last executing test programs: 4m16.522322306s ago: executing program 2 (id=318): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c40001"], 0x30}, 0x1, 0x0, 0x0, 0x40002}, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000043c0000000c0a010100000000000000000a0000060900020073797a3100000000090001007379202aeb08bd76fac716dfb3797a3100000000100003800800008004000180040000802c0000000e0a010200000000000000000a0000040900020073797a31000000000900010073797a31000000001400000011000100"], 0xd4}, 0x1, 0x0, 0x0, 0x400c852}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)="8da68f49890108024bc8c42848179fc945e4221c81c59df3eb376149ecac052398e8f3b9630cfc93bd9bb4e181690b0e579123958a05afd1e99e68b0e38f4978a64734cfe022a029afd4620043db7c1886eaa03d38e897617ec98d933224ee092563c972320ea4386ddefd52db6345da0b8a1845ea1c6d5055e9ea992374d714e53072bac2096f21e0868cb8286fa1882c3d47e2d48e55e748a4eab0ea1f", 0x9e}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="2e86d77d4ecff5c0da85a67a4f94a42e68cb4b45f145a1e8cddc961170f22ba58d9c230c8fc8c5ccc090d9aa94f1ea755d58837aeb4b99366834c1ad86d504f47e5f407711aaa10bb61a0fc31c697baf223ed593b84147dfd12ea8dd881bb7666657abeebfb7cd0b7188e37bbf851ec3c3c8b230b437d8ce366125953ae3920e9a44911a6e61be701aa35c50c4e38b6caf1189375f84746ce22a3d2cf2cdc65315ed64b974cf7b7967b6094d0a74d42199ed3b5428ef979343fd4c262c88fa70879a41fb4307c4c15447", 0xca}, {&(0x7f0000000080)="d455ca0650b6e50c", 0x8}], 0x4, 0xe) (async) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x3, &(0x7f0000000340)) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r8, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB="28000000130a030000000000000000000200000a0900020073797a300000000008706bf19bdeab349ec8ce344db568ed3c0d4e6fe28fddb0925bf97580ca05121470d38d542d3fd91c8ec0ec7fcfe160e245530fa507a516cf671bcd221169ac2adbd65a2c7b46eef4653a159df17b98cf398ef3fd34ff012d2d45f2c6735993bdbc180d04c93f58d776a708469468a2cc6e5098e61f231f734eabddbb902106fc77bb61f7cf13d6fcee8350"], 0x28}}, 0x0) read$FUSE(r7, &(0x7f0000003440)={0x2020}, 0x2020) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1b, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x80000000, 0x6]}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) (async) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) (async) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000140)='./file1\x00') (async) r9 = syz_open_dev$vivid(&(0x7f0000000280), 0x3, 0x2) close_range(r7, r9, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r10, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0xb, 0x4, 0xa000200000a958, 0x3, 0x3, 0x6a1c000, 0x5e96, 0x800000000000001, 0x100fff}) (async) write$cgroup_int(r10, &(0x7f0000000100)=0x6, 0x12) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r11, 0x84, 0x1e, 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x4) 4m16.191793437s ago: executing program 2 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000080000030000000140004006e69637666300000000000000000000008000500060000000c001780040007"], 0x50}, 0x1, 0x2100, 0x0, 0x4}, 0x40048a4) 4m16.085266162s ago: executing program 2 (id=323): openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi0\x00', 0x2401, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000000)="31a15332938f7bd53c804648c6af344a7aabaf11bbcc8bdacf09e294161eae3db93a1e635b5007ea868317c1bb202a99e68d4f7ec15a7cc415f8b6db3bc571854d56d2fd80d933417a54ee7702e5ba97728fa002a003afcca3114ea440169f5898800bc8bce40f5260f2e5b10b6b32b120a8e9156672f243d9901235958a5e1df051cfc12569b86a9e89d79399a85394af80ebf77ef1003884df8f06922bbe08321cdd023049d6c5", 0xa8) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000001c0)={0x0, 0xe0, 0x3, &(0x7f0000000000)={0x10, "0000005d00f305dfbd0d0000008000"}}) set_mempolicy(0x3, &(0x7f0000000080)=0x7e, 0x9) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x3c00, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x10008}, {0x2, 0x9}, {0x0, 0x8}, {0x4, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x0, 0x1, 0x6}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES32=r4, @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',version=9p2000,\x00']) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2], 0x15) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r6) ioctl$XFS_IOC_GETBMAPA(r3, 0xc020582c, &(0x7f0000000200)={0xffffffffffffffff, 0x3ea2, 0x7, 0x80000001, 0x24e}) syz_io_uring_submit(r6, 0x0, &(0x7f0000000240)=@IORING_OP_CLOSE={0x13, 0x2a, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}) 4m15.957337477s ago: executing program 2 (id=325): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') shmat(0x0, &(0x7f00005f5000/0x2000)=nil, 0x7000) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) (fail_nth: 5) 4m15.725367173s ago: executing program 2 (id=326): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x80000000, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) r1 = dup(r0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r1, 0x0) mremap(&(0x7f0000002000/0x4000)=nil, 0x200000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 4m15.374527082s ago: executing program 2 (id=328): r0 = socket(0x2a, 0x2, 0x10000000000002) syz_usb_connect$midi(0x0, 0x50, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x1, 0x18, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x200, 0xf, 0xd7, 0x2, {0x6, 0x25, 0x1, 0x2, "3b8c"}}}, {{0x9, 0x5, 0x8c, 0x2, 0x200, 0x6d, 0xf7, 0x7, {0x14, 0x25, 0x1, 0x10, "3a2420083452d3d7c673b3fa4e09a247"}}}]}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000000c0)={0x27, r2, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r1) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) close(r0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x88001, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x4) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r6, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/180, 0xb4}], 0x1, 0xa9, 0xc) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) r7 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="00b3c603d300"], 0x6) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r7, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r7, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f0000b4bffc)=0x8, 0x4) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000700)="a3", 0x1}], 0x1}}], 0x1, 0x60) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x29, 0xe, 0xe8, 0xffff57bc, 0x21, @local, @remote, 0x80, 0x8000, 0x100, 0x2}}) r8 = socket(0x40000000015, 0x5, 0x0) recvmmsg$unix(r8, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x63, 0x0) 3m59.981128746s ago: executing program 32 (id=328): r0 = socket(0x2a, 0x2, 0x10000000000002) syz_usb_connect$midi(0x0, 0x50, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x1, 0x18, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x200, 0xf, 0xd7, 0x2, {0x6, 0x25, 0x1, 0x2, "3b8c"}}}, {{0x9, 0x5, 0x8c, 0x2, 0x200, 0x6d, 0xf7, 0x7, {0x14, 0x25, 0x1, 0x10, "3a2420083452d3d7c673b3fa4e09a247"}}}]}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000000c0)={0x27, r2, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r1) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) close(r0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x88001, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x4) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r6, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/180, 0xb4}], 0x1, 0xa9, 0xc) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) r7 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="00b3c603d300"], 0x6) bind$netlink(r7, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r7, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r7, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1e, &(0x7f0000b4bffc)=0x8, 0x4) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000700)="a3", 0x1}], 0x1}}], 0x1, 0x60) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x29, 0xe, 0xe8, 0xffff57bc, 0x21, @local, @remote, 0x80, 0x8000, 0x100, 0x2}}) r8 = socket(0x40000000015, 0x5, 0x0) recvmmsg$unix(r8, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x63, 0x0) 1m45.321943067s ago: executing program 3 (id=1059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000080000030000000140004006e69637666300000000000000000000008000500060000000c001780040007"], 0x50}, 0x1, 0x4200000000000000, 0x0, 0x4}, 0x40048a4) 1m45.228604627s ago: executing program 3 (id=1060): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x10, 0x1, 0xfffff029, 0xcfa, {{0x3f, 0x4, 0x0, 0x9, 0xfc, 0x65, 0x0, 0x7, 0x0, 0x0, @multicast1, @loopback, {[@timestamp={0x44, 0x1c, 0x61, 0x0, 0x7, [0x8, 0x6, 0x6, 0x5, 0x7fff, 0x100]}, @timestamp_addr={0x44, 0x3c, 0x94, 0x1, 0x3, [{@local, 0x9}, {@broadcast, 0x273a}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x40000}, {@multicast1, 0xa}, {@multicast1, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff}]}, @cipso={0x86, 0x8e, 0x3, [{0x0, 0xf, "23d08e4c78a931f87740d190b3"}, {0x2, 0xc, "1205d80cd9aaa5e9c853"}, {0x2, 0x10, "02132931e2e53766044167ccb26b"}, {0x5, 0x7, "52dd9aa9ee"}, {0x0, 0xf, "35dc7939f8cab78f60b988fb69"}, {0x0, 0xd, "b7fa83601e0920582c9295"}, {0x6, 0x11, "222b3b92f86d6fd710dd7a80eed9ee"}, {0x6, 0xd, "fe4875a2c1609e2efff860"}, {0x2, 0xd, "68d4182cf70bbc23e4e93d"}, {0x0, 0xf, "40e41add522ad2201442955f39"}]}]}}}}}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x4044000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x8010) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1a0, r5, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}, @NL80211_ATTR_PEER_MEASUREMENTS={0x13c, 0x111, 0x0, 0x1, {0x138, 0x5, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x13b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfc0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2b1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4621}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x180000}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x248}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x1a0}, 0x1, 0x0, 0x0, 0xc0c4}, 0x200000c4) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000b00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x1d4, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf79f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x22}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_MEDIA={0x100, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x91b1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe172000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x944}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x871}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd6b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4044}, 0x0) (async) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000b40), 0x2401, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x1407, 0x2, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x8010) (async) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000002500)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000024c0)={&(0x7f0000000d00)={0x1790, r5, 0x500, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x9}, @NL80211_ATTR_PEER_MEASUREMENTS={0x1708, 0x111, 0x0, 0x1, {0x1704, 0x5, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x41c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xd2600acbf2a2ebaa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x118, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x86}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x168, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x1e8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1cc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}]}, {0x5e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xe0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x388}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x60, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x254, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x12c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x87a0}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6e6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9ab}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x208, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1aa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x104, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x28, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x149}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffc0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}]}, {0x508, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff8000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x27c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xa5396ff23f35d53c}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x30, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x35}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x100}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}]}]}, {0x19c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x18c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x2e8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x100, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1d0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3be}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x8, 0x111, 0x0, 0x1, {0x4}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x101}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8}, @NL80211_ATTR_PEER_MEASUREMENTS={0x28, 0x111, 0x0, 0x1, {0x24, 0x5, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x1790}, 0x1, 0x0, 0x0, 0x11}, 0x24000010) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x6c, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @initial, @device_b}}, @NL80211_ATTR_FRAME={0x29, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_a, @from_mac=@broadcast, {0x1, 0x3}, @value=@ver_80211n={0x0, 0xd9, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @addba_req={0x3, 0x0, {0x2f, {0x0, 0x1, 0x4, 0x8}, 0x800, {0xf, 0x774}}}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000031c0)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003180)={&(0x7f00000026c0)={0xa98, r5, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0xc4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x3, 0xa}, {0x3, 0x4}, {0x4, 0x7}, {0x1, 0x9}, {0x2, 0x5}, {0x4, 0x5}, {0x6, 0xa}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x7}, {0x3, 0xa}, {}, {0x5, 0x8}, {0x1, 0x3}, {0x3, 0x2}, {0x3, 0x4}, {0x5, 0x2}, {0x4, 0x5}, {0x5, 0xa}, {0x6, 0x8}, {0x6, 0x5}, {0x4}, {0x6, 0x5}, {0x4, 0x6}, {0x1, 0x9}, {0x2}, {0x5}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0x3}, {0x3, 0x5}, {0x2, 0x1}, {0x7, 0x7}, {0x7, 0x3}, {0x4, 0x7}, {}, {0x7, 0x8}, {0x1, 0xa}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x4}, {0x5, 0x3}, {0x0, 0x1}, {0x4, 0x9}, {0x2, 0x7}, {0x1, 0x2}, {0x4, 0x1}, {0x4, 0xa}, {0x3, 0x6}, {0x6, 0xa}, {0x6, 0x6}, {0x3, 0x9}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x8}, {0x1, 0x5}, {0x3, 0xa}, {0x1, 0x1}, {0x1, 0x7}, {0x5, 0x2}, {0x1, 0xa}, {0x7, 0x2}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x4}, {0x0, 0xa}, {0x0, 0xa}, {0x6, 0x8}, {0x0, 0x1}, {0x2, 0x6}, {0x2, 0x3}, {0x4, 0xa}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0x6}, {0x2, 0x5}, {0x0, 0x9}, {0x6, 0xa}, {0x7, 0x5}, {0x2, 0x9}, {0x3, 0x7}, {0x2, 0x2}, {0x1, 0x3}, {0x1, 0x9}, {0x1}, {0x6, 0x7}, {}, {0x1, 0x8}, {0x5, 0x4}, {0x7, 0x4}, {0x7, 0x2}, {0x4, 0x7}, {0x5, 0x8}, {0x2, 0x4}, {0x5, 0x6}, {0x7, 0x4}, {0x6}, {0x1, 0x3}, {0x7, 0x8}, {0x4, 0x6}, {0x3, 0x6}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x3}, {0x3, 0x8}, {0x1, 0x5}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x9}, {0x1, 0x6}, {0x7, 0xa}, {0x0, 0x9}, {0x2, 0x6}, {0x7, 0x1}, {0x7, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x5, 0x6}, {0x1, 0xa}, {0x3, 0x5}, {0x6, 0x3}, {0x4, 0x4}, {0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5718, 0x81, 0xd, 0xf14, 0xc, 0x1, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x28, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x1b, 0x36, 0xc, 0x24, 0x12, 0x9, 0x46, 0x12, 0x1, 0x48, 0x4, 0x4, 0x5, 0x4, 0x3, 0x1, 0x12, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x1, 0x5}, {0x4}, {0x3, 0x2}, {0x2, 0x7}, {0x1, 0x3}, {0x6, 0x8}, {0x5, 0x5}, {0x1, 0x5}, {0x7, 0x4}, {0x7, 0xa}, {0x2, 0x3}, {0x2, 0x5}, {0x3, 0x5}, {0x0, 0x6}, {0x1, 0x2}, {0x5, 0x3}, {0x4, 0x6}, {0x6, 0x7}, {0x1, 0x8}, {0x2}, {0x4, 0x5}, {0x6, 0x8}, {0x6}, {0x1}, {0x7, 0x6}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0xa}, {0x3, 0x1}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x8}, {0x5, 0x2}, {0x1, 0x9}, {0x0, 0x2}, {0x3, 0x5}, {0x1, 0x5}, {0x0, 0x3}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x3, 0x6e, 0x5, 0x8, 0x9, 0x5]}}]}]}, @NL80211_ATTR_TX_RATES={0x318, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0x0, 0x18, 0x60, 0x4, 0xc, 0x24, 0x6c, 0x12, 0x48, 0x0, 0x24, 0x60, 0x30, 0xc, 0xfafeb94b9a13cc37, 0x4, 0xc, 0x6c, 0x1, 0x6, 0x3, 0x5, 0x1b, 0x60, 0x24]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x3, 0x7}, {0x1, 0x4}, {0x6, 0x1}, {0x2, 0x2}, {0x0, 0x4}, {0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x5, 0x2}, {0x5, 0x7}, {0x4}, {0x1, 0xa}, {0x2, 0xa}, {0x1, 0x8}, {0x0, 0x7}, {0x7, 0x5}, {0x7, 0x5}, {0x0, 0xa}, {0x0, 0x6}, {0x1, 0x5}, {0x7, 0x1}, {0x6, 0x3}, {0x0, 0x5}, {0x4, 0x3}, {0x1, 0x5}, {0x4, 0x4}, {0x2, 0x7}, {0x1, 0x3}, {0x7, 0x7}, {0x5, 0x5}, {0x5, 0x1}, {0x6, 0x3}, {0x4, 0x4}, {0x3, 0x6}, {0x7, 0x7}, {0x7, 0x7}, {0x1, 0x3}, {0x1, 0x5}, {0x6, 0x6}, {0x3, 0x9}, {0x7, 0x1}, {0x1, 0x7}, {0x5}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {0x0, 0x8}, {0x2, 0x6}, {0x6, 0x4}, {0x3}, {0x4, 0x3}, {0x7, 0x1}, {0x0, 0x3}, {0x0, 0x2}, {0x3, 0x7}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0xa}, {0x7, 0xa}, {0x5, 0x7}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0x3}, {0x6, 0x8}, {0x6, 0x2}, {0x1, 0x4}, {0x4, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x4}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7}, {}, {0x1, 0x1}, {0x0, 0x2}, {0x6}, {0x2, 0xa}, {0x5, 0x3}, {0x3, 0x1}, {0x0, 0x8}, {0x2, 0x2}, {0x4, 0x2}, {0x4, 0x1}, {0x0, 0x2}, {0x6, 0x6}, {0x0, 0xa}, {0x3, 0xa}, {0x1, 0x1}, {0x7}, {0x4, 0xa}, {0x5, 0x1}, {0x1, 0xa}, {0x5, 0x7}, {0x6, 0x8}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xab2, 0x8, 0x9, 0x7fff, 0x0, 0x0, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xb, 0x524, 0xfff7, 0xa1, 0x52, 0x66, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb1, 0x8, 0x6, 0x401, 0x5, 0x0, 0x9, 0x7fff]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0x6, 0xb, 0x9, 0x3, 0x6, 0xc, 0x0, 0x48]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x7}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x2, 0x3}, {0x6, 0x7}, {0x7}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x9}, {0x6, 0x2}, {0x6, 0x3}, {0x2, 0x6}, {0x3}, {0x4, 0x5}, {0x4, 0x7}, {0x0, 0x9}, {0x4, 0x4}, {0x5, 0x1}, {0x7, 0x4}, {0x4, 0x4}, {0x4, 0x1}, {0x1, 0x9}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0xa}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x7, 0x5}, {0x7, 0x2}, {0x0, 0x2}, {0x3, 0x7}, {}, {0x2, 0x7}, {0x1, 0x2}, {0x4, 0x5}, {0x6}, {0x5, 0x4}, {0x6, 0xa}, {0x0, 0x8}, {0x1, 0x3}, {0x3}, {0x1, 0x8}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x6, 0xa}, {0x7, 0x1}, {0x4, 0x4}, {0x3, 0x1}, {0x6, 0x7}, {0x6, 0x6}, {0x0, 0x7}, {0x4}, {0x6, 0x9}, {0x0, 0x7}, {0x2, 0x9}, {0x1, 0x5}, {0x3, 0x3}, {0x5, 0x7}, {0x5, 0x9}, {0x7, 0x7}, {0x4, 0x3}, {0x1, 0x6}, {0x7, 0x9}, {0x4, 0x3}, {0x1, 0x9}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xbc85, 0xa99, 0x2, 0x7f, 0x1, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x47d, 0x812, 0x6, 0x7, 0x1]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x0, 0x4, 0x80, 0x9, 0x5, 0x1, 0xfff7]}}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb622, 0x1, 0x309, 0x7fff, 0x80, 0x7fff, 0x9, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x60, 0xaa, 0x2, 0x5, 0x5, 0x30, 0x60, 0xc, 0x2, 0x36, 0x1, 0x1b, 0xc, 0x6c, 0x48, 0x12, 0x58, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xd0af, 0x9, 0x5, 0x81, 0x5, 0xd, 0x3ff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x7}, {0x1}, {0x0, 0x5}, {0x0, 0x6}, {0x2, 0x2}, {0x7, 0x1}, {0x1, 0x2}, {0x7, 0x7}, {0x4}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x5}, {0x2, 0x4}, {0x2}, {0x4, 0xa}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x0, 0xa}, {0x5, 0x7}, {0x0, 0x8}, {0x3, 0x2}, {0x4, 0x7}, {0x7, 0x1}, {0x3, 0x3}, {0x0, 0x5}, {0x5, 0x9}, {0x6, 0x1}, {0x4, 0x1}, {0x0, 0x3}, {0x5, 0x4}, {0x1, 0x4}, {0x0, 0x5}, {0x7, 0x4}, {0x0, 0x5}, {0x5}, {0x0, 0x7}, {0x4, 0xa}, {0x7, 0x7}, {0x2, 0x8}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x8}, {0x2, 0x8}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x1, 0x5, 0x2, 0x1b, 0x6c, 0x36, 0x36, 0x16, 0x2, 0x74, 0x6c, 0x2, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x4, 0x7, 0x9, 0x7, 0xf800, 0xdf84, 0x5]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0xa}, {}, {0x7, 0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x1}, {0x6, 0x6}, {0x0, 0x2}, {0x3, 0x2}, {0x7, 0x7}, {0x4, 0xa}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0x6}, {0x7, 0x6}, {0x7, 0x6}, {0x0, 0x7}, {0x5, 0x8}, {0x5, 0x5}, {0x6, 0xa}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x6}, {0x6, 0x3}, {0x6, 0x3}, {0x6, 0x4}, {0x1, 0xa}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0x9}, {0x7, 0x6}, {0x7, 0xa}, {0x5, 0x7}, {0x7, 0x5}, {0x4, 0x1}, {0x3, 0x2}, {0x6, 0x3}, {0x2, 0x9}, {0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfce, 0x33d, 0xf, 0x4, 0x2, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x24c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0xe, 0xa, 0x400, 0x7, 0x5, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x9, 0x5, 0xc8f0, 0x1, 0x401, 0x4b63]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0x30, 0x6, 0xb, 0x5, 0x6, 0x73, 0x1, 0x24, 0x16, 0x9, 0x5, 0x2, 0x12, 0x9, 0x6c, 0x12, 0x36, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x7fff, 0x4, 0x0, 0xaef1, 0x8000, 0x31f6, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfaa0, 0xff, 0x4, 0x3, 0x6, 0x8, 0x81]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x3, 0x36, 0x1, 0xb, 0x9, 0x60, 0xb, 0x1, 0x24, 0x12, 0x9, 0x6c, 0x24, 0x1, 0x6c, 0x1, 0x6c, 0x16, 0x1]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0xa, 0x8, 0x7, 0x0, 0x1, 0x10]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7, 0x9}, {0x7, 0xa}, {0x2, 0x4}, {0x7, 0xa}, {0x7, 0x6}, {0x7, 0x9}, {0x0, 0x3}, {0x7, 0x6}, {0x5, 0x7}, {0x0, 0x2}, {0x4, 0x6}, {0x0, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x2}, {0x2}, {0x5, 0x1}, {0x2}, {0x0, 0x8}, {0x7, 0x8}, {0x3, 0x3}, {0x6, 0x2}, {0x4, 0x8}, {0x3, 0x1}, {0x5, 0x7}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0x5}, {0x1, 0x3}, {0x6, 0x15}, {0x1, 0x7}, {0x6, 0x4}, {0x1}, {0x7, 0x5}, {0x2, 0x3}, {0x0, 0x4}, {0x7, 0x9}, {0x3, 0x8}, {0x2, 0x7}, {0x6, 0x2}, {0x2, 0x9}, {0x1, 0x5}, {0x6, 0x5}, {0x1, 0x8}, {0x6, 0x2}, {0x1}, {0x0, 0x2}, {0x3, 0x4}, {0x0, 0x5}, {0x2, 0x3}, {0x4, 0x8}, {0x5, 0xa}]}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x2}, {0x3}, {0x7, 0x8}, {0x0, 0x8}, {0x5, 0x2}, {0x5, 0x3}, {0x0, 0x3}, {0x5, 0x2}, {0x0, 0x7}, {0x6, 0x6}, {0x5, 0x1}, {0x5, 0x8}, {0x3, 0x5}, {0x3, 0x5}, {0x1, 0x3}, {0x0, 0x3}, {0x0, 0xa}, {0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x3, 0x7}, {0x3, 0x6}, {0x1, 0x3}, {0x1, 0x4}, {0x0, 0x6}, {0x6, 0x7}, {0x6, 0x8}, {0x6, 0x2}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x5}, {0x3, 0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x7, 0x7}, {0x1, 0x6}, {0x7, 0x2}, {0x6, 0x4}, {0x0, 0x3}, {0x6, 0x8}, {}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x5, 0x6}, {0x1, 0x2}, {0x0, 0xa}, {0x6, 0x9}, {}, {0x7, 0x4}, {0x4, 0x6}, {0x1, 0x14}, {0x3, 0x8}, {0x1, 0x1}, {0x7, 0xa}, {0x7, 0x1}, {}, {0x7, 0x6}, {0x1, 0x6}, {0x4, 0x8}, {0x7, 0x4}, {0x2, 0x5}, {0x0, 0x6}, {0x5, 0x5}, {0x5}, {0x6, 0x7}, {0x3, 0x2}, {0x2, 0x7}, {0x0, 0x2}, {0x4, 0x5}, {0x0, 0x6}, {0x6, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x4}, {0x7, 0x4}, {0x5, 0x3}, {0x6, 0x2}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x1}, {0x7, 0x3}, {0x1, 0x6}, {0x0, 0x9}, {0x4, 0x9}, {0x0, 0x3}, {0x6}, {0x0, 0x2}, {0x4, 0x9}, {0x1, 0x9}, {0x4, 0x8}, {0x3}, {0x6, 0x2}, {0x2, 0x7}, {}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x16, 0x36, 0x1, 0x6e, 0x6, 0x48, 0x5]}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x35, 0x8, 0x7fff, 0x8, 0x0, 0x1, 0x7, 0x5]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x4, 0x9}, {0x3}, {0x0, 0x9}, {0x1, 0x2}, {0x2, 0x3}, {0x3, 0xa}, {0x0, 0x9}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x7, 0x6}, {0x7, 0x7}, {0x5, 0x9}, {0x4, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x4}, {0x2, 0xa}, {0x4, 0x6}, {0x1, 0x3}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x6}, {0x2, 0x2}, {0x2, 0x6}, {0x1, 0x7}, {}, {0x4, 0x4}, {0x7, 0x3}, {0x4, 0x9}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x4}, {0x0, 0x4}, {0x4, 0x9}, {0x6}, {0x4, 0x8}, {0x4, 0x6}, {0x7, 0x2}, {0x5, 0x1}, {0x1, 0x3}, {}, {0x1, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x7, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x4, 0x2}, {0x6, 0x1}, {0x5, 0x2}, {0x2, 0x9}, {0x5, 0x8}, {0x4, 0x5}, {0x6, 0x6}, {0x0, 0x2}, {0x1, 0xa}, {0x7, 0x7}, {0x4, 0x9}, {0x4, 0x8}, {0x4, 0x1}, {0x5, 0x5}, {0x2, 0x5}, {0x3, 0x3}, {0x6, 0x8}, {0x5, 0x4}, {0x6}, {0x6, 0x7}, {0x6, 0x1}, {0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1}, {0x2, 0x2}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x5}, {0x1, 0x3}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x6}, {0x2, 0x7}, {0x0, 0x5}, {0x6, 0x9}, {0x5, 0x3}, {0x1}, {0x6}, {0x7, 0x3}, {0x5, 0x8}, {0x2, 0x5}, {0x3, 0x1}, {0x1, 0x3}, {0x3, 0xa}, {0x4, 0x9}, {0x0, 0x8}, {0x5, 0x8}, {0x2, 0x2}, {0x2, 0x6}, {0x1, 0x3}, {0x3, 0x1}, {0x5, 0x4}, {0x7, 0x5}, {0x1, 0x3}, {0x1, 0x2}, {0x3, 0x3}, {0x7, 0x9}, {0x4, 0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0x16c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x11, 0x2, 0x36, 0x6, 0x2, 0x16, 0x24, 0x12, 0x79, 0x6, 0x1, 0x30, 0x36, 0x6, 0x18, 0x60, 0xc, 0x1, 0x30]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x1}, {0x0, 0x2}, {0x3, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1, 0x36, 0x5, 0x15, 0x1, 0x18, 0x60, 0x30, 0x16, 0x2, 0x18, 0x6c, 0x9, 0x0, 0x1b, 0x9, 0x4, 0x18, 0x1d, 0xb, 0x56]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8d0, 0xb8e, 0x1ff, 0x70b, 0x4000, 0xfde, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x101, 0x3, 0x401, 0x1000, 0x3, 0x26]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x6, 0x800, 0x1, 0xe6, 0x1, 0x20f5]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x30, 0x30, 0x24, 0x9, 0x5, 0x1, 0x4, 0x5, 0x5, 0x36, 0xb, 0x6, 0x4a, 0x24, 0x2, 0x1b, 0x48, 0x9c1f31317f7e089, 0x2, 0x60, 0x6, 0x1b]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0x30, 0xc, 0x6c, 0x3, 0x5, 0x0, 0x0, 0x6c, 0x18, 0x2, 0x1b, 0x6, 0x1e, 0x18, 0xb, 0x30, 0xc, 0x6c, 0x5, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x1}, {0x5}, {0x5, 0x2}, {0x7, 0x2}, {0x2, 0xa}, {0x2, 0x2}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x4}, {0x6, 0x9}, {0x6, 0x2}, {0x3, 0x4}, {0x1, 0x1}, {0x7, 0x3}, {0x2, 0xa}, {0x1, 0x7}, {0x2, 0x5}, {}, {0x1, 0x7}, {0x6, 0x5}, {0x0, 0x9}, {0x3, 0xa}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x3}, {0x5, 0x9}, {0x1, 0x2}, {0x1, 0x3}, {0x6, 0x8}, {0x2, 0x1}, {0x0, 0x8}, {0x6, 0x7}, {0x5, 0x1}, {0x1, 0x6}, {0x6, 0x7}, {0x0, 0x8}, {0x4, 0x8}, {0x1, 0x2}, {0x3, 0x3}, {0x4}, {}, {0x4, 0x8}, {0x3, 0x1}, {0x6, 0x5}, {0x1}, {0x3, 0x9}, {0x2, 0x9}, {0x2, 0x5}, {0x2, 0x1}, {0x1, 0x8}, {0x3, 0x7}, {0x5}, {0x7, 0x5}, {0x1, 0x6}, {0x4, 0x7}, {0x4, 0x4}, {0x4, 0x7}, {0x0, 0x8}, {0x0, 0x5}, {0x4, 0x8}, {0x2}, {0x1, 0x6}, {0x7, 0x5}, {0x3, 0x6}, {0x5, 0x5}, {0x3, 0x3}, {0x1, 0x4}, {0x4, 0x4}, {0x1, 0x6}, {0x7, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x4, 0xfffb, 0x80, 0x0, 0x400, 0xaced]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x7, 0x2, 0x24, 0x3, 0x1, 0x12, 0x6c, 0x60, 0x60, 0x2, 0x1, 0x60, 0x18, 0x6, 0x1, 0x6, 0x36, 0x1b, 0x3, 0x30, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x24c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0x2, 0xb, 0x30, 0x0, 0x6, 0x6, 0x24, 0x24, 0x1, 0x48, 0x0, 0x48, 0x18, 0xb, 0xb, 0x30, 0x18, 0x9, 0x9, 0x24, 0x80b181dfce7e262f, 0x48, 0x48, 0x6c, 0x60, 0x48, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x5}, {0x1, 0x2}, {0x3, 0x7}, {0x5, 0x9}, {0x6, 0x2}, {0x1, 0x8}, {0x5, 0x9}, {0x0, 0x1}, {0x2, 0x2}, {0x0, 0xa}, {0x2}, {0x1, 0x1}, {0x4, 0x7}, {0x5, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x2, 0x4}, {0x0, 0xa}, {0x4, 0x6}, {0x1, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x7, 0x8}, {0x3, 0xa}, {0x1, 0x1}, {0x5, 0x6}, {0x0, 0xa}, {0x1, 0x3}, {0x0, 0x6}, {0x3, 0x2}, {0x3}, {0x4, 0xa}, {0x1, 0x5}, {0x7, 0xa}, {0x6, 0x2}, {0x6, 0x5}, {0x4, 0x7}, {0x1, 0x1}, {0x5}, {0x2, 0x8}, {0x2, 0x8}, {0x5, 0x4}, {0x3, 0x2}, {0x3, 0x5}, {0x1, 0x7}, {0x4, 0x1}, {0x6, 0x3}, {0x7}, {0x4, 0x7}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x7}, {0x2, 0x2}, {0x2, 0x8}, {0x2, 0x9}, {0x7}, {0x1, 0x4}, {0x5, 0x1}, {0x3, 0xa}, {0x0, 0x5}, {0x0, 0xa}, {0x1, 0x1}, {0x0, 0xa}, {0x7, 0x5}, {0x0, 0x5}, {0x4, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5}, {0x7, 0x1}, {0x4, 0x4}, {0x1, 0x2}, {0x2, 0x2}, {0x4, 0x3}, {0x0, 0x9}, {0x7, 0x6}, {0x0, 0x2}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x7}, {0x4, 0x2}, {0x6, 0x1}, {0x1, 0x6}, {0x1, 0x2}, {0x0, 0x5}, {0x7, 0x9}, {0x7, 0x6}, {0x1}, {0x5, 0x1}, {0x3, 0x8}, {0x1, 0x8}, {0x0, 0x9}]}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6, 0x18, 0xc, 0x6c, 0x1b, 0x30, 0x6, 0x9, 0x9, 0x48, 0x0, 0x48, 0x2, 0xb, 0x1b, 0x0, 0x9, 0x5, 0x30]}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xe3f4, 0x7b52, 0x5, 0x4, 0x5, 0x326a, 0x7]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x9}, {0x3, 0x4}, {0x7, 0x9}, {0x7, 0x4}, {0x6}, {0x3, 0x6}, {0x6, 0x4}, {0x6, 0x7}, {0x2, 0x9}, {0x1, 0x9}, {0x1, 0x6}, {0x3, 0x2}, {0x5, 0x6}, {0x4, 0x7}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x7}, {0x5, 0x4}, {0x7, 0x9}, {0x1, 0x3}, {0x2}, {0x7}, {0x2, 0x5}, {0x7, 0x8}, {0x1, 0x1}, {0x5, 0x9}, {0x1, 0x2}, {0x6, 0x7}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x4}, {0x3, 0x6}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x0, 0x2}, {0x6, 0x7}, {0x4, 0x6}, {0x6, 0x5}, {0x3, 0x4}, {0x2, 0x1}, {0x7, 0xa}, {0x4, 0x4}, {0x2, 0x3}, {0x1, 0x9}, {0x6, 0x5}, {}, {0x2, 0x8}, {0x7, 0x2}, {0x1, 0x6}, {0x3, 0xa}, {0x1, 0x8}, {0x4, 0x6}, {0x2, 0x5}, {0x1, 0x7}, {0x0, 0x3}, {0x3, 0x6}, {0x6, 0x7}, {0x4, 0x3}, {0x1, 0x5}, {0x7, 0x6}, {0x6, 0x7}, {0x7, 0x9}, {0x5, 0x1}, {0x5, 0x2}, {0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x0, 0xfff7, 0xf81, 0x9, 0x9, 0x2, 0x2]}}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x9, 0x4, 0x2, 0x4, 0x7, 0x8, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x97e5, 0x9, 0x8, 0x2, 0x7, 0x0, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x401, 0x7f, 0x3, 0x3, 0x6, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x3, 0x16, 0x9, 0x48, 0x2, 0xc, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3f9a, 0x3, 0x0, 0xe, 0x5, 0xfffb, 0x5]}}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0xd, 0x4, 0x400, 0x1, 0xfffb, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x10, 0x1000, 0x7e7, 0x8000, 0x1, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x81, 0xa, 0x0, 0x3, 0xfffa, 0x5]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x5, 0x9}, {0x6}, {0x6}, {0x1, 0x4}, {0x3, 0x4}, {0x4}, {0x5, 0x5}, {0x6, 0x9}, {0x7, 0x3}, {0x2, 0x9}, {0x6, 0x7}, {0x0, 0x4}, {0x4}, {0x1, 0x7}, {0x7, 0x4}, {0x6, 0x9}, {0x4}, {0x0, 0x2}, {0x4, 0x2}, {0x6, 0xa}, {0x1, 0x8}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x1}, {0x6, 0x7}, {0x0, 0x5}, {0x3, 0xa}, {0x1, 0x5}, {0x3, 0x8}, {0x0, 0x8}, {0x6, 0x4}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x4}, {0x7, 0x3}, {0x5, 0x3}, {0x7, 0x3}, {0x7, 0xa}, {0x4, 0x1}, {}, {0x0, 0xa}, {0x5, 0x7}, {0x2, 0x3}, {0x7, 0x3}, {0x2, 0x2}, {0x0, 0xa}, {0x5, 0x2}, {0x5, 0x2}, {0x6, 0x1}, {0x2, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x1, 0x4}, {0x5, 0xa}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x9}, {0x6, 0x1}, {0x3, 0xa}, {0x4, 0x3}, {0x4, 0xa}, {0x7, 0x3}, {0x5, 0x5}, {0x3, 0x2}, {0x0, 0x8}, {0x5, 0x1}, {0x2, 0xa}, {0x3, 0x6}, {0x1, 0x3}, {0x5, 0x5}, {0x2}, {0x1, 0xa}, {0x6, 0x8}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x3}, {0x2, 0x9}, {0x3, 0x8}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x6}, {0x5}, {0x2, 0x4}]}]}]}]}, 0xa98}, 0x1, 0x0, 0x0, 0x400c880}, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f00000032c0)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004004}, 0x8010) (async) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000003300)=0x10050, 0x4) (async, rerun: 64) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000003340)={0x0, 0x3}) (rerun: 64) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000003440)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x28, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf6cd, 0x75}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x440c1}, 0xc004) flock(r7, 0x4) (async, rerun: 32) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000003480)=0x7) (async, rerun: 32) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000003580)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x29a}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x85}, 0x80d0) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000003600), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f0000003740)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003700)={&(0x7f0000003640)={0x90, r8, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0xa}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x69}, {0x6, 0x16, 0xffff}, {0x5, 0x12, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4008085}, 0x1) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r9, &(0x7f0000003880)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x70, r0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0x3, 0xde]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x7fff, 0x81, 0x8fce, 0x7, 0x5]}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x8001, 0x3, 0x80000000, 0xc]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040884}, 0xc0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000004ac0)=[{{&(0x7f0000003900)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000004a80)=[{&(0x7f0000003940)="511b3d76f1f9fb0d68ba254961a18e1fe5996d4f3c1d21516b2c111b9c0b696968b8e095744a148a9c773850c5d2d26b8cdec70eaced65ddf813e611e8abbff2893e0fd7f195d6a07b3bd0f44b2f3d9361782ab70d4ea2684bc47b1cba3ea4c9affcfa6ef05288d3b7951942dc58f8d63479e40f836092709bb17ac1169130e54464dc2dc3eeb1de2ad23ea89b7d57dd89ee092996397476342d2211c78f5e2393f2d5fb5e631019f01c678f7aa570d0a0bfe34f8ba0a9b5518c893b14f1eea591f661787110abd22734be8beeddce217162de51d24aadae", 0xd8}, {&(0x7f0000003a40)="e9091fd16a728ca0192bfa08195745402ac4ace51286873cd7a5654b4cf0f36814868e9c5201c83d903ebdbd4cdd3460c49ec9a2ab72f5856e67fe79ff7b5d", 0x3f}, {&(0x7f0000003a80)="c580c72a8c2d7a0bec354d79be777f37e1e351365336b774929e24d3253e656f82856a751511872a499e302c49d9a3ed189ec9ef22511c8d85547bf485c9fe7f617823ec7c3a0bd6f0bb15bbe586e73f5b1470753e33279e4b1ffedb8de32e415d60e294bb4c903ac1692c6fb837423fc8405c00fef17288c318b12cb31f7e0637a0d7a2c7c1acac3c3b743aa8cc24e05bed349db26a02ccaf4d191fc220536cb0aa4450b9210b8e749fd3305cfbd54f847d26868394b15fce00ef3c05a7d19071ed78806ddd2f4880a301cb50b935da8232b9b785357d5906313999465293753b08993369274a5adc61740dcabaed31e8df3ac18bcc7247a64eb992ed93b6b7904168b6092968abb948a7a8acf6ba3d6a119147a24d06f6b1fbc509f24858c81345804decfbb87995c0ba1201f460fe05e4bf3decf5cbd595dd44034945d1719bf1f0e52c9943158892bc3619cf2aa00e815dbc59cc7629f8422642cc0123f3a8c47d2855d4a872b3d6bc7614dea90114c8edc15bc9f97da09f614056ca20edffbbca9a0fd5e3085f6393ecfda76bae44ca014fcc7fcefb4ea58738b5c5876284259d3098205a54558204ae3904fcab6586dfbd35c9a56b21e53b84aa1d1267806ac18a63b1589f10ad2ac17bad424ee74e776689967368bdf6d82fee6180c438a6c5ac8c8193e16a20215601d5cd39e50ba85917b8b3eb0491b2009705cedf208d713122043d83f27976ed5179819386b2b2ca945afcb359675229e796ffd90fd5831de8bc7900ffca530a491c0c05ad26cb078ac4a01ec4e2b1ad7a157aee9b57e5887b7d348993e1ba79630ee39a134663e56a9a00418f880d1a5d8f34ef20d5abeaead4d8625e45bbe4ba4c3805d6fafbd05e0c483a10d8aae2b4794d2c867f3e02d2e2f4431cd0cbaa19fab7398cc8aaecec2c62685cda5719b5fc27cd2667b67e8ad856bfb664606cbf9c04e277f49adc64bfbfa673535e92916746590c471a9a0ac50366d54d55f3bced5ddba7dc6ac07cd6391bb7c2dadde1fab479efbef13e283643afa4313080fc1241dbb16d4377168e4d422e8440e47654417de4295b617b2246288ad7c10efc6d55535c4714f5c6d4630b83e2b67b942309f381fe3220a7c4a37c565a33a2e31c71810bc98d0852661680313864995ddd91470d475a342fd41f7d7f39f07b67684762ced6187154edc4dbd74c74a80c1ac574dc7bfc6d0ed246b98a3630ba1018cd9f01b11d4e38f0ca895e234fae2d12154c4a5647e8cb1685defbcbebabd61477531045bc2af89eb8892061d315f0ea6b522a7cadd7852f41ebfa191071e9df9d354f8424104a00024e02dda72d6ee28fada7f41df0b00c31737d30c972703b695b22f90875640343a305368dacbedcdb5d9671777a955fde997f4bafd7854ca9f844f00ebdbef63192542b6ae5468475c5014f9edb9871e2a2c5333279e87200a603c3e7912a208e670dc55c6c2c0fd4d5bd1ed177a61f7474b9aea43228d772f142f865bcb61a2c60732f8a220363e1aa27d1751989e54781a0538f666e2a177752b6a071ede2bf230e323a8881354868f040083b759171b7544d39c5218ead4c278e4591c70b85a021dc60185010f1dc7484cf050ab1f1c954b12e98cb3917c272165ed2ac6c344ac1ac7865c1510313abf6cd38a82c274b6adada3723d4857e998d6218718671d07408346e011dcfbd0bfa6f0ee522636194bec2617aa6e866a7a2c47bfcf847424c27137eebbe67efdb61fbda5758465f73d1e1a7a675156825415e63a6f8c83b73d66564d4ad1acf60fb6e999614b6e8f6b5982a824a66ecba9b2b039a581856f623c5c4e12fcc0ced1e5ef2572e8663b563b9185a8aea7cb227de4d4de03a2c36938b852cdd5161b033378df2facad192a3b08635443f93176a488ca8d7287505e13705bab0a7fba1ae171c94330a4afbd04136f5d689a4af0435ce0fd89df4990bc8cee92a812f4b5aafed556b88dcfa547f4334c191fda5028d216b21322302b94b8b765d81240acc4b8da6cce9b484b127e0ce09b4d2e9c36722256c07fe97df83e651e94961f995fb71eab83ffb07a5c34486cebcd06f2949a7ffafacc184e36def738ff332bdef8a909282d7420d37d3ea9363117735988cf37810e267c147e7d29111c840e4d318e493e8e4c35484484e4471e26954850cb9999863b9c59de3070d12f70ee0d78bdb0fcccb9587c09536ff4a8aef06f693c3f59ad18c9a420f77f535e781ee29a274ad2c79b977e56a11d2d5d69651bff1f684248c1ffdfd89f60aaa0a40e2b646e1fd8b7aeda8385a2078bb56abbf8840423c229b1810573d6d46c9ac46c2807cdbed834d56a23d3df1a65b1cc328b016660882cbfb0c857782a7156bb9ce1b1b1707b3a2d277911fb9b58dd4d4dbab3e387066eff8e6be3aa9161671a412f1ffddb496245c4cd1a4a474ff3670f03f26c27c705861d868bd135478ab31553f2e5459f0790173b37c38298a5265491bc137fdc7cd98ee869d943b9676bc6e03d03420a05b4d429b7f0ba7178f61ce46ec8a6a04b858cb88f2496c142fee64c494f1dcfcfaf77787fe5daef5789fb0a45388d4560e18bd9a3f81f4673a655002d0eb1c3cfa455e7ceab6ed0b9d0dc24c8d496c7567ed90dd4a3fbeeca53692c058870b3a0c83d496270b417197c5dc0db9e03916e170106efc3c4f45c844c91e7a9771c386507bca7097f830465f6ea1cecabb28af83ea2ec36acff8bcccf6603d0960d2535d9fbc0bacc7e6a8832417a7c4ee3028a8b4ae97d9695d897583f3c7d26c7ab1ebc927f52f7f9fbb20a947bf0fb5528bbe6715a08ecff62f81ca9f2c7c2e044d53b657abf1d5e6755133e2609a758b137bbabe3ef295abaf5c3294a86804e77b524a16676c9def685f80d625f5a0279ff32cc582d1f5f07889f6c9b7d743aa00c0fd8fcd791828e59e17ad6b93a188be7fdbe47772eca128358e3b35e50bab991c509084d2e506df6ffddcf649fbfea3bb8d454e7bc7b54b82e1da3121315038bc71d82b8fb0a156fabb9e79f1206ef3d220b79d341e387f779c68e9c9ad05ab6931a6a4fc86da34ce3a5de17031424f20938b4166ccdfb2348810157cf634e227695540963fa58e0e8be856c12eecf1515b28b31657d2268b3a6af9a54f691dd1e00ecf0f95c00948fec33604f50793c24306953bf92ce67da12522ad9203a92efca50747e9ebb95731e10534fef9ff59d92dda530740a0446c4ff9684d185e8a0dd977f480697f8a0770cd18cff3df611084bf7d830f947b5080b3d98cc583ebc5d169f7d02b6169c81d8b34479b0bd928baa222f1c35a3ade4601c5831a893132571da0fc3e067151507332acd94487a2ed25c0685bc34d72ce1016ea564ce5560c50f693571619c9cd659b26eaa90445642297a4df90babe508f56ee1a666b5a1f154b2997d8301ceff0bd20bb1e690370289963c14084d00b48fdad2c87ae9d7d412f7269ed7481165a81f15e227204b494fe83e5dc20cfe37061fc3b70c6e78234f488ee970398f34b32bb30d92e40dc4a1f555d05d266795aa7c77b580f8cb39d8d6c3f8b541f70efded54287935dbf0fd63fa6b7b0b76feb660752579f16e5daa239b0c4c45c1413e89876c01239a4b3e15209df027dcf42399381dfa98906b33f1d3e2f3dc2108f692b1883eb00655f38ed00ac2c08f599ba3994efc131d4ac770967148e1d3ee17751979643ef714ab24bac9b3806f9b97719272b8e9e095ac3b0d1bb432398c3b13d894a78abd9dd45e60be10de280a4a84626aaa69313dd3ac0897ea7672ae330dead994250d19102ec51cd676b51d5fc69b9d86ef988420da042303e61c65543fc51e714f3ebf909e4bdecce4fb2378bd22a1b934b304344a0d9df98bf49d590cff00d907e84b6522d0765346b82bcf838679a0bd5e5d9d1f9892b3f2f47ea8ce9179ceb9ace1a6a6d1e74146534ece613b76af0e89d564f7bceb543980d311953f9a3b2c7c9fb3174603bfe2e55ba6251b648a02108b448a25b51ddc6b3d33741264322af1e42ad6c03bcd162e4be226cd4467f9107ad4924a657de0e0e2a98b339eec9ef0c27b4b8a9ac81de17a72f8faf22a31d6765ca1ccb37a3a9d312896bf9893c135e87ddd2444c0bc4d6715076c1740f4a14d0ae704874aa2b6eb5ec435200d3613636cffe1bc45cee69ef674b68decc996d728e41f3c31eb8de8482d5ae417a5c1f49ab69638fa30c71dc3f9a48373e2143e18c60fbd7b59cb44e5d767b2e60f86dc8e72330939de84f9fc4ab365c68b093d0dfea053782245c40dcb456d09e7bfd7e3c92390efb4b784597b871c53968dcfd8cd45b93f52bbfb6dd45352a6fa57c9cd93458ef8426086f2d54c3bf8a34fbbd83200c63d4f27a8876932be4887d6b2809a5a72db856215b9bb39936d0d64dacaeecf758db4152c29364f367a33fa1deedefdb570f4ef97431ea0bd804aec9ae61647d6d0896f1003fa64fc25b47d049b7d4fbceb573eb0da50a4aa21242c69da51b02820e1c533f9d68faad7574a94dbdae1d757d9fc428ee81331331a70eae3f3613aae19bcfe040ffe1acce3de420be3bdc2cc91871569eaa013cdf84b6e2f97c24a7b33bd0231ac8e4c1e217ff89c8974208ba36415c94842022c174d5a88971a2d8fbc7cc807d714578ac3a4196bc31b76da3d4f958a9968cc4ca26be0b1f7fc3776fc2a0bb41e8a086b82561e5e24ac029e3a7624b880861c8759fe8c03cb213f0aecdfc993f1e61533d0feb4eea8b8640ce56af72c0dd2d37ba6d573d2193d1e75d0041ad44b25084d09ef0b71acd610cbe0f2d39d54bcee4504195f05abba41ef01d7f12c72a8dbe9fcdaafa22c1a07b9c5e505451f5eef0e364fc19eb1225d9946946234ecc4e6c5231847309a8d8d3e5f3da75ab72af793f7d22f3726406fc838bca5cdc276ffc023dcfc266e9e29588f942ff6ff02184c936a3af3c897280d59d2afbc197333d4f3d0b94b43ec9306b89ad209adc3df30bf7e8adf9110cec3329eb2da0e685f384f8aaa4a6a435fec664b733cbe65012121aacd0d7aff4d52581587b2e58d70620e96f6974820f6683e19fe0568a1fdfa7fc07ed46dd2275c698f5c0c10436c1c0e368d0e46d45b1d8fe6cc145757aca04d1dfcb38efc208642b968c2616aecbb3b7ec93d05ba1cd32d545d866b6788aecac9c7c8b756156377ec50b7f0b763d89ccdd6e24b2ab2945f98cad668aea18f29b8a2e1a2f25756d16e6c6e77dda766d4f8c06bf9340de30b6c4e2d7e7021e429fdd33600101b31438b66eda9fda53b9e05b0fe24dbb164a7dfffc47e70074abccec3027e356eb2b79f982a5bfb27ccc9a7f5a83375828f3c1aad0050b3a468016dbb1afb7c0d84cbec94a89948ab368b545a55c17878a8cf852daaed4fab69b93a6e9dbba4e17999645f732ac921f4ff73a6b0bb3dcbeed97d8f6262f94b68bd7cc69e6982ac2a15305b9a93a4b02f7a685d08588e6dcab07f48a45e227f836968bf14186454078a57eea328bed270445679cfcef5d65dc5e834022b2da79f271c30b1393d2118fd39187c1073c31af4e927ec74b9f44fe99c94e13e0d3ebdd718d1a2138a25af64192cbcbc8de2828deea75b9a06ff4cb1c89a6a415b494e4c48cae99907b9ede71630994276cd3bd3356f800c20dbfc342718cbaa9832a944ed0b6cb876cac33ca8fc726d4a69f4155c70ff1c75ff3497bce4b7893af95e1c9b36b6da911ed9139e5f99d54788c78058ae459888aa5cb", 0x1000}], 0x3}}], 0x1, 0x4048000) 1m45.090184989s ago: executing program 3 (id=1062): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf25380000000800", @ANYRES32=r3, @ANYBLOB='\f\x00'/12], 0x28}}, 0x800) 1m45.072031907s ago: executing program 3 (id=1063): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a0547d, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r0, 0x0, &(0x7f0000001740)) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f00000012c0)=""/4095, 0xfff, 0x102, 0x0, 0x0) sendto(r3, &(0x7f00000007c0)='`', 0x1, 0x8001, 0x0, 0x0) r4 = fanotify_init(0x8, 0x80000) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) fanotify_mark(r4, 0x105, 0x10, r1, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket$inet(0x2, 0x80000, 0x5) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f0000000280)=0x4043, 0x4) write(r6, &(0x7f0000000080)="08008edf773c8000", 0xfd) recvmmsg(r6, &(0x7f0000000200)=[{{0x0, 0x25, 0x0, 0x0, 0x0, 0x22}}], 0x3f, 0x0, 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m44.086246031s ago: executing program 3 (id=1071): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0x21, 0x32, {0x32, 0x7, "0f557b3424c482550af2de16aae2145f52df9eababd8907c79e30f25e9735bf180e77588eed0c2a026c77fa23af0d0b7"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}}, &(0x7f0000000480)={0x34, &(0x7f00000002c0)={0x60, 0xd, 0x70, "20fe3067dbe09c899df46771daa66265afcdc27685357b2923bfb81e31b74457dc6cd7cffbac273e93f751638f78d6a49c43f2807981fa77ebc6f2a34b72bc20abb718eb95ce88ff4cb6f28fbb69ab3a0882ca2fe0aa0501a0c8ea440d32e9b9833011aac2e2c4dbf8f5fac1507ecc42"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000380)={0x20, 0x0, 0x71, {0x6f, "40401d16ad361633668568dc17052bcc89ab8ca0cf8f2fb396aa89b0bbf489cdedc9813a0312c81906833d518ef319da8202b7ece7f71a7c64b2cd60ff74fe29843c95c28ed63f501ffe300678a36dfed7969ec8548f6f4ee29d032ae380d7de1c31284d3675aa537891d811dff373"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0xb}}) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a6012203010902220001000000000904"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m43.618492588s ago: executing program 3 (id=1074): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f0000000200)='ecb-camellia-asm\x00', 0x40, &(0x7f0000000240)={@align=0x7, {0x6, 0xfff7, 0x8, 0x345}}, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x1}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x0) renameat2(r2, &(0x7f00000003c0)='./file0\x00', r3, &(0x7f0000000400)='./file0\x00', 0x4) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000100)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x40000, &(0x7f0000000240)={0x11, 0xf7, r6, 0x1, 0x20, 0x6, @remote}, 0x14) accept4(r1, 0x0, &(0x7f0000000140), 0x80800) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r7, &(0x7f0000002bc0)=[{{&(0x7f0000002900)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe255}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002940)='B', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000140)="b5", 0x1}], 0x1}}], 0x2, 0x20044040) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m43.446900495s ago: executing program 33 (id=1074): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000340)={r0, &(0x7f0000000200)='ecb-camellia-asm\x00', 0x40, &(0x7f0000000240)={@align=0x7, {0x6, 0xfff7, 0x8, 0x345}}, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x1}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x0) renameat2(r2, &(0x7f00000003c0)='./file0\x00', r3, &(0x7f0000000400)='./file0\x00', 0x4) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000100)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x40000, &(0x7f0000000240)={0x11, 0xf7, r6, 0x1, 0x20, 0x6, @remote}, 0x14) accept4(r1, 0x0, &(0x7f0000000140), 0x80800) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r7, &(0x7f0000002bc0)=[{{&(0x7f0000002900)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe255}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002940)='B', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000140)="b5", 0x1}], 0x1}}], 0x2, 0x20044040) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 5.300968182s ago: executing program 0 (id=1672): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00000000000700", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) 5.191671779s ago: executing program 0 (id=1673): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x85) 3.869873198s ago: executing program 0 (id=1679): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3048, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x31, 0xd0, 0x5, {0x8, 0xb, 0x1, 0x2, 0x1, 0x9, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5c5b, 0x2, 0x9, 0x39}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0xf, 0xef, {0x8, 0x25, 0x1, 0x2, 0x0, 0x7c, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x72, 0xcc, {0x8, 0x25, 0x1, 0x2, 0x3, 0x3e, 0x1ff}}}}}}}}]}}, 0x0) 3.252818562s ago: executing program 4 (id=1682): r0 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000200)=ANY=[@ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904", @ANYRES8], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x20, 0x23, 0x74, {0x74, 0x0, "7c2f368df80c1a622ca4cb1e0fb360053ece5d3543e39c3d037c6fa93eadc90a7abab103fbfa6142d087c753df381d2398451dfb26ad08d7c3ac813c171f2646d50694d945d384cc0d678cd31f53de14fb9c731efcc4ae29c0448ebb72933dcfda41b42b3a44269207f74bf5ad9df252cadd"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000540)={0x20, 0xa, 0xc, "f1b4c8cb50a29f47614485ac"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xf4}}) syz_usb_control_io$printer(r1, &(0x7f0000000100)={0x14, &(0x7f0000000480)={0x20, 0xb, 0xa1, {0xa1, 0xb35d7ca32bb82655, "1598224a49b3dcdc00d5ec262c4d66a542c4e76cf7ddfa91027c108ceb040896f9c0cd173f46b97547d55714dc661000a6df1b84bde88073eb21f9f815ac5c5c90d4ebdfdee212863604b27f8b9478859a7d49b2ed763cf4e970958d9473127a315d664a7acda18b0e9b1ba410d01e640dbd663faae35276bc30602f391a1c5cb7a2f501877b8e9d16027a75757935f72e21552ab0129510abeaacbbc42586"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}}, &(0x7f0000000440)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000380)={0x20, 0x0, 0x92, {0x90, "4ec78afa37744210a6d86cde5d0889823970a34069514f2d1388ca32660d26e4f22c66677b54e4b77e827c23ada0dc7d96243b3817e74cfec49f11ee319066eed244b29bcd1b994253fb3a57f9d7edfe074a56088b21eb5f7a4c938a9d36fc8eb9f9980e9c84d49731b9a4dd55fabbc401bbaa35480198f2ac504530f063cbd0d65e8c3fca00"/144}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0xbd}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x8}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000640)={[{0x39, 0x4e00, "5abeba3303f5352d04eb0e5701ba7bdd554900a270f00d63b3a14513db9903a9f183bcb64e55963a5fa55f8e538588da0e2319a4ed2f94bc04"}, {}]}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.589664297s ago: executing program 4 (id=1686): syz_clone3(&(0x7f00000013c0)={0x310204000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000140), {0x12}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000036c0)=""/174, &(0x7f0000000240)}, 0x58) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0x1, 0x436, 0xf551}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) read$FUSE(r1, &(0x7f0000001580)={0x2020}, 0x2020) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000000)=r5) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000280)={0xfffffffd, 0x3, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2fc6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a376e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32adec4ea953aa3114811457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001540)={0x60, 0x17, 0x8001, 0xdad1, 0xc1, 0x5, &(0x7f0000001440)="2875a1be53cb695cbf86fe3da935f09a5c4631c03224a07e93711edaff53c3cd633835a674c324c7a21570877ce88f3bbc4b43a17a927574da365c194d800f1423f9da8f6d0ad475ee64b40de12246dda279eab716ae776786785c7bae222ec984c4a0dfdd88c9fe57d0c8637e3343e8d7fa4a3b2ce5b3bcf341758cab4553ca9589d662804e7184d770c4a069831fcdf347e694cb400546a0123c8df69bd0242bd65b169191c322c9bdada18a7ecc46b7a3cfa60c048c23896d837bcfe05f09e5"}) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000000)) r6 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003680)={0xc, 0x0, &(0x7f00000035c0)=[@free_buffer={0x40086303, r6}], 0x46, 0x0, &(0x7f0000003600)="c94bf56221cecd626eada949fb366abe5f1d5a27f137a0a5cee7fa0b24706142ccefe495be1fdc93064f5a783bea78f0fcdec45f9e8ff96e982c3283370f0241ff192415f548"}) 2.45063051s ago: executing program 4 (id=1687): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x85) 2.428884955s ago: executing program 1 (id=1688): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x26680, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'veth1_vlan\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x32, 0xb, 0x6, {0x0, @hdata="c3b467aca79221c2e4d626bfd283e0a10e23d2fa504990e9ce34004c56937b82a7c45294652cad4e6b3175264e735c411738e756", {0x0, @remote, 0x7f, 0xb6, [0x8, 0x7]}, @esp_ip6_spec={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x9, 0x40}, {0x0, @link_local, 0x5, 0xd6, [0x1ff, 0x8]}, 0xad, 0xf1}}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2102, 0x0) (async) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x4000009c}]}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00'}) 2.23803383s ago: executing program 1 (id=1690): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0xfffffffc, 0x8, 0x1f, 0xccbe, 0xfffffffa, 0x4, 0x10001, 0x1000008, 0x7, 0x3ff, 0x802, 0x3ff, 0x9, 0x2, 0x9, 0xe1cb, 0x3ff, 0x4, 0x4, 0x392, 0x0, 0xfffffefe, 0xa, 0xfffffff5, 0x20202, 0x3, 0x0, 0x0, 0x200004, 0x101, 0xdffffffa]}) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc}, 0x81) r4 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x0, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x87d5, 0x2800, 0xa00, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) listen(r4, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.227313844s ago: executing program 1 (id=1691): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00000000000d00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) 2.085461478s ago: executing program 1 (id=1692): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)={0x33, 0x24, '\x00', [@pad1, @pad1, @generic={0x3, 0x67, "d6be3b68dfc0af2635a955cf351f64da7f0479f4729f60408159d5a1d321b58820523a24295e625bb3658ded968a5171350b1d3461bc1470aa5067de9c96716dc57b06aeec0e5919f37eff871b8df9ff9e7ec1a031fbf755921ec67d2b5529aca82d700a9eab63"}, @generic={0x3, 0xad, "ab794d178c102a4459ae0a640793335c3486143b3ea453c3810708670975430e64f96c912aa95c35484804d1ad6cc1f1476d07f868b323a8025888deeac5e3399ab9ae57477fd8de93d4a66abe4e79a4f225a678c7f2099737b59e3e9d005d22c7541bbf67892e63d9dc1fd7383b826f17999b8fe57bfbacaa71fd3fd2c218affbdb563cb8051a72a0228953cfce574f001d3e746531cc59d52e0865a7401c5161b45c107c25211b9ee0d9df3a"}, @pad1, @pad1]}, 0x130) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000000)='./file0/file0\x00') setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket(0x1e, 0x4, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x6036}], 0x1, 0x0, 0x0, 0xfffffffffffffc92) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "ec094e36a7e3970f8c35c47e5804000300", "c700", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.978709436s ago: executing program 1 (id=1693): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x1c0, 0x4, 0x0, {}, {}, {}, {0x40000000}, 0x0, 0x40, 0xaa, 0x32, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x2, 0xa}) 1.976025626s ago: executing program 1 (id=1694): syz_usb_connect$uac1(0x5, 0xf4, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xdf, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0xe0, 0x0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1e0, 0x3c}, [@extension_unit={0xd, 0x24, 0x8, 0x2, 0xe1, 0x6, "9bb1a0569704"}, @mixer_unit={0x9, 0x24, 0x4, 0x4, 0xa6, "887516c8"}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x0, 0x3, "f26c8c"}, @mixer_unit={0x9, 0x24, 0x4, 0x4, 0x0, "2ae7865e"}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x9, "f994748a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x41, 0x2, 0x0, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x0, 0xff, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xbc, 0x10, 0x8, {0x7, 0x25, 0x1, 0x4, 0xb, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x81, 0x2, 0x5, 0x3, "6ae9", "1b5aae"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x4, 0x7, 0x80}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4f, 0xe, 0x8, 0x7, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xffff, 0x9bc, 0x9, 0xff}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x5, 0x2, 0x4}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x1, 0xf5}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0x0, 0x4, {0x7, 0x25, 0x1, 0x18, 0xc, 0xc76c}}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x9, 0x5, 0x6, 0xff, 0x5}, 0x4b, &(0x7f0000000140)={0x5, 0xf, 0x4b, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x10, "056466c7511dc959c9a6059bb533970b"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x7, 0x9, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x0, 0x0, 0x401, [0x4cd91a181ea1f478, 0xff00c0, 0xff000f, 0x1e, 0x3f3f]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x9, 0x7f}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x406}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x1c, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) 1.575739544s ago: executing program 4 (id=1695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0xb, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x4000840) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x3, 'erspan0\x00', {0x693}, 0x13}) r3 = syz_open_procfs(r1, &(0x7f0000000000)='smaps\x00') r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x4a, {"66440f2b470064f342f4c4e27d02a800600000b90d0a00000f32410f098f497882ba0d200000420f1a85fa3700000f23c83e0f092e3e0f23a5"}}], 0x4a}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getdents(r3, 0xffffffffffffffff, 0x5a) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000002c0)=0x4) readv(r2, &(0x7f0000000680), 0x0) 1.371120823s ago: executing program 4 (id=1696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40840, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000200)={0x0, 0xffffffffffffffae}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'vxcan1\x00', 0x400}) 937.640291ms ago: executing program 0 (id=1697): r0 = syz_clone(0x1020080, &(0x7f00000002c0)="0c47081fb76a81071010833ed6edee6abcad75d854f43c5fc2123276b6ecd8ff3a3dceae48745644db3171f7908e3d8eb386b96fd9928389a5ce054ff4ac7e9e0be9aa14b5248dee9bd77167907c", 0x4e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="ca101bf739ab6a560ab0b896b321a6219464586b8fff6610d362df5a35acb366f2f939dba2") ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x7, 0x2002) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02"], 0x200) ptrace$peek(0xffffffffffffffff, r0, &(0x7f0000000540)) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v3={0x3000000, [{0x100, 0x2}, {0x9}], r4}, 0x18, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f00000002c0)) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x40e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000005c0)={0x10004, 0x1, 0x54000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000380)=""/141, 0x18) getdents64(r9, &(0x7f0000000440)=""/177, 0xb1) keyctl$search(0xa, r7, &(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x3}, r7) write$binfmt_elf32(r9, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x1, 0x2, 0x10, 0x8, 0x3, 0x3, 0x2, 0x258, 0x38, 0x337, 0x897f, 0xfa, 0x20, 0x2, 0x400, 0x8001, 0xfff3}, [{0x6474e551, 0x2, 0x8e, 0x7, 0x7, 0xb3, 0xa757, 0xc41}, {0x70000000, 0x1, 0x7fff, 0xffff, 0x7ff, 0x9, 0x619, 0x5}], "05cbc1ecb1c8590a4f27dbedcc04b4d030a992d4f567b122935165b4d0a53d8eb67426a465138c27d9e04c9904f73ddbfc317ada862f8012ac709ef32f60bd6eb443710eed2159a546e024880fea6c5d76b8749037d5d68bd8d24a9982"}, 0xd5) 926.653049ms ago: executing program 4 (id=1698): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x700, 0x10, 0x3, 0x6, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x62, 0x0, 0x5, 0x29, 0x0, @broadcast, @multicast2}}}}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x1) socketpair(0x1a, 0xa, 0x2, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x7}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000300)={r6, 0x2, 0x9, 0x5}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000080)={0x11, 0x8bfed014ba633f8e, 0x7ff, 0x9, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 633.747239ms ago: executing program 0 (id=1701): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x10, 0x6, 0xe30, 0x7fffffff, "c2a0da7d1813beebb98f6cdbd5e1ee62", 0x0, 0xfb, 0x9, 0xc, 0x0, 0x0, 0xfc}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) write$binfmt_script(r1, &(0x7f00000007c0)={'#! ', './file0', [{0x20, 'cgrokill\x00\x87r:\xbd\xb5\xec\'h\x16Ih\x9d\xe2\xd4\xc1\x92\xcc\x16\xac1a[\x86\xc8.q`\x02\xd3\x92A`\xee\x99\xe4T\xf8t\xe9G\x1ek\x1d\xa4\x0f\x96\x0e\xc1\xc0)8\x1a7\xeeQ\x8e\xf4\x90F\x05\xe2\xff|\x0e\x11B*\xe8:\xd4\x93\xdbE/]\x04\xeb9\n?\xf4\xdf\xf2\xdb\xb6BZ\x1cj\x059O\xe7`\x80\x9ew\xe5\xa9#\x18X)\xb4+\x10h\xddM\x02\x17\x15\xa9]7\xcb\x18\x92\"s\x14\xfa\xf6\x16\x83\xb9>\x928\'H\xad1<\xb8z\xec\x16\xd9\'\xc3[\x9c\xb1:\xe89+bW \xcc\xed\xff\xcf\xeb\xc04\xfc\x94\xfd\xe9\x99 \x97\x87V\x1c\b\x00'/190}, {0x20, 'cpuacct.usage_percpu\x00'}, {0x20, '/dev/cec#\x00'}, {}, {0x20, '/dev/cec#\x00'}, {0x20, ']{'}, {0x20, 'cpuacct.usagecpu\x00F9\x94\x02q\xed\x11\xca\xd2\x16\xaf'}, {0x20, '/dev/cec-\xb1\v\xc3\x1b\x9b\xaa\x0f1\xe2\x82$n\x97\x82\xc4\xa0\x05\xbe)\xa9d!\xdb\x89\x13\xe4\xd6\xf7\xed\x94\x8b*\x93>\x18Y\xb9yV\x8e\xf5\xfa\xe7\xaf\xcaU3\x95b\xb6\xafY\x04bP%1G\xe4?\xe1uM\x9fna\xbc\x87l\xeb\xd6\x0e\x0f\x9f\x00\x10\xbf\xc5\x80\xb0\xca\xa7\x0f\x1a\xf1\x9f\x18~Q;\x03\xbcf\x17q4o\xf9f6\x97\a+\x0f\x1d\xebo\xd3\xbd\x14#\x8c\xff\xf1M\xb5\xed\xc4m\x18\xe1\xda\xe70\x8a\xa3\xa8z\xcbZ\xe44D\xbe\xad\x9a\xf4P\x80\xa8F\xf9f\xb3\xf4H\x80u\x14&\x99\xa7 \xb5V\xed w-/\xcd\x8f\xad\x92\xda\xe3\xcd\xf8\x92\x9b\xc51\x91\xf6\x9b\x9c;ex\x97\xb5\xdf\xcc JL>,9\x14\xdcG\x96\xf6!\x05X\xf4\xf8\x9a\xba3\xa7V'}], 0xa, "3ecb4cdd6857bc94edcec1c8969bfd646cce7ac32297b135e52752ae6b22cc200cb3baea591ffa1ce1ac7daa0d08444d955876a72486"}, 0x223) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8013, r2, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 436.452913ms ago: executing program 5 (id=1702): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008001) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2001000010003b620000000000000000fe8000000000000000000000000000bbac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000108001d000000000008001e000000000014000e"], 0x120}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000140)={0x7, {0x5, 0x0, 0xb90, 0x7, 0x9}}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r6, &(0x7f0000000600)=[{&(0x7f0000000380)=""/116, 0x74}], 0x1, 0x82000001, 0xff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, r5, 0x301, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) syz_io_uring_setup(0x50d1, &(0x7f0000000000)={0x0, 0xfffff7fc, 0x1000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x6c, 0x2, 0x6, 0x202, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_LINENO={0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0xb4}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000a0000010900010073797a3100000000400004803c0001800b00010065787468647200002c000280080005400000001805000200830000000800014000000000080004400000005a080003400000001c0900a784b6bac063bea4e21079768a4e74020073797a3200000000140000001100010000000a000000000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) 352.128437ms ago: executing program 0 (id=1703): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x85) 258.07616ms ago: executing program 5 (id=1704): arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x3b, 0x6a, 0xe4, 0x40, 0x13d3, 0x3487, 0x42eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfb, 0x1, 0x30, 0xf9, "", [{{0x9, 0x4, 0x77, 0x7, 0x0, 0xe0, 0xa, 0xb9, 0x15}}]}}]}}, 0x0) (async) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='exec :'], 0x1e0) lsm_get_self_attr(0x65, 0x0, &(0x7f00000002c0)=0x3000, 0x0) syz_usb_connect$uac1(0x4, 0xf3, &(0x7f0000000100)=ANY=[], &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x2c, 0x4, 0xc0, 0x20, 0x83}, 0x1c, &(0x7f0000000200)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "6971dd9913f5c0e135f6862619420b03"}]}, 0x7, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x427}}, {0x9a, &(0x7f0000000280)=@string={0x9a, 0x3, "c1ad0b147d27da1796d9876a1bb25600a74c9a12f1d2d4f34dc25b7be90a11822a019c0675e3d1688a18da508b7271be5328a953ba1a689d33cda78213939749825d0483389f54aab686dcda5fd2b222c444c5d07d06219c817d189f8392e0da776b470a5b964c4051d9d8eeef0d5be277e503e8a702157801a5a1694f416ced241bbf8621dd8961f9ae94a438bbca001c994a5145a39ebe"}}, {0x8c, &(0x7f0000000340)=@string={0x8c, 0x3, "b8a3467b4df28ee44a5b87d4e522ae47f85c14130cd88b8d51a00573fcee55852dc7aaff24e071d87ffe02a63f474dcc2310567bf635001edb72afcf121b9bedf52de6aeebdec556f89cf74237be57678ac03314b6ce0911fde686d4393b464280e4f49a077e3b3ab0214c252ea6b192d0d2107a4e1952fb3c0b8c9428387878e9eeb76ce793e672c514"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x821}}, {0xb9, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, {0x0, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x437}}, {0xffffffffffffffbe, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x44b}}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)=ANY=[@ANYBLOB='nr_inodes=5,size=0']) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000000c0)) 222.52203ms ago: executing program 5 (id=1705): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) (async, rerun: 64) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x5, 0x8, 0x4, 0x3c5b, 0x10000001, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x0, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xe, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x801, 0x6, 0x7, 0x8000, 0x1, 0xfe000004, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x81000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x5, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x9, 0xce7, 0x9ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x1, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) connect$ax25(r4, &(0x7f0000000900)={{0x3, @bcast, 0x3}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) (rerun: 64) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, r1, 0xb15, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2600c8c0}, 0x4) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000000000000000000000000a48000000060a0b040000000000000004020000071c0004801800018007000100637400000c0018752e412ce3939f00130900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x70}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xfd}]}, 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x20044004) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000a40)=[@nested_create_vm={0x12d, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x3fe}}, @nested_amd_stgi={0x17e, 0x10}, @out_dx={0x6a, 0x28, {0x76af, 0x5, 0x9b7c}}, @wrmsr={0x65, 0x20, {0x307, 0x6}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @in_dx={0x69, 0x20, {0xabad, 0x5}}, @code={0xa, 0x5f, {"48b807000000000000000f23d80f21f835800000200f23f8c462599074a80e8f69788330450f07c4a3bd0e5efeb3c4e36d187c620db6470f794ffc660fc7b70a000000b9b908000052420f350f07"}}], 0x11f}) (async, rerun: 32) dup3(r5, r4, 0x0) (rerun: 32) 155.860242ms ago: executing program 5 (id=1706): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af26, 0xffffffffffffffff) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000000)='/dg\n\x91\xfb=ndt\x00', 0x400000, &(0x7f0000000080)={@align=0xfffffffffffffff8, {0x5, 0x9, 0x8a, 0xf}}, 0xffff6abe, &(0x7f00000000c0), &(0x7f0000000100)=0x10}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) 53.963952ms ago: executing program 5 (id=1707): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x5000, 0x10000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xe000, 0xb, 0x3, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb}, {0x1000, 0x100000, 0xc, 0x7, 0xb1, 0x8, 0x21, 0x81, 0x80, 0x0, 0x1}, {0xfec00000, 0x8000000, 0x4, 0x1, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x40000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) (async, rerun: 32) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @empty, 0x0, 0x3}, 0x20) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) (async) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r5 = msgget$private(0x0, 0x1f3) msgrcv(r5, 0x0, 0x0, 0x3, 0x2000) (async, rerun: 64) msgsnd(r5, &(0x7f0000000040)={0x1}, 0x8, 0x0) (rerun: 64) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 0s ago: executing program 5 (id=1708): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa02, 0x870, 0x1, 0x0, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x87d5, 0x2800, 0xa00, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): an invalid interface number: 200 but max is 0 [ 337.800229][ T5908] usb 5-1: config 0 has no interface number 0 [ 337.806627][ T5908] usb 5-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 337.818567][ T5908] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 337.828813][ T5908] usb 5-1: config 0 interface 200 has no altsetting 0 [ 337.838202][ T5908] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 337.847461][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.855969][ T5908] usb 5-1: Product: syz [ 337.860265][ T5908] usb 5-1: Manufacturer: syz [ 337.865130][ T5908] usb 5-1: SerialNumber: syz [ 337.877558][T11301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 337.882462][ T5908] usb 5-1: config 0 descriptor?? [ 338.109597][ T5927] usb 1-1: USB disconnect, device number 91 [ 338.141242][ T5927] ch341 1-1:0.0: device disconnected [ 338.230282][T11313] ALSA: mixer_oss: invalid index 100000 [ 338.264756][T11312] ISOFS: Unable to identify CD-ROM format. [ 338.298202][T11327] loop5: detected capacity change from 0 to 7 [ 338.310855][T11327] Dev loop5: unable to read RDB block 7 [ 338.319961][T11327] loop5: unable to read partition table [ 338.327645][T11327] loop5: partition table beyond EOD, truncated [ 338.344548][T11327] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 338.468720][ T5908] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input44 [ 338.512888][ T5908] usb 5-1: USB disconnect, device number 55 [ 338.541565][T11333] FAULT_INJECTION: forcing a failure. [ 338.541565][T11333] name failslab, interval 1, probability 0, space 0, times 0 [ 338.541610][T11333] CPU: 0 UID: 0 PID: 11333 Comm: syz.1.1278 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.541638][T11333] Tainted: [L]=SOFTLOCKUP [ 338.541645][T11333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 338.541657][T11333] Call Trace: [ 338.541666][T11333] [ 338.541674][T11333] dump_stack_lvl+0xe8/0x150 [ 338.541712][T11333] should_fail_ex+0x412/0x560 [ 338.541757][T11333] should_failslab+0xa8/0x100 [ 338.541782][T11333] ? skb_clone+0x212/0x3a0 [ 338.541814][T11333] kmem_cache_alloc_noprof+0x87/0x650 [ 338.541846][T11333] ? __netlink_lookup+0xc6/0x8b0 [ 338.541883][T11333] skb_clone+0x212/0x3a0 [ 338.541919][T11333] __netlink_deliver_tap+0x404/0x850 [ 338.541962][T11333] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.541992][T11333] netlink_deliver_tap+0x19c/0x1b0 [ 338.542019][T11333] netlink_unicast+0x7e3/0x9b0 [ 338.542051][T11333] ? __pfx_netlink_unicast+0x10/0x10 [ 338.542077][T11333] ? netlink_sendmsg+0x650/0xb40 [ 338.542100][T11333] ? skb_put+0x11b/0x210 [ 338.542131][T11333] netlink_sendmsg+0x813/0xb40 [ 338.542166][T11333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.542196][T11333] ? aa_sock_msg_perm+0xf1/0x1b0 [ 338.542219][T11333] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.542254][T11333] ____sys_sendmsg+0x972/0x9f0 [ 338.542284][T11333] ? __might_fault+0xaf/0x130 [ 338.542322][T11333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.542362][T11333] ? import_iovec+0x73/0xa0 [ 338.542395][T11333] ___sys_sendmsg+0x2a5/0x360 [ 338.542424][T11333] ? __lock_acquire+0x6b5/0x2cf0 [ 338.542460][T11333] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.542527][T11333] ? __fget_files+0x2a/0x420 [ 338.542555][T11333] ? __fget_files+0x3a0/0x420 [ 338.542595][T11333] __x64_sys_sendmsg+0x1bd/0x2a0 [ 338.542629][T11333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.542670][T11333] ? __pfx_ksys_write+0x10/0x10 [ 338.542704][T11333] do_syscall_64+0x14d/0xf80 [ 338.542730][T11333] ? trace_irq_disable+0x3b/0x140 [ 338.542764][T11333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.542786][T11333] ? clear_bhb_loop+0x40/0x90 [ 338.542811][T11333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.542832][T11333] RIP: 0033:0x7f6c4e59c799 [ 338.542852][T11333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.542870][T11333] RSP: 002b:00007f6c4f4ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.542892][T11333] RAX: ffffffffffffffda RBX: 00007f6c4e815fa0 RCX: 00007f6c4e59c799 [ 338.542907][T11333] RDX: 0000000000000800 RSI: 00002000000002c0 RDI: 0000000000000003 [ 338.542921][T11333] RBP: 00007f6c4f4ad090 R08: 0000000000000000 R09: 0000000000000000 [ 338.542934][T11333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.542946][T11333] R13: 00007f6c4e816038 R14: 00007f6c4e815fa0 R15: 00007ffcca4bac88 [ 338.542980][T11333] [ 339.168367][T11344] loop8: detected capacity change from 0 to 524287999 [ 339.250046][ T9061] Buffer I/O error on dev loop8, logical block 65535998, async page read [ 339.380464][T11355] loop5: detected capacity change from 0 to 7 [ 339.399705][T11355] Dev loop5: unable to read RDB block 7 [ 339.424788][T11355] loop5: unable to read partition table [ 339.439761][T11355] loop5: partition table beyond EOD, truncated [ 339.447185][T11355] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 339.525370][ T5908] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 339.599923][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'. [ 339.620996][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'. [ 339.676202][T11367] FAULT_INJECTION: forcing a failure. [ 339.676202][T11367] name failslab, interval 1, probability 0, space 0, times 0 [ 339.691598][T11367] CPU: 1 UID: 0 PID: 11367 Comm: syz.1.1289 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.691626][T11367] Tainted: [L]=SOFTLOCKUP [ 339.691632][T11367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.691641][T11367] Call Trace: [ 339.691647][T11367] [ 339.691654][T11367] dump_stack_lvl+0xe8/0x150 [ 339.691684][T11367] should_fail_ex+0x412/0x560 [ 339.691708][T11367] should_failslab+0xa8/0x100 [ 339.691726][T11367] __kmalloc_noprof+0xe8/0x760 [ 339.691741][T11367] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 339.691771][T11367] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 339.691801][T11367] genl_family_rcv_msg_doit+0xd9/0x330 [ 339.691829][T11367] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 339.691858][T11367] ? apparmor_capable+0x126/0x170 [ 339.691878][T11367] ? bpf_lsm_capable+0x9/0x20 [ 339.691895][T11367] ? security_capable+0x7e/0x2c0 [ 339.691923][T11367] genl_rcv_msg+0x61c/0x7a0 [ 339.691952][T11367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.691974][T11367] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 339.691994][T11367] ? __pfx_nl80211_cancel_remain_on_channel+0x10/0x10 [ 339.692010][T11367] ? __pfx_nl80211_post_doit+0x10/0x10 [ 339.692032][T11367] ? __pfx_ref_tracker_free+0x10/0x10 [ 339.692052][T11367] ? __skb_clone+0x63/0x7a0 [ 339.692079][T11367] netlink_rcv_skb+0x232/0x4b0 [ 339.692131][T11367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.692164][T11367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.692185][T11367] ? genl_rcv+0x19/0x40 [ 339.692230][T11367] ? down_read+0x270/0x2e0 [ 339.692257][T11367] ? genl_rcv+0xd/0x40 [ 339.692289][T11367] genl_rcv+0x28/0x40 [ 339.692309][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 339.692317][T11367] netlink_unicast+0x80f/0x9b0 [ 339.692349][T11367] ? __pfx_netlink_unicast+0x10/0x10 [ 339.692456][T11367] ? netlink_sendmsg+0x650/0xb40 [ 339.692544][T11367] ? skb_put+0x11b/0x210 [ 339.692620][T11367] netlink_sendmsg+0x813/0xb40 [ 339.692714][T11367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.692801][T11367] ? aa_sock_msg_perm+0xf1/0x1b0 [ 339.692855][T11367] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.692947][T11367] ____sys_sendmsg+0x972/0x9f0 [ 339.693030][T11367] ? __might_fault+0xaf/0x130 [ 339.693136][T11367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.693240][T11367] ? import_iovec+0x73/0xa0 [ 339.693326][T11367] ___sys_sendmsg+0x2a5/0x360 [ 339.693408][T11367] ? __lock_acquire+0x6b5/0x2cf0 [ 339.693583][T11367] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.693739][T11367] ? __fget_files+0x2a/0x420 [ 339.693820][T11367] ? __fget_files+0x3a0/0x420 [ 339.693947][T11367] __x64_sys_sendmsg+0x1bd/0x2a0 [ 339.694053][T11367] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.694167][T11367] ? __pfx_ksys_write+0x10/0x10 [ 339.694253][T11367] do_syscall_64+0x14d/0xf80 [ 339.694318][T11367] ? trace_irq_disable+0x3b/0x140 [ 339.694383][T11367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.694445][T11367] ? clear_bhb_loop+0x40/0x90 [ 339.694516][T11367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.694574][T11367] RIP: 0033:0x7f6c4e59c799 [ 339.694623][T11367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.694667][T11367] RSP: 002b:00007f6c4f4ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.694732][T11367] RAX: ffffffffffffffda RBX: 00007f6c4e815fa0 RCX: 00007f6c4e59c799 [ 339.694774][T11367] RDX: 0000000000000800 RSI: 00002000000002c0 RDI: 0000000000000003 [ 339.694807][T11367] RBP: 00007f6c4f4ad090 R08: 0000000000000000 R09: 0000000000000000 [ 339.694838][T11367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.694896][T11367] R13: 00007f6c4e816038 R14: 00007f6c4e815fa0 R15: 00007ffcca4bac88 [ 339.694988][T11367] [ 340.063561][ T112] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 340.077080][ T5908] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 340.086450][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.104045][ T5908] pvrusb2: Hardware description: Terratec Grabster AV400 [ 340.111264][ T5908] pvrusb2: ********** [ 340.120519][ T5908] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 340.154949][ T5908] pvrusb2: Important functionality might not be entirely working. [ 340.174503][ T5908] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 340.186642][ T5908] pvrusb2: ********** [ 340.203052][ T112] usb 5-1: device descriptor read/64, error -71 [ 340.307914][ T2365] pvrusb2: Invalid write control endpoint [ 340.317056][ T5908] usb 6-1: USB disconnect, device number 10 [ 340.409294][ T2365] pvrusb2: Invalid write control endpoint [ 340.417224][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 340.429851][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 340.437550][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 340.450659][ T112] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 340.458905][ T2365] pvrusb2: Device being rendered inoperable [ 340.469846][ T2365] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 340.474980][ T29] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 340.479538][ T2365] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 340.501289][ T2365] pvrusb2: Attached sub-driver cx25840 [ 340.508111][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 340.519259][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 340.592266][ T112] usb 5-1: device descriptor read/64, error -71 [ 340.642312][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 340.649133][ T29] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 340.657834][ T29] usb 1-1: config 0 has no interface number 0 [ 340.664323][ T29] usb 1-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 340.676438][ T29] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 340.687145][ T29] usb 1-1: config 0 interface 200 has no altsetting 0 [ 340.696648][ T29] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 340.703275][ T112] usb usb5-port1: attempt power cycle [ 340.709782][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.719293][ T29] usb 1-1: Product: syz [ 340.723600][ T29] usb 1-1: Manufacturer: syz [ 340.728246][ T29] usb 1-1: SerialNumber: syz [ 340.736877][ T29] usb 1-1: config 0 descriptor?? [ 341.019755][T11370] ISOFS: Unable to identify CD-ROM format. [ 341.053187][ T112] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 341.066859][T11385] ALSA: mixer_oss: invalid index 100000 [ 341.093454][ T112] usb 5-1: device descriptor read/8, error -71 [ 341.118601][ T29] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input45 [ 341.139367][ T29] usb 1-1: USB disconnect, device number 92 [ 341.272270][ T24] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 341.272286][ T5908] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 341.342450][ T112] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 341.363234][ T112] usb 5-1: device descriptor read/8, error -71 [ 341.423307][ T5908] usb 6-1: too many configurations: 125, using maximum allowed: 8 [ 341.432896][ T5908] usb 6-1: config index 0 descriptor too short (expected 100, got 72) [ 341.436683][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 341.446851][ T5908] usb 6-1: config index 1 descriptor too short (expected 100, got 72) [ 341.448493][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 341.459970][ T5908] usb 6-1: config index 2 descriptor too short (expected 100, got 72) [ 341.465620][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.483841][ T112] usb usb5-port1: unable to enumerate USB device [ 341.488967][ T24] usb 2-1: config 0 descriptor?? [ 341.499078][ T5908] usb 6-1: config index 3 descriptor too short (expected 100, got 72) [ 341.511640][ T5908] usb 6-1: config index 4 descriptor too short (expected 100, got 72) [ 341.526364][ T5908] usb 6-1: config index 5 descriptor too short (expected 100, got 72) [ 341.536791][ T5908] usb 6-1: config index 6 descriptor too short (expected 100, got 72) [ 341.546757][ T5908] usb 6-1: config index 7 descriptor too short (expected 100, got 72) [ 341.557764][ T5908] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 341.567508][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.575702][ T5908] usb 6-1: Product: syz [ 341.580472][ T5908] usb 6-1: Manufacturer: syz [ 341.585830][ T5908] usb 6-1: SerialNumber: syz [ 341.599595][ T5908] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 341.624698][ T112] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 341.741887][ T24] (null): keene_cmd_main failed (-71) [ 341.785805][ T24] video4linux radio48: keene_cmd_main failed (-71) [ 341.802808][ T24] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 341.827951][ T24] usb 2-1: USB disconnect, device number 96 [ 342.079222][ T29] usb 6-1: USB disconnect, device number 11 [ 342.156406][T11393] loop5: detected capacity change from 0 to 4095 [ 342.338270][T11395] FAULT_INJECTION: forcing a failure. [ 342.338270][T11395] name failslab, interval 1, probability 0, space 0, times 0 [ 342.351220][T11395] CPU: 1 UID: 0 PID: 11395 Comm: syz.0.1298 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.351254][T11395] Tainted: [L]=SOFTLOCKUP [ 342.351262][T11395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 342.351274][T11395] Call Trace: [ 342.351282][T11395] [ 342.351291][T11395] dump_stack_lvl+0xe8/0x150 [ 342.351337][T11395] should_fail_ex+0x412/0x560 [ 342.351370][T11395] should_failslab+0xa8/0x100 [ 342.351397][T11395] __kmalloc_noprof+0xe8/0x760 [ 342.351419][T11395] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 342.351460][T11395] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 342.351501][T11395] genl_family_rcv_msg_doit+0xd9/0x330 [ 342.351540][T11395] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 342.351580][T11395] ? apparmor_capable+0x126/0x170 [ 342.351609][T11395] ? bpf_lsm_capable+0x9/0x20 [ 342.351633][T11395] ? security_capable+0x7e/0x2c0 [ 342.351671][T11395] genl_rcv_msg+0x61c/0x7a0 [ 342.351709][T11395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.351738][T11395] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 342.351765][T11395] ? __pfx_nl80211_cancel_remain_on_channel+0x10/0x10 [ 342.351787][T11395] ? __pfx_nl80211_post_doit+0x10/0x10 [ 342.351818][T11395] ? __pfx_ref_tracker_free+0x10/0x10 [ 342.351844][T11395] ? __skb_clone+0x63/0x7a0 [ 342.351882][T11395] netlink_rcv_skb+0x232/0x4b0 [ 342.351908][T11395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.351941][T11395] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.351963][T11395] ? genl_rcv+0x19/0x40 [ 342.352011][T11395] ? down_read+0x270/0x2e0 [ 342.352039][T11395] ? genl_rcv+0xd/0x40 [ 342.352070][T11395] genl_rcv+0x28/0x40 [ 342.352103][T11395] netlink_unicast+0x80f/0x9b0 [ 342.352134][T11395] ? __pfx_netlink_unicast+0x10/0x10 [ 342.352159][T11395] ? netlink_sendmsg+0x650/0xb40 [ 342.352183][T11395] ? skb_put+0x11b/0x210 [ 342.352214][T11395] netlink_sendmsg+0x813/0xb40 [ 342.352251][T11395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.352281][T11395] ? aa_sock_msg_perm+0xf1/0x1b0 [ 342.352304][T11395] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 342.352347][T11395] ____sys_sendmsg+0x972/0x9f0 [ 342.352377][T11395] ? __might_fault+0xaf/0x130 [ 342.352415][T11395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.352454][T11395] ? import_iovec+0x73/0xa0 [ 342.352488][T11395] ___sys_sendmsg+0x2a5/0x360 [ 342.352518][T11395] ? __lock_acquire+0x6b5/0x2cf0 [ 342.352554][T11395] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.352622][T11395] ? __fget_files+0x2a/0x420 [ 342.352650][T11395] ? __fget_files+0x3a0/0x420 [ 342.352690][T11395] __x64_sys_sendmsg+0x1bd/0x2a0 [ 342.352724][T11395] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.352765][T11395] ? __pfx_ksys_write+0x10/0x10 [ 342.352800][T11395] do_syscall_64+0x14d/0xf80 [ 342.352826][T11395] ? trace_irq_disable+0x3b/0x140 [ 342.352850][T11395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.352872][T11395] ? clear_bhb_loop+0x40/0x90 [ 342.352899][T11395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.352920][T11395] RIP: 0033:0x7f440ab9c799 [ 342.352940][T11395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.352958][T11395] RSP: 002b:00007f440baac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.352980][T11395] RAX: ffffffffffffffda RBX: 00007f440ae15fa0 RCX: 00007f440ab9c799 [ 342.352996][T11395] RDX: 0000000000000800 RSI: 00002000000002c0 RDI: 0000000000000003 [ 342.353010][T11395] RBP: 00007f440baac090 R08: 0000000000000000 R09: 0000000000000000 [ 342.353023][T11395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.353036][T11395] R13: 00007f440ae16038 R14: 00007f440ae15fa0 R15: 00007ffe072e5db8 [ 342.353069][T11395] [ 342.720613][ T112] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 342.728509][ T112] ath9k_htc: Failed to initialize the device [ 342.743243][ T29] usb 6-1: ath9k_htc: USB layer deinitialized [ 342.861382][T11402] netlink: 'syz.1.1299': attribute type 10 has an invalid length. [ 343.292300][ T112] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 343.465457][ T112] usb 6-1: Using ep0 maxpacket: 16 [ 343.474168][ T112] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.486819][ T112] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 343.502535][ T112] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 343.513637][ T112] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 343.528688][ T112] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 343.549680][ T112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 343.561726][ T112] usb 6-1: SerialNumber: syz [ 343.575935][T11412] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 343.585445][T11412] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 343.594731][ T112] hub 6-1:1.0: bad descriptor, ignoring hub [ 343.601317][ T112] hub 6-1:1.0: probe with driver hub failed with error -5 [ 343.775253][T11429] nbd0: detected capacity change from 0 to 127 [ 343.791094][ T5843] block nbd0: Receive control failed (result -32) [ 343.800784][ T9605] block nbd0: Send control failed (result -32) [ 343.810631][T11412] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 343.833058][ T9605] block nbd0: Request send failed, requeueing [ 343.843261][T11412] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 343.871036][ T1689] block nbd0: Dead connection, failed to find a fallback [ 343.888549][ T1689] block nbd0: shutting down sockets [ 343.894624][ T1689] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 343.910141][ T1689] Buffer I/O error on dev nbd0, logical block 0, async page read [ 343.929050][ T9605] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 343.939311][ T9605] Buffer I/O error on dev nbd0, logical block 1, async page read [ 343.948212][ T9605] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 343.957500][ T9605] Buffer I/O error on dev nbd0, logical block 2, async page read [ 343.966892][ T9605] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 343.976551][ T9605] Buffer I/O error on dev nbd0, logical block 3, async page read [ 343.984818][ T9605] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 343.994085][ T9605] Buffer I/O error on dev nbd0, logical block 0, async page read [ 344.002149][ T9605] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.011506][ T9605] Buffer I/O error on dev nbd0, logical block 1, async page read [ 344.020170][ T9605] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.029482][ T9605] Buffer I/O error on dev nbd0, logical block 2, async page read [ 344.037951][ T9605] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.049991][ T9605] Buffer I/O error on dev nbd0, logical block 3, async page read [ 344.058218][ T9605] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.067648][ T9605] Buffer I/O error on dev nbd0, logical block 0, async page read [ 344.078815][T11436] tmpfs: Bad value for 'mpol' [ 344.088781][ T9605] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.117113][ T9605] ldm_validate_partition_table(): Disk read failed. [ 344.149373][ T9605] Dev nbd0: unable to read RDB block 0 [ 344.163879][ T9605] nbd0: unable to read partition table [ 344.185296][ T9605] ldm_validate_partition_table(): Disk read failed. [ 344.208525][ T9605] Dev nbd0: unable to read RDB block 0 [ 344.229146][ T9605] nbd0: unable to read partition table [ 344.255308][ T9605] buffer_io_error: 119 callbacks suppressed [ 344.255355][ T9605] Buffer I/O error on dev nbd0, logical block 0, async page read [ 344.290251][ T9605] Buffer I/O error on dev nbd0, logical block 1, async page read [ 344.299809][ T9605] Buffer I/O error on dev nbd0, logical block 2, async page read [ 344.308090][ T9605] Buffer I/O error on dev nbd0, logical block 3, async page read [ 344.349445][ T112] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 344.363141][ T9605] Buffer I/O error on dev nbd0, logical block 0, async page read [ 344.375359][ T9605] Buffer I/O error on dev nbd0, logical block 1, async page read [ 344.386651][ T9605] Buffer I/O error on dev nbd0, logical block 2, async page read [ 344.394809][ T9605] Buffer I/O error on dev nbd0, logical block 3, async page read [ 344.405263][ T9605] Buffer I/O error on dev nbd0, logical block 0, async page read [ 344.419750][ T9605] Buffer I/O error on dev nbd0, logical block 1, async page read [ 344.512399][ T29] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 344.542297][ T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 344.674726][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 344.693194][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.704634][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.715032][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 344.728737][ T29] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 344.741485][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.758628][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 344.770483][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.789044][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.806156][ T29] usb 1-1: config 0 descriptor?? [ 344.838317][ T24] usb 5-1: config 0 descriptor?? [ 344.882892][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 345.153812][ T5868] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 345.243956][ T29] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0011/input/input46 [ 345.274338][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 345.282825][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 345.289833][ C0] cdc_ether 6-1:1.0 usb0: CDC: unexpected notification 68! [ 345.293716][T11442] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1313'. [ 345.333696][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 345.348452][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 345.369433][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 345.389924][ T5868] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 345.407036][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 345.416809][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.427681][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 345.448086][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 345.464008][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 345.477330][ T5868] usb 2-1: config 0 descriptor?? [ 345.494994][ T29] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 345.533121][ T5907] usb 6-1: USB disconnect, device number 12 [ 345.548691][ T5868] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 345.577977][ T29] usb 1-1: USB disconnect, device number 93 [ 345.588637][ T5907] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 345.691343][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 345.711853][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 345.746160][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 345.773249][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 345.780720][T11468] fido_id[11468]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 345.807280][ T5868] gspca_sonixj: reg_r err -71 [ 345.825439][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 345.843870][ T5868] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 345.866310][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 345.897135][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 345.904109][ T5868] usb 2-1: USB disconnect, device number 97 [ 346.004635][ T24] pwc: Registered as video103. [ 346.058354][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input47 [ 346.126112][ T24] usb 5-1: USB disconnect, device number 60 [ 346.883099][ T29] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 346.892214][ T5908] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 346.962253][ T112] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 347.062230][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 347.063537][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 347.074520][ T5908] usb 1-1: unable to get BOS descriptor or descriptor too short [ 347.084005][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.099288][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 347.099580][ T5908] usb 1-1: config 4 has an invalid interface number: 234 but max is 0 [ 347.113521][ T29] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 347.131549][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.145677][ T112] usb 2-1: Using ep0 maxpacket: 8 [ 347.150242][ T29] usb 6-1: config 0 descriptor?? [ 347.167812][ T112] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 347.179394][ T5908] usb 1-1: config 4 has no interface number 0 [ 347.193008][ T112] usb 2-1: config 6 has no interface number 0 [ 347.199248][ T5908] usb 1-1: config 4 interface 234 has no altsetting 0 [ 347.213064][ T112] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 347.229580][ T5908] usb 1-1: string descriptor 0 read error: -22 [ 347.238020][ T5908] usb 1-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=86.2b [ 347.254136][ T112] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 347.275635][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.284564][ T112] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid maxpacket 1152, setting to 1024 [ 347.306565][ T112] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 347.316697][ T5908] gspca_main: touptek-2.14.0 probing 0547:6801 [ 347.330081][ T112] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 347.341394][ T112] usb 2-1: Product: syz [ 347.346107][ T112] usb 2-1: Manufacturer: syz [ 347.351260][ T112] usb 2-1: SerialNumber: syz [ 347.360394][T11507] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 347.397005][ T112] hso 2-1:6.2: Failed to find BULK IN ep [ 347.506255][ T112] usb 1-1: USB disconnect, device number 94 [ 347.585120][T11501] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 347.595323][ T5908] usb 2-1: USB disconnect, device number 98 [ 347.629429][ T29] HID 045e:07da: Invalid code 65791 type 1 [ 347.673805][ T29] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0012/input/input48 [ 347.744116][ T29] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 348.168599][T11534] 9p: Bad value for 'rfdno' [ 348.198982][T11538] netlink: 'syz.1.1328': attribute type 21 has an invalid length. [ 348.214298][T11538] netlink: 'syz.1.1328': attribute type 1 has an invalid length. [ 348.231667][T11538] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1328'. [ 348.324839][T11541] mmap: syz.0.1329 (11541) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 348.429277][ T24] usb 6-1: USB disconnect, device number 13 [ 348.622246][ T112] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 348.762735][ T112] usb 1-1: device descriptor read/64, error -71 [ 349.012249][ T112] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 349.180623][ T112] usb 1-1: device descriptor read/64, error -71 [ 349.432703][ T112] usb usb1-port1: attempt power cycle [ 349.557399][T11579] dvmrp1: entered allmulticast mode [ 349.563612][T11579] dvmrp1: left allmulticast mode [ 349.772257][ T5926] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 349.783207][ T112] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 349.822960][ T112] usb 1-1: device descriptor read/8, error -71 [ 349.958200][ T5926] usb 6-1: config 1 has an invalid interface number: 33 but max is 2 [ 349.968780][ T5926] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.979794][ T5926] usb 6-1: config 1 has no interface number 2 [ 349.989704][ T5926] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 349.992459][ T24] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 350.004360][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.015725][ T5926] usb 6-1: Product: syz [ 350.020142][ T5926] usb 6-1: Manufacturer: syz [ 350.025425][ T5926] usb 6-1: SerialNumber: syz [ 350.063834][ T112] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 350.094280][ T112] usb 1-1: device descriptor read/8, error -71 [ 350.172998][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 350.184822][ T24] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 350.202233][ T24] usb 2-1: config 0 has no interface number 0 [ 350.209699][ T112] usb usb1-port1: unable to enumerate USB device [ 350.217158][ T24] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 350.242200][ T24] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 350.272320][ T24] usb 2-1: config 0 interface 200 has no altsetting 0 [ 350.296403][ T24] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 350.313956][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.326231][ T5926] usb 6-1: USB disconnect, device number 14 [ 350.332294][ T24] usb 2-1: Product: syz [ 350.332316][ T24] usb 2-1: Manufacturer: syz [ 350.332333][ T24] usb 2-1: SerialNumber: syz [ 350.346405][ T24] usb 2-1: config 0 descriptor?? [ 350.387294][ T9061] udevd[9061]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.617918][T11582] ISOFS: Unable to identify CD-ROM format. [ 350.630631][T11582] ALSA: mixer_oss: invalid index 100000 [ 350.679995][ T24] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input49 [ 350.707365][ T24] usb 2-1: USB disconnect, device number 99 [ 351.122297][ T29] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 351.282292][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 351.301344][ T29] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 351.320067][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 351.331775][ T29] usb 6-1: Product: syz [ 351.339792][ T29] usb 6-1: Manufacturer: syz [ 351.348502][ T29] usb 6-1: SerialNumber: syz [ 351.367817][ T29] usb 6-1: config 0 descriptor?? [ 351.387423][ T29] gspca_main: sq905-2.14.0 probing 2770:9120 [ 351.590007][T11593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.608582][T11593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.782356][ T5926] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 351.831898][ T29] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 351.863542][ T29] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 351.892368][ T29] usb 6-1: USB disconnect, device number 15 [ 351.962925][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 351.978239][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.998156][ T5926] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 352.009537][ T5926] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 352.021919][ T5926] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 352.055234][ T5926] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 352.070868][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 352.099306][ T5926] usb 2-1: SerialNumber: syz [ 352.126886][T11621] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 352.134549][T11621] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 352.155913][ T5926] hub 2-1:1.0: bad descriptor, ignoring hub [ 352.321142][ T5926] hub 2-1:1.0: probe with driver hub failed with error -5 [ 352.344767][T11621] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 352.362418][T11621] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 352.480704][T11629] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1345'. [ 352.814773][T11641] loop5: detected capacity change from 0 to 7 [ 352.825980][T11641] Dev loop5: unable to read RDB block 7 [ 352.831801][T11641] loop5: unable to read partition table [ 352.838090][T11641] loop5: partition table beyond EOD, truncated [ 352.839291][ T5926] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 352.846928][T11641] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 353.921586][T11649] ceph: No mds server is up or the cluster is laggy [ 353.938800][ C0] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 68! [ 354.032863][ T112] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 354.197801][ T5908] usb 2-1: USB disconnect, device number 100 [ 354.213858][ T112] usb 1-1: Using ep0 maxpacket: 32 [ 354.224476][ T5908] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 354.245127][ T112] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 354.271440][ T112] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 354.281525][ T112] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 354.296615][T11687] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 354.323250][ T112] usb 1-1: config 1 has no interface number 0 [ 354.329539][ T112] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 354.340887][ T112] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 354.355038][ T112] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 354.368440][ T112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.411187][ T112] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 354.613842][ T112] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 354.802791][ T5907] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 354.839728][T11682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1357'. [ 354.876382][T11682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.903598][T11682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.928371][T11682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.938203][T11682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.952434][ T5907] usb 5-1: device descriptor read/64, error -71 [ 355.153380][ T112] usb 2-1: new low-speed USB device number 101 using dummy_hcd [ 355.168555][T11682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.180075][T11715] veth0_vlan: entered allmulticast mode [ 355.187578][T11682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.193037][ T5907] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 355.206713][ T5908] usb 1-1: USB disconnect, device number 99 [ 355.228119][ T5908] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 355.292338][ T112] usb 2-1: device descriptor read/64, error -71 [ 355.352308][ T5907] usb 5-1: device descriptor read/64, error -71 [ 355.465256][ T5907] usb usb5-port1: attempt power cycle [ 355.576045][ T112] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 355.722463][ T112] usb 2-1: device descriptor read/64, error -71 [ 355.822220][ T5907] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 355.835689][ T112] usb usb2-port1: attempt power cycle [ 355.863635][ T5907] usb 5-1: device descriptor read/8, error -71 [ 356.200018][T11744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1369'. [ 356.209205][ T112] usb 2-1: new low-speed USB device number 103 using dummy_hcd [ 356.322297][ T5907] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 356.393029][ T5907] usb 5-1: device descriptor read/8, error -71 [ 356.540432][ T30] audit: type=1326 audit(1774344927.296:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11755 comm="syz.5.1371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaccb9c799 code=0x0 [ 356.579962][ T5907] usb usb5-port1: unable to enumerate USB device [ 356.882307][ T5907] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 357.049287][ T5907] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.059860][ T5907] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 357.069417][ T5907] usb 6-1: config 1 has no interface number 0 [ 357.076242][ T5907] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 357.094049][ T5907] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.104502][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.113467][ T5907] usb 6-1: Product: syz [ 357.118090][ T5907] usb 6-1: Manufacturer: syz [ 357.124450][ T5907] usb 6-1: SerialNumber: syz [ 357.157153][ T5907] usb 6-1: selecting invalid altsetting 1 [ 357.185327][ T112] usb 2-1: device descriptor read/8, error -71 [ 357.232308][ T24] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 357.352083][T11758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.377777][T11758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.392420][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 357.400709][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.412425][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.425003][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.435816][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.442501][ T112] usb 2-1: new low-speed USB device number 104 using dummy_hcd [ 357.447804][ T24] usb 1-1: Product: syz [ 357.460173][ T24] usb 1-1: Manufacturer: syz [ 357.465317][ T24] usb 1-1: SerialNumber: syz [ 357.471710][ T112] usb 2-1: device descriptor read/8, error -71 [ 357.504092][ T24] usb 1-1: 0:2 : does not exist [ 357.582969][ T112] usb usb2-port1: unable to enumerate USB device [ 357.732463][ T24] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 357.976746][ T24] usb 1-1: USB disconnect, device number 100 [ 358.298614][ T9605] udevd[9605]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.513441][T11785] netlink: 'syz.4.1378': attribute type 10 has an invalid length. [ 358.524343][T11785] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1378'. [ 358.638844][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 358.736447][T11795] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 358.783771][T11785] : entered promiscuous mode [ 359.189240][T11813] loop5: detected capacity change from 0 to 7 [ 359.210287][ T9605] Dev loop5: unable to read RDB block 7 [ 359.218189][ T9605] loop5: unable to read partition table [ 359.230877][ T9605] loop5: partition table beyond EOD, truncated [ 359.244684][T11813] Dev loop5: unable to read RDB block 7 [ 359.272988][T11813] loop5: unable to read partition table [ 359.288928][T11813] loop5: partition table beyond EOD, truncated [ 359.302596][T11813] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 359.449887][T11822] netlink: 'syz.0.1391': attribute type 10 has an invalid length. [ 359.536522][ T5907] cdc_ncm 6-1:1.1: bind() failure [ 359.600391][ T5907] usb 6-1: USB disconnect, device number 16 [ 359.662195][ T5926] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 359.758228][T11832] UHID_CREATE from different security context by process 200 (syz.5.1395), this is not allowed. [ 359.872299][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 359.885341][ T5926] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.902180][ T5926] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.921052][ T5926] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.942427][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.960084][ T5926] usb 5-1: Product: syz [ 359.967381][ T5926] usb 5-1: Manufacturer: syz [ 359.977746][ T5926] usb 5-1: SerialNumber: syz [ 359.996586][T11843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.007732][ T5926] usb 5-1: 0:2 : does not exist [ 360.009824][T11843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.132324][ T5907] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 360.202722][ T24] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 360.215967][ T5926] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 360.254984][ T5926] usb 5-1: USB disconnect, device number 65 [ 360.288027][ T9061] udevd[9061]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.299620][ T5907] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 360.313562][ T5907] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.333195][ T5907] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 360.348587][ T5907] usb 6-1: config 1 has no interface number 1 [ 360.355864][ T5907] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 360.371691][ T24] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 360.381157][ T5907] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.392497][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.400758][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.411042][ T5907] usb 6-1: Product: syz [ 360.417129][ T24] usb 1-1: config 0 descriptor?? [ 360.422279][ T29] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 360.431742][ T5907] usb 6-1: Manufacturer: syz [ 360.436826][ T5907] usb 6-1: SerialNumber: syz [ 360.445919][ T24] pwc: Samsung MPC-C10 USB webcam detected. [ 360.592349][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 360.599411][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 360.609102][ T29] usb 2-1: config 1 has an invalid interface number: 76 but max is 2 [ 360.617476][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.627820][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.636941][ T29] usb 2-1: config 1 has no interface number 0 [ 360.646289][ T29] usb 2-1: too many endpoints for config 1 interface 76 altsetting 35: 226, using maximum allowed: 30 [ 360.657764][ T29] usb 2-1: config 1 interface 76 altsetting 35 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 360.683963][ T24] pwc: send_video_command error -71 [ 360.702218][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 360.709956][ T29] usb 2-1: config 1 interface 76 has no altsetting 0 [ 360.717008][ T24] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 360.730163][ T29] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 360.741181][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.750412][ T24] usb 1-1: USB disconnect, device number 101 [ 360.756908][ T29] usb 2-1: Product: syz [ 360.764970][ T29] usb 2-1: Manufacturer: syz [ 360.770116][ T29] usb 2-1: SerialNumber: syz [ 361.044216][T11849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.058489][T11849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.127707][ T5907] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 361.139522][ T29] usb 2-1: USB disconnect, device number 105 [ 361.147250][ T5907] usb 6-1: MIDIStreaming interface descriptor not found [ 361.252462][ T5907] usb 6-1: USB disconnect, device number 17 [ 361.955466][T11877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1410'. [ 362.061372][T11882] netlink: 'syz.0.1412': attribute type 12 has an invalid length. [ 362.070373][T11882] netlink: 'syz.0.1412': attribute type 12 has an invalid length. [ 362.227011][T11888] CIFS: VFS: Malformed UNC in devname [ 362.272257][ T112] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 362.472367][ T5926] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 362.542199][ T112] usb 6-1: Using ep0 maxpacket: 16 [ 362.556640][ T112] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.580762][ T112] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 362.595856][ T112] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 362.606545][ T112] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.614908][ T112] usb 6-1: Product: syz [ 362.619283][ T112] usb 6-1: Manufacturer: syz [ 362.626240][ T112] usb 6-1: SerialNumber: syz [ 362.632463][ T5926] usb 1-1: unable to get BOS descriptor or descriptor too short [ 362.641453][ T5926] usb 1-1: not running at top speed; connect to a high speed hub [ 362.656426][ T5926] usb 1-1: config 9 has an invalid interface number: 21 but max is 2 [ 362.665313][ T5926] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 362.685351][ T112] usb 6-1: 0:2 : does not exist [ 362.692262][ T5926] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 362.711791][ T5926] usb 1-1: config 9 has no interface number 0 [ 362.720091][ T5926] usb 1-1: config 9 interface 21 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.744725][ T5926] usb 1-1: config 9 interface 21 has no altsetting 0 [ 362.759679][ T5926] usb 1-1: New USB device found, idVendor=19d2, idProduct=2813, bcdDevice=74.f4 [ 362.769905][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.778514][ T5926] usb 1-1: Product: syz [ 362.785330][ T5926] usb 1-1: Manufacturer: syz [ 362.790050][ T5926] usb 1-1: SerialNumber: syz [ 362.869714][ T112] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 362.963413][ T112] usb 6-1: USB disconnect, device number 18 [ 363.027072][ T5926] usb 1-1: No union descriptors [ 363.055104][ T9605] udevd[9605]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.079182][ T5926] usb 1-1: USB disconnect, device number 102 [ 363.086174][ T24] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 363.242231][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 363.249464][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 363.263126][ T24] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 363.273681][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.284590][ T24] usb 5-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 363.296062][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.304318][ T24] usb 5-1: Product: syz [ 363.308524][ T24] usb 5-1: Manufacturer: syz [ 363.313819][ T24] usb 5-1: SerialNumber: syz [ 363.545358][ T24] usb 5-1: unit 6: unexpected type 0x0d [ 363.554347][ T24] usb 5-1: unit 0 not found! [ 363.683941][ T24] usb 5-1: USB disconnect, device number 66 [ 363.835037][ T9061] udevd[9061]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.353442][ T112] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 364.455198][T11946] affs: No valid root block on device nbd5 [ 364.554893][ T112] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.599195][ T112] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4B, changing to 0xB [ 364.623900][ T112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 364.636065][ T112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 50562, setting to 64 [ 364.647667][ T112] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD9, changing to 0x89 [ 364.661072][ T112] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 364.671337][ T112] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 364.688418][ T112] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 364.702271][ T112] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 364.721322][ T112] usb 2-1: Manufacturer: syz [ 364.722463][ T24] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 364.738139][ T112] usb 2-1: config 0 descriptor?? [ 364.744525][T11932] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 364.757424][ T112] mceusb 2-1:0.0: mceusb_dev_probe: device setup failed! [ 364.765041][ T112] mceusb 2-1:0.0: probe with driver mceusb failed with error -12 [ 364.885760][ T24] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 364.897957][ T24] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.910104][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 364.917004][ T24] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 364.927001][ T29] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 364.938302][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.953522][ T24] usb 6-1: config 0 descriptor?? [ 364.971393][T11932] sctp: [Deprecated]: syz.1.1426 (pid 11932) Use of int in max_burst socket option. [ 364.971393][T11932] Use struct sctp_assoc_value instead [ 364.993632][ T112] usb 2-1: USB disconnect, device number 106 [ 365.097313][ T29] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 365.106836][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.115127][ T29] usb 5-1: Product: syz [ 365.119409][ T29] usb 5-1: Manufacturer: syz [ 365.124124][ T29] usb 5-1: SerialNumber: syz [ 365.132750][ T29] usb 5-1: config 0 descriptor?? [ 365.143993][ T29] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 365.272379][ T5894] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 365.383031][ T24] hid_parser_main: 28 callbacks suppressed [ 365.383187][ T24] hid-steam 0003:28DE:1102.0013: unknown main item tag 0x0 [ 365.398521][ T24] hid-steam 0003:28DE:1102.0013: unknown main item tag 0x0 [ 365.407823][ T24] hid-steam 0003:28DE:1102.0013: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 365.422250][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 365.429503][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.440720][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.450763][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 365.463797][ T5894] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 365.473534][ T24] hid-steam 0003:28DE:1102.0013: Steam Controller 'XXXXXXXXXX' connected [ 365.482677][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.496270][ T5894] usb 1-1: config 0 descriptor?? [ 365.504719][ T24] input: Steam Controller as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28DE:1102.0013/input/input50 [ 365.595216][ T24] hid-steam 0003:28DE:1102.0014: unknown main item tag 0x0 [ 365.613571][ T24] hid-steam 0003:28DE:1102.0014: unknown main item tag 0x0 [ 365.695402][ T24] hid-steam 0003:28DE:1102.0014: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 365.766132][T11952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.793360][ T24] usb 6-1: USB disconnect, device number 19 [ 365.794578][T11952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.912500][ T29] gspca_sunplus: reg_w_riv err -71 [ 365.924370][ T29] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 365.946178][ T5894] microsoft 0003:045E:07DA.0015: unbalanced collection at end of report description [ 365.959614][ T5894] microsoft 0003:045E:07DA.0015: parse failed [ 365.971515][ T29] usb 5-1: USB disconnect, device number 67 [ 365.979182][ T5894] microsoft 0003:045E:07DA.0015: probe with driver microsoft failed with error -22 [ 366.076492][ T24] hid-steam 0003:28DE:1102.0013: Steam Controller 'XXXXXXXXXX' disconnected [ 366.155067][ T5907] usb 1-1: USB disconnect, device number 103 [ 366.950900][T11983] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in; [ 366.950900][T11983] program syz.1.1443 not setting count and/or reply_len properly [ 366.995983][T11984] vivid-000: ================= START STATUS ================= [ 367.004018][T11984] vivid-000: Radio HW Seek Mode: Bounded [ 367.009719][T11984] vivid-000: Radio Programmable HW Seek: false [ 367.017900][T11984] vivid-000: RDS Rx I/O Mode: Block I/O [ 367.024468][T11984] vivid-000: Generate RBDS Instead of RDS: false [ 367.030917][T11984] vivid-000: RDS Reception: true [ 367.036350][T11984] vivid-000: RDS Program Type: 0 inactive [ 367.042581][T11984] vivid-000: RDS PS Name: inactive [ 367.047888][T11984] vivid-000: RDS Radio Text: inactive [ 367.054075][T11984] vivid-000: RDS Traffic Announcement: false inactive [ 367.061032][T11984] vivid-000: RDS Traffic Program: false inactive [ 367.072292][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 367.079987][T11984] vivid-000: RDS Music: false inactive [ 367.087458][T11984] vivid-000: ================== END STATUS ================== [ 367.218096][ T5907] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 367.243973][ T24] usb 5-1: config index 0 descriptor too short (expected 65157, got 72) [ 367.254968][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 367.265075][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.273579][ T24] usb 5-1: Product: syz [ 367.277840][ T24] usb 5-1: Manufacturer: syz [ 367.284120][ T24] usb 5-1: SerialNumber: syz [ 367.292887][T11989] tmpfs: Invalid gid '0x00000000ffffffff' [ 367.302862][ T24] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 367.320169][ T5894] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 367.373584][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 367.389470][ T5907] usb 2-1: config 3 has an invalid interface number: 25 but max is 0 [ 367.399162][ T5907] usb 2-1: config 3 has no interface number 0 [ 367.406925][ T5907] usb 2-1: config 3 interface 25 has no altsetting 0 [ 367.433617][ T5907] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=e6.a2 [ 367.446098][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.455057][ T5907] usb 2-1: Product: syz [ 367.459630][ T5907] usb 2-1: Manufacturer: syz [ 367.464776][ T5907] usb 2-1: SerialNumber: syz [ 367.537141][T11976] sctp: [Deprecated]: syz.4.1441 (pid 11976) Use of int in maxseg socket option. [ 367.537141][T11976] Use struct sctp_assoc_value instead [ 367.555799][T11994] input: syz0 as /devices/virtual/input/input51 [ 367.654079][T11995] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1448'. [ 367.757713][ T30] audit: type=1800 audit(1774344938.516:14): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1441" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 367.962635][T11976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.982800][T11976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.017077][ T29] usb 5-1: USB disconnect, device number 68 [ 368.162207][T10540] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 368.292271][T10540] usb 1-1: device descriptor read/64, error -71 [ 368.415489][ T5894] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 368.425377][ T5894] ath9k_htc: Failed to initialize the device [ 368.434731][ T29] usb 5-1: ath9k_htc: USB layer deinitialized [ 368.532279][T10540] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 368.675508][T12010] : renamed from vlan0 (while UP) [ 368.682318][T10540] usb 1-1: device descriptor read/64, error -71 [ 368.792656][T10540] usb usb1-port1: attempt power cycle [ 369.142644][T10540] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 369.182987][T10540] usb 1-1: device descriptor read/8, error -71 [ 369.395572][T12038] loop5: detected capacity change from 0 to 7 [ 369.404543][T12038] Dev loop5: unable to read RDB block 7 [ 369.422383][T10540] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 369.430359][T12038] loop5: unable to read partition table [ 369.437198][T12038] loop5: partition table beyond EOD, truncated [ 369.445653][T12038] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 369.464639][T10540] usb 1-1: device descriptor read/8, error -71 [ 369.585543][T10540] usb usb1-port1: unable to enumerate USB device [ 369.693520][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 369.701919][ T5908] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 369.717801][ T5908] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 369.773060][ T112] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 369.932408][ T112] usb 6-1: device descriptor read/64, error -71 [ 369.955047][ T5907] usb 2-1: USB disconnect, device number 107 [ 370.183140][ T112] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 370.277503][T12066] tipc: Failed to remove unknown binding: 66,0,0/0:2757885738/2757885740 [ 370.288142][T12066] tipc: Failed to remove unknown binding: 66,0,0/0:2757885738/2757885739 [ 370.301295][T12066] tipc: Failed to remove unknown binding: 66,0,0/0:2757885738/2757885740 [ 370.312279][T12066] tipc: Failed to remove unknown binding: 66,0,0/0:2757885738/2757885739 [ 370.322288][ T112] usb 6-1: device descriptor read/64, error -71 [ 370.329069][T12066] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1474'. [ 370.385331][T12068] loop5: detected capacity change from 0 to 7 [ 370.395642][T12068] Dev loop5: unable to read RDB block 7 [ 370.401283][T12068] loop5: unable to read partition table [ 370.408390][T12068] loop5: partition table beyond EOD, truncated [ 370.414947][T12068] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 370.436128][ T112] usb usb6-port1: attempt power cycle [ 370.741456][T12083] syzkaller1: entered promiscuous mode [ 370.748463][T12083] syzkaller1: entered allmulticast mode [ 370.792517][ T112] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 370.826712][ T112] usb 6-1: device descriptor read/8, error -71 [ 370.912291][ T5926] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 371.002358][T10540] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 371.072267][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 371.079835][ T5926] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 371.089293][ T112] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 371.097003][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.108526][ T5926] usb 5-1: config 0 descriptor?? [ 371.119203][ T5926] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 371.126492][ T112] usb 6-1: device descriptor read/8, error -71 [ 371.155227][T10540] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 371.167197][T10540] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 371.179462][T10540] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 371.189573][T10540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.197921][T10540] usb 2-1: Product: syz [ 371.202417][T10540] usb 2-1: Manufacturer: syz [ 371.207137][T10540] usb 2-1: SerialNumber: syz [ 371.216316][T10540] usb 2-1: config 0 descriptor?? [ 371.225616][T10540] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 371.252663][ T112] usb usb6-port1: unable to enumerate USB device [ 371.292929][ T5907] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 371.442257][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 371.449812][ T5907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.461384][ T5907] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 371.471746][ T5907] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 371.481886][ T5907] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 371.497254][ T5907] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 371.506463][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 371.514592][ T5907] usb 1-1: SerialNumber: syz [ 371.523178][T12085] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 371.531106][T12085] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 371.541625][ T5907] hub 1-1:1.0: bad descriptor, ignoring hub [ 371.547762][ T5907] hub 1-1:1.0: probe with driver hub failed with error -5 [ 371.743358][T12085] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 371.750931][T12085] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 372.171571][ T5907] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 372.330855][ T5926] gspca_vc032x: reg_w err -71 [ 372.340409][ T5926] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.352262][ T5926] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.360935][ T5926] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.367074][ T5926] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.378718][ T5926] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.386174][ T5926] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.391635][ T5926] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.398714][ T5926] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.406468][ T5926] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.411998][ T5926] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.419162][ T5926] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.427078][ T5926] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.432596][ T5926] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.438110][ T5926] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.443631][ T5926] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.449062][ T5926] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.454564][ T5926] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.459981][ T5926] gspca_vc032x: I2c Bus Busy Wait 00 [ 372.466501][ T5926] gspca_vc032x: Unknown sensor... [ 372.471775][ T5926] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 372.489408][ T5926] usb 5-1: USB disconnect, device number 69 [ 372.640209][T12094] veth0_to_hsr: entered allmulticast mode [ 373.003203][T12110] loop5: detected capacity change from 0 to 7 [ 373.011327][T12110] Dev loop5: unable to read RDB block 7 [ 373.018629][T12110] loop5: unable to read partition table [ 373.025399][T12110] loop5: partition table beyond EOD, truncated [ 373.032032][T12110] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 373.145825][ C0] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification 68! [ 373.371698][T10540] usb 1-1: USB disconnect, device number 108 [ 373.399098][T10540] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 373.764587][ T5907] usb 2-1: USB disconnect, device number 108 [ 373.957020][T12141] loop5: detected capacity change from 0 to 7 [ 373.972316][T10540] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 373.981807][ T9061] Dev loop5: unable to read RDB block 7 [ 374.003942][ T9061] loop5: unable to read partition table [ 374.010282][T12139] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.1494'. [ 374.025368][ T9061] loop5: partition table beyond EOD, truncated [ 374.053374][T12141] Dev loop5: unable to read RDB block 7 [ 374.070827][T12141] loop5: unable to read partition table [ 374.097766][T12141] loop5: partition table beyond EOD, truncated [ 374.122070][T12141] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 374.157092][T10540] usb 5-1: Using ep0 maxpacket: 8 [ 374.165107][T10540] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 374.194922][T10540] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 374.216818][T10540] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 374.243491][T10540] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.265838][T10540] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 374.310831][T10540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.397201][T12155] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1499'. [ 374.542251][T10540] usb 5-1: GET_CAPABILITIES returned 0 [ 374.547887][T12164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.563536][T10540] usbtmc 5-1:16.0: can't read capabilities [ 374.579041][T12164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.602800][ T5894] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 374.674561][ T5907] usb 5-1: USB disconnect, device number 70 [ 374.772275][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 374.779634][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.808720][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.841707][ T5894] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 374.861383][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.875513][ T5894] usb 6-1: config 0 descriptor?? [ 374.891959][ T5894] hub 6-1:0.0: USB hub found [ 375.097710][ T5894] hub 6-1:0.0: 1 port detected [ 375.143567][ T5907] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 375.272416][ T29] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 375.322042][ T5907] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 375.331624][ T5907] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 375.343729][ T5907] usb 5-1: config 1 has no interface number 1 [ 375.354451][ T5907] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 375.364813][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.373507][ T5907] usb 5-1: Product: syz [ 375.378208][ T5907] usb 5-1: Manufacturer: syz [ 375.384522][ T5907] usb 5-1: SerialNumber: syz [ 375.446099][ T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 375.482999][ T29] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 375.519593][ T29] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 375.541483][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.570666][ T29] usb 2-1: Product: syz [ 375.576243][ T29] usb 2-1: Manufacturer: syz [ 375.591427][ T29] usb 2-1: SerialNumber: syz [ 375.629310][ T29] usb 2-1: config 0 descriptor?? [ 375.635967][ T5907] usb 5-1: 2:1: invalid format type 0x1022 is detected, processed as PCM [ 375.647923][T12184] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 375.659373][ T5907] usb 5-1: 2:1 : sample bitwidth 43 in over sample bytes 4 [ 375.663678][T12184] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 375.681685][ T5907] usb 5-1: failed to enable PITCH for EP 0x82 [ 375.703264][ T5894] hub 6-1:0.0: activate --> -90 [ 375.829262][ T5907] usb 5-1: USB disconnect, device number 71 [ 375.889967][T12184] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 375.906337][T12184] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 375.916241][T12152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.937836][T12152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.947189][ T5894] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 375.947769][ T5926] usb 6-1: USB disconnect, device number 24 [ 375.997969][ T9224] udevd[9224]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.112253][T10540] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 376.275370][T10540] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 376.289693][T10540] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 376.300369][T10540] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.309391][T10540] usb 1-1: Product: syz [ 376.313784][T10540] usb 1-1: Manufacturer: syz [ 376.318465][T10540] usb 1-1: SerialNumber: syz [ 376.548715][T10540] usb 1-1: Cannot retrieve CPort count: -71 [ 376.564717][T10540] usb 1-1: Cannot retrieve CPort count: -71 [ 376.585080][T10540] es2_ap_driver 1-1:246.0: probe with driver es2_ap_driver failed with error -71 [ 376.601691][T10540] usb 1-1: USB disconnect, device number 109 [ 377.144791][ T5907] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 377.305537][ T5907] usb 6-1: not running at top speed; connect to a high speed hub [ 377.321013][ T5907] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 377.337431][ T5907] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 377.349133][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.357721][ T5907] usb 6-1: Product: syz [ 377.362475][ T5907] usb 6-1: Manufacturer: 㟋㱴쀟껖᜞ᨸ켿돰뎵陼赥䒧铽弨㨙賅迥瘍ᬠ룉ኹ嘼ഹ⊣﷎ቺ⩉催 [ 377.379922][ T5907] usb 6-1: SerialNumber: syz [ 377.595385][ T5907] usblp0: Disabling reads from problematic bidirectional printer [ 377.672357][T10540] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 377.797665][T12223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.807069][T12223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.827521][ T5907] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 377.844936][ T5907] usb 6-1: USB disconnect, device number 25 [ 377.848678][T10540] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 377.863344][T10540] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.874997][T10540] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 377.888970][T10540] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 377.900588][T10540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.909490][ T5907] usblp0: removed [ 377.920558][T10540] usb 5-1: config 0 descriptor?? [ 378.040098][ T29] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 378.069513][ T29] usb 2-1: USB disconnect, device number 109 [ 378.081249][ T9605] udevd[9605]: setting mode of /dev/bus/usb/002/109 to 020664 failed: No such file or directory [ 378.113479][ T9605] udevd[9605]: setting owner of /dev/bus/usb/002/109 to uid=0, gid=0 failed: No such file or directory [ 378.285773][T12244] netlink: 'syz.1.1521': attribute type 3 has an invalid length. [ 378.342063][T10540] corsair 0003:1B1C:1B3E.0016: unknown main item tag 0x0 [ 378.365056][T10540] corsair 0003:1B1C:1B3E.0016: unknown main item tag 0x0 [ 378.378385][T10540] corsair 0003:1B1C:1B3E.0016: unknown main item tag 0x0 [ 378.397856][T10540] corsair 0003:1B1C:1B3E.0016: unknown main item tag 0x0 [ 378.413715][T10540] corsair 0003:1B1C:1B3E.0016: unknown main item tag 0x0 [ 378.434558][T10540] corsair 0003:1B1C:1B3E.0016: unknown main item tag 0x0 [ 378.456997][T10540] corsair 0003:1B1C:1B3E.0016: unknown main item tag 0x0 [ 378.476191][T10540] corsair 0003:1B1C:1B3E.0016: unknown main item tag 0x0 [ 378.490741][T10540] corsair 0003:1B1C:1B3E.0016: unknown main item tag 0x0 [ 378.520504][T12252] : renamed from wg2 (while UP) [ 378.522606][T10540] corsair 0003:1B1C:1B3E.0016: unknown main item tag 0x0 [ 378.544831][T10540] corsair 0003:1B1C:1B3E.0016: item fetching failed at offset 70/235 [ 378.564901][T10540] corsair 0003:1B1C:1B3E.0016: parse failed [ 378.576066][T10540] corsair 0003:1B1C:1B3E.0016: probe with driver corsair failed with error -22 [ 378.596780][T10540] usb 5-1: USB disconnect, device number 72 [ 378.657230][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.663903][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.681154][T12258] loop5: detected capacity change from 0 to 7 [ 378.701190][T12258] Dev loop5: unable to read RDB block 7 [ 378.707192][T12258] loop5: unable to read partition table [ 378.713271][T12258] loop5: partition table beyond EOD, truncated [ 378.721260][T12258] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 378.892424][ T112] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 378.917883][T12267] syzkaller1: entered promiscuous mode [ 378.923706][T12267] syzkaller1: entered allmulticast mode [ 379.052261][ T112] usb 2-1: Using ep0 maxpacket: 16 [ 379.059791][ T112] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.071443][ T112] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 379.081435][ T112] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 379.091722][ T112] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 379.106248][ T112] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 379.115677][ T112] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 379.123913][ T112] usb 2-1: SerialNumber: syz [ 379.132791][T12256] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 379.141243][T12256] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 379.153730][ T112] hub 2-1:1.0: bad descriptor, ignoring hub [ 379.159922][ T112] hub 2-1:1.0: probe with driver hub failed with error -5 [ 379.233851][T12270] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1530'. [ 379.351736][T12256] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 379.365677][T12256] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 379.784775][T12288] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1536'. [ 379.815248][ T112] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 379.857205][T12290] loop5: detected capacity change from 0 to 7 [ 379.864358][T12290] Dev loop5: unable to read RDB block 7 [ 379.870236][T12290] loop5: unable to read partition table [ 379.878863][T12290] loop5: partition table beyond EOD, truncated 01 @ [ 379.905582][T12290] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5)  & [ 380.030472][T12295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1538'. [ 380.453905][ T112] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 380.612284][ T112] usb 1-1: Using ep0 maxpacket: 8 [ 380.621695][ T112] usb 1-1: unable to get BOS descriptor or descriptor too short [ 380.634571][ T112] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 380.650919][ C0] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 68! [ 380.667545][ T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.676533][ T112] usb 1-1: Product: syz [ 380.681107][ T112] usb 1-1: Manufacturer: syz [ 380.686404][ T112] usb 1-1: SerialNumber: syz [ 380.906689][ T5894] usb 2-1: USB disconnect, device number 110 [ 380.933343][ T5894] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 380.952473][T12328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.991627][T12328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.004182][T12325] ISOFS: Unable to identify CD-ROM format. [ 381.041159][T12325] ALSA: mixer_oss: invalid index 100000 [ 381.096047][ T112] kalmia 1-1:1.0: probe with driver kalmia failed with error -22 [ 381.126592][ T112] usb 1-1: USB disconnect, device number 110 [ 381.549400][T12350] loop5: detected capacity change from 0 to 7 [ 381.569010][T12350] Dev loop5: unable to read RDB block 7 [ 381.579799][T12350] loop5: unable to read partition table [ 381.591257][T12350] loop5: partition table beyond EOD, truncated [ 381.611114][T12350] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 381.686726][T12352] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 381.793585][T12354] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 381.805588][T12354] overlayfs: failed to set xattr on upper [ 381.811667][T12354] overlayfs: ...falling back to redirect_dir=nofollow. [ 381.820438][T12354] overlayfs: ...falling back to index=off. [ 381.836110][T12354] overlayfs: ...falling back to uuid=null. [ 381.843957][T12354] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 382.262072][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1555'. [ 382.356870][T12382] netlink: 'syz.1.1555': attribute type 83 has an invalid length. [ 382.394177][ T112] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 382.452876][T12390] netlink: 'syz.1.1556': attribute type 10 has an invalid length. [ 382.562210][ T112] usb 1-1: Using ep0 maxpacket: 8 [ 382.574753][ T112] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 382.592732][ T112] usb 1-1: config 0 has no interface number 0 [ 382.606699][ T112] usb 1-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 382.631632][ T112] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 382.649348][ T112] usb 1-1: config 0 interface 200 has no altsetting 0 [ 382.660544][ T112] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 382.670426][ T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.678934][ T112] usb 1-1: Product: syz [ 382.683899][ T112] usb 1-1: Manufacturer: syz [ 382.688635][ T112] usb 1-1: SerialNumber: syz [ 382.697737][ T112] usb 1-1: config 0 descriptor?? [ 382.814883][T12397] loop5: detected capacity change from 0 to 7 [ 382.824449][T12397] Dev loop5: unable to read RDB block 7 [ 382.830367][T12397] loop5: unable to read partition table [ 382.838950][T12397] loop5: partition table beyond EOD, truncated [ 382.848000][T12397] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 383.050257][T12399] ISOFS: Unable to identify CD-ROM format. [ 383.096398][T12375] ALSA: mixer_oss: invalid index 100000 [ 383.210866][ T112] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input52 [ 383.270347][ T112] usb 1-1: USB disconnect, device number 111 [ 383.961115][T12437] loop5: detected capacity change from 0 to 7 [ 383.979049][T12437] Dev loop5: unable to read RDB block 7 [ 383.992721][T12437] loop5: unable to read partition table [ 384.007439][T12437] loop5: partition table beyond EOD, truncated [ 384.023028][T12437] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 384.437664][T12458] kAFS: unable to lookup cell '@mTsyz0' [ 384.617685][ T30] audit: type=1326 audit(1774344955.376:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12464 comm="syz.5.1573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaccb9c799 code=0x7ffe0000 [ 385.049157][T12480] loop5: detected capacity change from 0 to 7 [ 385.057268][T12480] Dev loop5: unable to read RDB block 7 [ 385.073599][T12480] loop5: unable to read partition table [ 385.091160][T12480] loop5: partition table beyond EOD, truncated [ 385.106065][T12480] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 385.132242][ T5926] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 385.313770][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 385.326176][ T5926] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 385.342313][ T5926] usb 5-1: config 0 has no interface number 0 [ 385.350127][ T5926] usb 5-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 385.376432][ T5926] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 385.409789][ T5926] usb 5-1: config 0 interface 200 has no altsetting 0 [ 385.430701][ T5926] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 385.448635][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.479309][ T5926] usb 5-1: Product: syz [ 385.492238][ T5926] usb 5-1: Manufacturer: syz [ 385.507327][ T5926] usb 5-1: SerialNumber: syz [ 385.536037][ T5926] usb 5-1: config 0 descriptor?? [ 385.841618][T12470] ISOFS: Unable to identify CD-ROM format. [ 385.872621][T12506] ALSA: mixer_oss: invalid index 100000 [ 385.980636][ T5926] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input53 [ 386.030096][ T5926] usb 5-1: USB disconnect, device number 73 [ 386.403687][ T5894] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 386.578434][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short [ 386.597943][ T5894] usb 1-1: not running at top speed; connect to a high speed hub [ 386.613314][ T5894] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 386.650762][ T5894] usb 1-1: config 1 interface 0 has no altsetting 0 [ 386.691803][ T5894] usb 1-1: string descriptor 0 read error: -22 [ 386.711922][ T5894] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.40 [ 386.741836][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.767718][T12514] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 386.797020][T12528] loop5: detected capacity change from 0 to 7 [ 386.824046][T12528] Dev loop5: unable to read RDB block 7 [ 386.842256][T12528] loop5: unable to read partition table [ 386.854470][T12528] loop5: partition table beyond EOD, truncated [ 386.872652][T12528] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 386.995857][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'. [ 387.189037][T12514] netlink: 'syz.0.1586': attribute type 11 has an invalid length. [ 387.212309][T12514] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1586'. [ 387.285815][ T5894] usbhid 1-1:1.0: can't add hid device: -32 [ 387.302542][ T5894] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 387.382725][ T5894] usb 1-1: USB disconnect, device number 112 [ 387.642295][ T5926] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 387.802466][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 387.817357][ T5926] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 387.839420][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.851005][ T5926] usb 2-1: Product: syz [ 387.855659][ T5926] usb 2-1: Manufacturer: syz [ 387.860415][ T5926] usb 2-1: SerialNumber: syz [ 388.262252][ T5894] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 388.292305][ T112] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 388.412626][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 388.419902][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.431098][ T5894] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 388.441272][ T5894] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 388.451109][ T5894] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 388.466180][ T5894] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.472486][ T112] usb 5-1: Using ep0 maxpacket: 32 [ 388.475726][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 388.489253][ T112] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 388.498860][ T112] usb 5-1: config 0 has no interface number 0 [ 388.505412][ T5894] usb 1-1: SerialNumber: syz [ 388.508152][ T112] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 388.521843][ T112] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 388.534032][T12560] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 388.535986][ T112] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 388.553264][ T112] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 388.564054][ T112] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 388.568917][T12560] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 388.578362][ T112] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 388.596759][ T5894] hub 1-1:1.0: bad descriptor, ignoring hub [ 388.604055][ T5894] hub 1-1:1.0: probe with driver hub failed with error -5 [ 388.613214][ T112] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 388.623819][ T112] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 13716, setting to 64 [ 388.635269][ T112] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.651402][ T112] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 388.661092][ T112] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.669262][ T112] usb 5-1: Product: syz [ 388.673625][ T112] usb 5-1: Manufacturer: syz [ 388.678384][ T112] usb 5-1: SerialNumber: syz [ 388.688878][ T112] usb 5-1: config 0 descriptor?? [ 388.699371][T12562] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 388.710371][ T112] usb 5-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 388.720700][ T112] usb 5-1: couldn't find an output bulk endpoint. Bailing out. [ 388.797336][T12560] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 388.806926][T12560] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 388.911722][ T5926] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 388.930589][ T5926] usb 2-1: USB disconnect, device number 111 [ 388.937747][T12565] loop4: detected capacity change from 0 to 7 [ 388.993834][T12562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.004986][T12567] netlink: 'syz.5.1599': attribute type 40 has an invalid length. [ 389.015053][T12565] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 389.021838][T12562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.023572][T12565] loop4: partition table partially beyond EOD, truncated [ 389.041782][T12565] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 389.116387][T12562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.137794][T12562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.149155][ T9605] udevd[9605]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 389.190775][T12562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.200038][T12562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.249280][ T5894] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 389.314798][T12570] Bluetooth: MGMT ver 1.23 [ 389.599451][T12585] netlink: 384 bytes leftover after parsing attributes in process `syz.1.1604'. [ 389.630646][T12585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.674732][T12585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.742292][ T5926] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 389.914947][ T5926] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 389.932606][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.950995][ T5926] usb 6-1: config 0 descriptor?? [ 389.967219][ T5926] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 389.999816][ C1] cdc_ether 1-1:1.0 usb0: CDC: unexpected notification 68! [ 390.183774][ T5926] gp8psk: usb in 128 operation failed. [ 390.190737][ T5926] gp8psk: usb in 137 operation failed. [ 390.197072][ T5926] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 390.210622][ T5926] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 390.227862][ T112] usb 1-1: USB disconnect, device number 113 [ 390.249911][ T112] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 390.566385][ T29] usb 6-1: USB disconnect, device number 26 [ 391.045133][ T29] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 391.211576][ T30] audit: type=1800 audit(1774344961.966:16): pid=12643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1615" name="bus" dev="tmpfs" ino=2091 res=0 errno=0 [ 391.253178][ T29] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 391.261507][ T29] usb 6-1: config 0 has no interface number 0 [ 391.268915][ T29] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 391.288977][T12646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1616'. [ 391.307159][ T29] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 391.319376][ T29] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 391.339707][ T29] usb 6-1: Manufacturer: syz [ 391.352339][ T29] usb 6-1: SerialNumber: syz [ 391.378402][ T29] usb 6-1: config 0 descriptor?? [ 391.481408][T12654] loop5: detected capacity change from 0 to 7 [ 391.490759][T12654] Dev loop5: unable to read RDB block 7 [ 391.497909][T12654] loop5: unable to read partition table [ 391.504066][T12654] loop5: partition table beyond EOD, truncated [ 391.520681][T12654] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 391.617555][ T29] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71 [ 391.632612][ T112] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 391.644622][ T5926] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 391.654591][ T29] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 391.690973][ T29] usb 6-1: USB disconnect, device number 27 [ 391.737423][T12661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.747803][T12661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.794743][T12661] ISOFS: Unable to identify CD-ROM format. [ 391.810673][T12661] ALSA: mixer_oss: invalid index 100000 [ 391.816563][ T112] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 391.822406][ T112] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 391.837141][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 391.843296][ T112] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.854677][ T112] usb 2-1: Product: syz [ 391.859518][ T5926] usb 1-1: unable to get BOS descriptor or descriptor too short [ 391.867680][ T112] usb 2-1: Manufacturer: syz [ 391.876808][ T5926] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 391.886766][ T112] usb 2-1: SerialNumber: syz [ 391.891465][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.902473][ T5926] usb 1-1: Product: syz [ 391.906892][ T5926] usb 1-1: Manufacturer: syz [ 391.911527][ T5926] usb 1-1: SerialNumber: syz [ 392.135607][ T112] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 392.160706][ T5926] usb 1-1: BAAD MICROPHONE c_chmask mismatch [ 392.169545][ T112] command write [95] error -22 [ 392.195460][ T112] usb 2-1: USB disconnect, device number 112 [ 392.318019][ T5926] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 392.342814][ T5926] usb 1-1: USB disconnect, device number 114 [ 392.401439][ T9061] udevd[9061]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.932576][T12699] loop5: detected capacity change from 0 to 7 [ 392.939969][T12699] Dev loop5: unable to read RDB block 7 [ 392.946229][T12699] loop5: unable to read partition table [ 392.955360][T12699] loop5: partition table beyond EOD, truncated [ 392.961876][T12699] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 393.342369][ T29] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 393.439989][T12711] tmpfs: Bad value for 'mpol' [ 393.504248][ T5926] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 393.512225][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 393.517265][ T29] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 393.517419][ T29] usb 1-1: config 0 has no interface number 0 [ 393.517465][ T29] usb 1-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 393.548216][ T29] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 393.558966][ T29] usb 1-1: config 0 interface 200 has no altsetting 0 [ 393.569227][ T29] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 393.578686][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.587061][ T29] usb 1-1: Product: syz [ 393.594949][ T29] usb 1-1: Manufacturer: syz [ 393.599639][ T29] usb 1-1: SerialNumber: syz [ 393.608005][ T29] usb 1-1: config 0 descriptor?? [ 393.677581][ T5926] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 393.688686][ T5926] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.700035][ T5926] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 393.710671][ T5926] usb 6-1: config 1 has no interface number 1 [ 393.719790][ T5926] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 393.738024][ T5926] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 393.748023][T12718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.756790][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.766506][ T5926] usb 6-1: Product: syz [ 393.771254][T12718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.787781][ T5926] usb 6-1: Manufacturer: syz [ 393.792766][ T5926] usb 6-1: SerialNumber: syz [ 393.855795][T12705] ISOFS: Unable to identify CD-ROM format. [ 393.869519][T12705] ALSA: mixer_oss: invalid index 100000 [ 393.945518][ T29] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input55 [ 393.965140][ T29] usb 1-1: USB disconnect, device number 115 [ 394.021539][ T5926] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 394.042033][ T5926] usb 6-1: MIDIStreaming interface descriptor not found [ 394.214799][ T5926] usb 6-1: USB disconnect, device number 28 [ 394.328093][ T9224] udevd[9224]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.535653][T12732] loop5: detected capacity change from 0 to 7 [ 394.563039][T12732] Dev loop5: unable to read RDB block 7 [ 394.583768][T12732] loop5: unable to read partition table [ 394.601755][T12732] loop5: partition table beyond EOD, truncated [ 394.621792][T12732] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 394.801967][T12741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.824031][T12741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.929387][T12748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.945089][T12748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.967787][T12748] PM: Enabling pm_trace changes system date and time during resume. [ 394.967787][T12748] PM: Correct system time has to be restored manually after resume. [ 395.272790][ T112] usb 1-1: new low-speed USB device number 116 using dummy_hcd [ 395.424366][ T112] usb 1-1: unable to get BOS descriptor or descriptor too short [ 395.433233][ T112] usb 1-1: config 242 has an invalid interface number: 40 but max is 0 [ 395.441744][ T112] usb 1-1: config 242 has no interface number 0 [ 395.448151][ T112] usb 1-1: config 242 interface 40 has no altsetting 0 [ 395.457729][ T112] usb 1-1: string descriptor 0 read error: -22 [ 395.464393][ T112] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=44.11 [ 395.473523][ T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.484951][ T24] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 395.501507][ T112] hdpvr 1-1:242.40: Could not find bulk-in endpoint [ 395.522329][ T112] hdpvr 1-1:242.40: probe with driver hdpvr failed with error -12 [ 395.582033][T12765] loop5: detected capacity change from 0 to 7 [ 395.594400][T10352] Dev loop5: unable to read RDB block 7 [ 395.601097][T10352] loop5: unable to read partition table [ 395.607404][T10352] loop5: partition table beyond EOD, truncated [ 395.618916][T12765] Dev loop5: unable to read RDB block 7 [ 395.625204][T12765] loop5: unable to read partition table [ 395.631369][T12765] loop5: partition table beyond EOD, truncated [ 395.638159][T12765] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 395.653783][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 395.659560][ T5211] Dev loop5: unable to read RDB block 7 [ 395.666107][ T5211] loop5: unable to read partition table [ 395.673467][ T5211] loop5: partition table beyond EOD, truncated [ 395.680480][ T24] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 395.690110][ T24] usb 2-1: config 0 has no interface number 0 [ 395.698080][ T24] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 395.710332][ T5926] usb 1-1: USB disconnect, device number 116 [ 395.719158][ T24] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 395.729483][ T24] usb 2-1: config 0 interface 200 has no altsetting 0 [ 395.742236][ T24] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 395.751900][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.760187][ T24] usb 2-1: Product: syz [ 395.765398][ T24] usb 2-1: Manufacturer: syz [ 395.770462][ T24] usb 2-1: SerialNumber: syz [ 395.827989][ T24] usb 2-1: config 0 descriptor?? [ 395.919350][T12771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.929938][T12771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.945843][T12771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.955477][T12771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.982251][ T112] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 396.074777][T12763] ISOFS: Unable to identify CD-ROM format. [ 396.086100][T12763] ALSA: mixer_oss: invalid index 100000 [ 396.135360][ T112] usb 6-1: unable to get BOS descriptor or descriptor too short [ 396.144063][ T112] usb 6-1: not running at top speed; connect to a high speed hub [ 396.156429][ T112] usb 6-1: config 3 has an invalid interface number: 49 but max is 0 [ 396.169540][ T112] usb 6-1: config 3 has no interface number 0 [ 396.177091][ T112] usb 6-1: config 3 interface 49 altsetting 221 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 396.177940][ T24] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input56 [ 396.194692][ T112] usb 6-1: config 3 interface 49 altsetting 221 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 396.212154][ T112] usb 6-1: config 3 interface 49 altsetting 221 endpoint 0x8C has invalid wMaxPacketSize 0 [ 396.224087][ T112] usb 6-1: config 3 interface 49 has no altsetting 0 [ 396.239086][ T112] usb 6-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=33.bd [ 396.249972][ T24] usb 2-1: USB disconnect, device number 113 [ 396.256422][ T112] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.256455][ T112] usb 6-1: Product: syz [ 396.256472][ T112] usb 6-1: Manufacturer: syz [ 396.256489][ T112] usb 6-1: SerialNumber: syz [ 396.299392][T12767] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 396.354441][T12773] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1652'. [ 396.528413][T12767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.560975][T12767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.595266][ T112] usb 6-1: USB disconnect, device number 29 [ 397.133706][T12798] FAULT_INJECTION: forcing a failure. [ 397.133706][T12798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.148492][T12798] CPU: 0 UID: 0 PID: 12798 Comm: syz.5.1659 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.148529][T12798] Tainted: [L]=SOFTLOCKUP [ 397.148539][T12798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 397.148560][T12798] Call Trace: [ 397.148646][T12798] [ 397.148718][T12798] dump_stack_lvl+0xe8/0x150 [ 397.148800][T12798] should_fail_ex+0x412/0x560 [ 397.148871][T12798] _copy_from_user+0x2d/0xb0 [ 397.148939][T12798] __copy_msghdr+0x3c5/0x5b0 [ 397.149015][T12798] ___sys_sendmsg+0x213/0x360 [ 397.149037][T12798] ? __lock_acquire+0x6b5/0x2cf0 [ 397.149100][T12798] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.149147][T12798] ? __fget_files+0x2a/0x420 [ 397.149186][T12798] ? __fget_files+0x3a0/0x420 [ 397.149243][T12798] __x64_sys_sendmsg+0x1bd/0x2a0 [ 397.149277][T12798] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.149315][T12798] ? __pfx_ksys_write+0x10/0x10 [ 397.149354][T12798] do_syscall_64+0x14d/0xf80 [ 397.149475][T12798] ? trace_irq_disable+0x3b/0x140 [ 397.149522][T12798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.149564][T12798] ? clear_bhb_loop+0x40/0x90 [ 397.149591][T12798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.149617][T12798] RIP: 0033:0x7fdaccb9c799 [ 397.149666][T12798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.149685][T12798] RSP: 002b:00007fdacd9af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.149739][T12798] RAX: ffffffffffffffda RBX: 00007fdacce15fa0 RCX: 00007fdaccb9c799 [ 397.149756][T12798] RDX: 0000000000008001 RSI: 00002000000001c0 RDI: 0000000000000006 [ 397.149770][T12798] RBP: 00007fdacd9af090 R08: 0000000000000000 R09: 0000000000000000 [ 397.149783][T12798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.149796][T12798] R13: 00007fdacce16038 R14: 00007fdacce15fa0 R15: 00007fff7d4264f8 [ 397.149831][T12798] [ 397.462736][T12802] qnx6: unable to read the first superblock [ 397.530625][T12804] loop5: detected capacity change from 0 to 7 [ 397.542369][T12804] Dev loop5: unable to read RDB block 7 [ 397.548093][T12804] loop5: unable to read partition table [ 397.555793][T12804] loop5: partition table beyond EOD, truncated [ 397.562821][T12804] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 397.632565][ T112] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 397.776530][ T112] usb 6-1: device descriptor read/64, error -71 [ 397.885250][T12818] FAULT_INJECTION: forcing a failure. [ 397.885250][T12818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.899580][T12818] CPU: 0 UID: 0 PID: 12818 Comm: syz.0.1668 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.899621][T12818] Tainted: [L]=SOFTLOCKUP [ 397.899628][T12818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 397.899638][T12818] Call Trace: [ 397.899644][T12818] [ 397.899651][T12818] dump_stack_lvl+0xe8/0x150 [ 397.899682][T12818] should_fail_ex+0x412/0x560 [ 397.899705][T12818] _copy_from_iter+0x1d3/0x1670 [ 397.899807][T12818] ? unwind_next_frame+0xa6/0x2550 [ 397.899838][T12818] ? __pfx__copy_from_iter+0x10/0x10 [ 397.899873][T12818] bcm_sendmsg+0x172/0x6c0 [ 397.899919][T12818] ? __pfx_bcm_sendmsg+0x10/0x10 [ 397.899941][T12818] ? aa_sock_msg_perm+0xf1/0x1b0 [ 397.900001][T12818] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 397.900038][T12818] ____sys_sendmsg+0x972/0x9f0 [ 397.900069][T12818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.900097][T12818] ? import_iovec+0x73/0xa0 [ 397.900122][T12818] ___sys_sendmsg+0x2a5/0x360 [ 397.900170][T12818] ? __lock_acquire+0x6b5/0x2cf0 [ 397.900208][T12818] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.900264][T12818] ? __fget_files+0x2a/0x420 [ 397.900286][T12818] ? __fget_files+0x3a0/0x420 [ 397.900314][T12818] __x64_sys_sendmsg+0x1bd/0x2a0 [ 397.900340][T12818] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.900369][T12818] ? __pfx_ksys_write+0x10/0x10 [ 397.900393][T12818] do_syscall_64+0x14d/0xf80 [ 397.900412][T12818] ? trace_irq_disable+0x3b/0x140 [ 397.900432][T12818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.900448][T12818] ? clear_bhb_loop+0x40/0x90 [ 397.900467][T12818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.900483][T12818] RIP: 0033:0x7f440ab9c799 [ 397.900504][T12818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.900517][T12818] RSP: 002b:00007f440baac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.900534][T12818] RAX: ffffffffffffffda RBX: 00007f440ae15fa0 RCX: 00007f440ab9c799 [ 397.900560][T12818] RDX: 0000000000008001 RSI: 00002000000001c0 RDI: 0000000000000006 [ 397.900574][T12818] RBP: 00007f440baac090 R08: 0000000000000000 R09: 0000000000000000 [ 397.900588][T12818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.900601][T12818] R13: 00007f440ae16038 R14: 00007f440ae15fa0 R15: 00007ffe072e5db8 [ 397.900634][T12818] [ 398.014800][ T29] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 398.172353][ T112] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 398.302239][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 398.302245][ T112] usb 6-1: device descriptor read/64, error -71 [ 398.316506][ T29] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 398.322923][T12827] loop5: detected capacity change from 0 to 7 [ 398.328460][ T29] usb 2-1: config 0 has no interface number 0 [ 398.337925][ T29] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 398.350129][ T29] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 398.350161][T12827] Dev loop5: unable to read RDB block 7 [ 398.360593][ T29] usb 2-1: config 0 interface 200 has no altsetting 0 [ 398.367007][T12827] loop5: unable to read partition table [ 398.382474][T12827] loop5: partition table beyond EOD, truncated [ 398.388959][T12827] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 398.400276][ T29] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 398.412653][ T112] usb usb6-port1: attempt power cycle [ 398.439664][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.453240][ T29] usb 2-1: Product: syz [ 398.457588][ T29] usb 2-1: Manufacturer: syz [ 398.462675][ T29] usb 2-1: SerialNumber: syz [ 398.473956][ T29] usb 2-1: config 0 descriptor?? [ 398.741769][T12812] ISOFS: Unable to identify CD-ROM format. [ 398.755535][T12812] ALSA: mixer_oss: invalid index 100000 [ 398.772668][ T112] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 398.817759][ T112] usb 6-1: device descriptor read/8, error -71 [ 398.884289][ T29] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input57 [ 398.901262][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1676'. [ 398.913380][ T29] usb 2-1: USB disconnect, device number 114 [ 398.994471][T12841] FAULT_INJECTION: forcing a failure. [ 398.994471][T12841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.009326][T12841] CPU: 0 UID: 0 PID: 12841 Comm: syz.4.1677 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.009360][T12841] Tainted: [L]=SOFTLOCKUP [ 399.009369][T12841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 399.009382][T12841] Call Trace: [ 399.009391][T12841] [ 399.009400][T12841] dump_stack_lvl+0xe8/0x150 [ 399.009439][T12841] should_fail_ex+0x412/0x560 [ 399.009481][T12841] _copy_to_user+0x31/0xb0 [ 399.009515][T12841] simple_read_from_buffer+0xe1/0x170 [ 399.009593][T12841] proc_fail_nth_read+0x1bb/0x230 [ 399.009646][T12841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 399.009684][T12841] ? rw_verify_area+0x2a6/0x4d0 [ 399.009705][T12841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 399.009736][T12841] vfs_read+0x20c/0xa70 [ 399.009756][T12841] ? fdget_pos+0x246/0x320 [ 399.009791][T12841] ? __pfx___mutex_lock+0x10/0x10 [ 399.009890][T12841] ? __pfx_vfs_read+0x10/0x10 [ 399.009913][T12841] ? __fget_files+0x2a/0x420 [ 399.009948][T12841] ? __fget_files+0x3a0/0x420 [ 399.009976][T12841] ? __fget_files+0x2a/0x420 [ 399.010014][T12841] ksys_read+0x150/0x270 [ 399.010038][T12841] ? __pfx_ksys_read+0x10/0x10 [ 399.010072][T12841] do_syscall_64+0x14d/0xf80 [ 399.010100][T12841] ? trace_irq_disable+0x3b/0x140 [ 399.010125][T12841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.010147][T12841] ? clear_bhb_loop+0x40/0x90 [ 399.010174][T12841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.010197][T12841] RIP: 0033:0x7ff749f5cfce [ 399.010218][T12841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 399.010237][T12841] RSP: 002b:00007ff74ae79fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 399.010260][T12841] RAX: ffffffffffffffda RBX: 00007ff74ae7a6c0 RCX: 00007ff749f5cfce [ 399.010276][T12841] RDX: 000000000000000f RSI: 00007ff74ae7a0a0 RDI: 0000000000000007 [ 399.010290][T12841] RBP: 00007ff74ae7a090 R08: 0000000000000000 R09: 0000000000000000 [ 399.010304][T12841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.010316][T12841] R13: 00007ff74a216038 R14: 00007ff74a215fa0 R15: 00007ffe9553f688 [ 399.010350][T12841] [ 399.231575][ T112] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 399.253708][ T112] usb 6-1: device descriptor read/8, error -71 [ 399.362468][ T112] usb usb6-port1: unable to enumerate USB device [ 399.632230][ T29] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 399.783534][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 399.790272][ T29] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 399.801943][ T29] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 399.814083][ T29] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 399.825292][ T29] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 399.840925][ T29] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 399.850153][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.858986][ T29] usb 1-1: Product: syz [ 399.863342][ T29] usb 1-1: Manufacturer: syz [ 399.868188][ T29] usb 1-1: SerialNumber: syz [ 399.884751][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 399.903192][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input58 [ 399.917160][ T5894] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 400.082251][ T5894] usb 2-1: Using ep0 maxpacket: 32 [ 400.094581][ T5894] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 400.103265][ T29] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 400.113948][ T5894] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 400.122760][ T29] (id 0x00) [ 400.126641][ T5894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 400.152444][ T5894] usb 2-1: config 1 has no interface number 0 [ 400.160314][ T5894] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 400.174793][ T5894] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 400.188016][ T5894] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 400.200913][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.227237][ T5894] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 400.281328][T12850] loop5: detected capacity change from 0 to 7 [ 400.287785][ T29] rc_core: IR keymap rc-imon-pad not found [ 400.295374][T12850] Dev loop5: unable to read RDB block 7 [ 400.301049][ T29] Registered IR keymap rc-empty [ 400.302404][T12850] loop5: unable to read partition table [ 400.307084][ T29] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 400.313000][T12850] loop5: partition table beyond EOD, truncated [ 400.327421][ T29] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 400.335449][T12850] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 400.387106][ T29] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 400.430807][ T5894] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 400.457178][T12853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.474540][ T29] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input59 [ 400.479178][T12853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.544920][ T29] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:117> initialized [ 400.555871][T12856] QAT: failed to copy from user cfg_data. [ 400.657068][ T112] usb 2-1: USB disconnect, device number 115 [ 400.694321][ T112] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 401.445840][T12884] loop5: detected capacity change from 0 to 7 [ 401.453686][T12884] Dev loop5: unable to read RDB block 7 [ 401.459444][T12884] loop5: unable to read partition table [ 401.465749][T12884] loop5: partition table beyond EOD, truncated [ 401.472059][T12884] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 401.492328][T12879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.511920][T12879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.520258][ T29] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 401.579139][T12886] tls_set_device_offload: netdev not found [ 401.682550][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 401.689112][ T29] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 401.698251][ T29] usb 6-1: config 0 has no interface number 0 [ 401.707471][ T29] usb 6-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 401.719725][ T29] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0 [ 401.730775][ T29] usb 6-1: config 0 interface 200 has no altsetting 0 [ 401.740112][ T29] usb 6-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 401.749460][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.757813][ T29] usb 6-1: Product: syz [ 401.762434][ T29] usb 6-1: Manufacturer: syz [ 401.767133][ T29] usb 6-1: SerialNumber: syz [ 401.775993][ T29] usb 6-1: config 0 descriptor?? [ 401.912215][T10540] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 402.007044][T12878] ISOFS: Unable to identify CD-ROM format. [ 402.037230][T12878] ALSA: mixer_oss: invalid index 100000 [ 402.044207][T10540] usb 2-1: device descriptor read/64, error -71 [ 402.144889][ T29] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input60 [ 402.170624][ T29] usb 6-1: USB disconnect, device number 34 [ 402.303927][T10540] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 402.317170][T12896] ubi31: attaching mtd0 [ 402.325915][T12896] ubi31: scanning is finished [ 402.330630][T12896] ubi31: empty MTD device detected [ 402.442335][T10540] usb 2-1: device descriptor read/64, error -71 [ 402.510355][T12896] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 402.519054][T12896] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 402.528548][T12896] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 402.536332][T12896] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 402.544204][T12896] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 402.551632][T12896] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 402.559491][ T5926] usb 1-1: USB disconnect, device number 117 [ 402.560490][T12896] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2496688295 [ 402.571761][T10540] usb usb2-port1: attempt power cycle [ 402.586063][T12896] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 402.601879][T12898] ubi31: background thread "ubi_bgt31d" started, PID 12898 [ 402.817196][T12900] binder: 12899:12900 ioctl c018620c 2000000002c0 returned -22 [ 402.856346][T12900] afs: Unknown parameter 'dyn];IB;PQBAň O ﹮kj"1' [ 402.973170][T10540] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 403.012932][T10540] usb 2-1: device descriptor read/8, error -71 [ 403.023146][T12908] loop5: detected capacity change from 0 to 7 [ 403.031556][ T9605] Dev loop5: unable to read RDB block 7 [ 403.041049][ T9605] loop5: unable to read partition table [ 403.050939][ T9605] loop5: partition table beyond EOD, truncated [ 403.065767][T12908] Dev loop5: unable to read RDB block 7 [ 403.084948][T12908] loop5: unable to read partition table [ 403.102407][T12908] loop5: partition table beyond EOD, truncated [ 403.122188][T12908] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 403.233239][T12914] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1702'. [ 403.262241][T10540] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 403.296004][T10540] usb 2-1: device descriptor read/8, error -71 [ 403.370145][T12924] tmpfs: Too few inodes for current use [ 403.422448][T10540] usb usb2-port1: unable to enumerate USB device [ 403.709267][T12941] [ 403.711686][T12941] ====================================================== [ 403.718935][T12941] WARNING: possible circular locking dependency detected [ 403.726080][T12941] syzkaller #0 Tainted: G L [ 403.732109][T12941] ------------------------------------------------------ [ 403.739247][T12941] syz.5.1708/12941 is trying to acquire lock: [ 403.745345][T12941] ffff88801fba3c68 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x100/0xc50 [ 403.757014][T12941] [ 403.757014][T12941] but task is already holding lock: [ 403.764429][T12941] ffff88801fba27e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560 [ 403.773583][T12941] [ 403.773583][T12941] which lock already depends on the new lock. [ 403.773583][T12941] [ 403.784022][T12941] [ 403.784022][T12941] the existing dependency chain (in reverse order) is: [ 403.793074][T12941] [ 403.793074][T12941] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 403.801261][T12941] lock_sock_nested+0x41/0x100 [ 403.806673][T12941] smc_listen_out+0x109/0x3e0 [ 403.811917][T12941] smc_listen_work+0x813/0x13f0 [ 403.817343][T12941] process_scheduled_works+0xb5d/0x1860 [ 403.823738][T12941] worker_thread+0xa53/0xfc0 [ 403.828889][T12941] kthread+0x388/0x470 [ 403.833558][T12941] ret_from_fork+0x51e/0xb90 [ 403.838716][T12941] ret_from_fork_asm+0x1a/0x30 [ 403.844051][T12941] [ 403.844051][T12941] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 403.854283][T12941] __lock_acquire+0x15a5/0x2cf0 [ 403.859732][T12941] lock_acquire+0x106/0x350 [ 403.864799][T12941] __flush_work+0x700/0xc50 [ 403.869852][T12941] __cancel_work_sync+0xbe/0x110 [ 403.875332][T12941] smc_clcsock_release+0x60/0xf0 [ 403.880904][T12941] __smc_release+0x66b/0x7e0 [ 403.886030][T12941] smc_close_non_accepted+0xd5/0x1f0 [ 403.892030][T12941] smc_close_active+0xb67/0xf10 [ 403.897422][T12941] __smc_release+0x8d/0x7e0 [ 403.902810][T12941] smc_release+0x2ce/0x560 [ 403.908743][T12941] sock_close+0xc3/0x240 [ 403.913541][T12941] __fput+0x44f/0xa70 [ 403.918083][T12941] task_work_run+0x1d9/0x270 [ 403.923409][T12941] exit_to_user_mode_loop+0xed/0x480 [ 403.929303][T12941] do_syscall_64+0x32d/0xf80 [ 403.934445][T12941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.940970][T12941] [ 403.940970][T12941] other info that might help us debug this: [ 403.940970][T12941] [ 403.951258][T12941] Possible unsafe locking scenario: [ 403.951258][T12941] [ 403.958792][T12941] CPU0 CPU1 [ 403.964172][T12941] ---- ---- [ 403.969572][T12941] lock(sk_lock-AF_SMC/1); [ 403.974106][T12941] lock((work_completion)(&new_smc->smc_listen_work)); [ 403.983846][T12941] lock(sk_lock-AF_SMC/1); [ 403.990893][T12941] lock((work_completion)(&new_smc->smc_listen_work)); [ 403.997844][T12941] [ 403.997844][T12941] *** DEADLOCK *** [ 403.997844][T12941] [ 404.005997][T12941] 3 locks held by syz.5.1708/12941: [ 404.011453][T12941] #0: ffff8880352eca40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 404.022286][T12941] #1: ffff88801fba27e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x255/0x560 [ 404.031720][T12941] #2: ffffffff8eb5d720 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x100/0xc50 [ 404.041410][T12941] [ 404.041410][T12941] stack backtrace: [ 404.047497][T12941] CPU: 0 UID: 0 PID: 12941 Comm: syz.5.1708 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.047522][T12941] Tainted: [L]=SOFTLOCKUP [ 404.047528][T12941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 404.047540][T12941] Call Trace: [ 404.047549][T12941] [ 404.047557][T12941] dump_stack_lvl+0xe8/0x150 [ 404.047587][T12941] print_circular_bug+0x2e1/0x300 [ 404.047608][T12941] check_noncircular+0x12e/0x150 [ 404.047630][T12941] __lock_acquire+0x15a5/0x2cf0 [ 404.047660][T12941] ? __pfx___schedule+0x10/0x10 [ 404.047682][T12941] ? irqentry_exit+0x61a/0x700 [ 404.047765][T12941] ? trace_irq_disable+0x3b/0x140 [ 404.047788][T12941] ? __flush_work+0x100/0xc50 [ 404.047805][T12941] lock_acquire+0x106/0x350 [ 404.047830][T12941] ? __flush_work+0x100/0xc50 [ 404.047849][T12941] ? preempt_schedule_thunk+0x16/0x30 [ 404.047871][T12941] ? __flush_work+0x100/0xc50 [ 404.047888][T12941] __flush_work+0x700/0xc50 [ 404.047905][T12941] ? __flush_work+0x100/0xc50 [ 404.047923][T12941] ? __flush_work+0x100/0xc50 [ 404.047941][T12941] ? __pfx___flush_work+0x10/0x10 [ 404.047960][T12941] ? __pfx_wq_barrier_func+0x10/0x10 [ 404.047994][T12941] ? __cancel_work_sync+0x5c/0x110 [ 404.048013][T12941] __cancel_work_sync+0xbe/0x110 [ 404.048032][T12941] smc_clcsock_release+0x60/0xf0 [ 404.048057][T12941] __smc_release+0x66b/0x7e0 [ 404.048074][T12941] ? __local_bh_enable_ip+0xd0/0x130 [ 404.048103][T12941] smc_close_non_accepted+0xd5/0x1f0 [ 404.048123][T12941] smc_close_active+0xb67/0xf10 [ 404.048146][T12941] ? __pfx_sock_def_readable+0x10/0x10 [ 404.048165][T12941] __smc_release+0x8d/0x7e0 [ 404.048181][T12941] ? __local_bh_enable_ip+0xd0/0x130 [ 404.048209][T12941] smc_release+0x2ce/0x560 [ 404.048227][T12941] sock_close+0xc3/0x240 [ 404.048244][T12941] ? __pfx_sock_close+0x10/0x10 [ 404.048260][T12941] __fput+0x44f/0xa70 [ 404.048289][T12941] task_work_run+0x1d9/0x270 [ 404.048312][T12941] ? __pfx_task_work_run+0x10/0x10 [ 404.048337][T12941] exit_to_user_mode_loop+0xed/0x480 [ 404.048376][T12941] ? rcu_is_watching+0x15/0xb0 [ 404.048394][T12941] do_syscall_64+0x32d/0xf80 [ 404.048417][T12941] ? trace_irq_disable+0x3b/0x140 [ 404.048444][T12941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.048462][T12941] ? clear_bhb_loop+0x40/0x90 [ 404.048481][T12941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.048499][T12941] RIP: 0033:0x7fdaccb9c799 [ 404.048516][T12941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.048532][T12941] RSP: 002b:00007fff7d426658 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 404.048550][T12941] RAX: 0000000000000000 RBX: 00007fff7d426740 RCX: 00007fdaccb9c799 [ 404.048562][T12941] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 404.048573][T12941] RBP: 00000000000628b2 R08: 0000000000000001 R09: 0000000000000000 [ 404.048584][T12941] R10: 0000001b32c20000 R11: 0000000000000246 R12: 00007fff7d426780 [ 404.048596][T12941] R13: 00007fdacce15fac R14: 00000000000628ee R15: 00007fdacce15fa0 [ 404.048615][T12941]