptor 0 read error: -71
[  289.663773][ T9777] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  289.730955][ T9777] usb 6-1: USB disconnect, device number 3
[  289.761581][T10198] BFS-fs: bfs_fill_super(): WARNING: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  289.804282][T10198] BFS-fs: bfs_fill_super(): Last block not available on loop1: 1507328
22:42:27 executing program 5:
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x7}, 0xc)

22:42:27 executing program 0:
r0 = openat$uinput(0xffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x402c5839, 0x0)

22:42:27 executing program 4:
pselect6(0x40, &(0x7f0000000380)={0x7}, &(0x7f00000003c0)={0x1}, 0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={[0x8]}, 0x8})

22:42:28 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="00fffbffff00000008000a000d000000250012000800010076657468"], 0x200}}, 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000040))
r0 = socket(0x10, 0x800000000080002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="9f090000000000000401087f3321a53af24e4c38cefda9395de25d64f4cae992e8e2730340190aa31c11d196c5da4df6c0fbf9a7d2535d72fbbc4a7f14e79fb9c910fc00"/88], 0x58)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1)
ioctl$VT_OPENQRY(r1, 0x5600, 0x0)
ioctl$TIOCCONS(r1, 0x541d)
socket(0x2, 0x0, 0x100000001)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='fdinfo/3\x00')
read$usbfs(r2, 0x0, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0)

[  289.900047][T10201] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
22:42:28 executing program 1:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300))

22:42:28 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, 0x0, 0x0)

22:42:28 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0)

22:42:28 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$netlink(r0, &(0x7f0000005300)={0x0, 0x0, &(0x7f0000005280)=[{&(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x316}, 0x0)

[  290.170730][T10229] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'.
22:42:28 executing program 0:
select(0x40, &(0x7f0000000140), &(0x7f0000000180)={0x101}, 0x0, 0x0)

[  290.227522][T10229] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.3'.
[  290.229016][T10231] BFS-fs: bfs_fill_super(): WARNING: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
22:42:28 executing program 0:
perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

22:42:28 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000980)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0)

[  290.405533][T10231] BFS-fs: bfs_fill_super(): Last block not available on loop1: 1507328
22:42:28 executing program 5:
r0 = socket(0xa, 0x3, 0xff)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

22:42:28 executing program 2:
r0 = socket(0x29, 0x5, 0x0)
write$nbd(r0, 0x0, 0x46)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_deladdr={0x18}, 0x18}}, 0x0)

[  290.455403][T10229] bridge0: port 3(veth3) entered blocking state
[  290.485588][T10229] bridge0: port 3(veth3) entered disabled state
[  290.545970][T10229] device veth3 entered promiscuous mode
22:42:28 executing program 4:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x4a481, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x40000)

22:42:28 executing program 1:
syz_mount_image$bfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300))

22:42:28 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$unix(r0, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003740)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0)

22:42:28 executing program 2:
r0 = socket(0xa, 0x5, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0)

22:42:28 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x8}, 0x0, 0x0, 0x0)

22:42:28 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040041200", @ANYRES32=0x0, @ANYBLOB="00fffbffff00000008000a000d000000250012000800010076657468"], 0x200}}, 0x0)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000040))
r0 = socket(0x10, 0x800000000080002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="9f090000000000000401087f3321a53af24e4c38cefda9395de25d64f4cae992e8e2730340190aa31c11d196c5da4df6c0fbf9a7d2535d72fbbc4a7f14e79fb9c910fc00"/88], 0x58)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1)
ioctl$VT_OPENQRY(r1, 0x5600, 0x0)
ioctl$TIOCCONS(r1, 0x541d)
socket(0x2, 0x0, 0x100000001)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='fdinfo/3\x00')
read$usbfs(r2, 0x0, 0x0)
openat$proc_capi20(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0)

22:42:28 executing program 4:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x4a481, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x40000)

22:42:28 executing program 2:
socketpair(0x1, 0x1, 0x0, &(0x7f0000004880)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000004900)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x11c, 0x5, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x20, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xe0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}]}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}]}, @NL80211_PMSR_ATTR_PEERS={0xd8c, 0x5, 0x0, 0x1, [{0x47c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x130, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x154, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0x544, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x98, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xc4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x208, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x16c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x27c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x118, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x90, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}]}]}]}]}, 0xec4}}, 0x2000040)

22:42:29 executing program 1:
syz_mount_image$bfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300))

[  290.923422][T10286] binder: 10282:10286 ioctl c0306201 0 returned -14
[  290.955895][T10290] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'.
22:42:29 executing program 4:
r0 = socket(0x23, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})

[  290.966833][T10290] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.3'.
22:42:29 executing program 0:
r0 = socket(0xa, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0)

[  291.007889][T10290] bridge0: port 4(veth5) entered blocking state
[  291.021001][T10290] bridge0: port 4(veth5) entered disabled state
[  291.040579][T10290] device veth5 entered promiscuous mode
22:42:29 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b5a80c7a"}})

22:42:29 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = getpgrp(0x0)
sendmsg$unix(r0, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003740)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee00}}}], 0x20}, 0x0)

22:42:29 executing program 1:
syz_mount_image$bfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300))

22:42:29 executing program 3:
r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0xc0001)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x21)

22:42:29 executing program 4:
r0 = socket(0x23, 0x5, 0x0)
recvmsg$kcm(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x40012160)

[  291.244551][T10290] syz-executor.3 (10290) used greatest stack depth: 22504 bytes left
[  291.674142][T10336] binder: 10282:10336 ioctl c0306201 0 returned -14
22:42:29 executing program 5:
socketpair(0x1, 0x1, 0x0, &(0x7f0000004880)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000004900)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

22:42:29 executing program 0:
r0 = socket(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "827be1d8cf98fd8e70cbe6aceea7e8895c9b74b276b1e7c97de9f35d89dc348c879093fc076048a71aba840d4585b66e115d1ffbeb408675fa74d0fe061acd"}, 0x80, 0x0}, 0x0)

22:42:29 executing program 2:
r0 = socket(0xa, 0x5, 0x0)
sendmsg$unix(r0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x0)

22:42:29 executing program 4:
r0 = getpgrp(0x0)
r1 = getpid()
tgkill(r1, r0, 0x21)

22:42:29 executing program 3:
r0 = socket(0xa, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

22:42:29 executing program 1:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300))

22:42:29 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000000), 0x0)

22:42:29 executing program 1:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300))

22:42:29 executing program 4:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0)

22:42:30 executing program 2:
r0 = socket(0x23, 0x2, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000840)={&(0x7f0000000100), 0xc, &(0x7f0000000800)={0x0}}, 0x0)

22:42:30 executing program 0:
r0 = socket(0x23, 0x5, 0x0)
write$nbd(r0, 0x0, 0x46)

22:42:30 executing program 5:
r0 = getpid()
r1 = getpid()
tgkill(r0, r1, 0x1c)

22:42:30 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001880)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r2 = getpid()
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001880)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001880)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001880)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
sendmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x50}, 0x0)

22:42:30 executing program 4:
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000))

22:42:30 executing program 0:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-control\x00', 0x0, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-control\x00', 0x0, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r1}})

22:42:30 executing program 2:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0)
flistxattr(r0, 0x0, 0x0)

22:42:30 executing program 1:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', 0x0, 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {&(0x7f0000010200)="02002e", 0x3, 0x9}], 0x0, &(0x7f0000010300))

22:42:30 executing program 3:
r0 = semget(0x2, 0x0, 0x0)
semtimedop(r0, &(0x7f0000000100)=[{}], 0x1, 0x0)

22:42:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff000000000c000100736b627072696f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)
recvmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0)

22:42:30 executing program 5:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000240), 0x8)
ioctl$LOOP_SET_FD(r0, 0x5452, 0xffffffffffffffff)

22:42:30 executing program 0:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x0, 0x0)
read$midi(r0, &(0x7f0000000180)=""/127, 0x7f)

22:42:30 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f0000000240)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}]})
mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0)

22:42:30 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
readahead(r0, 0x0, 0x0)

[  292.427086][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  292.462554][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
22:42:30 executing program 5:
keyctl$reject(0xb, 0x0, 0x0, 0x0, 0x0)

22:42:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff000000000c000100736b627072696f"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0)
recvmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0)

22:42:30 executing program 2:
keyctl$reject(0x7, 0x0, 0x0, 0x0, 0x0)

22:42:30 executing program 1:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010300))

22:42:30 executing program 0:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-control\x00', 0x0, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040), 0xc, 0x0)

22:42:30 executing program 5:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-control\x00', 0x0, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-control\x00', 0x0, 0x0)
dup3(r0, r1, 0x0)

22:42:30 executing program 2:
r0 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x5, 0x0)
poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x3)

22:42:30 executing program 3:
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x18}, 0xc)

[  292.759120][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
22:42:30 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x0)

22:42:30 executing program 2:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-control\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)

22:42:30 executing program 0:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$get_security(0x11, r0, &(0x7f0000000000)=""/110, 0x6e)

22:42:30 executing program 1:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010300))

22:42:30 executing program 4:
r0 = socket(0x18, 0x0, 0x1)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={0x0}}, 0x0)

22:42:31 executing program 2:
r0 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0)
fspick(r0, &(0x7f0000000040)='./file0\x00', 0x0)

22:42:31 executing program 5:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_ifreq(r0, 0x2, 0x0)

22:42:31 executing program 0:
fsopen(&(0x7f0000000000)='adfs\x00', 0x0)

22:42:31 executing program 3:
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1f}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000200)={0xa}, 0x0, 0x0})

22:42:31 executing program 1:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000010300))

22:42:31 executing program 4:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm-control\x00', 0x0, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000))

22:42:31 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @generic={0x0, "e85282a934dfeec16928509290e1"}, @phonet, @xdp, 0x9})

22:42:31 executing program 1:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}], 0x0, &(0x7f0000010300))

22:42:31 executing program 2:
r0 = socket$inet(0x2, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0)

22:42:31 executing program 5:
openat$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', 0x10140, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0xa2600, 0x0)

22:42:31 executing program 4:
r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000e80)='/dev/dlm-monitor\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)

22:42:31 executing program 0:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_ifreq(r0, 0x541b, 0x0)

22:42:31 executing program 5:
socket(0xa, 0x6, 0x3)

[  293.414797][T10459] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1
22:42:31 executing program 2:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)

22:42:31 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ifreq(r0, 0x541b, 0x0)

[  293.482905][    T5] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  293.843040][    T5] usb 4-1: not running at top speed; connect to a high speed hub
[  294.120034][    T5] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.40
[  294.139121][    T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.171191][    T5] usb 4-1: Product: syz
[  294.187513][    T5] usb 4-1: Manufacturer: syz
[  294.192701][    T5] usb 4-1: SerialNumber: syz
[  294.513508][    T5] usbhid 4-1:1.0: can't add hid device: -22
[  294.519950][    T5] usbhid: probe of 4-1:1.0 failed with error -22
[  294.604247][    T5] usb 4-1: USB disconnect, device number 2
[  295.264476][ T9457] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  295.612910][ T9457] usb 4-1: not running at top speed; connect to a high speed hub
[  295.882891][ T9457] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.40
[  295.891957][ T9457] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.900385][ T9457] usb 4-1: Product: syz
[  295.908396][ T9457] usb 4-1: Manufacturer: syz
[  295.913431][ T9457] usb 4-1: SerialNumber: syz
22:42:34 executing program 3:
r0 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'})

22:42:34 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f000000b4c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee01}}}], 0x18}], 0x1, 0x0)

22:42:34 executing program 1:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}], 0x0, &(0x7f0000010300))

22:42:34 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000002180)={0x9}, 0x40)

22:42:34 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xb1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)

22:42:34 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f000000b800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x18}}, @rights={{0xc}}], 0x24}], 0x1, 0x0)

[  296.202918][ T9457] usbhid 4-1:1.0: can't add hid device: -22
[  296.209194][ T9457] usbhid: probe of 4-1:1.0 failed with error -22
22:42:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000039c0)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5}]}, 0x24}}, 0x0)

[  296.269288][ T9457] usb 4-1: USB disconnect, device number 3
[  296.279956][T10524] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1
22:42:34 executing program 4:
r0 = socket$inet(0x2, 0x5, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)

22:42:34 executing program 0:
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)

22:42:34 executing program 1:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}], 0x0, &(0x7f0000010300))

22:42:34 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r0=>0xffffffffffffffff})
ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'veth1_to_batadv\x00', @ifru_map})

22:42:34 executing program 4:
openat$dlm_monitor(0xffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x410203, 0x0)

22:42:34 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000026c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)

22:42:34 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000027c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)

[  296.513688][ T8882] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  296.528381][T10552] veth1_to_batadv: mtu less than device minimum
[  296.542167][T10548] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1
22:42:34 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000003340)={0x0, 0x0, 0x0, &(0x7f0000003140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78)

22:42:34 executing program 1:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="cefaad1b00820000ff0f0000ffffffff", 0x10}, {0x0, 0x0, 0x200}, {0x0, 0x0, 0x9}], 0x0, &(0x7f0000010300))

[  296.792871][ T8882] usb 3-1: Using ep0 maxpacket: 32
[  296.811370][T10565] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1
[  296.822731][ T9777] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  296.913039][ T8882] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  297.093292][ T8882] usb 3-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.40
[  297.102384][ T8882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.127670][ T8882] usb 3-1: Product: syz
[  297.144504][ T8882] usb 3-1: Manufacturer: syz
[  297.161884][ T8882] usb 3-1: SerialNumber: syz
[  297.201419][ T9777] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  297.217151][ T8882] usbhid 3-1:1.0: couldn't find an input interrupt endpoint