last executing test programs: 6m56.956671827s ago: executing program 0 (id=831): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) write$auto(0x3, 0x0, 0xfdef) (async, rerun: 64) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) socketpair$auto(0x1, 0x2, 0xfffffff7, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x2a) (async, rerun: 32) socket(0x2, 0x80802, 0x0) (async, rerun: 32) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0x9, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e20, @multicast2}, 0x1d) 6m55.782177313s ago: executing program 0 (id=835): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000004c0)="8b8d696eeb7f9d5e0072fd85ac11d6a13fdba07f04661978312926fbf734970a462d98be5a403d62c64bd3d3e7042137f9cceefab21802d75fdabfb6263a811b8d9ca2431ded359dcee6939691e56ad9a44f48b96a443ab4c2505dd7b6f70a8cf2a8a7d127cf27c53a97c406dacca7aa6843e5f1ba85a10b9b842f2a126109a2dc132c66c94f693b03b4") mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, r0, 0x8000) r1 = open(0x0, 0xeee00, 0x31) write$auto_msr_fops_msr(r1, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r1, 0x40044145, &(0x7f0000000480)=0x7d8) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) fsopen$auto(0x0, 0x3) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) write$auto(r3, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x145) socket(0xa, 0x3, 0x3b) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0xe0002, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02002dbd7000fddb090000000000180023800c00220001f7fb000000000a08005100", @ANYRES32=r4, @ANYBLOB="050060000800000005001d00000000000f000a00268cf468dc44ab87694c25000500d5008000000004004600"], 0x58}}, 0x8060055) sendmsg$auto_NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x328, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_HE_CAPABILITY={0x32, 0x10d, "0883725f2d68a44139689c9031f105efc98482595e7451f1c33afe1b39d22e0f5b368cea5d48bf3a2d455d948aab"}, @NL80211_ATTR_SCAN_FREQUENCIES={0x224, 0x2c, 0x0, 0x1, [@nested={0x218, 0x4, 0x0, 0x1, [@nested={0x4, 0x7c}, @generic="41a554a80de629b82e35633223fe93e75439ee6b34b6025032c86ab9104c0a2de49a1df44269e5afd5379b3c167d3bd276d54839671340555d43198848f7c26fe632f5863c322c0e6d7d0a257886f9a5c716dc737112784b0df6dd54c0a153f56b6a7f8da3363ab1011908c76f31d4039a8782e3c228765761baea82e5259536ca5f8f99904b69fa8cbe31cd06f0b5aa20c074bccd6d29bc5db71121e9fd5db3260db1db49e5f26d650284558b2fc700bad766a959968810d1e618a62ba83f3e1d27618c99e38a02aa9448d2e177d18c0df1", @nested={0x4, 0xa}, @typed={0xb2, 0xeb, 0x0, 0x0, @binary="1a2b873bf5075b592586fec5f28eb92304f2120b93b64c2741c48b93d0ad3f2a9c7fc2b95d5706a4d1cacc1d6983545830d9c46cde067ad2b73b50f0bf7f0c5eab47b2c8972fa1aec382b666b4232f14ad9f6566885993728541b94c9d3c8ac6d2239c822b8e15173f3150189c9e01b2530c4aaff0ec3a2f8059e34d6ba69e00017317d96e2cfa4a7e8cdf5314e63bbc3f8516f636217d396235f9c0688a0286844990410cacc591c9d4db7e7fd4"}, @nested={0x4, 0x105}, @typed={0xc, 0xc, 0x0, 0x0, @u64=0x213d}, @generic="0102941bf1dfba7b9395f667309a4208bdeded65effd80b26b84e086d4f8dd8af9844e15a726533d4a430e7c98b816f27fa41cbca7155ebbeb8083ff4ab0b8216c208ced6e9df24927768fddca37d756af55cd37f5074948fef2fd16e46bd6e75f4a8e490b939b4f4f76c7f7a64af313c38718d9a8e1"]}, @typed={0x8, 0x9b, 0x0, 0x0, @fd=r3}]}, @NL80211_ATTR_IE_PROBE_RESP={0xb7, 0x7f, "dfe4762078e016f16aea576abee1f11bd4e5fdcfba6ce83f374254cc3716852f4943d840731deb8d9a4fbcd8676bbb8464e39b10946773ce4839c3bc73587c9c9432089852819b9c0c00bde745a00d9288037b93f88650100daa8d41730b74a53addac6af9ef4e035db07927052603822447cc86327115bd9c2d769e43dd7165a8d6062fa373c27ca409ed58211b1d272e5324b8c57e9711fed47f6c4505c5e37bae2f6ed61be320aa74006c33a9d9ffefdc57"}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}]}, 0x328}, 0x1, 0x0, 0x0, 0x44485}, 0x240c0800) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) keyctl$auto(0x4, 0xfffffffffffffff8, 0xffffffffffffffff, 0xffffffffffffffff, 0x24e3) sendmmsg$auto(0x3, 0x0, 0x200, 0x7000000) 6m54.580528909s ago: executing program 0 (id=839): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r1 = socket(0x2b, 0x1, 0x1) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42b"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) socket(0x2b, 0x1, 0x1) recvmmsg$auto(r2, &(0x7f0000000580)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x80000001}, 0x1}, 0x3, 0x6, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x109402, 0x0) read$auto(0x3, 0x0, 0x7d) mmap$auto(0x2, 0x400009, 0x40000000080000df, 0x9b72, 0x2, 0x2) readv$auto(r0, 0x0, 0xff) 6m53.120719318s ago: executing program 0 (id=841): prctl$auto(0x23, 0x1, 0x2008, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x5522, 0xf15) ioctl$auto(r0, 0x5523, r0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/032/001\x00', 0x28c243, 0x0) sendmsg$auto_NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x24008880) read$auto_aoe_fops_aoechr(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0x4, 0x1) setsockopt$auto(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r1, 0x1002, 0x0, 0x0, 0x0, 0x2) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRESDEC=r0, @ANYBLOB="000336bd7000fedbdf250200000005002a0001000000080017"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x125300, 0x0) r2 = socket(0x2, 0x801, 0x106) getsockopt$auto(r2, 0x11c, 0x3, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/wakeup/wakeup8/expire_count\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000003c0)=""/102, 0x66) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 6m52.026111644s ago: executing program 0 (id=845): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x202, 0x3, 0x0) sendmmsg$auto(r0, &(0x7f00000003c0)={{&(0x7f0000000180)="f2f367d9c30b713e32ce61ae18ae1f86fda98f86ebc25ccb50d4d6ff52c6a43125a88efbabff21edd6d67c19939328009f96f3daa847a1475644f4c6a2fd87fe1084efc2467536a0d7171916162e3f801f8e3559672f3a775c65b2dc18933b6f287d31c5e33c1da561b0f7fe69ee113b62c8e522654cba799cb28ff4d4cc4b6565a61570e4eabda18b56e62b59725d9c9a99c9e3f069c97f365fc757d54bd52cc00b8de26f536ef7170681a5e11c292d", 0x5, &(0x7f0000000300)={&(0x7f0000000240)="86a985de45bd9f2074c0175cb75fb92299577eaf7d745b293ea52813b8fda8a1c497e68da4d7d44dfab5a575924bef5bba23e5f6fb1a31d4077c9cc59fec7bac3a0b33222a9cfe3357d86d205d45dd163d6a48a0fc7cc61a6834b10be711977e59c4984efef01d44d83ac2dc0f254dc1fd1576943dacbee5ff64842da9fad2c46b5e2570d7be44c7f34752f7328274d8880a6dc86b5eaa7c89d8b5a625a5dd6392f663c484d7226392850af816887d15ca86edd6604215b20d8c3f", 0xb5d}, 0x4, &(0x7f0000000340)="4add99f35b06b079ec94c373912d71197662899f6fe069cec4696c2e6b2462b70f90f8f9fbbaab959a70f79fa679cbe4b6e23d5294f7a5be28545ac8e81b56d950c7c26f19e1cc86", 0x6, 0x80}, 0xc}, 0x10, 0x8) ioperm$auto(0x7, 0x2, 0x1) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, r0, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x7, 0x800000ce, 0x0, 0x4) write$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x402000c, 0xdf, 0x91, 0xffffffffffffffff, 0x8000) openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/tracing_thresh\x00', 0x0, 0x0) getsockopt$auto_SO_RESERVE_MEM(0xffffffffffffffff, 0x8, 0x49, &(0x7f0000000140)='/sys/kernel/debug/fail_make_request/times\x00', &(0x7f0000000180)=0xa5e) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x1a9901, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000480), 0x662dc1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/pcmC1D0p\x00', 0x800, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_TSTAMP(r1, 0x40044102, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r3 = socket(0x10, 0x2, 0x6) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/veth0_to_bridge/mtu\x00', 0x202, 0x0) sendfile$auto(r4, r4, 0x0, 0x5) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01007c44bf46fddbdf251100fc00"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) arch_prctl$auto(0x5, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/lru_gen_full\x00', 0x2800, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x8) 6m50.73054145s ago: executing program 0 (id=849): r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) write$auto(r1, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0xffffffff) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) socket(0x15, 0x5, 0x0) iopl$auto(0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r3, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x2) sendfile$auto(r2, r2, 0x0, 0x2) socket(0xa, 0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x2, 0x88) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r4) sendmsg$auto_GTP_CMD_GETPDP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, r5, 0x401, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x38f}, @GTPA_LINK={0x8, 0x1, 0x7}, @GTPA_FAMILY={0x5, 0xd, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28008000}, 0x240018d0) mmap$auto(0x0, 0x400008, 0xfffffffffffffff9, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r6 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) r7 = socket(0x2b, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8905, &(0x7f00000002c0)={'bond0\x00'}) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) 6m35.018373817s ago: executing program 32 (id=849): r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) write$auto(r1, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0xffffffff) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) socket(0x15, 0x5, 0x0) iopl$auto(0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r3, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x2) sendfile$auto(r2, r2, 0x0, 0x2) socket(0xa, 0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x2, 0x88) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r4) sendmsg$auto_GTP_CMD_GETPDP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, r5, 0x401, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x38f}, @GTPA_LINK={0x8, 0x1, 0x7}, @GTPA_FAMILY={0x5, 0xd, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28008000}, 0x240018d0) mmap$auto(0x0, 0x400008, 0xfffffffffffffff9, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r6 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) r7 = socket(0x2b, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8905, &(0x7f00000002c0)={'bond0\x00'}) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) 1m16.751316145s ago: executing program 3 (id=2308): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(r0, &(0x7f0000000080)=@ax25={0x3, @null, 0x5}, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x5, 0x0) msgctl$auto(0x2, 0xc, &(0x7f0000000080)={{0x2, 0xf3, 0x2, 0x6, 0x9, 0x2, 0x6}, 0x0, 0x0, 0x7, 0x80000001, 0xce0a, 0xf3, 0x80, 0x412f, 0x1, 0x5}) socket(0xa, 0x2, 0x73) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000080), 0x6b) (async) bind$auto(0x3, &(0x7f0000000080), 0x6b) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x38, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x6}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munmap$auto(0x20001000, 0x7) semctl$auto_GETALL(0x7, 0xea1c, 0xd, 0x1) (async) r2 = semctl$auto_GETALL(0x7, 0xea1c, 0xd, 0x1) prctl$auto(0x0, 0x91, r2, 0x985, 0x5) (async) prctl$auto(0x0, 0x91, r2, 0x985, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x26, 0x80805, 0x0) socket(0x28, 0x1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00') 1m15.588134087s ago: executing program 3 (id=2309): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0xffffff00, 0x7, 0xfffffffffffffff6, 0x9, 0x9, 0x3, 0x4, 0x2000000001, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0xc0, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x4, 0x2000000, 0x2, 0x0, 0x2000, 0x0, 0xd, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xbffffffffffbfffd, 0xffffffffffffffff, 0x1, 0x5, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x400100000005b8, 0x14ee, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88c, 0x3, 0xfffffdfffffffffe, 0x6, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x4, 0x5, 0x100000000003, 0x0, 0x7]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) mlock$auto(0xfbe8, 0x4) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x7f7e, 0x400008, 0x80000000df, 0x13, 0x0, 0x8000) r0 = openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) mmap$auto(0x8, 0x4, 0x3, 0x17, r0, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x40000000005, 0x7f) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f00000004c0)={0x0, 0xab8}, 0x4a) 1m14.359166201s ago: executing program 3 (id=2318): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000100), 0xffffffffffffffff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigaction$auto(0x1, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/queues/tx-0/xps_cpus\x00', 0x88840, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000300)="0ff86828646d7fc7d05431ed238857b415cf89d52339381281358c49dbefb7931b1fcf49c66a712a0bae6b5217dc7a456fed6271088cabbf4812cfebd0c104ed6822536e2344a18e2b7e9653ea65cfb7469f02f8d088e283ee0f1cd8b11cf53ad7d10f8cb209a6a168da774bd48a7618792f45757778621e29d760f742cbc7c0be411b79002f1c73361f3a", 0x10, &(0x7f0000000280)={0x0, 0x1}, 0x0, 0x0, 0x40000000000002, 0xb}, 0xff7}, 0x5, 0x7f) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8000) write$auto_msr_fops_msr(0xffffffffffffffff, &(0x7f00000003c0)="5e0d88f44db105019056641b5c8aba4d092e309ed4b94e0d3be0391cff3dddb6efd9ea5cd14926ff30e3ad766fe331355cad2338608cdc454184217635709fd6a82e7d43b8c740e86f4934461956f6f6839fac319a3962a23c40974fa1c10965724c186d6bf1c74f9ee12100d6b04d71599a8dd0d0352a1c40c15212667dc53e315df485a963ad9bc1a2b71145ffae67722c90f835e7a53e0caca411acfd92eb396d", 0xa2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) lstat$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={0x7, 0x9, 0x7fffffffffffffff, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc0f, 0x5, 0x3, 0x8001, 0x507, 0x7, 0x3, 0x100000000, 0x7, 0x8000}) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) r4 = getegid() msgctl$auto_IPC_RMID(0xf, 0x0, &(0x7f0000000100)={{0x9, 0xffffffffffffffff, r4, 0x3, 0x8, 0x5, 0x8}, &(0x7f0000000080)=0xf9, &(0x7f00000000c0)=0x9, 0xe, 0x449, 0x7, 0x1, 0x5, 0x224f, 0x40}) keyctl$auto(0x9, 0xffffeffffffffffe, r3, 0xee01, 0x4) keyctl$auto(0x6, 0xfffffbfffffffffe, 0x2, 0x32, 0xfff) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) execveat$auto(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) 1m11.16728814s ago: executing program 3 (id=2331): openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x880) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r0 = prctl$auto(0x29, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x200007, 0x19) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan0\x00'}) sendmsg$auto_NETDEV_CMD_BIND_RX(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8479ce7c9f249e34083e3486091b556c27288b2b4ab4808289cc70b95b91ce080fe054429953e328ec3cf2016b0f02b62a26edc52a4ef9b1f849dc99191678441211f60282e94213f16c0de9e95fbd37fe9341845d50cd762d1ed7f746ef42ecc4341ab9d1fe6cbfb7d89281d53af95a4dd3911068df5da14e2efaaa7f4b9498196ea9fffa7003326fc0013bd9c93af231e6174a52073ea4992ff8694420c6d2cfdc57c4386b63fb447055e2afcce7965c5a61a25cb90b34f06b0872af0d42631e7e214cc025710d9c", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8804) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram12/discard_alignment\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/150, 0x96) r2 = socket(0x2, 0xa, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f00000001c0)="bc941b683e23c7820077a10d9d90575d5b32efb24b19612053c4217375e2f6ef62367d61204eecb7d03c847c1655f2c58bb56129ff5111b59073fca414202d61f3243d2b578e99a90ce0febd2577bc66f0c08b2a0ff764f704eaaa96ee1b953dc5996fe74a723bbd277716881d5889c7fd95f7d9a85f921222f0c559b46928fcfa31dc3a30abed6df62bbbddd9f608723dd4b2f47d", 0x5, &(0x7f0000000280)={&(0x7f0000001040)="eca066c0491b8413b05674b035dc2b7cc4d228f054b1d1d5de44bd17dfbb10d5b66fb786cf5590b85317d1c801e3fd094231fd7192b051b17e177a56a92354c60733de06343c3f2d2c1dcfedf99796e0cce240f4f3273e2626467d4ca4158aa11497d2a5d284249beb8d90f28541d67ede3315eae8af0bb977fecfc0c50f63fa846a14be0f82dcdb764253e8c6a54f4a3294bf569920f6e6b74584195fd7db6dcd4235daa4d14008e40c6384cff2f2777349ee42864d4867385ff1fd01b1c79e49964c11de72d2e28bfe08e9082f3738de6a8b8f7c589b284fbe2092d7fa9254bfbabc63cec403cccb252595df3ef71c220cf21179f30f10be6f731965f354b9aa9018453250246172ca863a194caefbba818f1e6a61a944d73d6b3aa6243d2c5e502b61062a2bc29f15685e4ebbc518a4ef16d89ec814fb809a3a70cb993aa9728a6bf99a9b46e48b523e1e85ba76645aac6bad6fdf24eafe2f6f76c17ce7906cc1216d63d4798acf991aefbce29bf4bf6fdc8717f277c06adbfa842f2b18cb641de6312a40b54c717986d674f5042173de304c82a93a8375b8ef61809bfb7fcccb6a369976c3bcb8a5f2479c3a2aa6f227befe112483d962f4742f391e8c2f090805825eee8b6b2ebb5f689f0f4e58f6a7f17e0191bdeb43ab52cd0b7ca41a2ececdc20ddd78e915068f5d165411e747844571c4f7c354dd80b599918353184a8300164ea54b9eaa677b54182319cc761081d9d15c601bc66acf71e5af3bca90f746288e51ab1c7f9465e3502e4295b5254dc058dfd28a54b2375923a7702e40a0e948b5d8f8bfe8ed91652ba87230b1e4c83fab8f19e2cfb13b9aab42006304c16db4c9f4f2d54172dfa452edf9ab6295b2751f34a957ce8cb1faaaccb7526476f5abdda7aacbd83ba3fc682d345bfc618e78e27bf23364eccf2ff9c9bb0b5452e56489c2d667a045a6e8f8167bc8610dbf5e5dd89ce90235f1975d27dc3e3dc4cd908236bf6e66f2e7f9710f9c6a631ef3ee326aa8036afd7b2577020ad3c30a660101de6c332e979418725ac6d7afed2467e304c3302f991fee35f2c2de2a7c5fea420500a7614005848c84fbc76138c68663960d83fd9b657d05e0c26362c222604ba33feb1ace54d8a01de819351c87c280297afadba0263ddde283014f72891b855cab9db0794717981bc4923a32b2633cc4e9b62f5c07f75880611dc1ca2afa90cff08cad55ec54e7593ebae494e0d7157239c912adac86c9901a58fc8df6b89f4af6486d37ea00b56fe55c417a4e9473f1a22b6613ab6f95a2d7a7e5675b291428607e86a20b55e9702e15b8c0005543adadd59710bc6765dfa6e789837b2232d7636c831d25ae79f81c9bad194ce483faf72a496177172589da018849501d2fe7b7197cf0d4f01a7b237eb2f356e8aa3c62e2ec1ef914b36eda93a21a23bedda6c17cd521e1bc295f98b406e97a700ec6df629cd56f3ea319b405d067bb2575ef023c3e5d03048d5439b80a544124f1088f83976c9b5f54443816e703df94a0f9138f016afe3d91efc9ca8695e34e1348b1891d6613d99beb340e163b4900098763931eabb1201a714dd72e42a3fb56f0ebb7f67dc6d2042224cfb22abc6e29c18fb95e7790fdb50b25d07e4a4e4f9872d54afaa4910ea7269d25fd2bc3046c6cb18b19f878d71708d2888caea706b92e0a2f30c13db698e9d333d72675c94a3582ee4776b40f555f8b097c3cf99a56db2f32f83417cf7b314a8012a3c5298b2ec6cf66ed5ddf445ae5d76317c23299221b1b064c1fceb9d58778d09858dfab81a403279307f12a2e363ca0617881967a8fc4b2c7b83ee4069dd679d47afda6ce34455583cfe14e3f841724c455ee901df36c39b9827a069827fcc3715543035d3cbe1a2b840eba1b1be7040b6ac299642942292059333053cdf447e580265314ef12c922eba05e96b29547ddc1ad97170a602e8328b601ddd5b09a51a2ee9f95dc05854a5566f0ec3c59eb39ed3d98a4bb6a5985b46edf380d75420765d3ab430f85c442bb29296cb9d858af8effc95622e0e821efd15879269452b6a837d5a9bab8851c162510d6a4b8c7b8fd8b3c83ff959bf4fd7e9f6fb7879773f599e44c249c6ae234cd3f608d8cfb6137391a2e5a2ce2115cf3821b01cb3fbe40d65af9a0a1be11a1093ee8eb3f39d0ed9b8d58563b13e4fa6cd1d116c0bf1b83ab59fae613e1d775323700a24af0c6b8fdf89df87ea7cd9af56a29410c6174e185d547376f5c0eaa9cf62916d9f01a5a0080654028dc133f387d95aebe0127c947695ae0fe640add8292c808d4ddc2558eec32778be839618eb9129c83fd0303379d995349be3287b60b3a95df04db7594f72f18737221aaa9ab2803235ccace8d36ab34bcd457c3465da903930a2655791b5ccd2decd81b56145d7acf13a2b098862ce9408c99420a43a55154d7f5b2ff28c060b1354cef1a4734a656e28426274ccb3c5e0d2cf1b28ac43f36d1e6c28d0bba961f41fbf1dcf4dd858ab7be65a4a5ccba74255be974fc55a48d79e6c4f9056529d063fcc739f3121bc265ae9a38d110469eb2c8f350cc5ddb93fcb8b6d987882cde47f9a7f0638281b4edb5ef442cbe6d5e6c05addf4f5000a42323a77ba7f1633dbc7cdc63717da2e67148fa0581246868bbe3056a67b3d14f1f7aa960c1f81e92c51c49c189309e82a857bffc5c2178cd0fb81aafce3d2ac04752f1935490058d0240ad8d4e323759515a1f79f233ed339ff73064c4c710072fc68d67f15fee5ddd2e8bf39a2b9d4a788a4ca98e0b6f9650d77879edc7f3c2add54f47af918c18c3b45043e81855eba57ae4529405c6e6fb8ab3e007848e928fcfc1becc083596e4c29bd1eb9739823d37b96ed11b405b61fc241a48adb6de3946be2efac8ada295152d41ed22e9f744221e9aa3bf1daeed7921d81097cae27a6339d6bbd1a5e292af4692bf83e57206f1519b26ab2496c17cc7e750f00e7c1625ef0a7387eb5070c8f92ffb501c406264fa01744792224e5d851b4b5dbddbb75fe4885dd7607b4cb650d73b7d73916ba325025aa70b00693a4f81c22b7b8f486155b89a55a0209aaaad85d80f4a8b3428d7c6da8c00629bacdda4b7640c2774ab5a9fde325cca47de2fadf97385112ff90df6c1d15e5268bbb11dbca2ff7a0cce1939dc059758d0b166318c8a4af0c5b00dede003da4a4b4a6b5b7d7ef859c71b0edb81ad793907a5335e080aa7ea5c5e5df76a00c50aeea708f87bee2a44a893b1d5ca9e482c337d533978c37dca80eadf445ae408393cd72071e63e76c0edf721475b047053fadd94690cb6eead66a18b86a1f82fb20f8462d157ffb9b658c97e5d55bdca6591b259bbc4d67bc63b7bc995d62dfb10ac593cf5859fde9527275dff679e18f51e1697782d671f23895197b598a47513433f071c341710704a217cac8b878653f9112ab20343df684438a6817607b30c264889fcd6d9b46dafdba47fb73ec9bcde77104f215a4b7e706eb0dbc4469a18ad4d489760cbc3a58bd85acfefdf64236fb27c3a4d5b25a8d2ccca765a54d2a710eb61346fb64a9143b643617de690dd8bf8d8b98eb4d749b4e694000f6ee11830370af8251811d7b1eac54e57585ea238799aa3241839a3cff43d3fe13a359904abf741016c852aa0d0318fd6e7fdccee8c1a088a3b2a1c3ad149b64c22ea6cddadbd9bed9a487e7d2860578ed68e1374aa564d689081f7ee1237507895182c62b6cda1697ab4b40df9aac35d83cf9025d99b2a176e9723b745c101bf854c056f40eea80ff8499a87c32853863d8708c38ad2c6a0198917619cbda357b01d47d0c1f87ba212c0f68e34421908615824d41f77854df21917d1a9dd19c64a60181963925cacdf3503de54f60eb324c2e7cffd248414d45c2f48b1dbb476fbdfce5ebe333f65c8ea6d09278465cbfa756d51bd713944b9427fba1b7d1eee7d482b8a689c8f1e9adc4bf40e8573326b3829f760e5036cab2a40d0bfe08620b5abc75de996574524934671e92e19457992064b6add83cb4b5c4adaadbd1292b032481759e898868295f13849adca63c55bf212110cc5a59585a5dcda20ca5853e17cbb7da3d13c93d5298ba0e702eec1c24ca9b6f04564e645359eec3e05a866bc0b68454b82698e2f841ad88d1c0530d847e203aafb5ffea6b03c1249c94bb5f0978d255c29c65ad0e2e1e0f912602216affa297dbc521dd8fc7157c919470371047e1114fd252c88403e2fa944b7de407e2eb1dcc0c3cb03bf5575098eb228380626d61a589b2544a651c55d663bfd4ed9df8970368344312fa6b0a8fb6c7f079bb5dbba4713f926f15b5e9a355cb83927a39ab7bee96a194cbaa5ea49bacd84e67640f745ce2f50b6192a8ecf6585d91a79da23e4b26bcc65133c5f896e1720a2f1ac9f4c3a15dda0011e0f3af8228dbd41ef13764c5dcc4ad7cd49bc3945de8c2a1c0a32deb76c3690a1287723b7f619f55620c7ea7637a51ec8e0c93c245bc6f7a0f7f1b1ea10e505d07b14eca533ab98824dd5be93aa6a56638ed93fef9cb5f5a09e9896a87c23d89c6ad7a0dac96541e473c4ba4751bef4183072a8794e7866c7cbe63706d2e5f61c1b279d179496de193c2c6bbc4f4086003068ca04e4afbf1d5aecb90d668a837dc990cc3a31fb91f89dba71253da6430e68b51659441f9ad7051349433bbf63e9c9b15dc4a4dcbb2d61073a2c10f89b39786180bcd0538b36f7639e1f6ef7a0b0b39d6e7cb453e49ac40c1a2b5e9868f4df05cb455338d8ad1988ad9dd9d68c98a22b84e384726063e6e4057c9598bc7f3cfdb8414e1725de7f311128a9c1585c407c28726ed5ec0f2076dd09f73df57028492dce7e54028cad66eb7dbda98e4ce12542ce2aa631d524c33d0e35eb92c2e20dc51eee4a04801ad3585384e3b3032ef29f9ae2afc70166442d1b4e58fdf867c32a815684e2e5b5b0588f71dd5fdc1b1f346bc5f82f560d30cc7d3c71d13521c38d5a23fcdc299ba5ba9b406919131d3698a24bc7b26918b9ea5fbea39dcc471445bcd1bf21ed21631541071e863d20c8d82d093e48189457312140ac172c0211b5cec922eecf2a8634c26d4e28447e2f40c03bff0567f7bb2fa1dec36daa3f65c6a683db29fef260325fd2af5ec65b1b02191e33c149e49ccddfcc7f8635930eab8b7f3a4e1aabf9dd2c6ef0f757b598b5f269f1b2dd9d699c2a74636643a6fa49ac58e515e455efa62ec0116883408ece06e9f82e267160d2b8e3d0e5eed5503d63711c52d0215ed91baf3609a1fddb3052dc2f3a17f66731249e5bb0fdc067387e260ccbd13345fb9a51defa26708b7a219a4cdb03aca0278f358fa53fa557448f31bd992747be1add6241414d490e69c005bb7f29fe5939650696cda7ed5c26355840675102af626683963f07a4e7ee0f2113a395b2dbab6700fc37b7afc94227a66f0514fecc5e030636c93353a0284965a73c2afb96428302f34f59ad48332570fa1d5f53b0c8962b6141363a0b9ff8a214d4c7b964856f0515bec67b72754639b90ac65c2de0089f2f6850e7f0d34f673a67af22e526ed2409296fb935558645f427a9413b880a22151419e11477feff3d7fdaf16f1a05c7280548890bd3213ec2a548af1ffdab8e7069881a5933c2d5d27f39b426db6eb36cb6469eb51d7e6a020eba49088fdbe5f7b8f179e8daa753131beb48114ef3d8474e226f9d5af8759dd9886a981de438c3dc8765e8266e356292bdea85cd4fc8f4", 0x2}, 0x3ff, &(0x7f0000000300)="bd48ba9afb9a8df608e41f41cd9530cab0bf808fa7cbcf69459404f859460a6b1c4460d952d6e334071fd5c61344cb499a75d86bebf6e1fa4b4641d0d7d0b63283ed1b076c8f45ea7eec236436193e108639c92e884a80c870b7c402f62bcea68d8e8b52df8f539f7e8581d29f1d8e4e20b5b65c6b619cbf9d71550a913556a8933c4c4da79ef9f691854b5c1e6470dd67cd8fc0537ea8bbfad9293c723a23ceedb525ee61638b25f254000b8a", 0x5, 0x4}, 0x10001}, 0xd, 0x6, &(0x7f0000000440)={0x5, 0x5}) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x488, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000140), 0x101802, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/can/stats\x00', 0x980, 0x0) sendmmsg$auto(r2, 0x0, 0x8, 0x7fff) 1m8.743817957s ago: executing program 3 (id=2342): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r0, 0x107, 0x14, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) tkill$auto(0x80000000000001, 0x7) r1 = socket(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff9, &(0x7f0000000440)=@xdp={0x2c, 0x4, r2, 0x10}, 0x22) 1m8.367415622s ago: executing program 3 (id=2346): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0xffffff00, 0x7, 0xfffffffffffffff6, 0x9, 0x9, 0x3, 0x4, 0x2000000001, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0xc0, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x4, 0x2000000, 0x2, 0x0, 0x2000, 0x0, 0xd, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xbffffffffffbfffd, 0xffffffffffffffff, 0x1, 0x5, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x400100000005b8, 0x14ee, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88c, 0x3, 0xfffffdfffffffffe, 0x6, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x4, 0x5, 0x100000000003, 0x0, 0x7]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) mlock$auto(0xfbe8, 0x4) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x7f7e, 0x400008, 0x80000000df, 0x13, 0x0, 0x8000) r0 = openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) mmap$auto(0x8, 0x4, 0x3, 0x17, r0, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x40000000005, 0x7f) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f00000004c0)={0x0, 0xab8}, 0x4a) 1m8.092640183s ago: executing program 33 (id=2346): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0xffffff00, 0x7, 0xfffffffffffffff6, 0x9, 0x9, 0x3, 0x4, 0x2000000001, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0xc0, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x4, 0x2000000, 0x2, 0x0, 0x2000, 0x0, 0xd, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xbffffffffffbfffd, 0xffffffffffffffff, 0x1, 0x5, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x400100000005b8, 0x14ee, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88c, 0x3, 0xfffffdfffffffffe, 0x6, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x4, 0x5, 0x100000000003, 0x0, 0x7]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) mlock$auto(0xfbe8, 0x4) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x7f7e, 0x400008, 0x80000000df, 0x13, 0x0, 0x8000) r0 = openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) mmap$auto(0x8, 0x4, 0x3, 0x17, r0, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x40000000005, 0x7f) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f00000004c0)={0x0, 0xab8}, 0x4a) 6.601792579s ago: executing program 4 (id=2605): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f0000011780)={0x0, 0x0, &(0x7f0000011740)={&(0x7f0000001900)={0x1448, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_PMSR_RESULT={0x1430, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x142c, 0x5, 0x0, 0x1, [{0x1390, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xffc, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_RESP={0x30, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x200}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x2a0, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x2}, @NL80211_PMSR_RESP_ATTR_DATA={0x20c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x5fbd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xfffffffffffffffb}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'thermal\x00'}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x80}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x800}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x6, 0x14, ',-'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x81}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x80000001}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x800}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x20000000000}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x7, 0x14, ')#!'}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x2228}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xac}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0xff}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xe8}]}, @NL80211_PMSR_TYPE_FTM={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, '%\xf2{:$}\x81('}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x1ff}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x9, 0x13, '\'@/+\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x34, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x8}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x9}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xb}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0xf9}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0xf}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x3b}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x61}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x14, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x8}]}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x24, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x9}, @HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0xb2}, @HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0xfb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x4}]}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xb, 0x14, 'TIPCv2\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9e, 0x1, "4e8cbb02b373e72c797c7812309e8d8b10789864b6580428224e2878a6503748a707f86b0936cb8dc18aaf66c2ccb2b7e8556582ab114561555cdcf2c214e84500bc265a7614a37054fc14477612d86c3a76520c8fe8310c48951d39f0feebe7f7cab92127bae7aa3ed8d6cabca8980d869ea63a051ef7f30e91eae1e56b383f6ed8611b1a311515978470ec453bc0067887101238cdd3afb21a"}, @NL80211_PMSR_PEER_ATTR_RESP={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xa}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x5c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0xffff}, @NL80211_PMSR_RESP_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xc}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xf}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x100000001}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3ff}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x10000}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xb552}]}]}]}]}]}, 0x1448}, 0x1, 0x0, 0x0, 0x4004090}, 0x80) (fail_nth: 2) 6.305940405s ago: executing program 4 (id=2598): r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x0, 0x61, 0x0, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r0, 0x8, &(0x7f0000000000)='thermal\x00', &(0x7f0000000040)="55eb8f37acd997368e7ed0e06ddc9c7fdf86488a2e45b037a4c19c8979549cf6d092d0e347819042ff1172e72a0e584d34b312bd019b1a50e94b544eae56fa85926077ad6b47d70fb7b3e21fb7bd8219e48454af93b372b4d03fe4ee77cc839d3e2dae8927d309efe9c8193f07f019126f10ae7eb8574cf02f257661473bde08ca7aca4ba9d323ba529d6abfb9ae11eda4efd6ef2d235dcd93cc26cd697123da002553dffbf1762ea5ef240e2e64e05b348c2fd58da44e50740c35db", 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REGISTER(r1, &(0x7f0000011780)={0x0, 0x0, &(0x7f0000011740)={&(0x7f0000001900)={0x1448, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_PMSR_RESULT={0x1430, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x142c, 0x5, 0x0, 0x1, [{0x1390, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xffc, 0x1, "3617591c4509c74988c568b3e62afb163c9a429f3319f22fcd1295d31ba16d8e489e69fa502b2d957e58943dc7c742464178a70810f6be969d7105ef83248f0d9bde21426a509e2108e5947f3bdf8b3c1150488d1b13b8bcd0468fcefff7668b2aa69857a5c4ac9ca6723e5c0a5f51b18850bbc35e84bed4b2edacb9308f38762ada5ccf26a82c52bdf108761d045ae38be7dc2d37b20d0837b3b628bf963de287ec0081ebe3de1038090161d7272acf77e8e30789c94ec769c6af57e2c3fd45450ea2b57a338667f8714b1097b7564bd169ff3ab7002553e13180f571b5aafe8fafd2f5dfc510fc1f146049640e4fbae846ea0da9021541eed9b3e0cc1c33f938d055509489bd80f50ca1d0ab775c2ec72185c447647effb9d9b2abed7155bbb3e65ae304594e95882710d926d52c1cdbf79302e6484651c6a842c381c49533d2b49c0bed50906d940f83567c15b7348d88daf2a0009e5439e4593d9808138ac55ef6bef7cde29426bef94b6fe5074b99ed97c58d8b7df8c291c9e50d8b8a84273100287e219ca9339d787c80c5b547349688fa6e0a1c10b47bbe4f134031a0ded0df8d02b1f5ce40f6b7273d302f71415305dcc79f033ffe9a0051dc91594fa90e5934ccf8424ba09e85b2cdbdaad0c557ba431d5a520b727405854eb09f8b4bf5a6440be7b32e78574dd237b2f89dd0a6efe7e65bcd6bd614948e059ac3710d49bb40431c6d5e79c0cc819b66565037f8e137148a02bfb4f38c2dd8ac15516655f494fc06a5e103ff1d6ca5c4fc3270d1c87b5bd7d0819829d95e614c703c9a37bf1682ec94a7764c28caddc79a5e20d55780c82b78002376a782e3bfa4ed4be7a41ffb684a2719a1983f68941e4f2508fd2ad8eafcb0a6bc9214eddd744fea02e7e7f1ba20fb5057cf90ad50d2cbfdce39101f3cb7391b398dfca10fd2512656d8f34a0c2b24f548fbfa2e9f7c43f0275efaa0ba6ec515d0c4b71fa4bc5918daabaaa1743ba9b23df70bb12e43e1a064d2b8b88accf5394d58b6420633d5ab2126e0ec49ac10fd7beb2389a8932a732723def618efebe22f800d6874947f8ad128dbcbc46b0674d7766bb6306a3b5af151450992e4d7242918af4498ab9b5edaae5c6a9bf2fa30000423e42ef8e6bb6590ac95225a871383f58f2250c28ce142c7a8406bd4ef96f8723d6db007588285446918972d82812a2df4e710c1d32e7525eb0986ab6e0dc44752f93fee6c0fd1abeb837a670401cb4c85b1bd4fd1367feb0183267f85d7b795b8ea1afa4f477d04ce30370be7a4921b50554284a4809ada2761afaa4c489e8f0a1158445fd9004879f4e96164094f869303422942a1e7e655c7834e95840e1c349c26ef5547afa038361e6cfe3b7b2205963bb36a13a08d50da55330093b2c9d87bf84d686b331b94ea0859618cbccaff63ba4872fb52b4268febe630e29957be3d98e6d6d38faef07ace036aa0752953fd0f801449b4251d3d4cdd8575aadce66cee6870f3181ecbb6bca6656f368552d383b943dc61aa9b934950d2de61552d411bed9333d029ad030ed7aa042a8678d8302115a23ec5888686f6a7434dabc95b3d60f9cb0fac3a760b45606199f21fff0f9054c20365a8f2295c6b031e38f249adefbfa3fffb47d954a818aeb016f6055a569586079387bac4df8234cd5df818efa0a47ad71aa252dab0cec2ef2073c9b6468f467e1f44e13e117a05a18fef2721914f4a9f12be3fc433f551172309111076d9582f9792f2571abc550b0ccf556906b0384cb1ac8d928e4f3920af6ae84d4974be442766a1162c4faa87b6f99fe0fe3999594c55e0feb1fb00a7507662faf2feb07e394f65b578b5a79780da8240f120791b6cdea70a4117d2cd601eeca0c3149119f90a1463cda3e05b5a0efa67ae2d6a003fa0b3823432015f6ebea1d69b78655bacf5716e144b827b963ca8436b7c06f483ce1b6a5d1bd15bfdef6106d9bfd37a6b17d56906766066bdd64ef7f64cba52affbca4cb070eef9ae5a420c3ad1016aa73cb2ad443f1020ee83a70db3d91acb70ac1fe84760ac62c14408dac2cf1aa0c32429fe48be920a421ab2b7235561f26aa3be49421246522740ad77f3c8cf36a095e5bf490bace7cf0e230c60bd575dfdc7cafd3fbf4e715c6112d90e874b1274125c37ded7edc92ac0c22cad237406bd1b50027a359e311bb93bc9239f2180af13d92f93360a1cdbed9c525039ad51b6706dd1b3b430c99c171635aa04c0066c4733db0ad4ca9ba6dc163a082f47adaee3126ec5595faa5bbec943d9a97f1e26cf8c9ab316cc581dac5688ac6e07134c26c375d8b4c1abce934c2858b5302b12c11bf8f0d2c5ad416adeca77cdd8f14522d47cce76ace6b8915a083bd3ae64ee42441b1f8fd14426ef7530a06da22b17aa4a8a5848699798c7b3c8225617e054f63215908aae572b1d8269d38edec7da392f6e5faa58852a4229430ce559c79b5ccc1bb446317f4471ee9d3696c7ca7d7aea8ed7f8bcc2ded5687aa1e6c5ebe4b88ca97f738cab697550b37e885e65b5c6ec0c05a1c70e3cf47709bcf4a2934a9f5a617d80d72d2043dbcd186d3f333fefd80d24e44d2d26edfe132ca86844e3a9c7888d09bf3c99f2811de6e35171b2f9d9c12a44f579068e2a60aec6736e1450fa3ebd6fe016a4fa9ec77c7203cb7407cd3e96b4bd1ccf80a649865dec4163b1dc3c2b804c428650d43e48d1d19d09bacb5c10c2a026cb2e0aa2de09e7d1fb5a86a11faed106f4b2f80935a5d3ed04a2c5794e21ee4002c8c510a806c94e2089195fd5dac400d4410b1f45284a9baf6f618f3061e6ab478d245c29a70849deb0a336e5c010155c783a1f8fc63808c266a97c8ba240e0da877d286e37016f0630282ecde819aa4585e21c53bbb1359703a0d30a2bd54ef0724f138298282189dfc535cb98ab0a28efac9a5e1de60c3609e89c73c4d3fe6dcebace96e7a3dfc824ae2218d0cc1d3b4af95ed18305660cada70647dc7a1b9dabcc8fa431f6c5830e31b799180e203ac8bad78423cc318a645275745ba0fcd0e0c3c2679df3b2df4d366074a1d1990a6cd3f78233aea3b1d08390f05b4ae95a9c867f4208d73ee43c95d631da5e4703e26912d126b695b50dc84bfa7f592cc5bdf5d1b3b4c3fabd913c798f1a790cec5950727eb0191575e4fef11497869293206963d576545c5dca685162f60e271525589b2901984e6cb22c71ac92a6c8a7b68075f23d2b264b0681c80b5de667cf4fb71e951063181951ba8077377fb272f94e05726b9c052cca18305eb883016b72dc23a1605f035bb94e24df231ed54c5232b880b7e5826803249ce3a54317705c6bf1655eb1215ab3b3861ad493aaf2a4c59a44966eea1e9857277ad388e490ee5f4a180296ac8c701b375960264a14b1d277cb26b617d0e4c5d0f54c88c13fabaddb2fa6d032a1b75a5a45c2cff786087fff9fea78924d7959109ab098e3dbdbb96c63947a8a37befec01a265464d52d4218d84595cae6af4c85badb96fd2763857244b68038018acfd32d4d37498c93a2d7cf6bf17cc751202a7160d90ce3685eb234a7145d1628267814031dda5620c736a410d394a9f2534c1f7e999b7b9fbfb61ac62b30c81080d0e9fa9de92f956060245e5f83a232b0905b3b3753f37d19932ebd074b758e5a49924464ca8e8fce05caaaaa3eb4fef033e4ef387a4e8771c27fb8c0a7e81180b03f23851d9fed84da2866cdb85182e1816e337fd82fd5c01856f6cc06edbf6c615350217856e001e1e34123208b51a5e6d0046a4e3ac04c3094b232ed20b9813994c84bf58ffa7a44c2d386995750da722b12df0b427f665083a5508540f480a0ed14cb368fa76b5d9d5959fe98697598d829478e2d9004c63ba4761f2e3824c1e05bd767ddea25ec0f3769608538eb4474fee741b55f8a240a7e0fa34d4ae11086bb4934a969e7a1ba0be5f99aacff5853734a20bcc032995d5ba688a1713e4ecc78ab5e597171726bdec1e8c1058a10ea63068a438007df103d74d467a124c427e1cecb745de1ee0a82196415dde0bc3fa06c7af0e62bf80762f917f0e06f9dc58bb8df30cffd64ffaadf0bae6ada8c0d268a556d560b1aeb8b7fe6090b0258b8eee5f2d27dda3384f2fcf8d006f0ca1ad6518ceb3203a34243457fdad9758509eedab7a06c78cce879359af0455564ded8e0bb52fbebdfa274f4e04c0ad7f447bebcd2af071aabe6f28f6f1d971bfa7475f85c25eef183603406e66eb4a0cef8fe745b3fff07d0edf1bc4704f4091a0e691c17138bc65593e0690b18df92310643f56d4a345f2a0f83105d1da75b7bc01e9f251062d64b3635951cb7996c1a7fa7d8204dffd80adef2268c38eef7f82a6376d2c2dee4b529eb16c27391d8b75d22ac931ee557d74b02ba3b2588cb962401eeb233d30f15951ee0308d3b56f5c05c7ac39ab71dcf09daf7a209442d8f1b5e26347ff085172b2bdaa71c2e3ac386ab0fbaebcdb730784a0f2119ba9b5e94ef42d96fec1108f08b3d71872a4f820f7fa1e01cba37cd4eec81f97dca0d5a754268293f122ef785a9211dac70f6958864f67fa9d6d613456f2d46622e8b4628c697eca7702070a1b3f87c2e8af96e4b95ee4f3c26d0d5c584559137149b70d3634cae1b8c309c831fdfdd00852d9de3595fac118dcf8929197ac15bf252be43e54f38edb085e2cf600851519e4748908c552fcc7bc073a48f332e852d314543c63506b051c613af551255c55cb0d75401ca54bce8caf4ed924c9cfb5ed54db5456462f2a90a62555aa60886079851526e35971c1b75ca217b177add8c94a9680a7c3783cc517b2baf6299144793fa08c6bc7fa6f063f1f6ec139caca63e25278c35533af2adc86ded1e76c23e7ec33f62bab73651da1b8b0af0524e67e78f237cf991c747b23e30470372daed67d2e52d2299f83c772ea264b4cf8887fc04bb13ba64d6b5f0c19fc4563651658643340eb8696982a3a5639eacc9831e5514459d22d98140ca12180a032f6bac99a55eae1bed1a94591915b8bacf2256ea0c76c415b1a8fc6d71fd1df9c6cb33e69a7c00b7fe40085c6cd55ecf26e86d99bbbd89e97a1ebeff20a7ab75a2e326fc2a43b7217505b822b3056b9d1749ce77be417118dde0833d5dd4569e647c8d90db91abb2ae9752d31ae566b8c4afe1835970f19346f9f266abffb797cf134aa71351412bc9375bd7306e513c9a870b40bd5d7e987e5d8aa68ddd0daf862d855d9c48d31f543892caf8cb282944ff8ed4a3c52e15ee8a4567703a6b3b7e8ea55ca7eb9e3f9449e517bb1927ea0db6077d83310b62a1897e54a2597d0cd1fec24a82afcbcda5318ee5690cafe670f1edc41b3377e728557b8b9330a00f33f3d2a16493e67d3f93b90e19ff990381fa79060fe7c6d85a00498cdec237d5664019eb73716d43be877f10b2e12a645cf457790f6113ec5f6f6078fe1fcddbfdb0e2dce451abd826a1ee93c5a4fd3dadb67e96d08d90653d023654a5d2e4499d9c776c5a18a01e2a6bb00c66774e17f956ce4cd3c1e0e3a05f1c35a37aeeb70962f72914e6c52160c2ba650b3b32e61dfc458fead98747db1bfd6f878580a601f738e394be28d35566287e931f29a9aae503d312e1ac3512fd43f520537231af4b98df2612fac53109000f89eb52e5180b234ec4b268d5c2619a60436b7bc1fe554a028549ee8b0892ed6f4b8f6d19b9773de8710fe51e0897df5653572a26a9ae70b1037eed"}, @NL80211_PMSR_PEER_ATTR_RESP={0x30, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x200}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x2a0, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x2}, @NL80211_PMSR_RESP_ATTR_DATA={0x20c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x5fbd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xfffffffffffffffb}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'thermal\x00'}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x80}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x800}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x6, 0x14, ',-'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x81}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x80000001}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x800}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x20000000000}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x7, 0x14, ')#!'}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x0, 0x7, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xac}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0xff}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xe8}]}, @NL80211_PMSR_TYPE_FTM={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0x0, 0x12, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x1ff}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x9, 0x13, '\'@/+\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x34, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x8}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x9}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xb}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0xf9}, @HWSIM_RATE_INFO_ATTR_FLAGS={0x0, 0x1, 0x2}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x3b}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xfffffe92, 0xf, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x61}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x14, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x8}]}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x24, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x9}, @HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0xb2}, @HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0xfb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x4}]}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xb, 0x14, 'TIPCv2\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9e, 0x1, "4e8cbb02b373e72c797c7812309e8d8b10789864b6580428224e2878a6503748a707f86b0936cb8dc18aaf66c2ccb2b7e8556582ab114561555cdcf2c214e84500bc265a7614a37054fc14477612d86c3a76520c8fe8310c48951d39f0feebe7f7cab92127bae7aa3ed8d6cabca8980d869ea63a051ef7f30e91eae1e56b383f6ed8611b1a311515978470ec453bc0067887101238cdd3afb21a"}, @NL80211_PMSR_PEER_ATTR_RESP={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xa}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x5c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0xffff}, @NL80211_PMSR_RESP_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xc}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xf}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x100000001}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3ff}]}, @NL80211_PMSR_PEER_ATTR_ADDR, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xb552}]}]}]}]}]}, 0x1448}, 0x1, 0x0, 0x0, 0x4004090}, 0x80) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000100), 0x58000, 0x0) r4 = getsid$auto(0x0) fcntl$auto_F_NOTIFY(r3, 0x402, r4) 5.997490196s ago: executing program 4 (id=2602): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/udp6\x00', 0x40, 0x0) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/udp6\x00', 0x40, 0x0) pread64$auto(r0, &(0x7f0000000000)=' WI\x00\xc9\xdc\x84\x89\x8c', 0x101, 0x203) ioctl$auto_FIONREAD(r0, 0x541b, r0) 5.804712788s ago: executing program 4 (id=2612): mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async) socket(0x10, 0x80002, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) (async) read$auto(0xffffffffffffffff, 0x0, 0x20) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) (async) r1 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x40800, 0x0) read$auto_force_suspend_fops_hci_vhci(r1, 0x0, 0x0) socket(0x15, 0x5, 0x0) r2 = socket(0x22, 0x2, 0x24) socket(0x1d, 0x2, 0x7) (async) mlockall$auto(0x3) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000000c0)={0xa10, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xfff}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xb}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xf}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}, @NL80211_ATTR_SAR_SPEC={0xfc, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x45}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS={0x4c, 0x2, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3ff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xa}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS={0x74, 0x2, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x6c, 0x1, 0xd0}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x100}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x609}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x9}]}, @NL80211_ATTR_PROBE_RESP={0x7d3, 0x91, "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"}, @NL80211_ATTR_VENDOR_DATA={0x101, 0xc5, "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"}, @NL80211_ATTR_SUPPORT_MESH_AUTH, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}]}, 0xa10}, 0x1, 0x0, 0x0, 0x80}, 0x20000894) (async) connect$auto(0x3, 0x0, 0x55) (async, rerun: 32) sendfile$auto(0x6, 0x3, 0x0, 0x8000fdf3) (async, rerun: 32) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) sysfs$auto(0x2, 0x4, 0x0) (async, rerun: 32) r4 = socket(0xa, 0x5, 0x0) getsockopt$auto(r4, 0x84, 0x2, 0x0, 0x0) (async, rerun: 32) r5 = epoll_create$auto(0x3e) (rerun: 32) epoll_ctl$auto(r5, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0xc8, 0x2, 0x9, 0xffffffffffffc001, 0xbef) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) 5.691183444s ago: executing program 1 (id=2604): statmount$auto(&(0x7f0000000540)={0x5, @inferred, 0x101, 0x5, 0x9}, &(0x7f0000000580)={0x13, 0x7, 0x8, 0x1000, 0x6, 0x8, 0x0, 0xffffffff, 0x40, 0x8, 0xc000000, 0x1a0, 0x401, 0x0, 0x6, 0x7, 0x0, 0xe9e3, 0x3, 0x2, 0x7, 0x0, 0x9, 0xe, 0x80000001, 0x37ea, [0x6, 0x2, 0x80000001, 0x5, 0x3ff, 0x5, 0x7ff, 0x6, 0x4, 0x4a, 0x7, 0x3, 0x4, 0x88, 0x9, 0x1, 0x7, 0x5, 0x95, 0x9, 0x1, 0x6, 0x8, 0x0, 0x8000, 0x7, 0x100000000, 0x80000001, 0x1880000000, 0x6, 0x8, 0xe, 0x8, 0x8000, 0x6, 0x6, 0x2, 0x0, 0x1800000000000000, 0x6, 0x6d4, 0xa167, 0x401, 0x8, 0xd, 0x1], "5570dc3f9ad44830af3163d864bc95e7c2f20b73514acedd76c758302594d65bd302ca9ecc185d57394faba70458781ee273422a086f4150b7bbc62f378698dc4bb416012fe83757c2a6b6138782a93efaae631832d1320a2c445e677ab57af787304d6fc35065c814476477528a5064f7d5182c487e52524bb82234"}, 0xb6ea, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0x15, 0x5, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, r0, 0x18000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(0x0, 0x3) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0xdaea6d7da654cc89, 0x0) fsetxattr$auto(r1, &(0x7f00000000c0)='/dev/dma_heap/system\x00', 0x0, 0x7, 0x10001) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x75, 0x0, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x401, 0x1ff, 0x7, 0x48, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x400000040000000, 0x0, 0x4, 0x4, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0xffffffffffffffff, 0x11af, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffe, 0x8, 0x4000000000, 0x7, 0x2]}, 0x1fe, 0xd) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x405040, 0x0) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) cachestat$auto(r3, &(0x7f0000000100)={0x7, 0x4}, &(0x7f0000000140)={0x3, 0x4, 0x80, 0x2, 0xd8}, 0xc) ioctl$auto(r5, 0x4008af10, r4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 4.673340255s ago: executing program 1 (id=2607): r0 = prctl$auto_PR_SET_NAME(0xf, 0x5, 0x0, 0x8, 0xff) r1 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x28400, 0x0) (async) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) clock_nanosleep$auto(0x8, 0xfe000000, 0x0, 0x0) (async) mmap$auto(0x4, 0x202000f, 0x3, 0x16, 0xffffffffffffffff, 0x5) (async) ioctl$auto_I2C_RDWR(r0, 0x707, &(0x7f0000000040)="e96741e8e10feee33cc48dab419f5392b344278afc1f9f74d632e64c84b7b358718d4408743ba5a9ae7e9cce08a44a51b74722234c108f8508a8e491859f2a8d5a4f8798fdebe6d4d48cc13e0f0253a0de2edb6c08738d0afdfb6a0eb4ea677d9cd9a8ffcedeed2e14ec392820deae28d7464ebaccd6bd245c1a") (async) futex$auto(0x0, 0x89, 0x4, 0x0, 0x0, 0x100) (async) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x8000) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYRES16=r3, @ANYBLOB="2f00f0ffffffffffffff0000000000000000", @ANYRES32=r4, @ANYBLOB="13002c8008003400", @ANYRES32=0x0, @ANYBLOB="67a8b510f25add001dd737864821b79db43bacaf017773c0c6b7ce934bdbb66885dc3d1d9981e8999a4ed3bcc55f5c287316188f24dc368fed74e4261a55520b9568376710869a8a33251e52c0a9c78155a90cc1fb66ddc10240b7eba980959346feb8cc4793c95617e54f66b2f58f83f3c56c3f0d4b30f1cf9d5d85f7"], 0x30}}, 0x4000000) (async) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000225bd7000fddbdf25570000007d4b4eaf7d6db2b6dbd400390800ef0009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24048840}, 0x1) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x440101, 0x0) ioctl$auto(0xc8, 0x800454e0, 0xe) lsm_list_modules$auto(0x0, 0x0, 0x438) ioctl$auto(0xffffffffffffffff, 0x89a0, 0x8) (async) mlock$auto(0xc, 0x87) r6 = clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) (async) setfsgid$auto(0xee01) rt_sigprocmask$auto(0x0, 0x0, 0x0, 0x8) (async) move_pages$auto(r6, 0x8000000000000000, 0x0, 0x0, 0x0, 0x4) (async) ioctl$auto(0xffffffffffffffff, 0x2202, 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x4000004) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd=r5, @target_fd=r7, 0x3, 0x81, @uprobe_multi={0x81, 0x6, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 4.243150083s ago: executing program 1 (id=2608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f0000011780)={0x0, 0x0, &(0x7f0000011740)={&(0x7f0000001900)={0x1448, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_PMSR_RESULT={0x1430, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x142c, 0x5, 0x0, 0x1, [{0x1390, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xffc, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_RESP={0x30, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x200}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x2a0, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x2}, @NL80211_PMSR_RESP_ATTR_DATA={0x20c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x5fbd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xfffffffffffffffb}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'thermal\x00'}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x80}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x800}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x6, 0x14, ',-'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x81}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x80000001}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x800}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x20000000000}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x7, 0x14, ')#!'}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x2228}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xac}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0xff}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xe8}]}, @NL80211_PMSR_TYPE_FTM={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, '%\xf2{:$}\x81('}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x1ff}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x9, 0x13, '\'@/+\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x34, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x8}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x9}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xb}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0xf9}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0xf}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x3b}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x61}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x14, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x8}]}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x24, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x9}, @HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0xb2}, @HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0xfb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x4}]}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xb, 0x14, 'TIPCv2\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9e, 0x1, "4e8cbb02b373e72c797c7812309e8d8b10789864b6580428224e2878a6503748a707f86b0936cb8dc18aaf66c2ccb2b7e8556582ab114561555cdcf2c214e84500bc265a7614a37054fc14477612d86c3a76520c8fe8310c48951d39f0feebe7f7cab92127bae7aa3ed8d6cabca8980d869ea63a051ef7f30e91eae1e56b383f6ed8611b1a311515978470ec453bc0067887101238cdd3afb21a"}, @NL80211_PMSR_PEER_ATTR_RESP={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xa}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x5c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0xffff}, @NL80211_PMSR_RESP_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xc}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xf}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x100000001}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3ff}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x10000}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xb552}]}]}]}]}]}, 0x1448}, 0x1, 0x0, 0x0, 0x4004090}, 0x80) (fail_nth: 3) 3.892579749s ago: executing program 5 (id=2609): mmap$auto(0x2, 0x2020009, 0x43, 0xfffffffffffffffc, 0xfffffffffffffffa, 0x8000) write$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffffff, &(0x7f00000004c0)="ce88c2640b5e194a2b91e52ff8122abee4e25366b9bfc4e8e944287063b428e73dbf859c7e113a7befe44860e7a7a5a4429da0b254f30c8945457bb2c00273cb1688cb820f14ae2ff0b30b60fff4bac73a79af5ef36c6fc67224b7068c46747d8713bd083d96cb8628b870cfb9d258c6dd9f15e9fa753459647a0d9226ba422ed24f8e8b8e537768b87a5884c6282ac58ea5fde52b15e761fe9e3a01b238ee30cef6ee880b8224b9c7b214c4f8d90f5b2cf473fa762bfe0bde528353e2068b841c950754bccba9cbdfcae56e1a93c20ab043dc", 0xd3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) unshare$auto(0x1fe) (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x0) (async, rerun: 64) getcwd$auto(0x0, 0xffffffffffffffff) (async, rerun: 64) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) (async) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/usb/usbmon/32u\x00', 0x0, 0x0) (async, rerun: 64) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x28402, 0x0) (async, rerun: 64) read$auto(0x3, 0x0, 0x80) (async) r2 = getuid() statx$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xf2e1, 0xf, &(0x7f0000000140)={0x80, 0x1, 0x4, 0x1000, r2, 0x0, 0x7fff, 0x9, 0x9, 0x5, 0x2, 0xffffffff, {0x10000006, 0xffffb58b}, {0xffffffffffffffff, 0x820a}, {0x6, 0x7}, {0x4, 0x2e}, 0x7, 0x3, 0x0, 0x7, 0x9, 0x5, 0x0, 0x4, 0x3, 0x974, 0x3, 0x0, [0x5, 0xfffffffffffffff9, 0x8, 0xfffffffffffff2ef, 0x22, 0x4, 0x6, 0x7, 0x2]}) (async, rerun: 64) mmap$auto(0x1, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) (async, rerun: 64) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) (async) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) (async) mmap$auto(0x0, 0x400008, 0x4ed2, 0x1000009b76, r1, 0x400) (async) close_range$auto(0x2, 0x8, 0x0) (async) sysfs$auto(0x2, 0x100000000000027, 0x0) (async) r3 = fsopen$auto(0x0, 0x1) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x22048814) (async) preadv2$auto(r3, &(0x7f0000000480)={&(0x7f0000000800)="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", 0x2766}, 0x2, 0x6, 0xfffffffffffff371, 0x4) (async) socket(0x2b, 0x800, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x810) (async) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x0, 0x8, 0xd, 0x3, 0x0, 0xfffffffc, 0x2000000000000002, 0x0, 0x80000001, 0x1, 0x2, 0x80000001, 0xad, 0x9, 0x1, 0xffffffff, 0x3, 0x7, 0x7, 0x7ff, 0x0, 0xffffffee, 0x2a17, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7ffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000008001, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x8, 0x71a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffe9, 0x0, 0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x8000000000009, 0x81) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 3.881958672s ago: executing program 1 (id=2610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f0000011780)={0x0, 0x0, &(0x7f0000011740)={&(0x7f0000001900)={0x1448, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_PMSR_RESULT={0x1430, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x142c, 0x5, 0x0, 0x1, [{0x1390, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xffc, 0x1, "3617591c4509c74988c568b3e62afb163c9a429f3319f22fcd1295d31ba16d8e489e69fa502b2d957e58943dc7c742464178a70810f6be969d7105ef83248f0d9bde21426a509e2108e5947f3bdf8b3c1150488d1b13b8bcd0468fcefff7668b2aa69857a5c4ac9ca6723e5c0a5f51b18850bbc35e84bed4b2edacb9308f38762ada5ccf26a82c52bdf108761d045ae38be7dc2d37b20d0837b3b628bf963de287ec0081ebe3de1038090161d7272acf77e8e30789c94ec769c6af57e2c3fd45450ea2b57a338667f8714b1097b7564bd169ff3ab7002553e13180f571b5aafe8fafd2f5dfc510fc1f146049640e4fbae846ea0da9021541eed9b3e0cc1c33f938d055509489bd80f50ca1d0ab775c2ec72185c447647effb9d9b2abed7155bbb3e65ae304594e95882710d926d52c1cdbf79302e6484651c6a842c381c49533d2b49c0bed50906d940f83567c15b7348d88daf2a0009e5439e4593d9808138ac55ef6bef7cde29426bef94b6fe5074b99ed97c58d8b7df8c291c9e50d8b8a84273100287e219ca9339d787c80c5b547349688fa6e0a1c10b47bbe4f134031a0ded0df8d02b1f5ce40f6b7273d302f71415305dcc79f033ffe9a0051dc91594fa90e5934ccf8424ba09e85b2cdbdaad0c557ba431d5a520b727405854eb09f8b4bf5a6440be7b32e78574dd237b2f89dd0a6efe7e65bcd6bd614948e059ac3710d49bb40431c6d5e79c0cc819b66565037f8e137148a02bfb4f38c2dd8ac15516655f494fc06a5e103ff1d6ca5c4fc3270d1c87b5bd7d0819829d95e614c703c9a37bf1682ec94a7764c28caddc79a5e20d55780c82b78002376a782e3bfa4ed4be7a41ffb684a2719a1983f68941e4f2508fd2ad8eafcb0a6bc9214eddd744fea02e7e7f1ba20fb5057cf90ad50d2cbfdce39101f3cb7391b398dfca10fd2512656d8f34a0c2b24f548fbfa2e9f7c43f0275efaa0ba6ec515d0c4b71fa4bc5918daabaaa1743ba9b23df70bb12e43e1a064d2b8b88accf5394d58b6420633d5ab2126e0ec49ac10fd7beb2389a8932a732723def618efebe22f800d6874947f8ad128dbcbc46b0674d7766bb6306a3b5af151450992e4d7242918af4498ab9b5edaae5c6a9bf2fa30000423e42ef8e6bb6590ac95225a871383f58f2250c28ce142c7a8406bd4ef96f8723d6db007588285446918972d82812a2df4e710c1d32e7525eb0986ab6e0dc44752f93fee6c0fd1abeb837a670401cb4c85b1bd4fd1367feb0183267f85d7b795b8ea1afa4f477d04ce30370be7a4921b50554284a4809ada2761afaa4c489e8f0a1158445fd9004879f4e96164094f869303422942a1e7e655c7834e95840e1c349c26ef5547afa038361e6cfe3b7b2205963bb36a13a08d50da55330093b2c9d87bf84d686b331b94ea0859618cbccaff63ba4872fb52b4268febe630e29957be3d98e6d6d38faef07ace036aa0752953fd0f801449b4251d3d4cdd8575aadce66cee6870f3181ecbb6bca6656f368552d383b943dc61aa9b934950d2de61552d411bed9333d029ad030ed7aa042a8678d8302115a23ec5888686f6a7434dabc95b3d60f9cb0fac3a760b45606199f21fff0f9054c20365a8f2295c6b031e38f249adefbfa3fffb47d954a818aeb016f6055a569586079387bac4df8234cd5df818efa0a47ad71aa252dab0cec2ef2073c9b6468f467e1f44e13e117a05a18fef2721914f4a9f12be3fc433f551172309111076d9582f9792f2571abc550b0ccf556906b0384cb1ac8d928e4f3920af6ae84d4974be442766a1162c4faa87b6f99fe0fe3999594c55e0feb1fb00a7507662faf2feb07e394f65b578b5a79780da8240f120791b6cdea70a4117d2cd601eeca0c3149119f90a1463cda3e05b5a0efa67ae2d6a003fa0b3823432015f6ebea1d69b78655bacf5716e144b827b963ca8436b7c06f483ce1b6a5d1bd15bfdef6106d9bfd37a6b17d56906766066bdd64ef7f64cba52affbca4cb070eef9ae5a420c3ad1016aa73cb2ad443f1020ee83a70db3d91acb70ac1fe84760ac62c14408dac2cf1aa0c32429fe48be920a421ab2b7235561f26aa3be49421246522740ad77f3c8cf36a095e5bf490bace7cf0e230c60bd575dfdc7cafd3fbf4e715c6112d90e874b1274125c37ded7edc92ac0c22cad237406bd1b50027a359e311bb93bc9239f2180af13d92f93360a1cdbed9c525039ad51b6706dd1b3b430c99c171635aa04c0066c4733db0ad4ca9ba6dc163a082f47adaee3126ec5595faa5bbec943d9a97f1e26cf8c9ab316cc581dac5688ac6e07134c26c375d8b4c1abce934c2858b5302b12c11bf8f0d2c5ad416adeca77cdd8f14522d47cce76ace6b8915a083bd3ae64ee42441b1f8fd14426ef7530a06da22b17aa4a8a5848699798c7b3c8225617e054f63215908aae572b1d8269d38edec7da392f6e5faa58852a4229430ce559c79b5ccc1bb446317f4471ee9d3696c7ca7d7aea8ed7f8bcc2ded5687aa1e6c5ebe4b88ca97f738cab697550b37e885e65b5c6ec0c05a1c70e3cf47709bcf4a2934a9f5a617d80d72d2043dbcd186d3f333fefd80d24e44d2d26edfe132ca86844e3a9c7888d09bf3c99f2811de6e35171b2f9d9c12a44f579068e2a60aec6736e1450fa3ebd6fe016a4fa9ec77c7203cb7407cd3e96b4bd1ccf80a649865dec4163b1dc3c2b804c428650d43e48d1d19d09bacb5c10c2a026cb2e0aa2de09e7d1fb5a86a11faed106f4b2f80935a5d3ed04a2c5794e21ee4002c8c510a806c94e2089195fd5dac400d4410b1f45284a9baf6f618f3061e6ab478d245c29a70849deb0a336e5c010155c783a1f8fc63808c266a97c8ba240e0da877d286e37016f0630282ecde819aa4585e21c53bbb1359703a0d30a2bd54ef0724f138298282189dfc535cb98ab0a28efac9a5e1de60c3609e89c73c4d3fe6dcebace96e7a3dfc824ae2218d0cc1d3b4af95ed18305660cada70647dc7a1b9dabcc8fa431f6c5830e31b799180e203ac8bad78423cc318a645275745ba0fcd0e0c3c2679df3b2df4d366074a1d1990a6cd3f78233aea3b1d08390f05b4ae95a9c867f4208d73ee43c95d631da5e4703e26912d126b695b50dc84bfa7f592cc5bdf5d1b3b4c3fabd913c798f1a790cec5950727eb0191575e4fef11497869293206963d576545c5dca685162f60e271525589b2901984e6cb22c71ac92a6c8a7b68075f23d2b264b0681c80b5de667cf4fb71e951063181951ba8077377fb272f94e05726b9c052cca18305eb883016b72dc23a1605f035bb94e24df231ed54c5232b880b7e5826803249ce3a54317705c6bf1655eb1215ab3b3861ad493aaf2a4c59a44966eea1e9857277ad388e490ee5f4a180296ac8c701b375960264a14b1d277cb26b617d0e4c5d0f54c88c13fabaddb2fa6d032a1b75a5a45c2cff786087fff9fea78924d7959109ab098e3dbdbb96c63947a8a37befec01a265464d52d4218d84595cae6af4c85badb96fd2763857244b68038018acfd32d4d37498c93a2d7cf6bf17cc751202a7160d90ce3685eb234a7145d1628267814031dda5620c736a410d394a9f2534c1f7e999b7b9fbfb61ac62b30c81080d0e9fa9de92f956060245e5f83a232b0905b3b3753f37d19932ebd074b758e5a49924464ca8e8fce05caaaaa3eb4fef033e4ef387a4e8771c27fb8c0a7e81180b03f23851d9fed84da2866cdb85182e1816e337fd82fd5c01856f6cc06edbf6c615350217856e001e1e34123208b51a5e6d0046a4e3ac04c3094b232ed20b9813994c84bf58ffa7a44c2d386995750da722b12df0b427f665083a5508540f480a0ed14cb368fa76b5d9d5959fe98697598d829478e2d9004c63ba4761f2e3824c1e05bd767ddea25ec0f3769608538eb4474fee741b55f8a240a7e0fa34d4ae11086bb4934a969e7a1ba0be5f99aacff5853734a20bcc032995d5ba688a1713e4ecc78ab5e597171726bdec1e8c1058a10ea63068a438007df103d74d467a124c427e1cecb745de1ee0a82196415dde0bc3fa06c7af0e62bf80762f917f0e06f9dc58bb8df30cffd64ffaadf0bae6ada8c0d268a556d560b1aeb8b7fe6090b0258b8eee5f2d27dda3384f2fcf8d006f0ca1ad6518ceb3203a34243457fdad9758509eedab7a06c78cce879359af0455564ded8e0bb52fbebdfa274f4e04c0ad7f447bebcd2af071aabe6f28f6f1d971bfa7475f85c25eef183603406e66eb4a0cef8fe745b3fff07d0edf1bc4704f4091a0e691c17138bc65593e0690b18df92310643f56d4a345f2a0f83105d1da75b7bc01e9f251062d64b3635951cb7996c1a7fa7d8204dffd80adef2268c38eef7f82a6376d2c2dee4b529eb16c27391d8b75d22ac931ee557d74b02ba3b2588cb962401eeb233d30f15951ee0308d3b56f5c05c7ac39ab71dcf09daf7a209442d8f1b5e26347ff085172b2bdaa71c2e3ac386ab0fbaebcdb730784a0f2119ba9b5e94ef42d96fec1108f08b3d71872a4f820f7fa1e01cba37cd4eec81f97dca0d5a754268293f122ef785a9211dac70f6958864f67fa9d6d613456f2d46622e8b4628c697eca7702070a1b3f87c2e8af96e4b95ee4f3c26d0d5c584559137149b70d3634cae1b8c309c831fdfdd00852d9de3595fac118dcf8929197ac15bf252be43e54f38edb085e2cf600851519e4748908c552fcc7bc073a48f332e852d314543c63506b051c613af551255c55cb0d75401ca54bce8caf4ed924c9cfb5ed54db5456462f2a90a62555aa60886079851526e35971c1b75ca217b177add8c94a9680a7c3783cc517b2baf6299144793fa08c6bc7fa6f063f1f6ec139caca63e25278c35533af2adc86ded1e76c23e7ec33f62bab73651da1b8b0af0524e67e78f237cf991c747b23e30470372daed67d2e52d2299f83c772ea264b4cf8887fc04bb13ba64d6b5f0c19fc4563651658643340eb8696982a3a5639eacc9831e5514459d22d98140ca12180a032f6bac99a55eae1bed1a94591915b8bacf2256ea0c76c415b1a8fc6d71fd1df9c6cb33e69a7c00b7fe40085c6cd55ecf26e86d99bbbd89e97a1ebeff20a7ab75a2e326fc2a43b7217505b822b3056b9d1749ce77be417118dde0833d5dd4569e647c8d90db91abb2ae9752d31ae566b8c4afe1835970f19346f9f266abffb797cf134aa71351412bc9375bd7306e513c9a870b40bd5d7e987e5d8aa68ddd0daf862d855d9c48d31f543892caf8cb282944ff8ed4a3c52e15ee8a4567703a6b3b7e8ea55ca7eb9e3f9449e517bb1927ea0db6077d83310b62a1897e54a2597d0cd1fec24a82afcbcda5318ee5690cafe670f1edc41b3377e728557b8b9330a00f33f3d2a16493e67d3f93b90e19ff990381fa79060fe7c6d85a00498cdec237d5664019eb73716d43be877f10b2e12a645cf457790f6113ec5f6f6078fe1fcddbfdb0e2dce451abd826a1ee93c5a4fd3dadb67e96d08d90653d023654a5d2e4499d9c776c5a18a01e2a6bb00c66774e17f956ce4cd3c1e0e3a05f1c35a37aeeb70962f72914e6c52160c2ba650b3b32e61dfc458fead98747db1bfd6f878580a601f738e394be28d35566287e931f29a9aae503d312e1ac3512fd43f520537231af4b98df2612fac53109000f89eb52e5180b234ec4b268d5c2619a60436b7bc1fe554a028549ee8b0892ed6f4b8f6d19b9773de8710fe51e0897df5653572a26a9ae70b1037eed"}, @NL80211_PMSR_PEER_ATTR_RESP={0x30, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x200}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x2a0, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x2}, @NL80211_PMSR_RESP_ATTR_DATA={0x20c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x5fbd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xfffffffffffffffb}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'thermal\x00'}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x80}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x800}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x6, 0x14, ',-'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x81}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x80000001}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x800}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x20000000000}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x7, 0x14, ')#!'}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x2228}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xac}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0xff}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xe8}]}, @NL80211_PMSR_TYPE_FTM={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, '%\xf2{:$}\x81('}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x1ff}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x9, 0x13, '\'@/+\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x34, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x8}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x9}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xb}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0xf9}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0xf}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x3b}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x61}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x14, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x8}]}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x24, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x9}, @HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0xb2}, @HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0xfb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x4}]}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xb, 0x14, 'TIPCv2\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9e, 0x1, "4e8cbb02b373e72c797c7812309e8d8b10789864b6580428224e2878a6503748a707f86b0936cb8dc18aaf66c2ccb2b7e8556582ab114561555cdcf2c214e84500bc265a7614a37054fc14477612d86c3a76520c8fe8310c48951d39f0feebe7f7cab92127bae7aa3ed8d6cabca8980d869ea63a051ef7f30e91eae1e56b383f6ed8611b1a311515978470ec453bc0067887101238cdd3afb21a"}, @NL80211_PMSR_PEER_ATTR_RESP={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xa}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x5c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0xffff}, @NL80211_PMSR_RESP_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xc}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xf}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x100000001}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3ff}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x10000}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xb552}]}]}]}]}]}, 0x1448}, 0x1, 0x0, 0x0, 0x4004090}, 0x80) 3.645327716s ago: executing program 2 (id=2611): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async, rerun: 32) r0 = socket(0x10, 0x2, 0x0) (rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async, rerun: 32) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x10004010) (rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) fsopen$auto(0x0, 0x3) (async) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0xdaea6d7da654cc89, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x404, 0x1ff, 0x7, 0x48, 0x1ff, 0x1ffdf, 0x4, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0xfffffffe, 0x800000, 0x7, 0x8, 0x7ff, 0xfffffffd, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x400000040000000, 0xffffffffffffffff, 0x1, 0x4, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0x10001, 0x0, 0x0, 0x0, 0x11b3, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfbfffffffffffffc, 0x9, 0x100000000a38, 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x4000000000, 0x7, 0x3]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) read$auto(r1, &(0x7f0000000040)=':\'[\'\\}]\x00', 0x8) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) preadv2$auto(r1, &(0x7f00000000c0)={&(0x7f0000000040), 0x5}, 0x6, 0x5, 0xfffffffffffffffa, 0x3) (async) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) socket(0x1d, 0x2, 0x6) 3.371199616s ago: executing program 5 (id=2613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000018c0), 0xffffffffffffffff) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$auto_SOUND_MIXER_READ_RECMASK2(r2, 0x80044dfd, &(0x7f0000000000)="a44fc74c0649e7de40b7dbc2d8f32c0d87be7530c8fcb852c359b14b3c8dd09d3046763e9818d7923fcaf570a47d5f5befa7743e532b253da051255fd09ed3ee5ef5606811a9d754dff924fdb2899f0d9f31c60a7e62df02d2252d486d6270946e2871d8939d1b8cb65f8286455484357895b9d9fe9b4c81b4971a7203d9d2883e189d3d67d3046d9742e68232bd1c6fa49919eee95677f50423ff8e7bdba37ce0f35e1ed38206e1c6fc179ec5ca598b959ede4238f86d6d145efe782033bbd9c0de77d3a24b5bd30cb3ccb5338f82e4b4a461f519dcd9b36e8ffc98ac17dc490d68f240741b98") sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f0000011780)={0x0, 0x0, &(0x7f0000011740)={&(0x7f0000001900)={0x1448, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_PMSR_RESULT={0x1430, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x142c, 0x5, 0x0, 0x1, [{0x1390, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xffc, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_RESP={0x30, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x200}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x2a0, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x2}, @NL80211_PMSR_RESP_ATTR_DATA={0x20c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x5fbd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xfffffffffffffffb}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'thermal\x00'}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x80}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x800}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x6, 0x14, ',-'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x81}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x80000001}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x800}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x20000000000}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x7, 0x14, ')#!'}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x2228}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xac}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0xff}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xe8}]}, @NL80211_PMSR_TYPE_FTM={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, '%\xf2{:$}\x81('}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x1ff}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x9, 0x13, '\'@/+\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x34, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x8}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x9}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xb}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0xf9}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0xf}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x3b}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x61}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x14, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x8}]}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x24, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x9}, @HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0xb2}, @HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0xfb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x4}]}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xb, 0x14, 'TIPCv2\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9e, 0x1, "4e8cbb02b373e72c797c7812309e8d8b10789864b6580428224e2878a6503748a707f86b0936cb8dc18aaf66c2ccb2b7e8556582ab114561555cdcf2c214e84500bc265a7614a37054fc14477612d86c3a76520c8fe8310c48951d39f0feebe7f7cab92127bae7aa3ed8d6cabca8980d869ea63a051ef7f30e91eae1e56b383f6ed8611b1a311515978470ec453bc0067887101238cdd3afb21a"}, @NL80211_PMSR_PEER_ATTR_RESP={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xa}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x5c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0xffff}, @NL80211_PMSR_RESP_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xc}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xf}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x100000001}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3ff}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x10000}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xb552}]}]}]}]}]}, 0x1448}, 0x1, 0x0, 0x0, 0x4004090}, 0x80) 3.280611609s ago: executing program 1 (id=2614): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[], 0x14}}, 0x4000080) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = fcntl$auto_F_GETLEASE(r0, 0x401, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) shmctl$auto_IPC_SET(0x7fa, 0x1, &(0x7f00000001c0)={{0xd2, 0xee00, 0xee01, 0xdb, 0x4, 0x10001, 0x2b}, 0x0, 0x80000000, 0x981, 0x213, @raw=0x5, @raw=0xe, 0x5, 0x0, &(0x7f0000000140), &(0x7f0000000300)="9c4276c90786f776dc051eeebb5d3086ee07831a77bb9dfa1f33aa01edeb1d039675c74c512d69e75285544ba7211f3da765485b059a0d2098be58ea4bdc3801ca451c34365bbe22ba321c66c24e236d"}) r3 = gettid() process_vm_readv$auto(r3, &(0x7f0000000040)={0x0, 0x2}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x3, 0x0) capget$auto(&(0x7f0000000440)={0xffff, 0xffffffffffffffff}, &(0x7f00000004c0)={0x2, 0xe7c3}) mbind$auto(0x5, 0x1, 0x7ace, &(0x7f0000000100)=0x4, 0x2, 0x0) r4 = gettid() tkill$auto(r4, 0x7) stat$auto(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x3, 0x1, 0x4, 0x800, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, 0xff, 0x10001, 0x8, 0x7fd4, 0x5, 0x2, 0xe0aa, 0x6, 0x8}) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x42080) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x101000, 0x0) ioctl$auto_FBIOGET_VSCREENINFO(r5, 0x4600, &(0x7f00000000c0)) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x1f00}, 0x40000) gettimeofday$auto(&(0x7f0000000000)={0x8, 0xd0}, &(0x7f0000000040)={0xec, 0xffff7fff}) write$auto(r5, &(0x7f0000000140)='/sys/devices/virtual/block/zram0/max_comp_streams\x00', 0x7) madvise$auto(0x100, 0x2003f0, 0x15) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/max_comp_streams\x00', 0x121102, 0x0) pread64$auto(r7, 0x0, 0x5, 0x8) madvise$auto(0x0, 0x200007, 0x19) sysfs$auto(0x3, 0x8000, 0x5) 2.894873724s ago: executing program 5 (id=2615): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) pipe2$auto(0x0, 0x80) socket(0x1e, 0x1, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x8, 0x5, 0x8) mmap$auto(0x0, 0x10000, 0x36598dfb, 0xeb2, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sda\x00', 0x1c5801, 0x0) read$auto_state_fops_(r0, &(0x7f0000000140)=""/184, 0xb8) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nbd4\x00', 0x80080, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c00, 0x0) sysfs$auto(0xf, 0x800000005, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1f, 0x2, 0x6) io_uring_setup$auto(0xe, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x6, 0x0) timer_create$auto_CLOCK_BOOTTIME_ALARM(0x9, &(0x7f0000000200)={@sival_int=0x80, @raw=0x1, 0x9}, &(0x7f0000000240)=0x5) socket(0x2, 0x6, 0x0) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x1f, 0x0) msgrcv$auto(0xfffffffc, 0x0, 0x6, 0x7, 0x401) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) mlock$auto(0x7, 0xe) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2.635340193s ago: executing program 2 (id=2616): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x2b, 0x1, 0x1) (async) socket(0x2b, 0x1, 0x1) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c810}, 0x200448c0) syz_genetlink_get_family_id$auto_wireguard(&(0x7f00000000c0), r1) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x10b040, 0x0) (async) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x10b040, 0x0) bpf$auto(0xfffff011, &(0x7f0000000000)=@test={r2, 0x4, 0xfab2, 0x468, 0x9, 0x2, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) (async) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) 2.315859772s ago: executing program 2 (id=2617): read$auto_fops_u32_ro_(0xffffffffffffffff, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000580)={0x13, 0x7, 0x8, 0x1000, 0x6, 0x8, 0x0, 0xffffffff, 0x40, 0x8, 0xc000000, 0x1a0, 0x401, 0x0, 0x6, 0x7, 0x0, 0xe9e3, 0x3, 0x2, 0x7, 0x0, 0x9, 0xe, 0x80000001, 0x37ea, [0x6, 0x2, 0x80000001, 0x5, 0x3ff, 0x5, 0x7ff, 0x6, 0x4, 0x4a, 0x7, 0x3, 0x4, 0x88, 0x9, 0x1, 0x7, 0x5, 0x95, 0x9, 0x1, 0x6, 0x8, 0x0, 0x8000, 0x7, 0x100000000, 0x80000001, 0x1880000000, 0x6, 0x8, 0xe, 0x8, 0x8000, 0x6, 0x6, 0x2, 0x0, 0x1800000000000000, 0x6, 0x6d4, 0xa167, 0x401, 0x8, 0xd, 0x1], "5570dc3f9ad44830af3163d864bc95e7c2f20b73514acedd76c758302594d65bd302ca9ecc185d57394faba70458781ee273422a086f4150b7bbc62f378698dc4bb416012fe83757c2a6b6138782a93efaae631832d1320a2c445e677ab57af787304d6fc35065c814476477528a5064f7d5182c487e52524bb82234"}, 0xb6ea, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0x15, 0x5, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, r0, 0x18000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(0x0, 0x3) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0xdaea6d7da654cc89, 0x0) fsetxattr$auto(r1, &(0x7f00000000c0)='/dev/dma_heap/system\x00', 0x0, 0x7, 0x10001) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x75, 0x0, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x401, 0x1ff, 0x7, 0x48, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x400000040000000, 0x0, 0x4, 0x4, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0xffffffffffffffff, 0x11af, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffe, 0x8, 0x4000000000, 0x7, 0x2]}, 0x1fe, 0xd) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x405040, 0x0) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) cachestat$auto(r3, &(0x7f0000000100)={0x7, 0x4}, &(0x7f0000000140)={0x3, 0x4, 0x80, 0x2, 0xd8}, 0xc) ioctl$auto(r5, 0x4008af10, r4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.758095413s ago: executing program 2 (id=2618): statmount$auto(&(0x7f0000000540)={0x5, @inferred, 0x101, 0x5, 0x9}, &(0x7f0000000580)={0x13, 0x7, 0x8, 0x1000, 0x6, 0x8, 0x0, 0xffffffff, 0x40, 0x8, 0xc000000, 0x1a0, 0x401, 0x0, 0x6, 0x7, 0x0, 0xe9e3, 0x3, 0x2, 0x7, 0x0, 0x9, 0xe, 0x80000001, 0x37ea, [0x6, 0x2, 0x80000001, 0x5, 0x3ff, 0x5, 0x7ff, 0x6, 0x4, 0x4a, 0x7, 0x3, 0x4, 0x88, 0x9, 0x1, 0x7, 0x5, 0x95, 0x9, 0x1, 0x6, 0x8, 0x0, 0x8000, 0x7, 0x100000000, 0x80000001, 0x1880000000, 0x6, 0x8, 0xe, 0x8, 0x8000, 0x6, 0x6, 0x2, 0x0, 0x1800000000000000, 0x6, 0x6d4, 0xa167, 0x401, 0x8, 0xd, 0x1], "5570dc3f9ad44830af3163d864bc95e7c2f20b73514acedd76c758302594d65bd302ca9ecc185d57394faba70458781ee273422a086f4150b7bbc62f378698dc4bb416012fe83757c2a6b6138782a93efaae631832d1320a2c445e677ab57af787304d6fc35065c814476477528a5064f7d5182c487e52524bb82234"}, 0xb6ea, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0x15, 0x5, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, r0, 0x18000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(0x0, 0x3) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0xdaea6d7da654cc89, 0x0) fsetxattr$auto(r1, &(0x7f00000000c0)='/dev/dma_heap/system\x00', 0x0, 0x7, 0x10001) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x75, 0x0, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x401, 0x1ff, 0x7, 0x48, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x400000040000000, 0x0, 0x4, 0x4, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0xffffffffffffffff, 0x11af, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffe, 0x8, 0x4000000000, 0x7, 0x2]}, 0x1fe, 0xd) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x405040, 0x0) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) cachestat$auto(r3, &(0x7f0000000100)={0x7, 0x4}, &(0x7f0000000140)={0x3, 0x4, 0x80, 0x2, 0xd8}, 0xc) ioctl$auto(r5, 0x4008af10, r4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.589137938s ago: executing program 5 (id=2619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f0000011780)={0x0, 0x0, &(0x7f0000011740)={&(0x7f0000001900)={0x1448, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_PMSR_RESULT={0x1430, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x142c, 0x5, 0x0, 0x1, [{0x1390, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xffc, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_RESP={0x30, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x200}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x2a0, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x2}, @NL80211_PMSR_RESP_ATTR_DATA={0x20c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x5fbd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xfffffffffffffffb}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'thermal\x00'}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x80}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x800}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x6, 0x14, ',-'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x81}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x80000001}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x800}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x20000000000}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x7, 0x14, ')#!'}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x2228}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xac}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0xff}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xe8}]}, @NL80211_PMSR_TYPE_FTM={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, '%\xf2{:$}\x81('}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x1ff}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x9, 0x13, '\'@/+\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x34, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x8}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x9}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xb}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0xf9}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0xf}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x3b}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x61}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x14, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x8}]}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x24, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x9}, @HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0xb2}, @HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0xfb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x4}]}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xb, 0x14, 'TIPCv2\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9e, 0x1, "4e8cbb02b373e72c797c7812309e8d8b10789864b6580428224e2878a6503748a707f86b0936cb8dc18aaf66c2ccb2b7e8556582ab114561555cdcf2c214e84500bc265a7614a37054fc14477612d86c3a76520c8fe8310c48951d39f0feebe7f7cab92127bae7aa3ed8d6cabca8980d869ea63a051ef7f30e91eae1e56b383f6ed8611b1a311515978470ec453bc0067887101238cdd3afb21a"}, @NL80211_PMSR_PEER_ATTR_RESP={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xa}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x5c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0xffff}, @NL80211_PMSR_RESP_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xc}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xf}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x100000001}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3ff}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x10000}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xb552}]}]}]}]}]}, 0x1448}, 0x1, 0x0, 0x0, 0x4004090}, 0x80) (fail_nth: 4) 1.482089855s ago: executing program 2 (id=2620): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = fanotify_init$auto(0x200, 0x2010000000000) fanotify_mark$auto(r0, 0x7007a4fc, 0x9, r0, 0x0) mmap$auto(0x0, 0x7, 0x1000000004, 0x9b72, 0x2, 0x100) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) listxattrat$auto(0xffffffffffffffff, 0x0, 0x7ffffffe, &(0x7f0000000380)='\xdf^\xe2o\x87D\x10\xa0\x0e1\xb5B\xd6k]Yh\x99\xf4\xbcy.8\xcd\xf2I\xcc\xf5\xc7\xee\xb8\xea\xb7+\xd8K\xf1\x1aI\xe6(\x9f\xaeS\xf1\x199\x1fk\x01\xf36\xe1 \x1a+\xcd\xfc6\xc7W\xeaw7\x1b\xf4\x01\xebQ\n\x94{\xb5\xa7/\xa3\xa7\x16\x82\x1c\rEqd\xf7~\xba{\x8f7S\x82\xed\x8es\x02W\xdc\x16l\xee\xf1\xd9\x83\xc8', 0xe9) statmount$auto(0x0, &(0x7f0000000480)={0x8, 0x0, 0x1, 0x6, 0xf, 0x940, 0x1ffde, 0x3, 0x6, 0x8000002, 0x9, 0x5, 0x5, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, [0x0, 0x4000000000000000, 0x10000, 0x243efbdf, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x800, 0x75, 0x0, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6c, 0x0, 0x0, 0xfffffffffffffffe], "b0a51d8e4987205c28dfeaf42624c119b191c6732373ed69f3968b870173faf41a9c735ea146d32b5fbbfaccb8ba9f28cce828f304c150ffbae3f5"}, 0x1ebc, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24048000}, 0xc0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0x7fffffff) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) r3 = socket(0xa, 0x3, 0x3c) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b70, r3) read$auto(r2, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) 1.359820633s ago: executing program 1 (id=2621): mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/arp\x00', 0x60000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000000)=""/223, 0xdf) r1 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f00000040c0)='/proc/self/oom_score_adj\x00', 0x8001, 0x0) write$auto_proc_oom_score_adj_operations_base(r1, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xc0240, 0x0) shutdown$auto(0x200000003, 0x2) 911.323473ms ago: executing program 4 (id=2622): syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r0 = socket(0xa, 0x1, 0x84) connect$auto(r0, &(0x7f0000000100)=@in={0x2, 0x4e25, @multicast1}, 0x7) socket(0x1d, 0x2, 0x7) socket(0x2, 0x5, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) (async) socket(0x2, 0x1, 0x106) (async) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb2, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f00000000c0), 0x303000, 0x0) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) socket(0x1d, 0x2, 0x6) (async) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) (async) socket(0xa, 0x1, 0x84) (async) r4 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2882, 0x1dc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x5a5900, 0x0) read$auto(r5, 0x0, 0x13) write$auto(r5, 0x0, 0x3) read$auto(r4, 0x0, 0x1) (async) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)=""/33, 0x21) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) (async) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) (async) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9) mmap$auto(0x0, 0x1003, 0x33, 0x14, 0x401, 0x8000) 620.101395ms ago: executing program 5 (id=2623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f0000011780)={0x0, 0x0, &(0x7f0000011740)={&(0x7f0000001900)={0x1448, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_PMSR_RESULT={0x1430, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x142c, 0x5, 0x0, 0x1, [{0x1390, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xffc, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_RESP={0x30, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x200}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x2a0, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x2}, @NL80211_PMSR_RESP_ATTR_DATA={0x20c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x5fbd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xfffffffffffffffb}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'thermal\x00'}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x80}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x800}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x6, 0x14, ',-'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x81}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x80000001}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x800}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x20000000000}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x7, 0x14, ')#!'}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x2228}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xac}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0xff}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xe8}]}, @NL80211_PMSR_TYPE_FTM={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, '%\xf2{:$}\x81('}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x1ff}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x9, 0x13, '\'@/+\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x34, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x8}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x9}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xb}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0xf9}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0xf}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x3b}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x61}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x14, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x8}]}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x24, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x9}, @HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0xb2}, @HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0xfb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x4}]}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xb, 0x14, 'TIPCv2\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9e, 0x1, "4e8cbb02b373e72c797c7812309e8d8b10789864b6580428224e2878a6503748a707f86b0936cb8dc18aaf66c2ccb2b7e8556582ab114561555cdcf2c214e84500bc265a7614a37054fc14477612d86c3a76520c8fe8310c48951d39f0feebe7f7cab92127bae7aa3ed8d6cabca8980d869ea63a051ef7f30e91eae1e56b383f6ed8611b1a311515978470ec453bc0067887101238cdd3afb21a"}, @NL80211_PMSR_PEER_ATTR_RESP={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xa}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x5c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0xffff}, @NL80211_PMSR_RESP_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xc}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xf}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x100000001}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3ff}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x10000}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xb552}]}]}]}]}]}, 0x1448}, 0x1, 0x0, 0x0, 0x4004090}, 0x80) 385.467708ms ago: executing program 4 (id=2624): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) shutdown$auto(0x200000003, 0x2) socket(0x29, 0x2, 0x9) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, &(0x7f0000000080)={0x0, 0x9}, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) init_module$auto(0xffffffffffffffff, 0x8001, 0xfffffffffffffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) r0 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0xffffffff) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01007050a7f82fc634b10f00003460fac93497d76d"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) 151.288769ms ago: executing program 2 (id=2625): r0 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci0/msft_opcode\x00', 0x0, 0x0) read$auto(r0, &(0x7f0000006740)='^%-[)>\'\xdf\x00', 0xffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000018c0), 0xffffffffffffffff) accept$auto(r1, &(0x7f0000000000)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, &(0x7f0000000040)=0x38e8) sendmsg$auto_HWSIM_CMD_REGISTER(r1, &(0x7f0000011780)={0x0, 0x0, &(0x7f0000011740)={&(0x7f0000001900)={0x1448, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_PMSR_RESULT={0x1430, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x142c, 0x5, 0x0, 0x1, [{0x1390, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xffc, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_RESP={0x30, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x200}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x2a0, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x2}, @NL80211_PMSR_RESP_ATTR_DATA={0x20c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x5fbd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xfffffffffffffffb}, @NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'thermal\x00'}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_AVG={0xc, 0xd, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x80}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x800}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x6, 0x14, ',-'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc, 0xe, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_VARIANCE={0xc}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x81}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0x80000001}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0x800}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x20000000000}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0x7, 0x14, ')#!'}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x2228}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xac}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0xff}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0xe8}]}, @NL80211_PMSR_TYPE_FTM={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, '%\xf2{:$}\x81('}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x1ff}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_LCI={0x9, 0x13, '\'@/+\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x34, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0x8}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x9}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xb}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0xf9}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0xf}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x3b}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x61}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x14, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x8}]}, @NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x24, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x9}, @HWSIM_RATE_INFO_ATTR_EHT_RU_ALLOC={0x5, 0xb, 0xb2}, @HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0xfb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x4}]}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xb, 0x14, 'TIPCv2\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9e, 0x1, "4e8cbb02b373e72c797c7812309e8d8b10789864b6580428224e2878a6503748a707f86b0936cb8dc18aaf66c2ccb2b7e8556582ab114561555cdcf2c214e84500bc265a7614a37054fc14477612d86c3a76520c8fe8310c48951d39f0feebe7f7cab92127bae7aa3ed8d6cabca8980d869ea63a051ef7f30e91eae1e56b383f6ed8611b1a311515978470ec453bc0067887101238cdd3afb21a"}, @NL80211_PMSR_PEER_ATTR_RESP={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xa}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}]}, {0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x5c, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0xffff}, @NL80211_PMSR_RESP_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0xd}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0xc}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0xf}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x100000001}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3ff}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x10000}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x28, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0xb552}]}]}]}]}]}, 0x1448}, 0x1, 0x0, 0x0, 0x4004090}, 0x80) 0s ago: executing program 5 (id=2626): read$auto_fops_u32_ro_(0xffffffffffffffff, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000580)={0x13, 0x7, 0x8, 0x1000, 0x6, 0x8, 0x0, 0xffffffff, 0x40, 0x8, 0xc000000, 0x1a0, 0x401, 0x0, 0x6, 0x7, 0x0, 0xe9e3, 0x3, 0x2, 0x7, 0x0, 0x9, 0xe, 0x80000001, 0x37ea, [0x6, 0x2, 0x80000001, 0x5, 0x3ff, 0x5, 0x7ff, 0x6, 0x4, 0x4a, 0x7, 0x3, 0x4, 0x88, 0x9, 0x1, 0x7, 0x5, 0x95, 0x9, 0x1, 0x6, 0x8, 0x0, 0x8000, 0x7, 0x100000000, 0x80000001, 0x1880000000, 0x6, 0x8, 0xe, 0x8, 0x8000, 0x6, 0x6, 0x2, 0x0, 0x1800000000000000, 0x6, 0x6d4, 0xa167, 0x401, 0x8, 0xd, 0x1], "5570dc3f9ad44830af3163d864bc95e7c2f20b73514acedd76c758302594d65bd302ca9ecc185d57394faba70458781ee273422a086f4150b7bbc62f378698dc4bb416012fe83757c2a6b6138782a93efaae631832d1320a2c445e677ab57af787304d6fc35065c814476477528a5064f7d5182c487e52524bb82234"}, 0xb6ea, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0x15, 0x5, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, r0, 0x18000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) fsopen$auto(0x0, 0x3) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0xdaea6d7da654cc89, 0x0) fsetxattr$auto(r1, &(0x7f00000000c0)='/dev/dma_heap/system\x00', 0x0, 0x7, 0x10001) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x75, 0x0, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x401, 0x1ff, 0x7, 0x48, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x400000040000000, 0x0, 0x4, 0x4, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0xffffffffffffffff, 0x11af, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffe, 0x8, 0x4000000000, 0x7, 0x2]}, 0x1fe, 0xd) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x405040, 0x0) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) cachestat$auto(r3, &(0x7f0000000100)={0x7, 0x4}, &(0x7f0000000140)={0x3, 0x4, 0x80, 0x2, 0xd8}, 0xc) ioctl$auto(r5, 0x4008af10, r4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) kernel console output (not intermixed with test programs): T14169] ? __pfx___might_resched+0x10/0x10 [ 526.670122][T14169] should_fail_alloc_page+0xe7/0x130 [ 526.670154][T14169] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 526.670195][T14169] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 526.670227][T14169] ? __pfx_mark_lock+0x10/0x10 [ 526.670257][T14169] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 526.670286][T14169] ? pgprot2cachemode+0x9b/0x140 [ 526.670309][T14169] ? __pfx_pgprot2cachemode+0x10/0x10 [ 526.670332][T14169] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 526.670387][T14169] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 526.670419][T14169] ? policy_nodemask+0xea/0x4e0 [ 526.670451][T14169] alloc_pages_mpol+0x1fc/0x540 [ 526.670480][T14169] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 526.670508][T14169] ? find_held_lock+0x2d/0x110 [ 526.670549][T14169] alloc_pages_noprof+0x131/0x390 [ 526.670578][T14169] kimage_alloc_pages+0x75/0x300 [ 526.670612][T14169] kimage_alloc_page+0x132/0x890 [ 526.670650][T14169] kimage_load_segment+0x1fc/0x770 [ 526.670688][T14169] do_kexec_load+0x503/0x8c0 [ 526.670719][T14169] ? __might_fault+0xe3/0x190 [ 526.670748][T14169] ? __pfx_do_kexec_load+0x10/0x10 [ 526.670782][T14169] ? _copy_from_user+0x59/0xd0 [ 526.670816][T14169] __x64_sys_kexec_load+0x1bf/0x230 [ 526.670851][T14169] do_syscall_64+0xcd/0x250 [ 526.670875][T14169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.670905][T14169] RIP: 0033:0x7f2b8898cde9 [ 526.670924][T14169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.670947][T14169] RSP: 002b:00007f2b8984c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 526.670970][T14169] RAX: ffffffffffffffda RBX: 00007f2b88ba5fa0 RCX: 00007f2b8898cde9 [ 526.670985][T14169] RDX: 0000400000000040 RSI: 0000000000000002 RDI: 0000000000000003 [ 526.670999][T14169] RBP: 00007f2b8984c090 R08: 0000000000000000 R09: 0000000000000000 [ 526.671013][T14169] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 526.671027][T14169] R13: 0000000000000000 R14: 00007f2b88ba5fa0 R15: 00007fffe576f0c8 [ 526.671057][T14169] [ 527.416136][T14177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1989'. [ 527.515272][T14183] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 527.517349][T14184] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 527.613220][T14187] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 527.635102][T14189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1985'. [ 527.666874][T14190] netlink: 'syz.3.1991': attribute type 11 has an invalid length. [ 527.676599][T14190] netlink: 'syz.3.1991': attribute type 11 has an invalid length. [ 527.762874][T14186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.793608][T14193] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 531.184208][T14233] FAULT_INJECTION: forcing a failure. [ 531.184208][T14233] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 531.242639][T14233] CPU: 0 UID: 0 PID: 14233 Comm: syz.2.1999 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 531.242679][T14233] Tainted: [U]=USER [ 531.242688][T14233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 531.242702][T14233] Call Trace: [ 531.242709][T14233] [ 531.242718][T14233] dump_stack_lvl+0x16c/0x1f0 [ 531.242758][T14233] should_fail_ex+0x50a/0x650 [ 531.242785][T14233] ? __pfx___might_resched+0x10/0x10 [ 531.242818][T14233] should_fail_alloc_page+0xe7/0x130 [ 531.242859][T14233] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 531.242900][T14233] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 531.242930][T14233] ? __pfx_mark_lock+0x10/0x10 [ 531.242961][T14233] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 531.242989][T14233] ? pgprot2cachemode+0x9b/0x140 [ 531.243011][T14233] ? __pfx_pgprot2cachemode+0x10/0x10 [ 531.243034][T14233] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 531.243082][T14233] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 531.243114][T14233] ? policy_nodemask+0xea/0x4e0 [ 531.243145][T14233] alloc_pages_mpol+0x1fc/0x540 [ 531.243175][T14233] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 531.243202][T14233] ? find_held_lock+0x2d/0x110 [ 531.243241][T14233] alloc_pages_noprof+0x131/0x390 [ 531.243274][T14233] kimage_alloc_pages+0x75/0x300 [ 531.243307][T14233] kimage_alloc_page+0x132/0x890 [ 531.243344][T14233] kimage_load_segment+0x1fc/0x770 [ 531.243382][T14233] do_kexec_load+0x503/0x8c0 [ 531.243413][T14233] ? __might_fault+0xe3/0x190 [ 531.243441][T14233] ? __pfx_do_kexec_load+0x10/0x10 [ 531.243474][T14233] ? _copy_from_user+0x59/0xd0 [ 531.243508][T14233] __x64_sys_kexec_load+0x1bf/0x230 [ 531.243542][T14233] do_syscall_64+0xcd/0x250 [ 531.243567][T14233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.243597][T14233] RIP: 0033:0x7f2b8898cde9 [ 531.243614][T14233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.243636][T14233] RSP: 002b:00007f2b8984c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 531.243655][T14233] RAX: ffffffffffffffda RBX: 00007f2b88ba5fa0 RCX: 00007f2b8898cde9 [ 531.243678][T14233] RDX: 0000400000000040 RSI: 0000000000000002 RDI: 0000000000000003 [ 531.243691][T14233] RBP: 00007f2b8984c090 R08: 0000000000000000 R09: 0000000000000000 [ 531.243704][T14233] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 531.243718][T14233] R13: 0000000000000000 R14: 00007f2b88ba5fa0 R15: 00007fffe576f0c8 [ 531.243749][T14233] [ 531.722021][T14236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2000'. [ 532.078237][T14240] netlink: 'syz.4.2001': attribute type 11 has an invalid length. [ 532.102597][T14240] netlink: 'syz.4.2001': attribute type 11 has an invalid length. [ 532.112345][T14239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.358250][T14246] netlink: 'syz.4.2011': attribute type 11 has an invalid length. [ 532.372639][T14246] netlink: 'syz.4.2011': attribute type 11 has an invalid length. [ 532.407679][T14245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.680205][T14254] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:32: corrupted in-inode xattr: bad magic number in in-inode xattr [ 532.697850][T14253] netlink: 'syz.4.2004': attribute type 11 has an invalid length. [ 532.726964][T14253] netlink: 'syz.4.2004': attribute type 11 has an invalid length. [ 532.742921][T14256] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:32: corrupted in-inode xattr: bad magic number in in-inode xattr [ 532.762125][T14252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.849978][T14250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2003'. [ 533.378364][T14263] netlink: 'syz.4.2014': attribute type 11 has an invalid length. [ 533.405805][T14263] netlink: 'syz.4.2014': attribute type 11 has an invalid length. [ 533.429553][T14261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.953634][T14276] netlink: 'syz.4.2019': attribute type 11 has an invalid length. [ 533.976445][T14276] netlink: 'syz.4.2019': attribute type 11 has an invalid length. [ 533.999028][T14275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.120817][T14282] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:43: corrupted in-inode xattr: bad magic number in in-inode xattr [ 534.192124][T14287] FAULT_INJECTION: forcing a failure. [ 534.192124][T14287] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 534.262532][T14287] CPU: 0 UID: 0 PID: 14287 Comm: syz.4.2012 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 534.262572][T14287] Tainted: [U]=USER [ 534.262580][T14287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 534.262593][T14287] Call Trace: [ 534.262601][T14287] [ 534.262610][T14287] dump_stack_lvl+0x16c/0x1f0 [ 534.262648][T14287] should_fail_ex+0x50a/0x650 [ 534.262675][T14287] ? __pfx___might_resched+0x10/0x10 [ 534.262708][T14287] should_fail_alloc_page+0xe7/0x130 [ 534.262738][T14287] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 534.262778][T14287] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 534.262809][T14287] ? __pfx_mark_lock+0x10/0x10 [ 534.262839][T14287] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 534.262866][T14287] ? pgprot2cachemode+0x9b/0x140 [ 534.262889][T14287] ? __pfx_pgprot2cachemode+0x10/0x10 [ 534.262910][T14287] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 534.262959][T14287] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 534.262990][T14287] ? policy_nodemask+0xea/0x4e0 [ 534.263020][T14287] alloc_pages_mpol+0x1fc/0x540 [ 534.263049][T14287] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 534.263076][T14287] ? find_held_lock+0x2d/0x110 [ 534.263116][T14287] alloc_pages_noprof+0x131/0x390 [ 534.263144][T14287] kimage_alloc_pages+0x75/0x300 [ 534.263176][T14287] kimage_alloc_page+0x132/0x890 [ 534.263202][T14287] ? __might_fault+0xe3/0x190 [ 534.263240][T14287] kimage_load_segment+0x1fc/0x770 [ 534.263279][T14287] do_kexec_load+0x503/0x8c0 [ 534.263315][T14287] ? __might_fault+0xe3/0x190 [ 534.263343][T14287] ? __pfx_do_kexec_load+0x10/0x10 [ 534.263376][T14287] ? _copy_from_user+0x59/0xd0 [ 534.263409][T14287] __x64_sys_kexec_load+0x1bf/0x230 [ 534.263443][T14287] do_syscall_64+0xcd/0x250 [ 534.263467][T14287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.263497][T14287] RIP: 0033:0x7fea1f38cde9 [ 534.263516][T14287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.263536][T14287] RSP: 002b:00007fea201c8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 534.263561][T14287] RAX: ffffffffffffffda RBX: 00007fea1f5a5fa0 RCX: 00007fea1f38cde9 [ 534.263578][T14287] RDX: 0000400000000040 RSI: 0000000000000002 RDI: 0000000000000003 [ 534.263591][T14287] RBP: 00007fea201c8090 R08: 0000000000000000 R09: 0000000000000000 [ 534.263605][T14287] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 534.263618][T14287] R13: 0000000000000000 R14: 00007fea1f5a5fa0 R15: 00007ffe8fc0fc28 [ 534.263649][T14287] [ 534.788747][T14289] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 535.011104][T14294] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 535.094064][T14298] netlink: 'syz.1.2015': attribute type 11 has an invalid length. [ 535.103135][T14298] netlink: 'syz.1.2015': attribute type 11 has an invalid length. [ 535.112987][T14301] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 535.116472][T14296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.276005][T14303] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:31: corrupted in-inode xattr: bad magic number in in-inode xattr [ 535.380166][T14308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.639004][T14322] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 536.405469][T14331] netlink: 'syz.3.2023': attribute type 11 has an invalid length. [ 536.463770][T14331] netlink: 'syz.3.2023': attribute type 11 has an invalid length. [ 536.878421][T14329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.083131][T14339] FAULT_INJECTION: forcing a failure. [ 537.083131][T14339] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 537.132537][T14339] CPU: 1 UID: 0 PID: 14339 Comm: syz.1.2026 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 537.132579][T14339] Tainted: [U]=USER [ 537.132589][T14339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 537.132604][T14339] Call Trace: [ 537.132611][T14339] [ 537.132621][T14339] dump_stack_lvl+0x16c/0x1f0 [ 537.132684][T14339] should_fail_ex+0x50a/0x650 [ 537.132711][T14339] ? __pfx___might_resched+0x10/0x10 [ 537.132771][T14339] should_fail_alloc_page+0xe7/0x130 [ 537.132802][T14339] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 537.132847][T14339] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 537.132877][T14339] ? __pfx_mark_lock+0x10/0x10 [ 537.132910][T14339] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 537.132938][T14339] ? pgprot2cachemode+0x9b/0x140 [ 537.132961][T14339] ? __pfx_pgprot2cachemode+0x10/0x10 [ 537.133002][T14339] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 537.133057][T14339] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 537.133092][T14339] ? policy_nodemask+0xea/0x4e0 [ 537.133123][T14339] alloc_pages_mpol+0x1fc/0x540 [ 537.133156][T14339] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 537.133184][T14339] ? find_held_lock+0x2d/0x110 [ 537.133225][T14339] alloc_pages_noprof+0x131/0x390 [ 537.133257][T14339] kimage_alloc_pages+0x75/0x300 [ 537.133288][T14339] kimage_alloc_page+0x132/0x890 [ 537.133319][T14339] ? __might_fault+0xe3/0x190 [ 537.133356][T14339] kimage_load_segment+0x1fc/0x770 [ 537.133394][T14339] do_kexec_load+0x503/0x8c0 [ 537.133430][T14339] ? __might_fault+0xe3/0x190 [ 537.133458][T14339] ? __pfx_do_kexec_load+0x10/0x10 [ 537.133495][T14339] ? _copy_from_user+0x59/0xd0 [ 537.133530][T14339] __x64_sys_kexec_load+0x1bf/0x230 [ 537.133563][T14339] do_syscall_64+0xcd/0x250 [ 537.133591][T14339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.133621][T14339] RIP: 0033:0x7f0e96b8cde9 [ 537.133640][T14339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.133666][T14339] RSP: 002b:00007f0e97915038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 537.133688][T14339] RAX: ffffffffffffffda RBX: 00007f0e96da5fa0 RCX: 00007f0e96b8cde9 [ 537.133704][T14339] RDX: 0000400000000040 RSI: 0000000000000002 RDI: 0000000000000003 [ 537.133718][T14339] RBP: 00007f0e97915090 R08: 0000000000000000 R09: 0000000000000000 [ 537.133732][T14339] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 537.133746][T14339] R13: 0000000000000000 R14: 00007f0e96da5fa0 R15: 00007fff1cb45e38 [ 537.133781][T14339] [ 537.938725][T14352] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 538.498414][T14355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2037'. [ 538.535453][T14361] netlink: 'syz.2.2029': attribute type 11 has an invalid length. [ 538.582537][T14361] netlink: 'syz.2.2029': attribute type 11 has an invalid length. [ 538.621576][T14360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.724455][T14382] netlink: 'syz.2.2036': attribute type 11 has an invalid length. [ 539.733825][T14382] netlink: 'syz.2.2036': attribute type 11 has an invalid length. [ 539.748991][T14381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.821009][T14386] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:32: corrupted in-inode xattr: bad magic number in in-inode xattr [ 539.840026][T14387] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:32: corrupted in-inode xattr: bad magic number in in-inode xattr [ 539.936644][T14389] FAULT_INJECTION: forcing a failure. [ 539.936644][T14389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.975757][T14389] CPU: 0 UID: 0 PID: 14389 Comm: syz.1.2038 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 539.975796][T14389] Tainted: [U]=USER [ 539.975804][T14389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 539.975818][T14389] Call Trace: [ 539.975825][T14389] [ 539.975835][T14389] dump_stack_lvl+0x16c/0x1f0 [ 539.975874][T14389] should_fail_ex+0x50a/0x650 [ 539.975907][T14389] _copy_from_user+0x2e/0xd0 [ 539.975939][T14389] kimage_load_segment+0x313/0x770 [ 539.975978][T14389] do_kexec_load+0x503/0x8c0 [ 539.976008][T14389] ? __might_fault+0xe3/0x190 [ 539.976037][T14389] ? __pfx_do_kexec_load+0x10/0x10 [ 539.976070][T14389] ? _copy_from_user+0x59/0xd0 [ 539.976103][T14389] __x64_sys_kexec_load+0x1bf/0x230 [ 539.976138][T14389] do_syscall_64+0xcd/0x250 [ 539.976162][T14389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.976193][T14389] RIP: 0033:0x7f0e96b8cde9 [ 539.976212][T14389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.976234][T14389] RSP: 002b:00007f0e97915038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 539.976257][T14389] RAX: ffffffffffffffda RBX: 00007f0e96da5fa0 RCX: 00007f0e96b8cde9 [ 539.976273][T14389] RDX: 0000400000000040 RSI: 0000000000000002 RDI: 0000000000000003 [ 539.976287][T14389] RBP: 00007f0e97915090 R08: 0000000000000000 R09: 0000000000000000 [ 539.976301][T14389] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 539.976315][T14389] R13: 0000000000000000 R14: 00007f0e96da5fa0 R15: 00007fff1cb45e38 [ 539.976345][T14389] [ 540.162024][T14390] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:32: corrupted in-inode xattr: bad magic number in in-inode xattr [ 540.275853][T14392] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 540.304431][T14394] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 540.344351][T14395] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:32: corrupted in-inode xattr: bad magic number in in-inode xattr [ 540.494837][T14396] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 540.508980][T14399] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:31: corrupted in-inode xattr: bad magic number in in-inode xattr [ 540.783918][T14401] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:31: corrupted in-inode xattr: bad magic number in in-inode xattr [ 541.039372][T14406] FAULT_INJECTION: forcing a failure. [ 541.039372][T14406] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 541.099285][T14406] CPU: 1 UID: 0 PID: 14406 Comm: syz.4.2049 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 541.099325][T14406] Tainted: [U]=USER [ 541.099333][T14406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 541.099348][T14406] Call Trace: [ 541.099355][T14406] [ 541.099366][T14406] dump_stack_lvl+0x16c/0x1f0 [ 541.099406][T14406] should_fail_ex+0x50a/0x650 [ 541.099433][T14406] ? __pfx___might_resched+0x10/0x10 [ 541.099467][T14406] should_fail_alloc_page+0xe7/0x130 [ 541.099498][T14406] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 541.099540][T14406] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 541.099571][T14406] ? __pfx_mark_lock+0x10/0x10 [ 541.099601][T14406] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 541.099629][T14406] ? pgprot2cachemode+0x9b/0x140 [ 541.099653][T14406] ? __pfx_pgprot2cachemode+0x10/0x10 [ 541.099676][T14406] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 541.099724][T14406] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 541.099757][T14406] ? policy_nodemask+0xea/0x4e0 [ 541.099789][T14406] alloc_pages_mpol+0x1fc/0x540 [ 541.099819][T14406] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 541.099847][T14406] ? find_held_lock+0x2d/0x110 [ 541.099894][T14406] alloc_pages_noprof+0x131/0x390 [ 541.099925][T14406] kimage_alloc_pages+0x75/0x300 [ 541.099958][T14406] kimage_alloc_page+0x132/0x890 [ 541.099997][T14406] kimage_load_segment+0x1fc/0x770 [ 541.100036][T14406] do_kexec_load+0x503/0x8c0 [ 541.100067][T14406] ? __might_fault+0xe3/0x190 [ 541.100096][T14406] ? __pfx_do_kexec_load+0x10/0x10 [ 541.100130][T14406] ? _copy_from_user+0x59/0xd0 [ 541.100166][T14406] __x64_sys_kexec_load+0x1bf/0x230 [ 541.100200][T14406] do_syscall_64+0xcd/0x250 [ 541.100226][T14406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.100256][T14406] RIP: 0033:0x7fea1f38cde9 [ 541.100274][T14406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.100296][T14406] RSP: 002b:00007fea201c8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 541.100333][T14406] RAX: ffffffffffffffda RBX: 00007fea1f5a5fa0 RCX: 00007fea1f38cde9 [ 541.100349][T14406] RDX: 0000400000000040 RSI: 0000000000000002 RDI: 0000000000000003 [ 541.100363][T14406] RBP: 00007fea201c8090 R08: 0000000000000000 R09: 0000000000000000 [ 541.100378][T14406] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 541.100396][T14406] R13: 0000000000000000 R14: 00007fea1f5a5fa0 R15: 00007ffe8fc0fc28 [ 541.100427][T14406] [ 541.944294][T14412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2042'. [ 543.554287][T14437] netlink: 'syz.3.2048': attribute type 11 has an invalid length. [ 543.583608][T14437] netlink: 'syz.3.2048': attribute type 11 has an invalid length. [ 543.615837][T14436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.819155][T14444] FAULT_INJECTION: forcing a failure. [ 543.819155][T14444] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 543.833869][T14444] CPU: 1 UID: 0 PID: 14444 Comm: syz.3.2052 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 543.833905][T14444] Tainted: [U]=USER [ 543.833913][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 543.833926][T14444] Call Trace: [ 543.833934][T14444] [ 543.833944][T14444] dump_stack_lvl+0x16c/0x1f0 [ 543.833983][T14444] should_fail_ex+0x50a/0x650 [ 543.834010][T14444] ? __pfx___might_resched+0x10/0x10 [ 543.834042][T14444] should_fail_alloc_page+0xe7/0x130 [ 543.834073][T14444] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 543.834114][T14444] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 543.834144][T14444] ? __pfx_mark_lock+0x10/0x10 [ 543.834175][T14444] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 543.834203][T14444] ? pgprot2cachemode+0x9b/0x140 [ 543.834225][T14444] ? __pfx_pgprot2cachemode+0x10/0x10 [ 543.834247][T14444] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 543.834296][T14444] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 543.834328][T14444] ? policy_nodemask+0xea/0x4e0 [ 543.834359][T14444] alloc_pages_mpol+0x1fc/0x540 [ 543.834389][T14444] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 543.834423][T14444] ? find_held_lock+0x2d/0x110 [ 543.834462][T14444] alloc_pages_noprof+0x131/0x390 [ 543.834492][T14444] kimage_alloc_pages+0x75/0x300 [ 543.834525][T14444] kimage_alloc_page+0x132/0x890 [ 543.834552][T14444] ? __might_fault+0xe3/0x190 [ 543.834590][T14444] kimage_load_segment+0x1fc/0x770 [ 543.834629][T14444] do_kexec_load+0x503/0x8c0 [ 543.834659][T14444] ? __might_fault+0xe3/0x190 [ 543.834688][T14444] ? __pfx_do_kexec_load+0x10/0x10 [ 543.834722][T14444] ? _copy_from_user+0x59/0xd0 [ 543.834755][T14444] __x64_sys_kexec_load+0x1bf/0x230 [ 543.834788][T14444] do_syscall_64+0xcd/0x250 [ 543.834812][T14444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.834842][T14444] RIP: 0033:0x7fc73af8cde9 [ 543.834861][T14444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.834882][T14444] RSP: 002b:00007fc73be42038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 543.834904][T14444] RAX: ffffffffffffffda RBX: 00007fc73b1a5fa0 RCX: 00007fc73af8cde9 [ 543.834920][T14444] RDX: 0000400000000040 RSI: 0000000000000002 RDI: 0000000000000003 [ 543.834934][T14444] RBP: 00007fc73be42090 R08: 0000000000000000 R09: 0000000000000000 [ 543.834948][T14444] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 543.834961][T14444] R13: 0000000000000000 R14: 00007fc73b1a5fa0 R15: 00007ffc77771758 [ 543.834992][T14444] [ 544.476435][T14451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2053'. [ 545.063104][T14468] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1198: comm udevd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 545.149112][T14468] udevd[14468]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 546.158337][T14486] netlink: 'syz.2.2061': attribute type 11 has an invalid length. [ 546.227396][T14486] netlink: 'syz.2.2061': attribute type 11 has an invalid length. [ 546.273483][T14485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.031242][T14504] FAULT_INJECTION: forcing a failure. [ 547.031242][T14504] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 547.055682][T14504] CPU: 1 UID: 0 PID: 14504 Comm: syz.1.2065 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 547.055718][T14504] Tainted: [U]=USER [ 547.055726][T14504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 547.055739][T14504] Call Trace: [ 547.055746][T14504] [ 547.055754][T14504] dump_stack_lvl+0x16c/0x1f0 [ 547.055793][T14504] should_fail_ex+0x50a/0x650 [ 547.055819][T14504] ? __pfx___might_resched+0x10/0x10 [ 547.055851][T14504] should_fail_alloc_page+0xe7/0x130 [ 547.055881][T14504] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 547.055922][T14504] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 547.055951][T14504] ? __pfx_mark_lock+0x10/0x10 [ 547.055979][T14504] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 547.056006][T14504] ? pgprot2cachemode+0x9b/0x140 [ 547.056028][T14504] ? __pfx_pgprot2cachemode+0x10/0x10 [ 547.056051][T14504] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 547.056100][T14504] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 547.056132][T14504] ? policy_nodemask+0xea/0x4e0 [ 547.056163][T14504] alloc_pages_mpol+0x1fc/0x540 [ 547.056193][T14504] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 547.056220][T14504] ? find_held_lock+0x2d/0x110 [ 547.056259][T14504] alloc_pages_noprof+0x131/0x390 [ 547.056289][T14504] kimage_alloc_pages+0x75/0x300 [ 547.056328][T14504] kimage_alloc_page+0x132/0x890 [ 547.056355][T14504] ? __might_fault+0xe3/0x190 [ 547.056392][T14504] kimage_load_segment+0x1fc/0x770 [ 547.056429][T14504] do_kexec_load+0x503/0x8c0 [ 547.056459][T14504] ? __might_fault+0xe3/0x190 [ 547.056489][T14504] ? __pfx_do_kexec_load+0x10/0x10 [ 547.056523][T14504] ? _copy_from_user+0x59/0xd0 [ 547.056557][T14504] __x64_sys_kexec_load+0x1bf/0x230 [ 547.056591][T14504] do_syscall_64+0xcd/0x250 [ 547.056615][T14504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.056645][T14504] RIP: 0033:0x7f0e96b8cde9 [ 547.056664][T14504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.056685][T14504] RSP: 002b:00007f0e97915038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 547.056707][T14504] RAX: ffffffffffffffda RBX: 00007f0e96da5fa0 RCX: 00007f0e96b8cde9 [ 547.056722][T14504] RDX: 0000400000000040 RSI: 0000000000000002 RDI: 0000000000000003 [ 547.056735][T14504] RBP: 00007f0e97915090 R08: 0000000000000000 R09: 0000000000000000 [ 547.056746][T14504] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 547.056759][T14504] R13: 0000000000000000 R14: 00007f0e96da5fa0 R15: 00007fff1cb45e38 [ 547.056789][T14504] [ 547.611523][T14508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2066'. [ 547.954080][T14525] netlink: 'syz.4.2071': attribute type 11 has an invalid length. [ 548.197717][T14525] netlink: 'syz.4.2071': attribute type 11 has an invalid length. [ 548.209243][T14524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.578576][T14538] openvswitch: netlink: Key type 236 is out of range max 32 [ 548.659926][T14540] netlink: 'syz.2.2082': attribute type 11 has an invalid length. [ 548.686591][T14540] netlink: 'syz.2.2082': attribute type 11 has an invalid length. [ 548.706564][T14539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.841806][T14548] FAULT_INJECTION: forcing a failure. [ 548.841806][T14548] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 548.902723][T14548] CPU: 1 UID: 0 PID: 14548 Comm: syz.1.2076 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 548.902765][T14548] Tainted: [U]=USER [ 548.902773][T14548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 548.902787][T14548] Call Trace: [ 548.902794][T14548] [ 548.902803][T14548] dump_stack_lvl+0x16c/0x1f0 [ 548.902843][T14548] should_fail_ex+0x50a/0x650 [ 548.902869][T14548] ? __pfx___might_resched+0x10/0x10 [ 548.902903][T14548] should_fail_alloc_page+0xe7/0x130 [ 548.902934][T14548] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 548.902976][T14548] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 548.903007][T14548] ? __pfx_mark_lock+0x10/0x10 [ 548.903037][T14548] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 548.903066][T14548] ? pgprot2cachemode+0x9b/0x140 [ 548.903088][T14548] ? __pfx_pgprot2cachemode+0x10/0x10 [ 548.903111][T14548] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 548.903166][T14548] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 548.903198][T14548] ? policy_nodemask+0xea/0x4e0 [ 548.903229][T14548] alloc_pages_mpol+0x1fc/0x540 [ 548.903259][T14548] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 548.903287][T14548] ? find_held_lock+0x2d/0x110 [ 548.903327][T14548] alloc_pages_noprof+0x131/0x390 [ 548.903357][T14548] kimage_alloc_pages+0x75/0x300 [ 548.903389][T14548] kimage_alloc_page+0x132/0x890 [ 548.903416][T14548] ? __might_fault+0xe3/0x190 [ 548.903454][T14548] kimage_load_segment+0x1fc/0x770 [ 548.903493][T14548] do_kexec_load+0x503/0x8c0 [ 548.903524][T14548] ? __might_fault+0xe3/0x190 [ 548.903551][T14548] ? __pfx_do_kexec_load+0x10/0x10 [ 548.903585][T14548] ? _copy_from_user+0x59/0xd0 [ 548.903618][T14548] __x64_sys_kexec_load+0x1bf/0x230 [ 548.903652][T14548] do_syscall_64+0xcd/0x250 [ 548.903677][T14548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.903707][T14548] RIP: 0033:0x7f0e96b8cde9 [ 548.903726][T14548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.903747][T14548] RSP: 002b:00007f0e97915038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 548.903769][T14548] RAX: ffffffffffffffda RBX: 00007f0e96da5fa0 RCX: 00007f0e96b8cde9 [ 548.903785][T14548] RDX: 0000400000000040 RSI: 0000000000000002 RDI: 0000000000000003 [ 548.903799][T14548] RBP: 00007f0e97915090 R08: 0000000000000000 R09: 0000000000000000 [ 548.903812][T14548] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 548.903826][T14548] R13: 0000000000000000 R14: 00007f0e96da5fa0 R15: 00007fff1cb45e38 [ 548.903856][T14548] [ 550.135470][T14558] netlink: 'syz.4.2087': attribute type 11 has an invalid length. [ 550.170160][T14558] netlink: 'syz.4.2087': attribute type 11 has an invalid length. [ 550.194410][T14559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2079'. [ 550.200500][T14556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.294560][T14567] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 550.333349][T14570] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 550.809999][T14587] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 550.852746][T14588] FAULT_INJECTION: forcing a failure. [ 550.852746][T14588] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 550.867966][T14588] CPU: 0 UID: 0 PID: 14588 Comm: syz.1.2089 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 550.868002][T14588] Tainted: [U]=USER [ 550.868010][T14588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 550.868024][T14588] Call Trace: [ 550.868031][T14588] [ 550.868040][T14588] dump_stack_lvl+0x16c/0x1f0 [ 550.868079][T14588] should_fail_ex+0x50a/0x650 [ 550.868105][T14588] ? __pfx___might_resched+0x10/0x10 [ 550.868135][T14588] should_fail_alloc_page+0xe7/0x130 [ 550.868163][T14588] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 550.868201][T14588] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 550.868230][T14588] ? __pfx_mark_lock+0x10/0x10 [ 550.868257][T14588] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 550.868284][T14588] ? pgprot2cachemode+0x9b/0x140 [ 550.868307][T14588] ? __pfx_pgprot2cachemode+0x10/0x10 [ 550.868329][T14588] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 550.868375][T14588] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 550.868406][T14588] ? policy_nodemask+0xea/0x4e0 [ 550.868436][T14588] alloc_pages_mpol+0x1fc/0x540 [ 550.868464][T14588] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 550.868490][T14588] ? find_held_lock+0x2d/0x110 [ 550.868527][T14588] alloc_pages_noprof+0x131/0x390 [ 550.868554][T14588] kimage_alloc_pages+0x75/0x300 [ 550.868585][T14588] kimage_alloc_page+0x132/0x890 [ 550.868610][T14588] ? __might_fault+0xe3/0x190 [ 550.868644][T14588] kimage_load_segment+0x1fc/0x770 [ 550.868680][T14588] do_kexec_load+0x503/0x8c0 [ 550.868708][T14588] ? __might_fault+0xe3/0x190 [ 550.868734][T14588] ? __pfx_do_kexec_load+0x10/0x10 [ 550.868765][T14588] ? _copy_from_user+0x59/0xd0 [ 550.868796][T14588] __x64_sys_kexec_load+0x1bf/0x230 [ 550.868827][T14588] do_syscall_64+0xcd/0x250 [ 550.868851][T14588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.868880][T14588] RIP: 0033:0x7f0e96b8cde9 [ 550.868899][T14588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.868922][T14588] RSP: 002b:00007f0e97915038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 550.868953][T14588] RAX: ffffffffffffffda RBX: 00007f0e96da5fa0 RCX: 00007f0e96b8cde9 [ 550.868969][T14588] RDX: 0000400000000040 RSI: 0000000000000002 RDI: 0000000000000003 [ 550.868983][T14588] RBP: 00007f0e97915090 R08: 0000000000000000 R09: 0000000000000000 [ 550.868997][T14588] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000003 [ 550.869010][T14588] R13: 0000000000000000 R14: 00007f0e96da5fa0 R15: 00007fff1cb45e38 [ 550.869040][T14588] [ 551.429801][T14592] ICMPv6: process `syz.2.2091' is using deprecated sysctl (syscall) net.ipv6.neigh.virt_wifi0.retrans_time - use net.ipv6.neigh.virt_wifi0.retrans_time_ms instead [ 551.635936][T14596] netlink: 'syz.4.2092': attribute type 11 has an invalid length. [ 551.668385][T14596] netlink: 'syz.4.2092': attribute type 11 has an invalid length. [ 551.689725][T14595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.774094][T14598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2093'. [ 552.233354][T14611] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 552.298854][T14615] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 552.597041][T14620] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 552.667873][T14620] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 552.687804][T14620] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 552.699504][T14620] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 553.143850][T14633] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 553.366734][T14644] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:31: corrupted in-inode xattr: bad magic number in in-inode xattr [ 553.549628][T14649] netlink: 'syz.2.2103': attribute type 11 has an invalid length. [ 553.579246][T14649] netlink: 'syz.2.2103': attribute type 11 has an invalid length. [ 553.602683][T14648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.897774][T14655] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2104'. [ 554.305796][T14664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2116'. [ 554.628818][T14670] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 554.672550][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 554.695344][T14670] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 554.733857][T14670] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 554.740761][T14670] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 555.379251][T14686] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 555.435012][T14689] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 555.620981][T14692] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 556.133899][T14700] netlink: 'syz.2.2115': attribute type 11 has an invalid length. [ 556.187118][T14700] netlink: 'syz.2.2115': attribute type 11 has an invalid length. [ 556.197371][T14699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.672534][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 556.752668][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 556.759746][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 556.760186][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 556.976939][T14718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2119'. [ 557.022262][T14722] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:31: corrupted in-inode xattr: bad magic number in in-inode xattr [ 557.062112][T14723] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:31: corrupted in-inode xattr: bad magic number in in-inode xattr [ 557.634075][T14726] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 557.732642][T14726] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 557.759703][T14726] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 557.848192][T14726] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 558.317726][T14744] netlink: 'syz.1.2125': attribute type 11 has an invalid length. [ 558.383010][T14744] netlink: 'syz.1.2125': attribute type 11 has an invalid length. [ 558.438198][T14743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.741243][T14754] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:32: corrupted in-inode xattr: bad magic number in in-inode xattr [ 559.729358][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 559.792933][ T5149] Bluetooth: hci3: command 0x0c1a tx timeout [ 559.799622][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 559.808062][T14762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2130'. [ 559.872502][ T5149] Bluetooth: hci1: command 0x0c1a tx timeout [ 560.134643][T14769] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 560.854368][T14777] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 560.924284][T14781] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 561.503546][ T5149] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 563.155118][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.162310][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.725620][T14794] netlink: 'syz.3.2137': attribute type 11 has an invalid length. [ 564.734656][T14794] netlink: 'syz.3.2137': attribute type 11 has an invalid length. [ 564.770069][T14793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.024175][T14805] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 565.263244][T14805] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 565.362834][T14805] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 565.419993][T14805] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 565.543295][T14815] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 565.583720][T14817] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:10: corrupted in-inode xattr: bad magic number in in-inode xattr [ 566.075071][T14824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2140'. [ 566.653051][T14836] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 566.713797][T14837] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:32: corrupted in-inode xattr: bad magic number in in-inode xattr [ 566.794079][T14838] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:14: corrupted in-inode xattr: bad magic number in in-inode xattr [ 566.869178][T14844] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:31: corrupted in-inode xattr: bad magic number in in-inode xattr [ 566.944262][T14847] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:32: corrupted in-inode xattr: bad magic number in in-inode xattr [ 566.970514][T14843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2152'. [ 567.072665][ T5149] Bluetooth: hci0: command 0x0c1a tx timeout [ 567.096919][T14852] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:32: corrupted in-inode xattr: bad magic number in in-inode xattr [ 567.173925][T14853] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 567.201755][T14855] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:13: corrupted in-inode xattr: bad magic number in in-inode xattr [ 567.262926][T14856] FAULT_INJECTION: forcing a failure. [ 567.262926][T14856] name failslab, interval 1, probability 0, space 0, times 0 [ 567.289434][T14856] CPU: 0 UID: 0 PID: 14856 Comm: syz.4.2146 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 567.289473][T14856] Tainted: [U]=USER [ 567.289483][T14856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 567.289499][T14856] Call Trace: [ 567.289507][T14856] [ 567.289517][T14856] dump_stack_lvl+0x16c/0x1f0 [ 567.289558][T14856] should_fail_ex+0x50a/0x650 [ 567.289588][T14856] ? fs_reclaim_acquire+0xae/0x150 [ 567.289629][T14856] should_failslab+0xc2/0x120 [ 567.289658][T14856] __kmalloc_noprof+0xce/0x4f0 [ 567.289683][T14856] ? class_create_file_ns+0x4c/0x60 [ 567.289714][T14856] ? ops_init+0x77/0x5f0 [ 567.289744][T14856] ops_init+0x77/0x5f0 [ 567.289773][T14856] setup_net+0x21f/0x860 [ 567.289801][T14856] ? __pfx_setup_net+0x10/0x10 [ 567.289823][T14856] ? down_read_killable+0xcc/0x380 [ 567.289850][T14856] ? __pfx_down_read_killable+0x10/0x10 [ 567.289879][T14856] ? debug_mutex_init+0x37/0x70 [ 567.289919][T14856] copy_net_ns+0x2b4/0x6c0 [ 567.289952][T14856] create_new_namespaces+0x3ea/0xad0 [ 567.289994][T14856] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 567.290030][T14856] ksys_unshare+0x45d/0xa40 [ 567.290066][T14856] ? __pfx_ksys_unshare+0x10/0x10 [ 567.290100][T14856] ? xfd_validate_state+0x5d/0x180 [ 567.290143][T14856] __x64_sys_unshare+0x31/0x40 [ 567.290178][T14856] do_syscall_64+0xcd/0x250 [ 567.290204][T14856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.290236][T14856] RIP: 0033:0x7fea1f38cde9 [ 567.290256][T14856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.290280][T14856] RSP: 002b:00007fea201c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 567.290305][T14856] RAX: ffffffffffffffda RBX: 00007fea1f5a5fa0 RCX: 00007fea1f38cde9 [ 567.290321][T14856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 567.290336][T14856] RBP: 00007fea1f40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 567.290351][T14856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.290373][T14856] R13: 0000000000000000 R14: 00007fea1f5a5fa0 R15: 00007ffe8fc0fc28 [ 567.290408][T14856] [ 567.646282][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 567.646299][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 567.653238][ T5149] Bluetooth: hci2: command 0x0c1a tx timeout [ 567.824270][T14863] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2147'. [ 567.858298][T14865] netlink: 'syz.4.2148': attribute type 11 has an invalid length. [ 567.868338][T14864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.908656][T14866] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:32: corrupted in-inode xattr: bad magic number in in-inode xattr [ 568.793461][T14879] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 568.813001][T14879] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 568.822608][T14879] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 568.829218][T14879] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 569.491940][T14892] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:31: corrupted in-inode xattr: bad magic number in in-inode xattr [ 570.022632][T14908] netlink: 'syz.2.2159': attribute type 11 has an invalid length. [ 570.059161][T14907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.833814][ T5149] Bluetooth: hci1: command 0x0c1a tx timeout [ 570.834422][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 570.840483][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 570.840533][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 571.926617][T14950] EXT4-fs error: 1 callbacks suppressed [ 572.382323][T14959] netlink: 'syz.3.2170': attribute type 11 has an invalid length. [ 572.410268][T14961] FAULT_INJECTION: forcing a failure. [ 572.410268][T14961] name fail_futex, interval 1, probability 0, space 0, times 0 [ 572.415722][T14956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.460494][T14961] CPU: 1 UID: 0 PID: 14961 Comm: syz.4.2168 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 572.460535][T14961] Tainted: [U]=USER [ 572.460544][T14961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 572.460559][T14961] Call Trace: [ 572.460567][T14961] [ 572.460577][T14961] dump_stack_lvl+0x16c/0x1f0 [ 572.460619][T14961] should_fail_ex+0x50a/0x650 [ 572.460653][T14961] get_futex_key+0x4a3/0x1000 [ 572.460690][T14961] ? do_writev+0x133/0x340 [ 572.460717][T14961] ? __pfx_get_futex_key+0x10/0x10 [ 572.460754][T14961] ? kfree+0x260/0x4d0 [ 572.460787][T14961] futex_wake+0xe8/0x4e0 [ 572.460818][T14961] ? __pfx_futex_wake+0x10/0x10 [ 572.460843][T14961] ? __pfx_lock_release+0x10/0x10 [ 572.460871][T14961] ? __pfx_vfs_writev+0x10/0x10 [ 572.460906][T14961] do_futex+0x1e5/0x350 [ 572.460939][T14961] ? __pfx_do_futex+0x10/0x10 [ 572.460962][T14961] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 572.461010][T14961] __x64_sys_futex+0x1e1/0x4c0 [ 572.461038][T14961] ? native_tss_update_io_bitmap+0x2ec/0x610 [ 572.461071][T14961] ? __pfx___x64_sys_futex+0x10/0x10 [ 572.461098][T14961] ? __pfx_do_writev+0x10/0x10 [ 572.461130][T14961] do_syscall_64+0xcd/0x250 [ 572.461156][T14961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.461188][T14961] RIP: 0033:0x7fea1f38cde9 [ 572.461207][T14961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.461231][T14961] RSP: 002b:00007fea201c80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 572.461254][T14961] RAX: ffffffffffffffda RBX: 00007fea1f5a5fa8 RCX: 00007fea1f38cde9 [ 572.461271][T14961] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fea1f5a5fac [ 572.461286][T14961] RBP: 00007fea1f5a5fa0 R08: 00007fea201c9000 R09: 0000000000000000 [ 572.461302][T14961] R10: 0000000000000007 R11: 0000000000000246 R12: 00007fea1f5a5fac [ 572.461316][T14961] R13: 0000000000000000 R14: 00007ffe8fc0fb40 R15: 00007ffe8fc0fc28 [ 572.461348][T14961] [ 573.885507][T14973] Invalid ELF header magic: != ELF [ 573.912601][T14986] Invalid ELF header magic: != ELF [ 575.488893][ T5844] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 575.585890][T15024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2185'. [ 575.614550][T15026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2187'. [ 575.786660][T15033] ecryptfs_miscdev_write: Invalid packet size [192] [ 576.151332][ T5844] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 577.657972][T15063] device-mapper: ioctl: device name cannot contain '/' [ 577.713657][T15063] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(1054394107.2484392961.2824543087), cmd(5) [ 578.142541][T15080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2199'. [ 578.339733][T15072] [U] [ 578.609559][T15098] EXT4-fs error: 5 callbacks suppressed [ 578.703567][T15093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2203'. [ 580.142443][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 580.157548][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 580.167037][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 580.178773][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 580.201463][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 580.212093][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 580.370715][T15117] netlink: 'syz.1.2209': attribute type 11 has an invalid length. [ 580.412703][T15117] netlink: 'syz.1.2209': attribute type 11 has an invalid length. [ 580.423632][T15116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.562709][T15120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2210'. [ 580.734835][T15114] chnl_net:caif_netlink_parms(): no params data found [ 580.791215][T15128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2211'. [ 580.817389][T15129] nbd: socks must be embedded in a SOCK_ITEM attr [ 580.973635][T15114] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.981459][T15114] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.001300][T15114] bridge_slave_0: entered allmulticast mode [ 581.016931][T15114] bridge_slave_0: entered promiscuous mode [ 581.028540][T15114] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.042830][T15114] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.050853][T15114] bridge_slave_1: entered allmulticast mode [ 581.083369][T15114] bridge_slave_1: entered promiscuous mode [ 581.186253][T15114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.270162][T15114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.439604][T15114] team0: Port device team_slave_0 added [ 581.476255][T15114] team0: Port device team_slave_1 added [ 581.705166][T15114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.734259][T15114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.778587][T15114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.799289][T15114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.808917][T15114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.857405][T15114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.004555][T15114] hsr_slave_0: entered promiscuous mode [ 582.011424][T15114] hsr_slave_1: entered promiscuous mode [ 582.033054][T15114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.041407][T15114] Cannot create hsr debugfs directory [ 582.131193][T15148] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2215'. [ 582.272515][ T5844] Bluetooth: hci4: command tx timeout [ 582.349790][T15114] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.511998][T15114] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.607023][T15170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2220'. [ 582.630930][T15114] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.736404][T15114] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.833367][T15179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2221'. [ 582.992662][T15114] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 583.015737][T15114] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 583.042969][T15114] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 583.064000][T15114] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 583.209999][T15114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.259799][T15114] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.287254][T15188] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2225'. [ 583.309060][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.316922][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.400383][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.408286][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.505256][T15114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 583.614719][T15114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.691793][T15114] veth0_vlan: entered promiscuous mode [ 583.727660][T15114] veth1_vlan: entered promiscuous mode [ 583.800902][T15114] veth0_macvtap: entered promiscuous mode [ 583.820394][T15114] veth1_macvtap: entered promiscuous mode [ 583.856618][T15114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.892903][T15114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.912527][T15114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.931184][T15114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.942988][T15114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.967794][T15114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.993267][T15114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.020784][T15114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.050132][T15114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.080817][T15114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.105838][T15114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.137096][T15114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.199772][T15114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.212592][T15114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.232561][T15114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.252487][T15114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.281326][T15114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.303713][T15114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.325452][T15114] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.336150][T15114] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.352519][ T5844] Bluetooth: hci4: command tx timeout [ 584.354147][T15114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.375511][T15114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.624353][ T5952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.658290][ T5952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.718605][ T5952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.742422][ T5952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.828672][T15208] EXT4-fs error: 7 callbacks suppressed [ 584.856364][T15209] netlink: 'syz.3.2229': attribute type 11 has an invalid length. [ 584.868850][T15209] netlink: 'syz.3.2229': attribute type 11 has an invalid length. [ 584.882146][T15207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.037078][T15206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2228'. [ 585.340191][T15215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2231'. [ 586.125906][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2233'. [ 586.438542][ T5844] Bluetooth: hci4: command tx timeout [ 587.285565][T15255] netlink: 'syz.3.2239': attribute type 11 has an invalid length. [ 587.302940][T15255] netlink: 'syz.3.2239': attribute type 11 has an invalid length. [ 587.330870][T15252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.593618][T15264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2242'. [ 587.635817][T15264] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 588.022741][T15262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2241'. [ 588.121050][T15277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2247'. [ 588.512469][ T5844] Bluetooth: hci4: command tx timeout [ 588.841771][T15294] netlink: 'syz.2.2253': attribute type 11 has an invalid length. [ 588.882621][T15294] netlink: 'syz.2.2253': attribute type 11 has an invalid length. [ 588.894522][T15293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.156702][T15305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2256'. [ 589.552151][T15311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2267'. [ 589.971813][T15313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2258'. [ 590.307536][T15328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2271'. [ 590.344600][T15332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2259'. [ 590.559864][T15335] EXT4-fs error: 5 callbacks suppressed [ 590.701912][T15337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2274'. [ 590.972288][T15354] netlink: 'syz.4.2263': attribute type 11 has an invalid length. [ 590.991366][T15354] netlink: 'syz.4.2263': attribute type 11 has an invalid length. [ 591.023616][T15353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.405630][T15367] netlink: 'syz.4.2281': attribute type 11 has an invalid length. [ 591.445091][T15367] netlink: 'syz.4.2281': attribute type 11 has an invalid length. [ 591.470525][T15366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.933262][T15380] __nla_validate_parse: 1 callbacks suppressed [ 591.933281][T15380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2276'. [ 592.213207][ T29] audit: type=1800 audit(4294975295.053:21): pid=15390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2280" name="discovery_nqn" dev="configfs" ino=52210 res=0 errno=0 [ 592.721075][T15398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2282'. [ 593.107011][T15411] netlink: 'syz.1.2285': attribute type 11 has an invalid length. [ 593.118061][T15411] netlink: 'syz.1.2285': attribute type 11 has an invalid length. [ 593.138743][T15410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.412881][ T29] audit: type=1326 audit(4294975296.263:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15420 comm="syz.4.2288" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea1f38cde9 code=0x0 [ 593.575165][T15426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2289'. [ 594.574107][T15444] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2293'. [ 594.638456][T15448] Invalid ELF header magic: != ELF [ 594.834656][T15453] netlink: 'syz.3.2296': attribute type 11 has an invalid length. [ 594.884221][T15453] netlink: 'syz.3.2296': attribute type 11 has an invalid length. [ 594.948580][T15451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.618424][T15467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2300'. [ 595.620543][T15468] Invalid ELF header magic: != ELF [ 595.703711][T15472] EXT4-fs error: 4 callbacks suppressed [ 595.720578][T15464] Invalid ELF header magic: != ELF [ 596.991291][T15491] synth uevent: /bus/memstick: unknown uevent action string [ 597.756596][T15509] udevd[15509]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 597.781669][T15510] netlink: 'syz.1.2307': attribute type 11 has an invalid length. [ 597.832528][T15510] netlink: 'syz.1.2307': attribute type 11 has an invalid length. [ 597.872937][T15508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.121832][T15522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2311'. [ 600.192475][T15551] netlink: 'syz.2.2317': attribute type 11 has an invalid length. [ 600.209491][T15551] netlink: 'syz.2.2317': attribute type 11 has an invalid length. [ 600.438000][T15550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.188560][T15566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2323'. [ 601.261287][T15572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2322'. [ 601.343850][T15580] EXT4-fs error: 2 callbacks suppressed [ 602.078134][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 602.094581][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 602.114225][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 602.151701][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 602.168786][ T5840] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 602.179432][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 602.694130][T15609] netlink: 'syz.4.2328': attribute type 11 has an invalid length. [ 602.722599][T15609] netlink: 'syz.4.2328': attribute type 11 has an invalid length. [ 602.738542][T15601] chnl_net:caif_netlink_parms(): no params data found [ 602.749328][T15608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.874798][T15601] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.888730][T15601] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.018671][T15601] bridge_slave_0: entered allmulticast mode [ 603.029484][T15601] bridge_slave_0: entered promiscuous mode [ 603.038565][T15601] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.046861][T15601] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.055201][T15601] bridge_slave_1: entered allmulticast mode [ 603.063181][T15601] bridge_slave_1: entered promiscuous mode [ 603.278182][T15601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.330249][T15601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.442289][T15601] team0: Port device team_slave_0 added [ 603.496043][T15601] team0: Port device team_slave_1 added [ 603.610759][T15601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.630182][T15601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.689124][T15601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.743027][T15601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.750703][T15601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.779841][T15601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.272695][ T5844] Bluetooth: hci5: command tx timeout [ 604.284962][T15634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2334'. [ 604.313590][T15601] hsr_slave_0: entered promiscuous mode [ 604.320492][T15601] hsr_slave_1: entered promiscuous mode [ 604.354761][T15601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 604.364476][T15601] Cannot create hsr debugfs directory [ 604.837825][T15601] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.018977][T15601] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.136535][T15644] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 605.141791][T15656] netlink: 'syz.4.2337': attribute type 11 has an invalid length. [ 605.192462][T15656] netlink: 'syz.4.2337': attribute type 11 has an invalid length. [ 605.218856][T15655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.368509][T15601] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.485883][T15601] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.558052][T15664] netlink: 346 bytes leftover after parsing attributes in process `syz.2.2340'. [ 605.714341][T15601] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 605.737166][T15601] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 605.758926][T15601] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 605.835174][T15601] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 605.956302][T15601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.983558][T15601] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.064783][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.072648][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.079502][T15681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2344'. [ 606.098945][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.106857][ T6434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.263682][T15688] netlink: 'syz.2.2345': attribute type 11 has an invalid length. [ 606.282938][T15688] netlink: 'syz.2.2345': attribute type 11 has an invalid length. [ 606.303816][T15686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.334734][ T5949] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.352478][ T5844] Bluetooth: hci5: command tx timeout [ 606.400712][T15601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.454441][ T5949] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.558089][T15601] veth0_vlan: entered promiscuous mode [ 606.637667][ T5949] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.695021][T15601] veth1_vlan: entered promiscuous mode [ 606.802016][ T5949] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.864693][T15601] veth0_macvtap: entered promiscuous mode [ 606.892013][T15601] veth1_macvtap: entered promiscuous mode [ 606.933957][T15601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.966042][T15601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.977786][T15601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.983963][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 606.989892][T15601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.999730][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 607.012056][T15601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.018188][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 607.031161][T15601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.047695][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 607.053044][T15601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.056363][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 607.075513][T15601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.077054][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 607.091560][T15601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.114060][T15601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.126934][T15601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.139552][T15601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.151333][T15601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.162734][T15601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.174508][T15601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.185728][T15601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.197265][T15601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.208163][T15601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.219708][T15601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.230714][T15601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.248244][T15601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.260284][T15601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.283633][T15701] erspan0: entered allmulticast mode [ 607.387075][T15601] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.399958][T15601] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.410115][T15601] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.420244][T15601] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.466129][ T5949] bridge_slave_1: left allmulticast mode [ 607.476128][ T5949] bridge_slave_1: left promiscuous mode [ 607.484953][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.498009][ T5949] bridge_slave_0: left allmulticast mode [ 607.504591][ T5949] bridge_slave_0: left promiscuous mode [ 607.510855][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.078825][ T5949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.091941][ T5949] bond0 (unregistering): Released all slaves [ 608.281808][ T5949] HfR: left promiscuous mode [ 608.432633][ T5840] Bluetooth: hci5: command tx timeout [ 608.527772][T15719] EXT4-fs error: 19 callbacks suppressed [ 608.597297][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.642260][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.736795][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.766671][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.910294][T15724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2353'. [ 609.119542][T15702] chnl_net:caif_netlink_parms(): no params data found [ 609.153057][ T5840] Bluetooth: hci2: command tx timeout [ 609.611093][T15751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2362'. [ 609.973709][T15702] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.992721][T15702] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.000702][T15702] bridge_slave_0: entered allmulticast mode [ 610.024702][T15702] bridge_slave_0: entered promiscuous mode [ 610.043694][T15702] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.061957][T15702] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.082477][T15702] bridge_slave_1: entered allmulticast mode [ 610.090174][T15702] bridge_slave_1: entered promiscuous mode [ 610.274872][T15758] netlink: 'syz.4.2356': attribute type 11 has an invalid length. [ 610.314412][ T5949] hsr_slave_0: left promiscuous mode [ 610.323122][T15758] netlink: 'syz.4.2356': attribute type 11 has an invalid length. [ 610.333743][ T5949] hsr_slave_1: left promiscuous mode [ 610.340279][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.363477][T15757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.376024][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.409612][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.422502][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.505689][ T5949] veth0_macvtap: left promiscuous mode [ 610.512980][ T5840] Bluetooth: hci5: command tx timeout [ 610.515729][ T5949] veth1_vlan: left promiscuous mode [ 610.532816][ T5949] veth0_vlan: left promiscuous mode [ 610.676544][T15766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2358'. [ 611.242655][ T5840] Bluetooth: hci2: command tx timeout [ 611.713022][ T5949] team0 (unregistering): Port device team_slave_1 removed [ 611.779844][ T5949] team0 (unregistering): Port device team_slave_0 removed [ 612.258339][T15766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.270588][T15766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.280084][T15766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.288852][T15766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.317551][T15777] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2360'. [ 612.390419][T15702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.432303][T15702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.658108][T15702] team0: Port device team_slave_0 added [ 612.695482][T15702] team0: Port device team_slave_1 added [ 612.776533][T15702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.786110][T15702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.871839][T15702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.980122][T15702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.057015][T15702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.105742][T15702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.318118][ T5840] Bluetooth: hci2: command tx timeout [ 613.503402][T15702] hsr_slave_0: entered promiscuous mode [ 613.510318][T15702] hsr_slave_1: entered promiscuous mode [ 613.577311][T15804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2364'. [ 613.932091][T15811] EXT4-fs error: 23 callbacks suppressed [ 614.034342][T15702] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 614.046875][T15702] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 614.063526][T15702] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 614.077768][T15702] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 614.173792][T15702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.202127][T15702] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.219359][T10666] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.227193][T10666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.243119][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.250954][ T6434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.348443][T15702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.413795][T15702] veth0_vlan: entered promiscuous mode [ 614.430161][T15702] veth1_vlan: entered promiscuous mode [ 614.489745][T15702] veth0_macvtap: entered promiscuous mode [ 614.498919][T15702] veth1_macvtap: entered promiscuous mode [ 614.523726][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.536525][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.548447][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.560773][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.571870][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.583533][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.594555][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.606270][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.618111][T15702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.631017][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.642761][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.655567][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.667412][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.678394][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.693075][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.704002][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.715524][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.727570][T15702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.746754][T15702] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.756656][T15702] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.767887][T15702] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.778033][T15702] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.841677][ T5949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.855893][ T5949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.881538][T10666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.890711][T10666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.080066][T15851] udevd[15851]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 615.135739][T15847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2373'. [ 615.392865][ T5840] Bluetooth: hci2: command tx timeout [ 615.758686][T15873] netlink: 'syz.1.2367': attribute type 11 has an invalid length. [ 615.795302][T15873] netlink: 'syz.1.2367': attribute type 11 has an invalid length. [ 615.804522][T15869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2377'. [ 615.835213][T15871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.288424][T15880] FAULT_INJECTION: forcing a failure. [ 616.288424][T15880] name failslab, interval 1, probability 0, space 0, times 0 [ 616.305791][T15880] CPU: 0 UID: 0 PID: 15880 Comm: syz.4.2369 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 616.305833][T15880] Tainted: [U]=USER [ 616.305842][T15880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 616.305858][T15880] Call Trace: [ 616.305866][T15880] [ 616.305876][T15880] dump_stack_lvl+0x16c/0x1f0 [ 616.305919][T15880] should_fail_ex+0x50a/0x650 [ 616.305948][T15880] ? fs_reclaim_acquire+0xae/0x150 [ 616.305989][T15880] ? allocate_file_region_entries+0x1a3/0x620 [ 616.306020][T15880] should_failslab+0xc2/0x120 [ 616.306050][T15880] __kmalloc_cache_noprof+0x68/0x420 [ 616.306086][T15880] allocate_file_region_entries+0x1a3/0x620 [ 616.306121][T15880] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 616.306163][T15880] region_chg+0x85/0x140 [ 616.306195][T15880] __vma_reservation_common+0x43d/0x740 [ 616.306229][T15880] ? __pfx___vma_reservation_common+0x10/0x10 [ 616.306262][T15880] ? __pfx___might_resched+0x10/0x10 [ 616.306294][T15880] ? folio_zero_user+0x1a2/0x5f0 [ 616.306325][T15880] hugetlb_fault+0x1cc1/0x2fa0 [ 616.306354][T15880] ? rwsem_read_trylock+0x12d/0x250 [ 616.306388][T15880] ? __pfx_hugetlb_fault+0x10/0x10 [ 616.306413][T15880] ? find_held_lock+0x2d/0x110 [ 616.306462][T15880] ? __pfx___up_read+0x10/0x10 [ 616.306500][T15880] handle_mm_fault+0x930/0xaa0 [ 616.306536][T15880] __get_user_pages+0x773/0x36f0 [ 616.306573][T15880] ? __pfx_mt_find+0x10/0x10 [ 616.306613][T15880] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 616.306644][T15880] ? __pfx___get_user_pages+0x10/0x10 [ 616.306679][T15880] ? __mm_populate+0x21d/0x380 [ 616.306715][T15880] populate_vma_page_range+0x27f/0x3a0 [ 616.306747][T15880] ? __pfx_populate_vma_page_range+0x10/0x10 [ 616.306773][T15880] ? __pfx_find_vma_intersection+0x10/0x10 [ 616.306812][T15880] ? vm_mmap_pgoff+0x29b/0x3a0 [ 616.306844][T15880] __mm_populate+0x1d6/0x380 [ 616.306873][T15880] ? __pfx___mm_populate+0x10/0x10 [ 616.306904][T15880] ? up_write+0x1b2/0x520 [ 616.306939][T15880] vm_mmap_pgoff+0x2d3/0x3a0 [ 616.306969][T15880] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 616.306999][T15880] ? __fget_files+0x206/0x3a0 [ 616.307030][T15880] ksys_mmap_pgoff+0x32c/0x5c0 [ 616.307061][T15880] __x64_sys_mmap+0x125/0x190 [ 616.307097][T15880] do_syscall_64+0xcd/0x250 [ 616.307123][T15880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.307154][T15880] RIP: 0033:0x7fea1f38cde9 [ 616.307175][T15880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.307199][T15880] RSP: 002b:00007fea201c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 616.307222][T15880] RAX: ffffffffffffffda RBX: 00007fea1f5a5fa0 RCX: 00007fea1f38cde9 [ 616.307238][T15880] RDX: 0000000000000006 RSI: 0000000000000025 RDI: 0000000000000000 [ 616.307253][T15880] RBP: 00007fea1f40e2a0 R08: 0000000000000000 R09: 0000800000000000 [ 616.307268][T15880] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 616.307283][T15880] R13: 0000000000000000 R14: 00007fea1f5a5fa0 R15: 00007ffe8fc0fc28 [ 616.307317][T15880] [ 616.892960][T15892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2372'. [ 618.125298][T15924] netlink: 'syz.5.2381': attribute type 11 has an invalid length. [ 618.262827][T15924] netlink: 'syz.5.2381': attribute type 11 has an invalid length. [ 618.326689][T15923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.519878][T15927] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2382'. [ 618.624221][T15927] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 618.953426][T15940] EXT4-fs error: 30 callbacks suppressed [ 619.866573][T15945] FAULT_INJECTION: forcing a failure. [ 619.866573][T15945] name fail_futex, interval 1, probability 0, space 0, times 0 [ 619.893040][T15945] CPU: 1 UID: 0 PID: 15945 Comm: syz.1.2386 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 619.893082][T15945] Tainted: [U]=USER [ 619.893091][T15945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 619.893106][T15945] Call Trace: [ 619.893114][T15945] [ 619.893123][T15945] dump_stack_lvl+0x16c/0x1f0 [ 619.893169][T15945] should_fail_ex+0x50a/0x650 [ 619.893204][T15945] get_futex_key+0x4a3/0x1000 [ 619.893246][T15945] ? __pfx_get_futex_key+0x10/0x10 [ 619.893289][T15945] ? __pfx___lock_acquire+0x10/0x10 [ 619.893321][T15945] futex_wait_setup+0x78/0x290 [ 619.893358][T15945] __futex_wait+0x267/0x3c0 [ 619.893389][T15945] ? __pfx___futex_wait+0x10/0x10 [ 619.893424][T15945] ? __pfx_futex_wake_mark+0x10/0x10 [ 619.893460][T15945] ? __up_read+0x1fb/0x760 [ 619.893492][T15945] futex_wait+0xe9/0x380 [ 619.893521][T15945] ? __pfx_futex_wait+0x10/0x10 [ 619.893557][T15945] ? __pfx___mm_populate+0x10/0x10 [ 619.893593][T15945] do_futex+0x22b/0x350 [ 619.893617][T15945] ? __pfx_do_futex+0x10/0x10 [ 619.893643][T15945] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 619.893673][T15945] __x64_sys_futex+0x1e1/0x4c0 [ 619.893703][T15945] ? __pfx___x64_sys_futex+0x10/0x10 [ 619.893729][T15945] ? rcu_is_watching+0x12/0xc0 [ 619.893772][T15945] do_syscall_64+0xcd/0x250 [ 619.893798][T15945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.893830][T15945] RIP: 0033:0x7fb2fa78cde9 [ 619.893850][T15945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.893874][T15945] RSP: 002b:00007fb2fb6180e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 619.893897][T15945] RAX: ffffffffffffffda RBX: 00007fb2fa9a5fa8 RCX: 00007fb2fa78cde9 [ 619.893915][T15945] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb2fa9a5fa8 [ 619.893932][T15945] RBP: 00007fb2fa9a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 619.893948][T15945] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2fa9a5fac [ 619.893963][T15945] R13: 0000000000000000 R14: 00007fff375a6b50 R15: 00007fff375a6c38 [ 619.893995][T15945] [ 620.272065][T15965] can: request_module (can-proto-0) failed. [ 620.624761][T15978] netlink: 'syz.2.2392': attribute type 11 has an invalid length. [ 620.673568][T15978] netlink: 'syz.2.2392': attribute type 11 has an invalid length. [ 620.733424][T15977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.822825][T15981] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2395'. [ 620.863837][T15983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2394'. [ 621.225719][T15981] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 622.170296][T16022] FAULT_INJECTION: forcing a failure. [ 622.170296][T16022] name failslab, interval 1, probability 0, space 0, times 0 [ 622.219331][T16022] CPU: 1 UID: 0 PID: 16022 Comm: syz.1.2402 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 622.219367][T16022] Tainted: [U]=USER [ 622.219375][T16022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 622.219388][T16022] Call Trace: [ 622.219395][T16022] [ 622.219405][T16022] dump_stack_lvl+0x16c/0x1f0 [ 622.219445][T16022] should_fail_ex+0x50a/0x650 [ 622.219472][T16022] ? fs_reclaim_acquire+0xae/0x150 [ 622.219510][T16022] should_failslab+0xc2/0x120 [ 622.219538][T16022] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 622.219566][T16022] ? alloc_empty_file+0x73/0x1e0 [ 622.219600][T16022] alloc_empty_file+0x73/0x1e0 [ 622.219630][T16022] path_openat+0xe1/0x2d80 [ 622.219653][T16022] ? hlock_class+0x4e/0x130 [ 622.219686][T16022] ? __lock_acquire+0x15a9/0x3c40 [ 622.219722][T16022] ? __pfx_path_openat+0x10/0x10 [ 622.219747][T16022] ? __pfx___lock_acquire+0x10/0x10 [ 622.219772][T16022] ? lock_acquire.part.0+0x11b/0x380 [ 622.219798][T16022] ? find_held_lock+0x2d/0x110 [ 622.219834][T16022] do_filp_open+0x20c/0x470 [ 622.219860][T16022] ? __pfx_do_filp_open+0x10/0x10 [ 622.219883][T16022] ? find_held_lock+0x2d/0x110 [ 622.219936][T16022] ? alloc_fd+0x41f/0x760 [ 622.219970][T16022] do_sys_openat2+0x17a/0x1e0 [ 622.220000][T16022] ? __pfx_do_sys_openat2+0x10/0x10 [ 622.220047][T16022] __x64_sys_openat+0x175/0x210 [ 622.220077][T16022] ? __pfx___x64_sys_openat+0x10/0x10 [ 622.220120][T16022] do_syscall_64+0xcd/0x250 [ 622.220145][T16022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.220175][T16022] RIP: 0033:0x7fb2fa78cde9 [ 622.220193][T16022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.220215][T16022] RSP: 002b:00007fb2fb5f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 622.220235][T16022] RAX: ffffffffffffffda RBX: 00007fb2fa9a6080 RCX: 00007fb2fa78cde9 [ 622.220249][T16022] RDX: 0000000000000000 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 622.220262][T16022] RBP: 00007fb2fa80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 622.220276][T16022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.220289][T16022] R13: 0000000000000000 R14: 00007fb2fa9a6080 R15: 00007fff375a6c38 [ 622.220318][T16022] [ 623.080739][T16012] FAULT_INJECTION: forcing a failure. [ 623.080739][T16012] name fail_futex, interval 1, probability 0, space 0, times 0 [ 623.172511][T16012] CPU: 1 UID: 0 PID: 16012 Comm: syz.5.2400 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 623.172550][T16012] Tainted: [U]=USER [ 623.172558][T16012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 623.172571][T16012] Call Trace: [ 623.172578][T16012] [ 623.172587][T16012] dump_stack_lvl+0x16c/0x1f0 [ 623.172624][T16012] should_fail_ex+0x50a/0x650 [ 623.172651][T16012] ? __lock_acquire+0x15a9/0x3c40 [ 623.172680][T16012] get_futex_key+0x4a3/0x1000 [ 623.172717][T16012] ? __pfx_get_futex_key+0x10/0x10 [ 623.172762][T16012] futex_wake+0xe8/0x4e0 [ 623.172791][T16012] ? __pfx_futex_wake+0x10/0x10 [ 623.172819][T16012] ? find_held_lock+0x2d/0x110 [ 623.172860][T16012] do_futex+0x1e5/0x350 [ 623.172883][T16012] ? __pfx_do_futex+0x10/0x10 [ 623.172905][T16012] ? __might_fault+0xe3/0x190 [ 623.172948][T16012] ? __might_fault+0xe3/0x190 [ 623.172981][T16012] mm_release+0x24e/0x300 [ 623.173009][T16012] do_exit+0x886/0x2d70 [ 623.173034][T16012] ? get_signal+0x8f7/0x2610 [ 623.173063][T16012] ? __pfx_do_exit+0x10/0x10 [ 623.173084][T16012] ? do_raw_spin_lock+0x12d/0x2c0 [ 623.173114][T16012] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 623.173149][T16012] do_group_exit+0xd3/0x2a0 [ 623.173173][T16012] get_signal+0x2576/0x2610 [ 623.173205][T16012] ? __pfx___mm_populate+0x10/0x10 [ 623.173236][T16012] ? __pfx_get_signal+0x10/0x10 [ 623.173268][T16012] ? __pfx_do_futex+0x10/0x10 [ 623.173294][T16012] arch_do_signal_or_restart+0x90/0x7e0 [ 623.173320][T16012] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 623.173355][T16012] ? rcu_is_watching+0x12/0xc0 [ 623.173393][T16012] syscall_exit_to_user_mode+0x150/0x2a0 [ 623.173427][T16012] do_syscall_64+0xda/0x250 [ 623.173451][T16012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.173480][T16012] RIP: 0033:0x7f8dbc18cde9 [ 623.173497][T16012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.173517][T16012] RSP: 002b:00007f8dbcf5a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 623.173538][T16012] RAX: fffffffffffffe00 RBX: 00007f8dbc3a5fa8 RCX: 00007f8dbc18cde9 [ 623.173553][T16012] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8dbc3a5fa8 [ 623.173566][T16012] RBP: 00007f8dbc3a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 623.173581][T16012] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8dbc3a5fac [ 623.173593][T16012] R13: 0000000000000000 R14: 00007ffdfb742520 R15: 00007ffdfb742608 [ 623.173621][T16012] [ 623.224395][T16037] netlink: 'syz.1.2405': attribute type 11 has an invalid length. [ 623.512788][T16037] netlink: 'syz.1.2405': attribute type 11 has an invalid length. [ 623.553254][T16036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.574337][T16040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2406'. [ 623.828988][T16045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2407'. [ 624.002708][ T5840] Bluetooth: hci5: unexpected subevent 0x04 length: 122 > 11 [ 624.353162][T16064] EXT4-fs error: 6 callbacks suppressed [ 624.596456][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.604954][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.565864][T16076] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2416'. [ 625.612525][T16085] netlink: 'syz.1.2418': attribute type 11 has an invalid length. [ 625.649461][T16085] netlink: 'syz.1.2418': attribute type 11 has an invalid length. [ 625.690478][T16084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.911168][T16096] ima: policy update failed [ 625.919184][ T29] audit: type=1802 audit(4294975328.763:23): pid=16096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2420" res=0 errno=0 [ 625.959769][T16079] FAULT_INJECTION: forcing a failure. [ 625.959769][T16079] name failslab, interval 1, probability 0, space 0, times 0 [ 625.982458][T16079] CPU: 1 UID: 0 PID: 16079 Comm: syz.2.2415 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 625.982498][T16079] Tainted: [U]=USER [ 625.982506][T16079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 625.982521][T16079] Call Trace: [ 625.982527][T16079] [ 625.982537][T16079] dump_stack_lvl+0x16c/0x1f0 [ 625.982579][T16079] should_fail_ex+0x50a/0x650 [ 625.982608][T16079] ? fs_reclaim_acquire+0xae/0x150 [ 625.982646][T16079] ? resv_map_alloc+0x7e/0x400 [ 625.982685][T16079] should_failslab+0xc2/0x120 [ 625.982715][T16079] __kmalloc_cache_noprof+0x68/0x420 [ 625.982750][T16079] resv_map_alloc+0x7e/0x400 [ 625.982784][T16079] hugetlb_reserve_pages+0x79c/0x1090 [ 625.982821][T16079] ? hugetlbfs_file_mmap+0x388/0x7e0 [ 625.982851][T16079] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 625.982888][T16079] ? atime_needs_update+0x8b/0x710 [ 625.982932][T16079] hugetlbfs_file_mmap+0x511/0x7e0 [ 625.982966][T16079] __mmap_region+0x181f/0x2760 [ 625.982999][T16079] ? __pfx___mmap_region+0x10/0x10 [ 625.983038][T16079] ? hlock_class+0x4e/0x130 [ 625.983073][T16079] ? mark_lock+0xb5/0xc60 [ 625.983159][T16079] ? cap_capable+0xb3/0x250 [ 625.983201][T16079] mmap_region+0x1ab/0x3f0 [ 625.983254][T16079] do_mmap+0xd8d/0x11b0 [ 625.983287][T16079] ? __pfx_do_mmap+0x10/0x10 [ 625.983314][T16079] ? __pfx_down_write_killable+0x10/0x10 [ 625.983349][T16079] vm_mmap_pgoff+0x203/0x3a0 [ 625.983383][T16079] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 625.983414][T16079] ? __fget_files+0x206/0x3a0 [ 625.983447][T16079] ksys_mmap_pgoff+0x32c/0x5c0 [ 625.983476][T16079] __x64_sys_mmap+0x125/0x190 [ 625.983513][T16079] do_syscall_64+0xcd/0x250 [ 625.983537][T16079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.983570][T16079] RIP: 0033:0x7f95ddd8cde9 [ 625.983589][T16079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.983613][T16079] RSP: 002b:00007f95deb00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 625.983635][T16079] RAX: ffffffffffffffda RBX: 00007f95ddfa5fa0 RCX: 00007f95ddd8cde9 [ 625.983653][T16079] RDX: 0000000000000006 RSI: 0000000000000025 RDI: 0000000000000000 [ 625.983677][T16079] RBP: 00007f95dde0e2a0 R08: 0000000000000000 R09: 0000800000000000 [ 625.983693][T16079] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 625.983708][T16079] R13: 0000000000000000 R14: 00007f95ddfa5fa0 R15: 00007ffe7163c938 [ 625.983744][T16079] [ 626.468253][T16081] kexec: Could not allocate control_code_buffer [ 626.742443][T16103] netlink: 'syz.2.2429': attribute type 11 has an invalid length. [ 626.772670][T16103] netlink: 'syz.2.2429': attribute type 11 has an invalid length. [ 626.932555][T16101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.123878][T16110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2421'. [ 627.657153][T16134] netlink: 'syz.4.2433': attribute type 11 has an invalid length. [ 627.724499][T16134] netlink: 'syz.4.2433': attribute type 11 has an invalid length. [ 628.385904][T16133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.057888][T16153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2428'. [ 629.338345][T16164] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2432'. [ 630.314729][T16177] netlink: 'syz.5.2434': attribute type 11 has an invalid length. [ 630.362047][T16177] netlink: 'syz.5.2434': attribute type 11 has an invalid length. [ 630.396608][T16176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.485900][T16180] ptrace attach of "./syz-executor exec"[15114] was attempted by "|}n]k}-2z$!+h`~tu\x0bj1v\x22S.GK[ŏ\x09d'mE=NYN$>-lc6R4ICN2F\x1bZ:]M\x22Ǩ\x22\x07Z&|ĈڐIځB\x1bS\x0d'SH̟JGI/(I1U'Y!ϏĽwzP+Rt>%Ǜ}(#Ś7r/â6&wqFF`Y\x5c\x22vǡ2(χV[Р7V\x0cJ }b\x0a,3eW>̶Jliz]&WI934t.C>WHϳJؠ澄lF[YX1?r\x5cd$AT6԰_\x07<*i [ 631.561318][T16192] netlink: 'syz.4.2438': attribute type 11 has an invalid length. [ 631.709630][T16192] netlink: 'syz.4.2438': attribute type 11 has an invalid length. [ 631.803206][T16191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.776881][T16199] netlink: 'syz.5.2440': attribute type 11 has an invalid length. [ 632.819720][T16199] netlink: 'syz.5.2440': attribute type 11 has an invalid length. [ 632.872610][T16198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.873826][T16201] netlink: 'syz.4.2448': attribute type 11 has an invalid length. [ 632.902536][T16201] netlink: 'syz.4.2448': attribute type 11 has an invalid length. [ 632.948719][T16200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.553193][T16217] netlink: 'syz.4.2445': attribute type 11 has an invalid length. [ 633.561866][T16217] netlink: 'syz.4.2445': attribute type 11 has an invalid length. [ 633.610835][T16216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.787751][T16222] EXT4-fs error: 10 callbacks suppressed [ 634.161124][T16226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2441'. [ 634.438484][T16244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.605303][T16252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.913442][T16262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.500390][T16272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2460'. [ 635.748883][T16257] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 635.763255][T16257] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 635.769893][T16257] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 635.881724][T16257] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 635.900593][T16257] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 635.929995][T16257] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 635.992842][T16257] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 636.052849][T16257] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 636.122660][T16257] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 636.150236][T16257] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 636.496798][T16293] nla_validate_range_unsigned: 6 callbacks suppressed [ 636.496818][T16293] netlink: 'syz.1.2465': attribute type 11 has an invalid length. [ 636.555746][T16293] netlink: 'syz.1.2465': attribute type 11 has an invalid length. [ 636.583475][T16292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.650088][T16299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2472'. [ 636.731595][T16302] Process accounting resumed [ 637.232758][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 637.265376][T16287] kexec: Could not allocate control_code_buffer [ 637.802485][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 637.846410][T16328] udevd[16328]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 637.962618][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 638.112633][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 638.252592][T16336] netlink: 'syz.4.2477': attribute type 11 has an invalid length. [ 638.292630][T16336] netlink: 'syz.4.2477': attribute type 11 has an invalid length. [ 638.352962][T16335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.623453][T16345] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2478'. [ 639.604041][T16370] EXT4-fs error: 6 callbacks suppressed [ 639.902746][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 640.038737][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 640.202431][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 640.550356][T16395] netlink: 'syz.1.2489': attribute type 11 has an invalid length. [ 640.579301][T16396] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2491'. [ 640.611351][T16395] netlink: 'syz.1.2489': attribute type 11 has an invalid length. [ 640.709759][T16394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.952498][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 642.112653][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 642.272604][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 643.562862][T16450] netlink: 'syz.5.2504': attribute type 11 has an invalid length. [ 643.622486][T16450] netlink: 'syz.5.2504': attribute type 11 has an invalid length. [ 643.643571][T16449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 643.755443][T16455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2503'. [ 644.164764][T16463] ptrace attach of "./syz-executor exec"[15114] was attempted by "./syz-executor exec"[16463] [ 644.230204][T16463] [ 645.263688][T16482] EXT4-fs error: 6 callbacks suppressed [ 645.561705][T16486] netlink: 'syz.5.2514': attribute type 11 has an invalid length. [ 645.622672][T16486] netlink: 'syz.5.2514': attribute type 11 has an invalid length. [ 645.703490][T16485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.673766][T16493] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2515'. [ 647.662709][ T29] audit: type=1400 audit(4294975367.511:24): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=16506 comm="syz.1.2518" [ 648.807417][T16535] netlink: 'syz.4.2524': attribute type 11 has an invalid length. [ 648.823635][T16536] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2525'. [ 648.832635][T16535] netlink: 'syz.4.2524': attribute type 11 has an invalid length. [ 648.843683][T16531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.250279][T16545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2528'. [ 651.259763][T16556] netlink: 'syz.4.2537': attribute type 11 has an invalid length. [ 651.292658][T16556] netlink: 'syz.4.2537': attribute type 11 has an invalid length. [ 651.323684][T16555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.893459][T16509] delete_channel: no stack [ 652.376003][T16577] netlink: 'syz.4.2542': attribute type 11 has an invalid length. [ 652.380231][T16579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2535'. [ 652.403179][T16577] netlink: 'syz.4.2542': attribute type 11 has an invalid length. [ 652.413781][T16576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.342773][T16599] kexec: Could not allocate control_code_buffer [ 654.661692][T16618] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2546'. [ 654.683044][T16619] EXT4-fs error: 9 callbacks suppressed [ 655.151605][T16618] bond0: (slave bond_slave_1): Releasing backup interface [ 655.313366][T16625] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2547'. [ 656.744179][T16663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2558'. [ 656.928844][T16667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2559'. [ 657.308710][T16670] netlink: 'syz.5.2560': attribute type 11 has an invalid length. [ 657.335625][T16670] netlink: 'syz.5.2560': attribute type 11 has an invalid length. [ 657.383452][T16669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.042943][T16667] bond0: (slave bond_slave_1): Releasing backup interface [ 658.157626][T16688] FAULT_INJECTION: forcing a failure. [ 658.157626][T16688] name failslab, interval 1, probability 0, space 0, times 0 [ 658.241471][T16688] CPU: 1 UID: 0 PID: 16688 Comm: syz.1.2563 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 658.241508][T16688] Tainted: [U]=USER [ 658.241517][T16688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 658.241531][T16688] Call Trace: [ 658.241538][T16688] [ 658.241547][T16688] dump_stack_lvl+0x16c/0x1f0 [ 658.241588][T16688] should_fail_ex+0x50a/0x650 [ 658.241615][T16688] ? fs_reclaim_acquire+0xae/0x150 [ 658.241653][T16688] should_failslab+0xc2/0x120 [ 658.241681][T16688] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 658.241707][T16688] ? lock_acquire+0x2f/0xb0 [ 658.241731][T16688] ? __proc_create+0xa4/0x8b0 [ 658.241756][T16688] ? __proc_create+0x2c3/0x8b0 [ 658.241786][T16688] __proc_create+0x2c3/0x8b0 [ 658.241813][T16688] ? __pfx___proc_create+0x10/0x10 [ 658.241844][T16688] ? find_held_lock+0x2d/0x110 [ 658.241882][T16688] proc_create_reg+0x7d/0x180 [ 658.241909][T16688] ? __pfx_psched_show+0x10/0x10 [ 658.241943][T16688] proc_create_single_data+0x87/0x130 [ 658.241971][T16688] ? __pfx_proc_create_single_data+0x10/0x10 [ 658.241998][T16688] ? lockdep_init_map_type+0x16d/0x7d0 [ 658.242034][T16688] ? __pfx_psched_net_init+0x10/0x10 [ 658.242067][T16688] psched_net_init+0x4a/0x70 [ 658.242099][T16688] ops_init+0x1df/0x5f0 [ 658.242129][T16688] setup_net+0x21f/0x860 [ 658.242156][T16688] ? __pfx_setup_net+0x10/0x10 [ 658.242180][T16688] ? down_read_killable+0xcc/0x380 [ 658.242205][T16688] ? __pfx_down_read_killable+0x10/0x10 [ 658.242232][T16688] ? debug_mutex_init+0x37/0x70 [ 658.242270][T16688] copy_net_ns+0x2b4/0x6c0 [ 658.242301][T16688] create_new_namespaces+0x3ea/0xad0 [ 658.242341][T16688] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 658.242380][T16688] ksys_unshare+0x45d/0xa40 [ 658.242414][T16688] ? __pfx_ksys_unshare+0x10/0x10 [ 658.242445][T16688] ? xfd_validate_state+0x5d/0x180 [ 658.242487][T16688] __x64_sys_unshare+0x31/0x40 [ 658.242518][T16688] do_syscall_64+0xcd/0x250 [ 658.242542][T16688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.242572][T16688] RIP: 0033:0x7fb2fa78cde9 [ 658.242590][T16688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.242611][T16688] RSP: 002b:00007fb2fb618038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 658.242632][T16688] RAX: ffffffffffffffda RBX: 00007fb2fa9a5fa0 RCX: 00007fb2fa78cde9 [ 658.242647][T16688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 658.242659][T16688] RBP: 00007fb2fa80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 658.242671][T16688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.242684][T16688] R13: 0000000000000000 R14: 00007fb2fa9a5fa0 R15: 00007fff375a6c38 [ 658.242715][T16688] [ 658.542603][T16696] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.2566'. [ 658.610332][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2566'. [ 659.543638][T16713] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2568'. [ 659.727340][T16721] netlink: 'syz.5.2571': attribute type 11 has an invalid length. [ 659.762824][T16721] netlink: 'syz.5.2571': attribute type 11 has an invalid length. [ 659.794847][T16720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.887879][T16723] netlink: 'syz.1.2572': attribute type 11 has an invalid length. [ 659.902597][T16723] netlink: 'syz.1.2572': attribute type 11 has an invalid length. [ 659.945790][T16722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.439896][T16733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2575'. [ 661.519183][T16745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2580'. [ 661.529705][T16733] bond0: (slave bond_slave_1): Releasing backup interface [ 662.102881][T16755] netlink: 'syz.5.2583': attribute type 11 has an invalid length. [ 662.112750][T16755] netlink: 'syz.5.2583': attribute type 11 has an invalid length. [ 662.129588][T16754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.150205][T16753] nbd: socks must be embedded in a SOCK_ITEM attr [ 662.162769][T16753] FAULT_INJECTION: forcing a failure. [ 662.162769][T16753] name failslab, interval 1, probability 0, space 0, times 0 [ 662.210705][T16753] CPU: 1 UID: 0 PID: 16753 Comm: syz.1.2582 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 662.210753][T16753] Tainted: [U]=USER [ 662.210762][T16753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 662.210778][T16753] Call Trace: [ 662.210786][T16753] [ 662.210796][T16753] dump_stack_lvl+0x16c/0x1f0 [ 662.210839][T16753] should_fail_ex+0x50a/0x650 [ 662.210868][T16753] ? fs_reclaim_acquire+0xae/0x150 [ 662.210909][T16753] should_failslab+0xc2/0x120 [ 662.210941][T16753] __kmalloc_noprof+0xce/0x4f0 [ 662.210969][T16753] ? fib_default_rule_add+0x4f/0x420 [ 662.211010][T16753] fib_default_rule_add+0x4f/0x420 [ 662.211046][T16753] ? __pfx_ipmr_net_init+0x10/0x10 [ 662.211074][T16753] ipmr_net_init+0x1ee/0x4e0 [ 662.211101][T16753] ? __pfx_ipmr_net_init+0x10/0x10 [ 662.211129][T16753] ops_init+0x1df/0x5f0 [ 662.211162][T16753] setup_net+0x21f/0x860 [ 662.211191][T16753] ? __pfx_setup_net+0x10/0x10 [ 662.211222][T16753] ? down_read_killable+0xcc/0x380 [ 662.211249][T16753] ? __pfx_down_read_killable+0x10/0x10 [ 662.211280][T16753] ? debug_mutex_init+0x37/0x70 [ 662.211321][T16753] copy_net_ns+0x2b4/0x6c0 [ 662.211354][T16753] create_new_namespaces+0x3ea/0xad0 [ 662.211395][T16753] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 662.211431][T16753] ksys_unshare+0x45d/0xa40 [ 662.211466][T16753] ? __pfx_ksys_unshare+0x10/0x10 [ 662.211499][T16753] ? xfd_validate_state+0x5d/0x180 [ 662.211543][T16753] __x64_sys_unshare+0x31/0x40 [ 662.211577][T16753] do_syscall_64+0xcd/0x250 [ 662.211603][T16753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.211635][T16753] RIP: 0033:0x7fb2fa78cde9 [ 662.211656][T16753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.211680][T16753] RSP: 002b:00007fb2fb618038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 662.211704][T16753] RAX: ffffffffffffffda RBX: 00007fb2fa9a5fa0 RCX: 00007fb2fa78cde9 [ 662.211720][T16753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 662.211734][T16753] RBP: 00007fb2fa80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 662.211749][T16753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.211770][T16753] R13: 0000000000000000 R14: 00007fb2fa9a5fa0 R15: 00007fff375a6c38 [ 662.211805][T16753] [ 662.542037][T16757] netlink: 'syz.4.2584': attribute type 11 has an invalid length. [ 662.582914][T16757] netlink: 'syz.4.2584': attribute type 11 has an invalid length. [ 662.638915][T16756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.787518][T16758] EXT4-fs error: 6 callbacks suppressed [ 664.977035][T16781] device-mapper: ioctl: Unable to rename non-existent device, to [ 665.999664][T16796] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2591'. [ 666.015966][T16795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2592'. [ 667.106787][T16796] bond0: (slave bond_slave_1): Releasing backup interface [ 667.545566][T16810] FAULT_INJECTION: forcing a failure. [ 667.545566][T16810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.602536][T16810] CPU: 0 UID: 0 PID: 16810 Comm: syz.2.2595 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 667.602576][T16810] Tainted: [U]=USER [ 667.602584][T16810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 667.602598][T16810] Call Trace: [ 667.602606][T16810] [ 667.602615][T16810] dump_stack_lvl+0x16c/0x1f0 [ 667.602656][T16810] should_fail_ex+0x50a/0x650 [ 667.602690][T16810] _copy_from_user+0x2e/0xd0 [ 667.602732][T16810] copy_msghdr_from_user+0x99/0x160 [ 667.602760][T16810] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 667.602799][T16810] ___sys_sendmsg+0xff/0x1e0 [ 667.602826][T16810] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.602863][T16810] ? __pfx_lock_release+0x10/0x10 [ 667.602891][T16810] ? trace_lock_acquire+0x14e/0x1f0 [ 667.602923][T16810] ? __fget_files+0x206/0x3a0 [ 667.602956][T16810] __sys_sendmsg+0x16e/0x220 [ 667.602981][T16810] ? __pfx___sys_sendmsg+0x10/0x10 [ 667.603025][T16810] do_syscall_64+0xcd/0x250 [ 667.603051][T16810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.603080][T16810] RIP: 0033:0x7f95ddd8cde9 [ 667.603099][T16810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.603122][T16810] RSP: 002b:00007f95deb00038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.603144][T16810] RAX: ffffffffffffffda RBX: 00007f95ddfa5fa0 RCX: 00007f95ddd8cde9 [ 667.603159][T16810] RDX: 0000000000000080 RSI: 0000400000011780 RDI: 0000000000000003 [ 667.603173][T16810] RBP: 00007f95deb00090 R08: 0000000000000000 R09: 0000000000000000 [ 667.603187][T16810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.603201][T16810] R13: 0000000000000000 R14: 00007f95ddfa5fa0 R15: 00007ffe7163c938 [ 667.603230][T16810] [ 667.689589][T16808] netlink: 'syz.1.2594': attribute type 11 has an invalid length. [ 667.751744][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.872538][T16808] netlink: 'syz.1.2594': attribute type 11 has an invalid length. [ 667.949502][T16807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.033368][T16815] netlink: 'syz.4.2605': attribute type 11 has an invalid length. [ 668.042085][T16815] netlink: 'syz.4.2605': attribute type 11 has an invalid length. [ 668.082554][T16813] netlink: 'syz.2.2596': attribute type 11 has an invalid length. [ 668.091282][T16813] netlink: 'syz.2.2596': attribute type 11 has an invalid length. [ 668.102732][T16814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.142815][T16812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.353283][T16819] netlink: 'syz.4.2598': attribute type 11 has an invalid length. [ 668.367834][T16819] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2598'. [ 668.386914][T16819] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2598'. [ 668.408710][T16819] netlink: 'syz.4.2598': attribute type 11 has an invalid length. [ 668.443926][T16819] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2598'. [ 668.458563][T16818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.423512][T16842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2604'. [ 669.569436][T16847] vivid-010: ================= START STATUS ================= [ 669.622140][T16847] vivid-010: Generate PTS: true [ 669.674818][T16847] vivid-010: Generate SCR: true [ 669.812541][T16847] tpg source WxH: 640x360 (Y'CbCr) [ 669.895447][T16847] tpg field: 1 [ 669.935041][T16847] tpg crop: 640x360@0x0 [ 670.003142][T16847] tpg compose: 640x360@0x0 [ 670.085220][T16847] tpg colorspace: 8 [ 670.098301][T16847] tpg transfer function: 0/0 [ 670.142479][T16847] tpg Y'CbCr encoding: 0/0 [ 670.208642][T16847] tpg quantization: 0/0 [ 670.342558][T16847] tpg RGB range: 0/2 [ 670.346896][T16847] vivid-010: ================== END STATUS ================== [ 670.903912][T16860] netlink: 'syz.1.2610': attribute type 11 has an invalid length. [ 670.969305][T16860] netlink: 'syz.1.2610': attribute type 11 has an invalid length. [ 671.054223][T16859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.143586][T16867] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2611'. [ 671.204906][T16867] IPv6: NLM_F_CREATE should be specified when creating new route [ 671.280894][T16867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 671.289466][T16867] IPv6: NLM_F_CREATE should be set when creating new route [ 671.297471][T16867] IPv6: NLM_F_CREATE should be set when creating new route [ 671.349728][T16866] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2611'. [ 671.412567][T16866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 671.425398][T16870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.519568][T16878] EXT4-fs error: 6 callbacks suppressed [ 672.055389][T16881] CIFS mount error: No usable UNC path provided in device string! [ 672.055389][T16881] [ 672.116765][T16881] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 672.174065][T16887] udevd[16887]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Structure needs cleaning [ 672.307733][T16832] delete_channel: no stack [ 672.570911][T16890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2617'. [ 672.975189][T16895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2618'. [ 673.185073][T16898] FAULT_INJECTION: forcing a failure. [ 673.185073][T16898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.234187][T16901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2620'. [ 673.244464][T16900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2620'. [ 673.262468][T16898] CPU: 0 UID: 0 PID: 16898 Comm: syz.5.2619 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 673.262505][T16898] Tainted: [U]=USER [ 673.262512][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 673.262526][T16898] Call Trace: [ 673.262534][T16898] [ 673.262543][T16898] dump_stack_lvl+0x16c/0x1f0 [ 673.262582][T16898] should_fail_ex+0x50a/0x650 [ 673.262617][T16898] _copy_from_iter+0x29b/0x1400 [ 673.262651][T16898] ? trace_lock_acquire+0x14e/0x1f0 [ 673.262678][T16898] ? __pfx__copy_from_iter+0x10/0x10 [ 673.262727][T16898] ? __virt_addr_valid+0x1a4/0x590 [ 673.262754][T16898] ? __virt_addr_valid+0x5e/0x590 [ 673.262775][T16898] ? __phys_addr_symbol+0x30/0x80 [ 673.262808][T16898] ? __check_object_size+0x488/0x710 [ 673.262841][T16898] netlink_sendmsg+0x813/0xd70 [ 673.262880][T16898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.262923][T16898] ____sys_sendmsg+0x9ae/0xb40 [ 673.262953][T16898] ? copy_msghdr_from_user+0x10b/0x160 [ 673.262978][T16898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.263022][T16898] ___sys_sendmsg+0x135/0x1e0 [ 673.263049][T16898] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.263087][T16898] ? __pfx_lock_release+0x10/0x10 [ 673.263118][T16898] ? trace_lock_acquire+0x14e/0x1f0 [ 673.263151][T16898] ? __fget_files+0x206/0x3a0 [ 673.263184][T16898] __sys_sendmsg+0x16e/0x220 [ 673.263209][T16898] ? __pfx___sys_sendmsg+0x10/0x10 [ 673.263255][T16898] do_syscall_64+0xcd/0x250 [ 673.263280][T16898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.263310][T16898] RIP: 0033:0x7f8dbc18cde9 [ 673.263330][T16898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.263353][T16898] RSP: 002b:00007f8dbcf5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.263376][T16898] RAX: ffffffffffffffda RBX: 00007f8dbc3a5fa0 RCX: 00007f8dbc18cde9 [ 673.263391][T16898] RDX: 0000000000000080 RSI: 0000400000011780 RDI: 0000000000000003 [ 673.263404][T16898] RBP: 00007f8dbcf5a090 R08: 0000000000000000 R09: 0000000000000000 [ 673.263418][T16898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.263431][T16898] R13: 0000000000000000 R14: 00007f8dbc3a5fa0 R15: 00007ffdfb742608 [ 673.263462][T16898] [ 674.152632][T16917] nla_validate_range_unsigned: 2 callbacks suppressed [ 674.152656][T16917] netlink: 'syz.5.2623': attribute type 11 has an invalid length. [ 674.328097][T16917] netlink: 'syz.5.2623': attribute type 11 has an invalid length. [ 674.372607][T16915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.647441][T16920] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2624'. [ 674.754471][T16923] ================================================================== [ 674.763370][T16923] BUG: KASAN: slab-use-after-free in msft_opcode_get+0x6d/0x80 [ 674.771696][T16923] Read of size 2 at addr ffff888024021a32 by task syz.2.2625/16923 [ 674.780381][T16923] [ 674.782955][T16923] CPU: 1 UID: 0 PID: 16923 Comm: syz.2.2625 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 674.782992][T16923] Tainted: [U]=USER [ 674.783001][T16923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 674.783018][T16923] Call Trace: [ 674.783026][T16923] [ 674.783036][T16923] dump_stack_lvl+0x116/0x1f0 [ 674.783077][T16923] print_report+0xc3/0x620 [ 674.783107][T16923] ? __virt_addr_valid+0x5e/0x590 [ 674.783131][T16923] ? __phys_addr+0xc6/0x150 [ 674.783155][T16923] kasan_report+0xd9/0x110 [ 674.783181][T16923] ? msft_opcode_get+0x6d/0x80 [ 674.783210][T16923] ? msft_opcode_get+0x6d/0x80 [ 674.783239][T16923] msft_opcode_get+0x6d/0x80 [ 674.783265][T16923] ? __pfx_msft_opcode_get+0x10/0x10 [ 674.783292][T16923] simple_attr_read+0x169/0x300 [ 674.783325][T16923] ? __debugfs_file_get+0x1ff/0x850 [ 674.783359][T16923] ? __pfx_simple_attr_read+0x10/0x10 [ 674.783394][T16923] ? __debugfs_file_get+0x1ff/0x850 [ 674.783430][T16923] ? __pfx___debugfs_file_get+0x10/0x10 [ 674.783468][T16923] debugfs_attr_read+0x76/0xa0 [ 674.783491][T16923] full_proxy_read+0x13c/0x200 [ 674.783514][T16923] ? __pfx_full_proxy_read+0x10/0x10 [ 674.783537][T16923] vfs_read+0x1df/0xbf0 [ 674.783560][T16923] ? __fget_files+0x1fc/0x3a0 [ 674.783585][T16923] ? __pfx___mutex_lock+0x10/0x10 [ 674.783619][T16923] ? __pfx_vfs_read+0x10/0x10 [ 674.783646][T16923] ? __fget_files+0x206/0x3a0 [ 674.783675][T16923] ksys_read+0x12b/0x250 [ 674.783698][T16923] ? __pfx_ksys_read+0x10/0x10 [ 674.783725][T16923] do_syscall_64+0xcd/0x250 [ 674.783749][T16923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.783782][T16923] RIP: 0033:0x7f95ddd8cde9 [ 674.783802][T16923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.783826][T16923] RSP: 002b:00007f95deb00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 674.783850][T16923] RAX: ffffffffffffffda RBX: 00007f95ddfa5fa0 RCX: 00007f95ddd8cde9 [ 674.783867][T16923] RDX: 000000000000ffff RSI: 0000400000006740 RDI: 0000000000000003 [ 674.783884][T16923] RBP: 00007f95dde0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 674.783899][T16923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.783914][T16923] R13: 0000000000000000 R14: 00007f95ddfa5fa0 R15: 00007ffe7163c938 [ 674.783938][T16923] [ 674.783947][T16923] [ 675.042172][T16923] Allocated by task 6434: [ 675.046913][T16923] kasan_save_stack+0x33/0x60 [ 675.052050][T16923] kasan_save_track+0x14/0x30 [ 675.057180][T16923] __kasan_kmalloc+0xaa/0xb0 [ 675.062216][T16923] __kmalloc_node_track_caller_noprof+0x21d/0x520 [ 675.069260][T16923] kmalloc_reserve+0xef/0x2c0 [ 675.074398][T16923] pskb_expand_head+0x236/0x1170 [ 675.079815][T16923] batadv_skb_head_push+0xf5/0x290 [ 675.085419][T16923] batadv_send_skb_packet+0x115/0x770 [ 675.091316][T16923] batadv_iv_send_outstanding_bat_ogm_packet+0x70a/0x8d0 [ 675.099031][T16923] process_one_work+0x958/0x1b30 [ 675.104450][T16923] worker_thread+0x6c8/0xf00 [ 675.109486][T16923] kthread+0x3af/0x750 [ 675.113948][T16923] ret_from_fork+0x45/0x80 [ 675.118793][T16923] ret_from_fork_asm+0x1a/0x30 [ 675.124016][T16923] [ 675.126552][T16923] Freed by task 6434: [ 675.130908][T16923] kasan_save_stack+0x33/0x60 [ 675.136041][T16923] kasan_save_track+0x14/0x30 [ 675.141170][T16923] kasan_save_free_info+0x3b/0x60 [ 675.146692][T16923] __kasan_slab_free+0x51/0x70 [ 675.151922][T16923] kfree+0x2c4/0x4d0 [ 675.156191][T16923] skb_free_head+0x108/0x1d0 [ 675.161235][T16923] skb_release_data+0x560/0x730 [ 675.166556][T16923] sk_skb_reason_drop+0x129/0x1a0 [ 675.172071][T16923] __netif_receive_skb_core.constprop.0+0x575/0x4330 [ 675.179410][T16923] __netif_receive_skb_one_core+0xb1/0x1e0 [ 675.185791][T16923] __netif_receive_skb+0x1d/0x160 [ 675.191308][T16923] process_backlog+0x443/0x15f0 [ 675.196635][T16923] __napi_poll.constprop.0+0xb7/0x550 [ 675.202538][T16923] net_rx_action+0xa94/0x1010 [ 675.207685][T16923] handle_softirqs+0x213/0x8f0 [ 675.212920][T16923] do_softirq+0xb2/0xf0 [ 675.217479][T16923] __local_bh_enable_ip+0x100/0x120 [ 675.223185][T16923] __dev_queue_xmit+0x8b0/0x43e0 [ 675.228606][T16923] batadv_send_skb_packet+0x588/0x770 [ 675.234508][T16923] batadv_iv_send_outstanding_bat_ogm_packet+0x70a/0x8d0 [ 675.242223][T16923] process_one_work+0x958/0x1b30 [ 675.247646][T16923] worker_thread+0x6c8/0xf00 [ 675.252681][T16923] kthread+0x3af/0x750 [ 675.257139][T16923] ret_from_fork+0x45/0x80 [ 675.261990][T16923] ret_from_fork_asm+0x1a/0x30 [ 675.267243][T16923] [ 675.269782][T16923] The buggy address belongs to the object at ffff888024021800 [ 675.269782][T16923] which belongs to the cache kmalloc-1k of size 1024 [ 675.285221][T16923] The buggy address is located 562 bytes inside of [ 675.285221][T16923] freed 1024-byte region [ffff888024021800, ffff888024021c00) [ 675.300474][T16923] [ 675.303013][T16923] The buggy address belongs to the physical page: [ 675.310048][T16923] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24020 [ 675.319666][T16923] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 675.328999][T16923] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 675.337278][T16923] page_type: f5(slab) [ 675.341650][T16923] raw: 00fff00000000040 ffff88801b041dc0 ffffea0000a36400 dead000000000002 [ 675.351074][T16923] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 675.360506][T16923] head: 00fff00000000040 ffff88801b041dc0 ffffea0000a36400 dead000000000002 [ 675.370026][T16923] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 675.379547][T16923] head: 00fff00000000003 ffffea0000900801 ffffffffffffffff 0000000000000000 [ 675.389069][T16923] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 675.398582][T16923] page dumped because: kasan: bad access detected [ 675.405612][T16923] page_owner tracks the page as allocated [ 675.411875][T16923] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5177, tgid 5177 (init), ts 25301747756, free_ts 0 [ 675.433650][T16923] post_alloc_hook+0x181/0x1b0 [ 675.438878][T16923] get_page_from_freelist+0xfce/0x2f80 [ 675.444874][T16923] __alloc_frozen_pages_noprof+0x221/0x2470 [ 675.451348][T16923] alloc_pages_mpol+0x1fc/0x540 [ 675.456672][T16923] new_slab+0x23d/0x330 [ 675.461227][T16923] ___slab_alloc+0xbfa/0x1600 [ 675.466353][T16923] __slab_alloc.constprop.0+0x56/0xb0 [ 675.472244][T16923] __kmalloc_noprof+0x2de/0x4f0 [ 675.477566][T16923] load_elf_phdrs+0x103/0x210 [ 675.482704][T16923] load_elf_binary+0x1518/0x4ff0 [ 675.488125][T16923] bprm_execve+0x8dd/0x16d0 [ 675.493060][T16923] do_execveat_common.isra.0+0x4a2/0x610 [ 675.499238][T16923] __x64_sys_execve+0x8c/0xb0 [ 675.504366][T16923] do_syscall_64+0xcd/0x250 [ 675.509300][T16923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.515771][T16923] page_owner free stack trace missing [ 675.521654][T16923] [ 675.524191][T16923] Memory state around the buggy address: [ 675.530365][T16923] ffff888024021900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 675.539214][T16923] ffff888024021980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 675.548062][T16923] >ffff888024021a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 675.556908][T16923] ^ [ 675.563079][T16923] ffff888024021a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 675.571928][T16923] ffff888024021b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 675.580773][T16923] ================================================================== [ 675.614141][T16923] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 675.622080][T16923] CPU: 0 UID: 0 PID: 16923 Comm: syz.2.2625 Tainted: G U 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 675.635543][T16923] Tainted: [U]=USER [ 675.639710][T16923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 675.650753][T16923] Call Trace: [ 675.654346][T16923] [ 675.657555][T16923] dump_stack_lvl+0x3d/0x1f0 [ 675.662630][T16923] panic+0x71d/0x800 [ 675.666902][T16923] ? __pfx_panic+0x10/0x10 [ 675.671750][T16923] ? preempt_schedule_thunk+0x1a/0x30 [ 675.677656][T16923] ? preempt_schedule_common+0x44/0xc0 [ 675.683665][T16923] check_panic_on_warn+0xab/0xb0 [ 675.689084][T16923] end_report+0x117/0x180 [ 675.693836][T16923] kasan_report+0xe9/0x110 [ 675.698685][T16923] ? msft_opcode_get+0x6d/0x80 [ 675.703917][T16923] ? msft_opcode_get+0x6d/0x80 [ 675.709144][T16923] msft_opcode_get+0x6d/0x80 [ 675.714178][T16923] ? __pfx_msft_opcode_get+0x10/0x10 [ 675.719977][T16923] simple_attr_read+0x169/0x300 [ 675.725325][T16923] ? __debugfs_file_get+0x1ff/0x850 [ 675.731041][T16923] ? __pfx_simple_attr_read+0x10/0x10 [ 675.736945][T16923] ? __debugfs_file_get+0x1ff/0x850 [ 675.742662][T16923] ? __pfx___debugfs_file_get+0x10/0x10 [ 675.748762][T16923] debugfs_attr_read+0x76/0xa0 [ 675.753987][T16923] full_proxy_read+0x13c/0x200 [ 675.759213][T16923] ? __pfx_full_proxy_read+0x10/0x10 [ 675.765011][T16923] vfs_read+0x1df/0xbf0 [ 675.769568][T16923] ? __fget_files+0x1fc/0x3a0 [ 675.774705][T16923] ? __pfx___mutex_lock+0x10/0x10 [ 675.780230][T16923] ? __pfx_vfs_read+0x10/0x10 [ 675.785365][T16923] ? __fget_files+0x206/0x3a0 [ 675.790498][T16923] ksys_read+0x12b/0x250 [ 675.795154][T16923] ? __pfx_ksys_read+0x10/0x10 [ 675.800395][T16923] do_syscall_64+0xcd/0x250 [ 675.805337][T16923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.811813][T16923] RIP: 0033:0x7f95ddd8cde9 [ 675.816655][T16923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.838208][T16923] RSP: 002b:00007f95deb00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 675.847448][T16923] RAX: ffffffffffffffda RBX: 00007f95ddfa5fa0 RCX: 00007f95ddd8cde9 [ 675.856198][T16923] RDX: 000000000000ffff RSI: 0000400000006740 RDI: 0000000000000003 [ 675.864948][T16923] RBP: 00007f95dde0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 675.873699][T16923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.882465][T16923] R13: 0000000000000000 R14: 00007f95ddfa5fa0 R15: 00007ffe7163c938 [ 675.891227][T16923] [ 675.894751][T16923] Kernel Offset: disabled [ 675.899489][T16923] Rebooting in 86400 seconds..