Warning: Permanently added '[localhost]:47187' (ECDSA) to the list of known hosts. 2025/08/31 21:05:28 fuzzer started 2025/08/31 21:05:29 dialing manager at localhost:43077 syzkaller login: [ 51.212246] cgroup: Unknown subsys name 'net' [ 51.277879] cgroup: Unknown subsys name 'cpuset' [ 51.289361] cgroup: Unknown subsys name 'rlimit' 2025/08/31 21:05:40 syscalls: 2214 2025/08/31 21:05:40 code coverage: enabled 2025/08/31 21:05:40 comparison tracing: enabled 2025/08/31 21:05:40 extra coverage: enabled 2025/08/31 21:05:40 setuid sandbox: enabled 2025/08/31 21:05:40 namespace sandbox: enabled 2025/08/31 21:05:40 Android sandbox: enabled 2025/08/31 21:05:40 fault injection: enabled 2025/08/31 21:05:40 leak checking: enabled 2025/08/31 21:05:40 net packet injection: enabled 2025/08/31 21:05:40 net device setup: enabled 2025/08/31 21:05:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/31 21:05:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/31 21:05:40 USB emulation: enabled 2025/08/31 21:05:40 hci packet injection: enabled 2025/08/31 21:05:40 wifi device emulation: enabled 2025/08/31 21:05:40 802.15.4 emulation: enabled 2025/08/31 21:05:40 fetching corpus: 50, signal 19633/21470 (executing program) 2025/08/31 21:05:40 fetching corpus: 100, signal 26626/30157 (executing program) 2025/08/31 21:05:40 fetching corpus: 150, signal 35877/40927 (executing program) 2025/08/31 21:05:40 fetching corpus: 200, signal 42655/49138 (executing program) 2025/08/31 21:05:40 fetching corpus: 250, signal 51023/58806 (executing program) 2025/08/31 21:05:40 fetching corpus: 300, signal 54867/64013 (executing program) 2025/08/31 21:05:40 fetching corpus: 350, signal 57323/67829 (executing program) 2025/08/31 21:05:40 fetching corpus: 400, signal 59113/70973 (executing program) 2025/08/31 21:05:40 fetching corpus: 450, signal 63584/76568 (executing program) 2025/08/31 21:05:40 fetching corpus: 500, signal 66579/80772 (executing program) 2025/08/31 21:05:41 fetching corpus: 550, signal 70058/85334 (executing program) 2025/08/31 21:05:41 fetching corpus: 600, signal 73131/89459 (executing program) 2025/08/31 21:05:41 fetching corpus: 650, signal 76653/93985 (executing program) 2025/08/31 21:05:41 fetching corpus: 700, signal 79376/97666 (executing program) 2025/08/31 21:05:41 fetching corpus: 750, signal 82157/101384 (executing program) 2025/08/31 21:05:41 fetching corpus: 800, signal 84335/104487 (executing program) 2025/08/31 21:05:41 fetching corpus: 850, signal 86244/107326 (executing program) 2025/08/31 21:05:41 fetching corpus: 900, signal 89412/111233 (executing program) 2025/08/31 21:05:41 fetching corpus: 950, signal 91539/114207 (executing program) 2025/08/31 21:05:41 fetching corpus: 1000, signal 92900/116523 (executing program) 2025/08/31 21:05:41 fetching corpus: 1050, signal 94612/119076 (executing program) 2025/08/31 21:05:41 fetching corpus: 1100, signal 97748/122744 (executing program) 2025/08/31 21:05:42 fetching corpus: 1150, signal 99523/125338 (executing program) 2025/08/31 21:05:42 fetching corpus: 1200, signal 101007/127680 (executing program) 2025/08/31 21:05:42 fetching corpus: 1250, signal 102290/129721 (executing program) 2025/08/31 21:05:42 fetching corpus: 1300, signal 103514/131737 (executing program) 2025/08/31 21:05:42 fetching corpus: 1350, signal 104763/133828 (executing program) 2025/08/31 21:05:42 fetching corpus: 1400, signal 105945/135809 (executing program) 2025/08/31 21:05:42 fetching corpus: 1450, signal 107124/137739 (executing program) 2025/08/31 21:05:42 fetching corpus: 1500, signal 108219/139570 (executing program) 2025/08/31 21:05:42 fetching corpus: 1550, signal 109786/141792 (executing program) 2025/08/31 21:05:42 fetching corpus: 1600, signal 111499/144059 (executing program) 2025/08/31 21:05:42 fetching corpus: 1650, signal 112320/145675 (executing program) 2025/08/31 21:05:42 fetching corpus: 1700, signal 113369/147413 (executing program) 2025/08/31 21:05:43 fetching corpus: 1750, signal 115039/149587 (executing program) 2025/08/31 21:05:43 fetching corpus: 1800, signal 115604/151031 (executing program) 2025/08/31 21:05:43 fetching corpus: 1850, signal 116493/152634 (executing program) 2025/08/31 21:05:43 fetching corpus: 1900, signal 117436/154264 (executing program) 2025/08/31 21:05:43 fetching corpus: 1950, signal 118187/155716 (executing program) 2025/08/31 21:05:43 fetching corpus: 2000, signal 118944/157213 (executing program) 2025/08/31 21:05:43 fetching corpus: 2050, signal 119909/158766 (executing program) 2025/08/31 21:05:43 fetching corpus: 2100, signal 120805/160263 (executing program) 2025/08/31 21:05:43 fetching corpus: 2150, signal 122826/162417 (executing program) 2025/08/31 21:05:43 fetching corpus: 2200, signal 123941/164034 (executing program) 2025/08/31 21:05:43 fetching corpus: 2250, signal 125330/165803 (executing program) 2025/08/31 21:05:43 fetching corpus: 2300, signal 126017/167076 (executing program) 2025/08/31 21:05:44 fetching corpus: 2350, signal 127139/168608 (executing program) 2025/08/31 21:05:44 fetching corpus: 2400, signal 128262/170119 (executing program) 2025/08/31 21:05:44 fetching corpus: 2450, signal 128887/171335 (executing program) 2025/08/31 21:05:44 fetching corpus: 2500, signal 130052/172848 (executing program) 2025/08/31 21:05:44 fetching corpus: 2550, signal 131156/174342 (executing program) 2025/08/31 21:05:44 fetching corpus: 2600, signal 132141/175771 (executing program) 2025/08/31 21:05:44 fetching corpus: 2650, signal 132970/177081 (executing program) 2025/08/31 21:05:44 fetching corpus: 2700, signal 133930/178409 (executing program) 2025/08/31 21:05:44 fetching corpus: 2750, signal 134731/179617 (executing program) 2025/08/31 21:05:44 fetching corpus: 2800, signal 135179/180703 (executing program) 2025/08/31 21:05:44 fetching corpus: 2850, signal 136357/182090 (executing program) 2025/08/31 21:05:44 fetching corpus: 2900, signal 137126/183253 (executing program) 2025/08/31 21:05:45 fetching corpus: 2950, signal 137669/184295 (executing program) 2025/08/31 21:05:45 fetching corpus: 3000, signal 138127/185271 (executing program) 2025/08/31 21:05:45 fetching corpus: 3050, signal 138799/186359 (executing program) 2025/08/31 21:05:45 fetching corpus: 3100, signal 139727/187591 (executing program) 2025/08/31 21:05:45 fetching corpus: 3150, signal 140348/188666 (executing program) 2025/08/31 21:05:45 fetching corpus: 3200, signal 141307/189891 (executing program) 2025/08/31 21:05:45 fetching corpus: 3250, signal 141772/190858 (executing program) 2025/08/31 21:05:45 fetching corpus: 3300, signal 142204/191829 (executing program) 2025/08/31 21:05:45 fetching corpus: 3350, signal 142995/192967 (executing program) 2025/08/31 21:05:45 fetching corpus: 3400, signal 143678/194022 (executing program) 2025/08/31 21:05:45 fetching corpus: 3450, signal 144324/195034 (executing program) 2025/08/31 21:05:46 fetching corpus: 3500, signal 144786/195984 (executing program) 2025/08/31 21:05:46 fetching corpus: 3550, signal 145396/196994 (executing program) 2025/08/31 21:05:46 fetching corpus: 3600, signal 146031/197956 (executing program) 2025/08/31 21:05:46 fetching corpus: 3650, signal 146648/198946 (executing program) 2025/08/31 21:05:46 fetching corpus: 3700, signal 147367/199924 (executing program) 2025/08/31 21:05:46 fetching corpus: 3750, signal 147958/200830 (executing program) 2025/08/31 21:05:46 fetching corpus: 3800, signal 148368/201670 (executing program) 2025/08/31 21:05:46 fetching corpus: 3850, signal 148941/202529 (executing program) 2025/08/31 21:05:46 fetching corpus: 3900, signal 149236/203331 (executing program) 2025/08/31 21:05:46 fetching corpus: 3950, signal 149943/204239 (executing program) 2025/08/31 21:05:46 fetching corpus: 4000, signal 150448/205053 (executing program) 2025/08/31 21:05:46 fetching corpus: 4050, signal 150741/205822 (executing program) 2025/08/31 21:05:47 fetching corpus: 4100, signal 151351/206649 (executing program) 2025/08/31 21:05:47 fetching corpus: 4150, signal 151618/207416 (executing program) 2025/08/31 21:05:47 fetching corpus: 4200, signal 152609/208313 (executing program) 2025/08/31 21:05:47 fetching corpus: 4250, signal 153267/209169 (executing program) 2025/08/31 21:05:47 fetching corpus: 4300, signal 153889/209979 (executing program) 2025/08/31 21:05:47 fetching corpus: 4350, signal 154310/210725 (executing program) 2025/08/31 21:05:47 fetching corpus: 4400, signal 154719/211479 (executing program) 2025/08/31 21:05:47 fetching corpus: 4450, signal 155208/212226 (executing program) 2025/08/31 21:05:47 fetching corpus: 4500, signal 155586/212966 (executing program) 2025/08/31 21:05:47 fetching corpus: 4550, signal 156275/213741 (executing program) 2025/08/31 21:05:47 fetching corpus: 4600, signal 156962/214473 (executing program) 2025/08/31 21:05:48 fetching corpus: 4650, signal 157320/215196 (executing program) 2025/08/31 21:05:48 fetching corpus: 4700, signal 157737/215881 (executing program) 2025/08/31 21:05:48 fetching corpus: 4750, signal 158255/216579 (executing program) 2025/08/31 21:05:48 fetching corpus: 4800, signal 158826/217330 (executing program) 2025/08/31 21:05:48 fetching corpus: 4850, signal 159105/217961 (executing program) 2025/08/31 21:05:48 fetching corpus: 4900, signal 159578/218593 (executing program) 2025/08/31 21:05:48 fetching corpus: 4950, signal 159933/219219 (executing program) 2025/08/31 21:05:48 fetching corpus: 5000, signal 160322/219839 (executing program) 2025/08/31 21:05:48 fetching corpus: 5050, signal 160888/220523 (executing program) 2025/08/31 21:05:48 fetching corpus: 5100, signal 161563/221301 (executing program) 2025/08/31 21:05:48 fetching corpus: 5150, signal 161944/221970 (executing program) 2025/08/31 21:05:49 fetching corpus: 5200, signal 162417/222570 (executing program) 2025/08/31 21:05:49 fetching corpus: 5250, signal 163121/223206 (executing program) 2025/08/31 21:05:49 fetching corpus: 5300, signal 163480/223804 (executing program) 2025/08/31 21:05:49 fetching corpus: 5350, signal 163712/224398 (executing program) 2025/08/31 21:05:49 fetching corpus: 5400, signal 164462/224983 (executing program) 2025/08/31 21:05:49 fetching corpus: 5450, signal 164998/225584 (executing program) 2025/08/31 21:05:49 fetching corpus: 5500, signal 165615/226187 (executing program) 2025/08/31 21:05:49 fetching corpus: 5550, signal 166165/226841 (executing program) 2025/08/31 21:05:49 fetching corpus: 5600, signal 166616/227372 (executing program) 2025/08/31 21:05:49 fetching corpus: 5650, signal 166914/227495 (executing program) 2025/08/31 21:05:49 fetching corpus: 5700, signal 167253/227506 (executing program) 2025/08/31 21:05:49 fetching corpus: 5750, signal 167489/227510 (executing program) 2025/08/31 21:05:50 fetching corpus: 5800, signal 167878/227512 (executing program) 2025/08/31 21:05:50 fetching corpus: 5850, signal 168535/227513 (executing program) 2025/08/31 21:05:50 fetching corpus: 5900, signal 168799/227516 (executing program) 2025/08/31 21:05:50 fetching corpus: 5950, signal 169112/227523 (executing program) 2025/08/31 21:05:50 fetching corpus: 6000, signal 169502/227542 (executing program) 2025/08/31 21:05:50 fetching corpus: 6050, signal 169876/227544 (executing program) 2025/08/31 21:05:50 fetching corpus: 6100, signal 170218/227562 (executing program) 2025/08/31 21:05:50 fetching corpus: 6150, signal 170696/227567 (executing program) 2025/08/31 21:05:50 fetching corpus: 6200, signal 171042/227570 (executing program) 2025/08/31 21:05:50 fetching corpus: 6250, signal 171740/227576 (executing program) 2025/08/31 21:05:50 fetching corpus: 6300, signal 171982/227577 (executing program) 2025/08/31 21:05:51 fetching corpus: 6350, signal 172254/227581 (executing program) 2025/08/31 21:05:51 fetching corpus: 6400, signal 172529/227599 (executing program) 2025/08/31 21:05:51 fetching corpus: 6450, signal 172814/227599 (executing program) 2025/08/31 21:05:51 fetching corpus: 6500, signal 173052/227599 (executing program) 2025/08/31 21:05:51 fetching corpus: 6550, signal 173339/227616 (executing program) 2025/08/31 21:05:51 fetching corpus: 6600, signal 173931/227692 (executing program) 2025/08/31 21:05:51 fetching corpus: 6650, signal 174305/227701 (executing program) 2025/08/31 21:05:51 fetching corpus: 6700, signal 174717/227762 (executing program) 2025/08/31 21:05:51 fetching corpus: 6750, signal 175105/227865 (executing program) 2025/08/31 21:05:51 fetching corpus: 6800, signal 175320/227878 (executing program) 2025/08/31 21:05:51 fetching corpus: 6850, signal 175544/227887 (executing program) 2025/08/31 21:05:51 fetching corpus: 6900, signal 175884/227898 (executing program) 2025/08/31 21:05:51 fetching corpus: 6950, signal 176608/227997 (executing program) 2025/08/31 21:05:52 fetching corpus: 7000, signal 176937/228003 (executing program) 2025/08/31 21:05:52 fetching corpus: 7050, signal 177354/228018 (executing program) 2025/08/31 21:05:52 fetching corpus: 7100, signal 177670/228026 (executing program) 2025/08/31 21:05:52 fetching corpus: 7150, signal 178010/228026 (executing program) 2025/08/31 21:05:52 fetching corpus: 7200, signal 178316/228034 (executing program) 2025/08/31 21:05:52 fetching corpus: 7250, signal 178687/228068 (executing program) 2025/08/31 21:05:52 fetching corpus: 7300, signal 179036/228075 (executing program) 2025/08/31 21:05:52 fetching corpus: 7350, signal 179486/228076 (executing program) 2025/08/31 21:05:52 fetching corpus: 7400, signal 179767/228080 (executing program) 2025/08/31 21:05:52 fetching corpus: 7450, signal 180084/228091 (executing program) 2025/08/31 21:05:52 fetching corpus: 7500, signal 180440/228095 (executing program) 2025/08/31 21:05:52 fetching corpus: 7550, signal 180599/228096 (executing program) 2025/08/31 21:05:52 fetching corpus: 7600, signal 181021/228100 (executing program) 2025/08/31 21:05:53 fetching corpus: 7650, signal 181276/228100 (executing program) 2025/08/31 21:05:53 fetching corpus: 7700, signal 181603/228104 (executing program) 2025/08/31 21:05:53 fetching corpus: 7750, signal 182054/228200 (executing program) 2025/08/31 21:05:53 fetching corpus: 7800, signal 182413/228200 (executing program) 2025/08/31 21:05:53 fetching corpus: 7850, signal 182732/228207 (executing program) 2025/08/31 21:05:53 fetching corpus: 7900, signal 182926/228208 (executing program) 2025/08/31 21:05:53 fetching corpus: 7950, signal 183163/228226 (executing program) 2025/08/31 21:05:53 fetching corpus: 8000, signal 183447/228230 (executing program) 2025/08/31 21:05:53 fetching corpus: 8050, signal 183800/228233 (executing program) 2025/08/31 21:05:53 fetching corpus: 8100, signal 184036/228234 (executing program) 2025/08/31 21:05:53 fetching corpus: 8150, signal 184353/228251 (executing program) 2025/08/31 21:05:53 fetching corpus: 8200, signal 184593/228251 (executing program) 2025/08/31 21:05:53 fetching corpus: 8250, signal 184881/228259 (executing program) 2025/08/31 21:05:54 fetching corpus: 8300, signal 185072/228262 (executing program) 2025/08/31 21:05:54 fetching corpus: 8350, signal 185362/228262 (executing program) 2025/08/31 21:05:54 fetching corpus: 8400, signal 185496/228277 (executing program) 2025/08/31 21:05:54 fetching corpus: 8450, signal 185768/228279 (executing program) 2025/08/31 21:05:54 fetching corpus: 8500, signal 185967/228282 (executing program) 2025/08/31 21:05:54 fetching corpus: 8550, signal 186228/228283 (executing program) 2025/08/31 21:05:54 fetching corpus: 8600, signal 186547/228289 (executing program) 2025/08/31 21:05:54 fetching corpus: 8650, signal 186942/228293 (executing program) 2025/08/31 21:05:54 fetching corpus: 8700, signal 187342/228294 (executing program) 2025/08/31 21:05:54 fetching corpus: 8750, signal 187649/228305 (executing program) 2025/08/31 21:05:54 fetching corpus: 8800, signal 187909/228312 (executing program) 2025/08/31 21:05:54 fetching corpus: 8850, signal 188364/228312 (executing program) 2025/08/31 21:05:55 fetching corpus: 8900, signal 188590/228317 (executing program) 2025/08/31 21:05:55 fetching corpus: 8950, signal 188857/228325 (executing program) 2025/08/31 21:05:55 fetching corpus: 9000, signal 189289/228328 (executing program) 2025/08/31 21:05:55 fetching corpus: 9050, signal 189516/228335 (executing program) 2025/08/31 21:05:55 fetching corpus: 9100, signal 189725/228337 (executing program) 2025/08/31 21:05:55 fetching corpus: 9150, signal 190024/228344 (executing program) 2025/08/31 21:05:55 fetching corpus: 9200, signal 190271/228346 (executing program) 2025/08/31 21:05:55 fetching corpus: 9250, signal 190446/228346 (executing program) 2025/08/31 21:05:55 fetching corpus: 9300, signal 190661/228352 (executing program) 2025/08/31 21:05:55 fetching corpus: 9350, signal 190977/228356 (executing program) 2025/08/31 21:05:55 fetching corpus: 9400, signal 191206/228356 (executing program) 2025/08/31 21:05:55 fetching corpus: 9450, signal 191403/228358 (executing program) 2025/08/31 21:05:56 fetching corpus: 9500, signal 191680/228358 (executing program) 2025/08/31 21:05:56 fetching corpus: 9550, signal 191926/228360 (executing program) 2025/08/31 21:05:56 fetching corpus: 9600, signal 192121/228373 (executing program) 2025/08/31 21:05:56 fetching corpus: 9650, signal 192312/228374 (executing program) 2025/08/31 21:05:56 fetching corpus: 9700, signal 192617/228374 (executing program) 2025/08/31 21:05:56 fetching corpus: 9750, signal 192840/228375 (executing program) 2025/08/31 21:05:56 fetching corpus: 9800, signal 193032/228382 (executing program) 2025/08/31 21:05:56 fetching corpus: 9850, signal 193255/228384 (executing program) 2025/08/31 21:05:56 fetching corpus: 9900, signal 193420/228386 (executing program) 2025/08/31 21:05:56 fetching corpus: 9950, signal 193645/228404 (executing program) 2025/08/31 21:05:56 fetching corpus: 10000, signal 193955/228404 (executing program) 2025/08/31 21:05:57 fetching corpus: 10050, signal 194258/228408 (executing program) 2025/08/31 21:05:57 fetching corpus: 10100, signal 194459/228414 (executing program) 2025/08/31 21:05:57 fetching corpus: 10150, signal 194792/228414 (executing program) 2025/08/31 21:05:57 fetching corpus: 10200, signal 194988/228415 (executing program) 2025/08/31 21:05:57 fetching corpus: 10250, signal 195182/228420 (executing program) 2025/08/31 21:05:57 fetching corpus: 10300, signal 195475/228423 (executing program) 2025/08/31 21:05:57 fetching corpus: 10350, signal 195764/228426 (executing program) 2025/08/31 21:05:57 fetching corpus: 10400, signal 196001/228430 (executing program) 2025/08/31 21:05:57 fetching corpus: 10450, signal 196162/228432 (executing program) 2025/08/31 21:05:57 fetching corpus: 10500, signal 196364/228443 (executing program) 2025/08/31 21:05:57 fetching corpus: 10550, signal 196517/228444 (executing program) 2025/08/31 21:05:58 fetching corpus: 10600, signal 196705/228448 (executing program) 2025/08/31 21:05:58 fetching corpus: 10650, signal 197001/228449 (executing program) 2025/08/31 21:05:58 fetching corpus: 10700, signal 197199/228449 (executing program) 2025/08/31 21:05:58 fetching corpus: 10750, signal 197403/228449 (executing program) 2025/08/31 21:05:58 fetching corpus: 10800, signal 197611/228450 (executing program) 2025/08/31 21:05:58 fetching corpus: 10850, signal 197752/228450 (executing program) 2025/08/31 21:05:58 fetching corpus: 10900, signal 197912/228466 (executing program) 2025/08/31 21:05:58 fetching corpus: 10950, signal 198265/228501 (executing program) 2025/08/31 21:05:58 fetching corpus: 11000, signal 198611/228506 (executing program) 2025/08/31 21:05:58 fetching corpus: 11050, signal 198805/228514 (executing program) 2025/08/31 21:05:58 fetching corpus: 11100, signal 199044/228516 (executing program) 2025/08/31 21:05:59 fetching corpus: 11150, signal 199266/228517 (executing program) 2025/08/31 21:05:59 fetching corpus: 11200, signal 199505/228518 (executing program) 2025/08/31 21:05:59 fetching corpus: 11250, signal 199668/228523 (executing program) 2025/08/31 21:05:59 fetching corpus: 11300, signal 199932/228530 (executing program) 2025/08/31 21:05:59 fetching corpus: 11350, signal 200075/228530 (executing program) 2025/08/31 21:05:59 fetching corpus: 11400, signal 200271/228546 (executing program) 2025/08/31 21:05:59 fetching corpus: 11450, signal 200480/228546 (executing program) 2025/08/31 21:05:59 fetching corpus: 11500, signal 200683/228547 (executing program) 2025/08/31 21:05:59 fetching corpus: 11550, signal 200922/228550 (executing program) 2025/08/31 21:05:59 fetching corpus: 11600, signal 201105/228565 (executing program) 2025/08/31 21:05:59 fetching corpus: 11650, signal 201349/228572 (executing program) 2025/08/31 21:05:59 fetching corpus: 11700, signal 201488/228573 (executing program) 2025/08/31 21:06:00 fetching corpus: 11750, signal 201663/228573 (executing program) 2025/08/31 21:06:00 fetching corpus: 11800, signal 201919/228579 (executing program) 2025/08/31 21:06:00 fetching corpus: 11850, signal 202083/228591 (executing program) 2025/08/31 21:06:00 fetching corpus: 11900, signal 202261/228591 (executing program) 2025/08/31 21:06:00 fetching corpus: 11950, signal 202462/228593 (executing program) 2025/08/31 21:06:00 fetching corpus: 12000, signal 202606/228597 (executing program) 2025/08/31 21:06:00 fetching corpus: 12050, signal 202809/228604 (executing program) 2025/08/31 21:06:00 fetching corpus: 12100, signal 202996/228604 (executing program) 2025/08/31 21:06:00 fetching corpus: 12150, signal 203130/228611 (executing program) 2025/08/31 21:06:00 fetching corpus: 12200, signal 203306/228613 (executing program) 2025/08/31 21:06:00 fetching corpus: 12250, signal 203595/228618 (executing program) 2025/08/31 21:06:01 fetching corpus: 12300, signal 203776/228620 (executing program) 2025/08/31 21:06:01 fetching corpus: 12350, signal 203959/228627 (executing program) 2025/08/31 21:06:01 fetching corpus: 12400, signal 204127/228629 (executing program) 2025/08/31 21:06:01 fetching corpus: 12450, signal 204410/228639 (executing program) 2025/08/31 21:06:01 fetching corpus: 12500, signal 204698/228647 (executing program) 2025/08/31 21:06:01 fetching corpus: 12550, signal 204904/228661 (executing program) 2025/08/31 21:06:01 fetching corpus: 12600, signal 205104/228663 (executing program) 2025/08/31 21:06:01 fetching corpus: 12650, signal 205339/228671 (executing program) 2025/08/31 21:06:01 fetching corpus: 12670, signal 205389/228673 (executing program) 2025/08/31 21:06:01 fetching corpus: 12670, signal 205389/228673 (executing program) 2025/08/31 21:06:04 starting 8 fuzzer processes 21:06:04 executing program 1: sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1f}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048011}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x220, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x800, 0x0, 0x2}, 0x18) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x90, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x90}}, 0x4) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x894}, 0x40010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffffe0}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}}, 0x48001) r4 = openat2(r0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x80200, 0x100, 0x9}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x94, r5, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "31b9c102389f7acaf09dfcfa7a175380"}, @NL80211_ATTR_PMKID={0x14, 0x55, "694d204b803eb68810a0db0ad324cd5e"}, @NL80211_ATTR_PMK={0x14, 0xfe, "f295533d8ca8e50fd3e72d34f96d4d50"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x9}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "42d930d966330228d2260c25948faa97"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7dba}]}, 0x94}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000cc0), 0x9e3bcac912f57758, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x80000) syz_mount_image$iso9660(&(0x7f0000000e00), &(0x7f0000000e40)='./file0\x00', 0x6, 0x4, &(0x7f0000001080)=[{&(0x7f0000000e80)="fa10dce663d0e2d1666b488e8e8c77a29b27b48a4efb1a406169bd0e19aa2dde03d13abcc3e7f9669750a08a1442fc3bd22271ec62683f5813c7faebcd680048aee895a4796416b64bac42fb3642473b3f46a53685d6ffec9cd3faf235aa476e893d921ea50317502166b5df7050694d7b1b644dc14f6f30c7794ac3d512ff579d17c783cdaaf4cabdc0cf6db0e64c091877973c71d8246a3dd21fcebc7ebb75e075be1022a2e2926e0c0050c2f879f7e497df8f427a603caae79d22f6", 0xbd, 0x100000001}, {&(0x7f0000000f40)="cf6cb5469e226801357aef29e0661f29959647fa714946db180da9cddddf72be368dc8c02bdad54c4cfa", 0x2a, 0x3}, {&(0x7f0000000f80)="1b32640b0a27b5dce28c910c22f579e3f3ba0c0726c756feb78021634eb671371151dcbf8ca3499b371093be4d3c8915ef20981d3e628dd410888981818afe0835e20197ead8d7c5e726cf43ac9aa7b2c15a1914e7b68d884c8089e3b5258bb3f7fbb87352fac9a5b1808205008732cb9f7bdd8ebd8585d854d2476e3d5cf0c3dd4f10d167112a116b861b952f3e5f4b69abdecccaf7803dfd42aa2730d1edf675087349df0d8cf01f2ee5d6281f2c9be722e4c5b421fa0b635bef49a63e57", 0xbf, 0x5f7}, {&(0x7f0000001040)="0f2a1a9d00", 0x5}], 0x1000, &(0x7f0000001100)={[{@map_normal}, {@sbsector={'sbsector', 0x3d, 0x100000001}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@block={'block', 0x3d, 0x200}}, {@hide}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}], [{@smackfsdef}, {@uid_lt}, {@smackfsroot={'smackfsroot', 0x3d, 'veth0_to_team\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/nvram\x00'}}]}) openat2(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x200200, 0x44, 0x2}, 0x18) 21:06:04 executing program 0: fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'system.', '&\'^!#\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1a4, 0x0, 0x200, 0x5, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1938}]}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x86a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x499ff803}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40801}, 0x20040800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x127}}, './file0\x00'}) io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x401, r2, &(0x7f0000000340)="22175efb4bb3c302e1b59e7b5c547fc1cce8cfa50aabdaf5919f186870dea23f6cfa4aef83ab3f9f3fc318150c619209", 0x30, 0x9, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x20, 0xffffffffffffffff, &(0x7f00000003c0)="921cb2b918aa5ff63008018f9848a7621208a389d401f5b87ee64153df9c455ae1e24723c97206a10551a55f75483a96da452794bcccb69ab4f0441e5fdc1fcff10ffe550c07aab087298843546113fdd3d6a76ea014b470453bee4da1379b6aad9255cb70", 0x65, 0xfffffffffffffffd, 0x0, 0x1, r1}]) write$P9_RREADLINK(r1, &(0x7f00000004c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) preadv2(r2, &(0x7f0000000600)=[{&(0x7f0000000500)=""/206, 0xce}], 0x1, 0x3, 0x8001, 0x3778ef4d0bd31555) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) fcntl$getownex(r2, 0x10, &(0x7f0000000680)={0x0, 0x0}) fcntl$setownex(r3, 0xf, &(0x7f00000006c0)={0x2, r4}) dup(r3) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000700)={'\x00', 0x80, 0x2, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0xfffffffffffffffc, 0x0) setxattr$security_selinux(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), &(0x7f0000000800)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x5) readlink(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=""/28, 0x1c) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001640)={&(0x7f0000000900)={0xd3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xaa4, 0x72}}}}, [@NL80211_PMSR_ATTR_PEERS={0x22c, 0x5, 0x0, 0x1, [{0x170, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x100, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x57}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x272}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6f}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0xaf0, 0x5, 0x0, 0x1, [{0x33c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x210, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x45}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x144, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd9a9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x300}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x9c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x74, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}]}]}]}, {0x450, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x440, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x63}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x62f}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xcc20}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb88}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff8000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x85}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x262}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x264, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x214, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdafb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}]}]}]}, 0xd3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x2c, r6, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000080) write$P9_RLERROR(r3, &(0x7f0000001800)={0xa, 0x7, 0x1, {0x1, '&'}}, 0xa) 21:06:04 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x3a1800, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x318, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7d6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xff, @mcast1, 0xdf8}}}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x221f, @empty, 0x4}}}}]}, @TIPC_NLA_LINK={0x128, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa9b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb83}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xba}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffff7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x24000081}, 0x44004) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x30}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "51a133b19948461ddddef14574"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fb935d5de9"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ea72ea90c70287fedb391d60e4"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2a}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x64008011}, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000700), &(0x7f0000000740)=0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x88, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5c59}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0xc4) r2 = socket(0x5, 0x800, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) sendto(r2, &(0x7f0000000a00)="ab538f1aff363746c3099052a64edadb98b7cfc2e168ff23c43e9ff945f2b9d744d3a216be9b9a83efaae94ca7e82aedf7c032a38bcea4adde4e68a162033a98b64632c8a53f4f5756d581204efee1f3a9fbae1bf65f77e046", 0x59, 0x40000, &(0x7f0000000a80)=@phonet={0x23, 0x4, 0x7f, 0x3f}, 0x80) r3 = syz_open_dev$vcsa(&(0x7f0000000b00), 0x9, 0x2) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x120, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x20, 0x63}}}}, [@NL80211_ATTR_TESTDATA={0x5d, 0x45, "f1962974136bc53802a59078355527887f6b83027ac6552e0c43726cf81b05e53eedb39f50469f089d8dd7047fd8c834f1e6c4f52791fd9c1970a2af3ff91bff2741a5a675c4f95081eb135efcd83c5a7f1e149f76eabcc289"}, @NL80211_ATTR_TESTDATA={0x7d, 0x45, "ab823e383cc502bd8365a13b51fdfcbbd1d7afb03b24c7bbf435375fa6db5e418d92d7c7824297258f729de31f615fdca36b93325be44ccdb166d4039a7e57a8dac978ef05e6f75da9c35e7a5d71583a513289e548d42ec1e0417c96a914bbd75037b1a14ab33d8b44384f735e92f860c27f640845f598a534"}, @NL80211_ATTR_TESTDATA={0x1e, 0x45, "e096e5acd87c0c626a32fab7f901505c26470fece56d8c792e88"}]}, 0x120}, 0x1, 0x0, 0x0, 0x810}, 0x4000040) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000d40)=@generic={0x0, 0x1000, 0x2}) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x7fff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r2) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4008085) listen(r0, 0x7) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ec0), 0xc00, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000f00)={{0x1, 0x1, 0x18, r0, {r5}}, './file0\x00'}) 21:06:04 executing program 3: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x200) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x4) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x4) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000000c0)=0x1) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000100)=0x6000) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000140)=0x9) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000180)=0x7) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x9) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000240)=0x908) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)=0x7) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000002c0)) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000300)=0x9a8) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000340)=0x8) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000380)=0x34c4) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000003c0)=0x4) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000400)=0x1) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000440)) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000480)=0x2) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000004c0)=0x9) 21:06:04 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x23c, r0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x16c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x240400d0}, 0x8040000) r2 = open(&(0x7f00000003c0)='./file0\x00', 0x800, 0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @multicast2, @loopback}, &(0x7f00000004c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000500)={'syztnl0\x00', r1, 0x8000, 0x1, 0x7fffffff, 0x0, {{0x9, 0x4, 0x3, 0x2, 0x24, 0x66, 0x0, 0x4, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @private=0xa010101, {[@timestamp={0x44, 0x10, 0x31, 0x0, 0x9, [0xffff, 0x2, 0x4]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl1\x00', r1, 0x2f, 0xf7, 0x3f, 0x3f, 0x2, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x20, 0x8, 0xfff}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x110, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x70, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x110}}, 0x8000) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x80, 0x0, 0x301, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "26fc19005d"}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x80}}, 0x24000801) getsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000980)=""/115, &(0x7f0000000a00)=0x73) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x24000040) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b80)={'syztnl2\x00', r4, 0x4, 0xe6, 0x80, 0x5, 0x50, @dev={0xfe, 0x80, '\x00', 0x42}, @private0, 0x7, 0x10, 0xf4800000, 0x8}}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r2) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000cc0)={@multicast1, @empty, 0x0}, &(0x7f0000000d00)=0xc) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r7, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x4048010) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r9, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x10}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x10044) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000001140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001100)={&(0x7f0000000f80)={0x170, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20008080}, 0x4005) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000002680)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002640)={&(0x7f0000001200)={0x142c, r9, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfff, 0x70}}}}, [@NL80211_ATTR_TESTDATA={0x4c, 0x45, "be8708cbb653c6524f818f8d760fbdce0fc6d6f429e6d93169e1d693c36f78ddd2baa31fe89b72fbc4c5afc47072447d3ea3261fb21672c710747c1b35738c604a4c90abc30c1632"}, @NL80211_ATTR_TESTDATA={0xfd, 0x45, "df345cd808bc48992970f0fa2fb7fdbba873839fa24565a237981b3189d81910ceba298888f5f824f8ba1359ac7de2f88d1ea6cebc325d5a50a63d3c2bf79c5b70816f8d1815d29bca0d0cd00e8890670e8ef04230b958faab59225fa2cc9ce42394b8d921b4e9affceaffc23e93ea5932a9644c426a9d65e6a77eeab87687cfc6de9322dace5b716ae73aec1f71f16279e63ca4d966ab0c99da692c4f1acf0c01bd3db4db2963a97904556e91b3bf5f87076b4398be1a7476e8ff4f1024d128b90fedc0f353a1dff00336026d97b8f97622debbb1a2bce3a4a702fb6c9227a689176850d5adcdaa89b232edb83c3f8c1f2d992cb3d66592f2"}, @NL80211_ATTR_TESTDATA={0xa0, 0x45, "e43c8005e5434dbdbd65e68c9763fd1158a46e94ee250b692d015e121ffb8e3715f8e915ee30849b520d9c8b96f0eddcb58fb2889524feade24c8680e169a05f5060c2c2949659aeba4cfb031ba1ba5ec006018cdae20e4a5e6f138b7f0c73de5cf8b6390aca7eff5ecd7ce125587a806e6cbecdf5768ce6ca8f44ffc132e8ecc15f1fa7bde86842d2df6d4a8c173e03bded91c97fdce07d12cec8ab"}, @NL80211_ATTR_TESTDATA={0x6, 0x45, "9ef0"}, @NL80211_ATTR_TESTDATA={0x63, 0x45, "7645ac8a1f62b66415cc3d8c9a61ea9ca6528d5bb4a277bd16b6fa4afedf7e188ff30e0fe7a78be36c209dc9bb907a6441279ba174ffb9011621255055c6b56e590475a5422d865a68ada721e62a33c8ea23092c0a7ec8a0b4730790a5f0c4"}, @NL80211_ATTR_TESTDATA={0xe5, 0x45, "99582cfa070eb0faa1840fb4681b25da0ccf26b3356ae34ff1435e6b3fe8b3befdb0f2caa4b90d19200e4ed1623b5a615f2032cd55aeb4d71520a95dfafcfc9e13ecb1ab0f53405a66c4ec3b8011c087b33ef563da94962aa774cf5f0eba360a2e87d07b56dc502f2037f6e8ad6afd718a4f28964656ea6eb0de84a39eab3f14e079e005ed64f045c393781da97683b49a743f5d1fe294af7b4820db99ba4184702c66f2e021bcccf245f782d6e8782704864a1ceeedf1764a5dd59b699121450ed5202263f865e763c5259679ac8597b76e6a778ffa6c252dfa619f2e460c92d7"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xbe, 0x45, "5218fd5621e4d19c4a932afef121e11837b7b82ad186113ef95d661e8dc287257e952e97314671f8a6bfc13bbeebb83c653d6d50293525441851bc92579e1d5ae3e8cf41044792191abdae940c943cf56680ca70b1dcde86d495598920d9908e2b7cbee85d70e088f9cb89dfd9f76afa111859eedd4209fd3f6454ccc0723334b6eed45a15e1050f866af8848ebb33b811a33335b0c41aff67db87d8cb7369ed3ebc75a18487e43023fae4b56d7c74b6ac90bf1359384c5ecc5a"}]}, 0x142c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008040) 21:06:04 executing program 7: r0 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = shmget$private(0x0, 0x3000, 0xc04, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) r2 = shmget(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000000)=""/17) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) r3 = open(&(0x7f0000000040)='./file0\x00', 0x100, 0x122) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x4010, r3, 0x8000000) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x2000) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000080)=0xecd, 0x6000000000000000, 0x5) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f00000000c0)) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r4 = shmget(0x2, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ffe000/0x2000)=nil, 0x4000) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000004c0)={0x100, 0x9, 0x0, 0x6, 0x1, [{0x4, 0x1f, 0x1, '\x00', 0x487}]}) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000540)=""/242) [ 86.064968] audit: type=1400 audit(1756674364.157:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:06:04 executing program 5: ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000000)) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000040)={{0x93, 0x3}, 0x100, './file0\x00'}) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x9000012}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x8080) statx(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x800, 0x2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000900)=0xe8) r5 = syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x4, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000380)="c46f51229d4449140679d7d810971a20c22a1d2837e35c73c3858e51597495c376c5cf64252f8db1b663cc2755b59f77cfa610eaec6a5baf451a56c5433b84cbe139f8d6414b6b46829ffdf8b0c326aaaeb95aa92764a0783d3492e5769fc11ed156b89ddb53dba1895173eaa0d532d02b8813442cacdff17f8791abcef958618e163af9be9d691d68cc4cc430fea8de53d1cfe3caf24ee20fc2031c371b1d4bbe0eb6256974", 0xa6, 0xf747}, {&(0x7f0000000440)="61ec063b1cfc2a86a9f79a976ac19f43a08b30f6436da662c2076c847ee932c7e7af2bb4658332f5a27f19b93270cd19", 0x30, 0xfff}, {&(0x7f0000000480)="62785267489f99157a23d1892ece57878d81cc7d592e6666bd0f650a99032690a12b10089f9a69ebd2adfebcf99445faeae566c7d67f573c0b824509555588e66a566941a8", 0x45, 0xff}, {&(0x7f0000000500)="22217f97b79f088f57b78078eb411cd23873d65fd942d86bd75fa2d219f938be6acfc7aeba5598ba71bf62cf42aba8720e403ffbf2b52115618373659adcd9b5e0c7134a4f0ae6c11801814de48fc0573679158d3a753c0584a9e429969c0bc1ca44d3100c22764558bb1f4b510864b85efb88ac7cdd16c01795d31e0b6b55f7ac4322d014946a6505de60da2eb6989ef97d74d2fd31b4b2025050466407f70579f8f1c0ac3be841963ef3edf49ae846f6f4accc49c03a", 0xb7, 0x5}], 0x303088d, &(0x7f0000000940)={[{@fat=@codepage={'codepage', 0x3d, '932'}}, {@nodots}, {@dots}, {@fat=@gid={'gid', 0x3d, r2}}, {@nodots}], [{@audit}, {@appraise_type}, {@fowner_eq={'fowner', 0x3d, r3}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@hash}, {@dont_hash}]}) r6 = dup2(r5, r5) statx(r6, &(0x7f0000000a00)='./file0\x00', 0x800, 0x800, &(0x7f0000000a40)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) mount$cgroup2(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x808040, &(0x7f0000000cc0)={[{@memory_recursiveprot}, {@memory_recursiveprot}, {@memory_localevents}, {@memory_localevents}, {@memory_recursiveprot}, {}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x5}}]}) pivot_root(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)='./file0\x00') ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000e00)={'wpan0\x00'}) perf_event_open(&(0x7f0000000e40)={0x0, 0x80, 0x59, 0x1, 0x4, 0x2b, 0x0, 0x1, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x1, @perf_config_ext={0x7fff, 0x600a}, 0x0, 0x20, 0x401, 0x0, 0x5, 0x80000000, 0x7, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) lsetxattr$security_capability(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00), &(0x7f0000000f40)=@v3={0x3000000, [{0x80000001, 0x101}, {0x0, 0xffff7fff}], r1}, 0x18, 0x2) rmdir(&(0x7f0000000f80)='./file0\x00') r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000fc0), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000001000)={{0x1, 0x1, 0x18, r8, {0x8}}, './file0\x00'}) 21:06:04 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xdb}}, './file0\x00'}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000040)='macvlan1\x00', 0x3910, 0x7717, 0xbfc}) r1 = eventfd(0x10001) tee(r1, 0xffffffffffffffff, 0x0, 0x8) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000200)=0x68) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240)={0x0, 0xa6f4}, 0x8) fcntl$setstatus(r2, 0x4, 0x4c00) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) close_range(r1, r3, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0x9, 0x9, 0xab, 0x3]}, &(0x7f0000000340)=0x78) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000380)) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f00000003c0)=""/74, &(0x7f0000000440)=0x4a) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x200}}, './file0\x00'}) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)={0x9, 0x1f, 0x7, 0x0, 0x0, [{{r2}, 0x1000}, {{r4}, 0x5}, {{r3}, 0xffffffffffffffff}, {{r0}, 0xf1}, {{r1}, 0x93f}, {{r1}, 0x2}, {{r2}, 0x5}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/class/sound', 0x8040, 0x24) fcntl$getown(r3, 0x9) syz_genetlink_get_family_id$fou(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000640)) [ 87.201669] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.206498] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.208088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.214092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.217015] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.349882] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.363681] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.367465] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.384177] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.388761] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.392479] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.394552] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.396852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.401856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.403580] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.404763] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.406334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.407928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.411637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.417878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.421668] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.429331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.430568] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.452443] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.462320] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.475979] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.478215] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.486299] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.489456] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.501665] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.503467] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.505564] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.512353] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.518703] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.522359] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.579097] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 87.587592] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 87.609587] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 87.616537] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 87.623119] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.232639] Bluetooth: hci0: command tx timeout [ 89.488273] Bluetooth: hci3: command tx timeout [ 89.489260] Bluetooth: hci2: command tx timeout [ 89.490039] Bluetooth: hci1: command tx timeout [ 89.616654] Bluetooth: hci6: command tx timeout [ 89.618365] Bluetooth: hci5: command tx timeout [ 89.619508] Bluetooth: hci4: command tx timeout [ 89.680722] Bluetooth: hci7: command tx timeout [ 91.280201] Bluetooth: hci0: command tx timeout [ 91.536346] Bluetooth: hci3: command tx timeout [ 91.536804] Bluetooth: hci1: command tx timeout [ 91.537668] Bluetooth: hci2: command tx timeout [ 91.665207] Bluetooth: hci4: command tx timeout [ 91.665663] Bluetooth: hci6: command tx timeout [ 91.665747] Bluetooth: hci5: command tx timeout [ 91.730203] Bluetooth: hci7: command tx timeout [ 93.328285] Bluetooth: hci0: command tx timeout [ 93.585315] Bluetooth: hci2: command tx timeout [ 93.585383] Bluetooth: hci1: command tx timeout [ 93.585761] Bluetooth: hci3: command tx timeout [ 93.712359] Bluetooth: hci4: command tx timeout [ 93.712437] Bluetooth: hci6: command tx timeout [ 93.713210] Bluetooth: hci5: command tx timeout [ 93.776264] Bluetooth: hci7: command tx timeout [ 95.377225] Bluetooth: hci0: command tx timeout [ 95.632592] Bluetooth: hci1: command tx timeout [ 95.633066] Bluetooth: hci2: command tx timeout [ 95.633502] Bluetooth: hci3: command tx timeout [ 95.760312] Bluetooth: hci6: command tx timeout [ 95.761352] Bluetooth: hci5: command tx timeout [ 95.761419] Bluetooth: hci4: command tx timeout [ 95.825244] Bluetooth: hci7: command tx timeout [ 123.951047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.951730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.138000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.139229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.328102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.328864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.472439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.473062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.503529] loop1: detected capacity change from 0 to 264192 [ 124.604985] loop1: detected capacity change from 0 to 264192 [ 124.623203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.623849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.809232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.809880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.875475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.876070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.946037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.946751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.086103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.086762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.294421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.295023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.341050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.341692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.448816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.449487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.471920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.472775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.534769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.535442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.538867] loop5: detected capacity change from 0 to 247 [ 125.559808] ======================================================= [ 125.559808] WARNING: The mand mount option has been deprecated and [ 125.559808] and is ignored by this kernel. Remove the mand [ 125.559808] option from the mount to silence this warning. [ 125.559808] ======================================================= [ 125.577341] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 125.737498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.738501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.788479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.789111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:06:55 executing program 3: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="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", 0x1a0, 0xe000}, {&(0x7f0000011500)='f', 0x1, 0xe800}, {&(0x7f0000011a00)="4552ed", 0x3, 0x10000}], 0x0, &(0x7f0000012200)=ANY=[@ANYBLOB]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 21:06:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in6=@private1, 0x0, 0x32}, 0xa, @in, 0x0, 0x4, 0x0, 0x2}}, 0xe8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r1, &(0x7f00000007c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/ttm', 0x80, 0x94) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r5, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4e24, 0x8, 0x4e21, 0x2, 0xa, 0x20, 0x20, 0x8, 0x0, r5}, {0xffff, 0x1, 0x6438000000000000, 0x1, 0x1, 0x9, 0xffff, 0x3}, {0x1000, 0x6, 0x2}, 0x7ff, 0x6e6bbf, 0x1, 0x0, 0x3, 0x2}, {{@in=@broadcast, 0x4d5, 0x3c}, 0x2, @in=@multicast1, 0x34ff, 0x4, 0x1, 0x40, 0x2db, 0x6b, 0x199}}, 0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x700, 0x20, 0x8, 0x3, {{0x24, 0x4, 0x0, 0x4, 0x90, 0x64, 0x0, 0x0, 0x2f, 0x0, @empty, @private=0xa010102, {[@timestamp_prespec={0x44, 0x54, 0x2d, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x7f}, {@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@rand_addr=0x64010101, 0x3f}, {@remote, 0x7}, {@local, 0x4}, {@multicast1, 0x7}, {@broadcast, 0x9}, {@remote, 0x7}, {@remote}]}, @noop, @ssrr={0x89, 0x27, 0xb2, [@local, @empty, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010102, @rand_addr=0x101, @rand_addr=0x64010100, @loopback]}]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r8, 0x1, 0x0, 0x0, {0x19}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)={0x138, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20004010}, 0x48000) 21:06:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000480)="8b68f60e9b3942", 0xffffffffffffffb1}], 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r2) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x81, 0x0, 0x62, 0x0, 0x5, 0x4440, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000}, 0x60, 0x0, 0x9, 0x2, 0x100, 0x0, 0xff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x4, r2, 0xe) write$binfmt_elf64(r3, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x40, 0x20, 0x3, 0x9, 0x3, 0x3, 0x0, 0x26d, 0x40, 0x241, 0x8ebb, 0x0, 0x38, 0x1, 0xeb, 0x2}, [{0x1, 0x4e12889d, 0x1f, 0xffffffffffffff36, 0x0, 0x101, 0x23fb, 0x1f0}], '\f', ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x679) r4 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) pwritev2(r4, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000140)={0x984, 0x401, 0xee2, 0x3, 0x20d3, 0x2db6}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x81, 0x0, 0x64, 0x0, 0x5, 0x4440, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x6}, 0x60, 0x0, 0x800009, 0x2, 0x100, 0x0, 0xff, 0x0, 0x3, 0x0, 0x8}, r5, 0x4, r3, 0xe) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000000)) 21:06:55 executing program 2: r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() pidfd_open(r2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x12020) clone3(&(0x7f0000000580)={0x2e10a0400, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x20}, &(0x7f0000000140)=""/230, 0xe6, &(0x7f0000000240)=""/19, &(0x7f0000000540)=[r2, r0, r3], 0x3}, 0x58) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x5) 21:06:55 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000140)) ppoll(&(0x7f0000000540)=[{}, {0xffffffffffffffff, 0x4000}], 0x2, 0x0, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x81, 0x81, 0x6, 0x0, 0xfffffffffffeffff, 0x42045, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xd461, 0x1, @perf_bp={&(0x7f0000000080), 0x6}, 0x4, 0x7e, 0x11cb, 0x6, 0xc0e, 0x6, 0x2, 0x0, 0x9, 0x0, 0xffffffffffffff7e}, 0x0, 0xd, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 21:06:55 executing program 7: r0 = epoll_create(0x3) r1 = epoll_create(0x8001) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000640)) epoll_create(0x6) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req3={0x1ff, 0xffff7ffd, 0x0, 0x1, 0xfe3, 0x6, 0x4000000}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000000c0), &(0x7f0000000100)={'U-', 0x1f}, 0x16, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r4, 0x1, 0x0, 0x0, {0x19}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) sendmsg(r2, &(0x7f00000007c0)={&(0x7f0000000000)=@ll={0x11, 0x15, r6, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x80, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x11}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0xfffffffffffffe7b, &(0x7f0000002000)={&(0x7f0000000280)={0x18, r7, 0x1, 0x0, 0x25dfdbff, {0x19}, [@HEADER={0x4}]}, 0x18}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r9, 0x1, 0x40, 0x1, 0x3, {{0x7, 0x4, 0x0, 0x19, 0x1c, 0x67, 0x0, 0x1, 0x29, 0x0, @local, @local, {[@ssrr={0x89, 0x7, 0xd2, [@loopback]}]}}}}}) 21:06:55 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97", 0x21) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r1, 0x0, 0x1) 21:06:55 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x191880, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x3, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'veth0_to_bond\x00', {0x5}, 0x3}) r0 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000cea000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x34, 0x0, &(0x7f00000023c0)) r2 = socket$packet(0x11, 0x2, 0x300) r3 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r3, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r2, &(0x7f00000007c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) close_range(0xffffffffffffffff, r4, 0x0) r5 = shmget(0x1, 0x1000, 0x200, &(0x7f0000cea000/0x1000)=nil) shmat(r5, &(0x7f0000995000/0x3000)=nil, 0x7000) [ 137.600864] audit: type=1400 audit(1756674415.693:8): avc: denied { open } for pid=3919 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 137.601211] audit: type=1400 audit(1756674415.693:9): avc: denied { kernel } for pid=3919 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 137.615788] Zero length message leads to an empty skb [ 137.638902] perf: interrupt took too long (3156 > 3138), lowering kernel.perf_event_max_sample_rate to 63000 [ 137.638932] perf: interrupt took too long (3156 > 3138), lowering kernel.perf_event_max_sample_rate to 63000 [ 137.659320] loop3: detected capacity change from 0 to 256 21:06:55 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fgetxattr(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000fecda79bccd3515852b03ab8299746447a5fb78887ed191f18ba10ae5b0003cb622dd7a946a5100b19c5578cfe8659bd2f0b6a3c3e733c2e71a10bfed4ac478849a6370c715879a5eb7267f6e7e2390f0fa290d97d12eaa48dc700"/105], 0x0, 0x0) [ 137.726954] audit: type=1400 audit(1756674415.815:10): avc: denied { write } for pid=3919 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 21:06:55 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x40044, 0x0, 0x80000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x81, 0x0, 0x62, 0x0, 0x5, 0x4440, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000}, 0x60, 0x0, 0x9, 0x2, 0x100, 0x0, 0xff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x4, r1, 0xe) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0x37, 0x2f, 0x3, 0x1, 0x5, 0x6, 0x4, 0xbc}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000180)) 21:06:55 executing program 3: r0 = socket$inet(0x2, 0x80003, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x5c8a, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f9ef228853802bdb858bff046848ec6b1fd74b8ca5173303669c19f29e0c1c37a1ecb808", 0x24, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) recvfrom(r0, 0x0, 0x0, 0x2100, 0x0, 0x0) 21:06:55 executing program 7: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x606900) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) memfd_secret(0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0000004}) [ 137.891722] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 137.893371] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 137.894472] CPU: 1 UID: 0 PID: 3952 Comm: syz-executor.3 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 137.900286] Tainted: [W]=WARN [ 137.902448] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 137.903647] RIP: 0010:perf_tp_event+0x175/0xe70 [ 137.904339] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 137.906927] RSP: 0018:ffff8880176ff800 EFLAGS: 00010212 [ 137.907689] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 137.908711] RDX: ffff888015d60000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 137.909745] RBP: ffff8880176ffa70 R08: ffff88806cf31340 R09: ffffe8ffffd15aa0 [ 137.910769] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 137.911780] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 137.912807] FS: 0000555565476400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 137.913964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.914811] CR2: 0000555565477c18 CR3: 000000001f769000 CR4: 0000000000350ef0 [ 137.915828] Call Trace: [ 137.916209] [ 137.916553] ? arch_scale_cpu_capacity+0x17/0xa0 [ 137.917256] ? __pfx_perf_tp_event+0x10/0x10 [ 137.917924] ? __asan_memset+0x24/0x50 [ 137.918514] ? perf_trace_lock+0xb5/0x5d0 [ 137.919127] ? kvm_sched_clock_read+0x16/0x30 [ 137.919787] ? sched_clock+0x37/0x60 [ 137.920349] ? sched_clock_cpu+0x6c/0x4e0 [ 137.920967] ? lock_is_held_type+0x9e/0x120 [ 137.921616] ? perf_trace_run_bpf_submit+0xef/0x180 [ 137.922360] perf_trace_run_bpf_submit+0xef/0x180 [ 137.923075] perf_trace_lock+0x337/0x5d0 [ 137.923683] ? __pfx_perf_trace_lock+0x10/0x10 [ 137.924361] ? lock_acquire+0x15e/0x2f0 [ 137.924952] ? futex_ref_get+0x48/0x300 [ 137.925549] ? futex_ref_get+0x114/0x300 [ 137.926138] ? futex_hash+0x15c/0x390 [ 137.926701] lock_release+0x1ab/0x290 [ 137.927279] ? futex_hash+0x15c/0x390 [ 137.927850] futex_ref_get+0x119/0x300 [ 137.928415] ? futex_hash+0x15c/0x390 [ 137.928980] futex_hash+0x70/0x390 [ 137.929518] futex_wake+0x143/0x540 [ 137.930066] ? put_pid+0x1f/0x30 [ 137.930564] ? kernel_clone+0x204/0x7f0 [ 137.931160] ? __pfx_futex_wake+0x10/0x10 [ 137.931779] ? __pfx_kernel_clone+0x10/0x10 [ 137.932414] ? perf_trace_lock+0xb5/0x5d0 [ 137.933032] do_futex+0x26d/0x370 [ 137.933557] ? __pfx_do_futex+0x10/0x10 [ 137.934160] ? __pfx___do_sys_clone+0x10/0x10 [ 137.934821] ? find_held_lock+0x2b/0x80 [ 137.935413] __x64_sys_futex+0x1c9/0x4d0 [ 137.936009] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 137.936861] ? __pfx___x64_sys_futex+0x10/0x10 [ 137.937543] ? xfd_validate_state+0x55/0x180 [ 137.938207] do_syscall_64+0xbf/0x360 [ 137.938766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.939507] RIP: 0033:0x7fcbaac38b19 [ 137.940049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.942634] RSP: 002b:00007fff70632188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.943719] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcbaac38b19 [ 137.944731] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcbaad4bf68 [ 137.945763] RBP: 00007fcbaad4bf60 R08: 00007fcba81ae700 R09: 0000000000000000 [ 137.946783] R10: 00007fcba81ae700 R11: 0000000000000246 R12: 00007fcbaad50060 [ 137.947795] R13: 00007fff70632290 R14: 00007fcbaad4bf60 R15: 0000000000021a3c [ 137.948843] [ 137.949187] Modules linked in: [ 137.949718] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 137.951311] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 137.952390] CPU: 1 UID: 0 PID: 3952 Comm: syz-executor.3 Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 137.954102] Tainted: [D]=DIE, [W]=WARN [ 137.954664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 137.955838] RIP: 0010:perf_tp_event+0x175/0xe70 [ 137.956526] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 137.959112] RSP: 0018:ffff88806cf08a80 EFLAGS: 00010012 [ 137.959876] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 137.960893] RDX: ffff888015d60000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 137.961930] RBP: ffff88806cf08cf0 R08: ffff88806cf31490 R09: ffffe8ffffd15aa0 [ 137.962959] R10: 0000000000000000 R11: ffff8880160dd098 R12: dffffc0000000000 [ 137.963993] R13: 0000000000000024 R14: ffff88806cf31490 R15: dffffc0000000000 [ 137.965025] FS: 0000555565476400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 137.966184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.967022] CR2: 0000555565477c18 CR3: 000000001f769000 CR4: 0000000000350ef0 [ 137.968050] Call Trace: [ 137.968434] [ 137.968769] ? __pfx_perf_tp_event+0x10/0x10 [ 137.969428] ? stack_depot_save_flags+0x2c/0xa20 [ 137.970132] ? kasan_save_stack+0x34/0x50 [ 137.970749] ? kasan_save_stack+0x24/0x50 [ 137.971357] ? kasan_save_track+0x14/0x30 [ 137.971963] ? __kasan_save_free_info+0x3a/0x60 [ 137.972645] ? __kasan_slab_free+0x3f/0x50 [ 137.973271] ? kmem_cache_free+0x2a1/0x540 [ 137.973891] ? rcu_core+0x7c8/0x1800 [ 137.974478] ? handle_softirqs+0x1b1/0x770 [ 137.975126] ? __irq_exit_rcu+0xc4/0x100 [ 137.975740] ? irq_exit_rcu+0x9/0x20 [ 137.976287] ? sysvec_apic_timer_interrupt+0x70/0x80 [ 137.977041] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 137.977840] ? lock_acquire+0x47/0x2f0 [ 137.978417] ? unwind_next_frame+0xcd/0x2540 [ 137.979073] ? arch_stack_walk+0x86/0xf0 [ 137.979667] ? stack_trace_save+0x8e/0xc0 [ 137.980286] ? kasan_save_stack+0x24/0x50 [ 137.980890] ? kasan_save_track+0x14/0x30 [ 137.981527] ? __kasan_slab_alloc+0x59/0x70 [ 137.982161] ? kmem_cache_alloc_noprof+0x205/0x690 [ 137.982880] ? alloc_pid+0xd5/0x1100 [ 137.983429] ? kvm_sched_clock_read+0x16/0x30 [ 137.984092] ? sched_clock+0x37/0x60 [ 137.984648] ? sched_clock_cpu+0x6c/0x4e0 [ 137.985259] ? perf_trace_run_bpf_submit+0xef/0x180 [ 137.986002] perf_trace_run_bpf_submit+0xef/0x180 [ 137.986732] perf_trace_lock+0x337/0x5d0 [ 137.987339] ? place_entity+0x300/0x410 [ 137.987921] ? kvm_sched_clock_read+0x16/0x30 [ 137.988589] ? __pfx_perf_trace_lock+0x10/0x10 [ 137.989266] ? check_preempt_wakeup_fair+0x6e/0x950 [ 137.990014] ? sched_ttwu_pending+0x2e0/0x4a0 [ 137.990685] lock_release+0x1ab/0x290 [ 137.991247] ? ttwu_do_activate+0x1a4/0x8a0 [ 137.991895] _raw_spin_unlock+0x16/0x40 [ 137.992484] sched_ttwu_pending+0x2e0/0x4a0 [ 137.993119] ? __pfx_try_to_wake_up+0x10/0x10 [ 137.993800] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 137.994514] ? flush_tlb_func+0x3eb/0x560 [ 137.995120] __flush_smp_call_function_queue+0x434/0x740 [ 137.995915] __sysvec_call_function_single+0x6d/0x370 [ 137.996686] sysvec_call_function_single+0xa1/0xc0 [ 137.996717] [ 137.996724] [ 137.996734] asm_sysvec_call_function_single+0x1a/0x20 [ 137.996757] RIP: 0010:oops_exit+0x0/0x50 [ 137.996785] Code: f1 39 00 be ff ff ff ff 48 c7 c7 50 ac 43 86 e8 c6 0f f9 ff 5b e9 20 f1 39 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 53 e8 06 f1 39 00 8b 1d c0 ed 4e 06 31 ff 89 de e8 27 [ 137.996806] RSP: 0018:ffff8880176ff690 EFLAGS: 00000202 [ 137.996824] RAX: 0000000000000000 RBX: 0000000000000293 RCX: ffffffff8139f06f [ 137.996838] RDX: ffff888015d60000 RSI: ffffffff812a3dca RDI: 0000000000000007 [ 137.996852] RBP: 000000000000000b R08: 0000000000000001 R09: fffffbfff0f11c90 [ 137.996866] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880176ff758 [ 137.996879] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 137.996901] ? add_taint+0x5f/0xd0 [ 137.996928] ? oops_end+0x4a/0xe0 [ 137.996965] oops_end+0x65/0xe0 [ 137.996996] exc_general_protection+0x1a2/0x330 [ 137.997031] asm_exc_general_protection+0x26/0x30 [ 137.997052] RIP: 0010:perf_tp_event+0x175/0xe70 [ 137.997080] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 137.997100] RSP: 0018:ffff8880176ff800 EFLAGS: 00010212 [ 137.997117] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 137.997131] RDX: ffff888015d60000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 137.997145] RBP: ffff8880176ffa70 R08: ffff88806cf31340 R09: ffffe8ffffd15aa0 [ 137.997159] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 137.997173] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 137.997196] ? perf_tp_event+0x167/0xe70 [ 137.997233] ? arch_scale_cpu_capacity+0x17/0xa0 [ 137.997267] ? __pfx_perf_tp_event+0x10/0x10 [ 137.997294] ? __asan_memset+0x24/0x50 [ 137.997339] ? perf_trace_lock+0xb5/0x5d0 [ 137.997368] ? kvm_sched_clock_read+0x16/0x30 [ 137.997395] ? sched_clock+0x37/0x60 [ 137.997423] ? sched_clock_cpu+0x6c/0x4e0 [ 137.997460] ? lock_is_held_type+0x9e/0x120 [ 137.997494] ? perf_trace_run_bpf_submit+0xef/0x180 [ 137.997523] perf_trace_run_bpf_submit+0xef/0x180 [ 137.997558] perf_trace_lock+0x337/0x5d0 [ 137.997589] ? __pfx_perf_trace_lock+0x10/0x10 [ 137.997619] ? lock_acquire+0x15e/0x2f0 [ 137.997642] ? futex_ref_get+0x48/0x300 [ 137.997663] ? futex_ref_get+0x114/0x300 [ 137.997681] ? futex_hash+0x15c/0x390 [ 137.997702] lock_release+0x1ab/0x290 [ 137.997728] ? futex_hash+0x15c/0x390 [ 137.997749] futex_ref_get+0x119/0x300 [ 137.997770] ? futex_hash+0x15c/0x390 [ 137.997789] futex_hash+0x70/0x390 [ 137.997813] futex_wake+0x143/0x540 [ 137.997841] ? put_pid+0x1f/0x30 [ 137.997860] ? kernel_clone+0x204/0x7f0 [ 137.997881] ? __pfx_futex_wake+0x10/0x10 [ 137.997910] ? __pfx_kernel_clone+0x10/0x10 [ 137.997936] ? perf_trace_lock+0xb5/0x5d0 [ 137.997966] do_futex+0x26d/0x370 [ 137.997992] ? __pfx_do_futex+0x10/0x10 [ 137.998017] ? __pfx___do_sys_clone+0x10/0x10 [ 137.998038] ? find_held_lock+0x2b/0x80 [ 137.998074] __x64_sys_futex+0x1c9/0x4d0 [ 137.998100] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 137.998137] ? __pfx___x64_sys_futex+0x10/0x10 [ 137.998168] ? xfd_validate_state+0x55/0x180 [ 137.998220] do_syscall_64+0xbf/0x360 [ 137.998245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.998270] RIP: 0033:0x7fcbaac38b19 [ 137.998290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.998314] RSP: 002b:00007fff70632188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.998342] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcbaac38b19 [ 137.998361] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcbaad4bf68 [ 137.998377] RBP: 00007fcbaad4bf60 R08: 00007fcba81ae700 R09: 0000000000000000 [ 137.998396] R10: 00007fcba81ae700 R11: 0000000000000246 R12: 00007fcbaad50060 [ 137.998414] R13: 00007fff70632290 R14: 00007fcbaad4bf60 R15: 0000000000021a3c [ 137.998451] [ 137.998459] Modules linked in: [ 137.998478] ---[ end trace 0000000000000000 ]--- [ 137.998491] RIP: 0010:perf_tp_event+0x175/0xe70 [ 137.998529] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 137.998556] RSP: 0018:ffff8880176ff800 EFLAGS: 00010212 [ 137.998579] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 137.998598] RDX: ffff888015d60000 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 137.998617] RBP: ffff8880176ffa70 R08: ffff88806cf31340 R09: ffffe8ffffd15aa0 [ 137.998636] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 137.998654] R13: 000000000000002c R14: ffff88806cf31340 R15: dffffc0000000000 [ 137.998679] FS: 0000555565476400(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 137.998704] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.998723] CR2: 0000555565477c18 CR3: 000000001f769000 CR4: 0000000000350ef0 [ 137.998744] Kernel panic - not syncing: Fatal exception in interrupt [ 137.998978] Kernel Offset: disabled [ 138.068796] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 21:06:56 Registers: info registers vcpu 0 RAX=0000000000000002 RBX=0000000000000056 RCX=ffffffff824fb283 RDX=ffff8880464a8000 RSI=ffffffff824fb28d RDI=0000000000000007 RBP=0000000000000056 RSP=ffff8880478a75b8 R8 =ffffffff84b24560 R9 =fffffbfff0c8758a R10=0000000000000056 R11=0000000000000000 R12=ffffffff859032b4 R13=00000000ffffffff R14=ffffffff85902eac R15=ffff8880478a7628 RIP=ffffffff8173e788 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4696dec700 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000208ba000 CR3=000000000e70e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff8880176ff198 R8 =0000000000000000 R9 =ffffed100188e046 R10=0000000000000000 R11=3a6465746e696154 R12=000000000000000d R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555565476400 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555565477c18 CR3=000000001f769000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fcbaad1f7c000007fcbaad1f7c8 XMM02=00007fcbaad1f7e000007fcbaad1f7c0 XMM03=00007fcbaad1f7c800007fcbaad1f7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000